Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
File:                     UK5xbz02ub7q4n8QBo-eNqIzq5E.mft (raw, json)
Hash identifier:          +CGP6rtjQ6zx9fg37LTqFgKMTLNhQg8S4ZEofxTbEag=
Subject key identifier:   1F:1D:63:98:84:78:35:D3:02:E8:5C:02:22:EF:D2:6F:89:D7:42:F7
Authority key identifier: 50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91
Certificate issuer:       /CN=A91CB4E9/serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
Manifest number:          11
Signing time:             Tue 01 Jul 2025 08:52:29 +0000
Manifest this update:     Tue 01 Jul 2025 08:52:29 +0000
Manifest next update:     Tue 08 Jul 2025 08:52:29 +0000
Files and hashes:         1: UK5xbz02ub7q4n8QBo-eNqIzq5E.crl (hash: 6nzkBowrQhyZjoKR9wMc1L1OqEZo4NWiaCA5QtE1JQA=)
                          2: 539EAC9440EF11F08CFAFB1CC4F9AE02.roa (hash: WcSNu1HK0gGCU7aORSHhSulUdwLctmKgMDS1dq0RYbQ=)
                          3: BA23C0E440EF11F099D6761DC4F9AE02.roa (hash: pgsw/lIIAC86SHOBUAFVHyyezuLYZcEiwQh3Fbl1fpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl
                          rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 08:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB4E9, serialNumber=50AE716F3D36B9BEEAE27F10068F9E36A233AB91
        Validity
            Not Before: Jul  1 08:52:29 2025 GMT
            Not After : Jul  8 08:52:29 2025 GMT
        Subject: CN=6863a1cd-c1f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a2:e8:fb:c2:48:fb:00:b2:40:b6:3d:aa:4f:
                    50:3e:3c:08:05:02:0c:cc:dc:94:8b:66:97:5e:70:
                    66:47:76:72:41:cf:80:09:fc:68:fe:fe:ab:d4:04:
                    41:42:9c:73:36:37:50:88:9a:d0:43:79:38:a0:b6:
                    06:7b:c9:84:02:a9:8f:d6:7d:88:f4:cc:09:0d:01:
                    c0:76:9e:66:2a:01:eb:10:35:18:aa:5e:63:37:56:
                    4c:24:76:0a:3f:27:43:7e:1e:3a:c7:24:b5:ea:a1:
                    5c:78:5d:c3:cf:cf:ee:75:63:d0:ac:20:a5:4a:d7:
                    97:9d:bf:40:00:c9:86:22:e3:ae:5a:37:d6:e2:63:
                    09:1a:25:03:d1:a1:9b:0c:96:9c:24:31:b4:6d:cf:
                    26:ff:d1:d3:21:76:4c:0c:00:7b:a8:c6:f7:66:c0:
                    30:c8:88:4f:1f:85:f5:8a:0d:45:df:b0:ef:5a:1c:
                    47:9d:75:3f:39:32:f8:47:83:bc:0e:45:6d:d8:2d:
                    15:b0:eb:2e:be:84:3d:95:54:6e:d6:5c:c1:fb:cd:
                    fb:52:26:60:a7:48:e8:ff:5d:32:0c:c7:ab:8c:61:
                    2d:7b:c7:cd:0c:ce:ba:b4:29:93:a9:d7:b9:f7:34:
                    47:23:1b:52:81:80:91:1d:6d:9e:52:1d:93:bf:8e:
                    4c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1D:63:98:84:78:35:D3:02:E8:5C:02:22:EF:D2:6F:89:D7:42:F7
            X509v3 Authority Key Identifier:
                keyid:50:AE:71:6F:3D:36:B9:BE:EA:E2:7F:10:06:8F:9E:36:A2:33:AB:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UK5xbz02ub7q4n8QBo-eNqIzq5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB4E9/D386134440EE11F09E93351CC4F9AE02/UK5xbz02ub7q4n8QBo-eNqIzq5E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ff:f7:38:79:63:26:69:4c:23:de:80:1a:c0:8f:c7:85:85:
         df:5c:88:e8:96:f8:d5:2a:a2:86:42:77:5d:dd:a0:44:45:82:
         12:32:94:ae:33:15:fb:12:20:ec:ee:5c:1f:73:d4:e2:75:22:
         d7:fd:8e:dd:83:9e:70:b8:dc:76:c7:25:04:b6:56:f9:4b:11:
         00:21:72:d3:c0:dd:41:31:12:ca:19:ba:8f:7c:37:0f:99:4a:
         1f:ba:76:92:9b:2d:64:d7:48:a0:60:c6:44:78:91:4b:f4:92:
         65:10:d0:78:02:c6:6a:d3:0d:8b:4f:46:d5:b4:fa:3d:bb:a5:
         a9:27:46:bc:48:ef:77:80:ce:0b:37:01:a9:d9:4b:63:e3:2a:
         0d:be:42:0d:0f:5f:c5:61:c4:74:5a:65:46:36:df:d2:6b:14:
         b5:7a:49:b7:32:c8:9e:61:b2:c1:5a:c9:bb:00:f7:40:28:ae:
         b0:f9:b3:90:e0:a2:a5:c0:0d:f2:d9:03:63:39:aa:ae:6f:ad:
         2f:65:92:d1:42:36:6f:99:f4:a6:d8:f7:f0:21:14:d7:b0:81:
         90:9a:5f:dc:cb:d6:d4:30:3b:21:5f:8b:80:59:01:76:39:21:
         24:8a:55:4d:48:91:7d:c6:8b:72:97:2c:14:bb:9b:07:af:0f:
         a7:00:ed:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:34:04 2025 by rpki-client