Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
File:                     uwO40kR--BOjepWHdmoB9zWd10A.mft (raw, json)
Hash identifier:          jjARZyGJmokFsJS2/NuN0hl9/aQyyM8cmy+sVXJyo7E=
Subject key identifier:   B9:AA:CD:F2:48:8A:38:CF:2C:44:58:51:59:4D:6C:49:84:29:C3:28
Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
Certificate issuer:       /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Certificate serial:       0795
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
Manifest number:          0776
Signing time:             Sat 10 May 2025 21:11:34 +0000
Manifest this update:     Sat 10 May 2025 21:11:33 +0000
Manifest next update:     Sat 17 May 2025 21:11:33 +0000
Files and hashes:         1: uwO40kR--BOjepWHdmoB9zWd10A.crl (hash: 1fql/1aMXNWe0S12LXz0ooCvALJjm9ulxWnje/KLnlg=)
                          2: 33284BD019C311EBB9C1D063C4F9AE02.roa (hash: TqtodbfH2773RSeSZS8HBt7Fg3MhzGZkdJHAeKBdxNI=)
                          3: 99DF3B20183A11EBB9F78E80C4F9AE02.roa (hash: E+nOxjyrsiWeh2pSdTI7eBtCxdY2UG5bXebW7kl/SNQ=)
                          4: 991F1FE8183A11EBB9F78E80C4F9AE02.roa (hash: WdQW9sjBymvB0klEN4W168ArFaUHAakmSi85CGroy+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
                          rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 21:11:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2779, serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
        Validity
            Not Before: May 10 21:11:33 2025 GMT
            Not After : May 17 21:11:33 2025 GMT
        Subject: CN=681fc106-aa31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:14:3d:bb:69:3c:9d:5a:f0:30:91:17:06:2d:
                    77:ed:a1:35:1a:42:96:5f:ca:80:44:6e:88:61:de:
                    47:dd:77:48:91:6e:43:f8:61:46:d9:95:52:a8:a9:
                    eb:ad:d9:4a:2a:10:e5:b6:c7:f9:fe:f6:b9:f1:00:
                    63:17:69:f1:8e:6e:b6:6c:c6:de:b4:4a:fb:d3:c0:
                    29:da:c7:b2:fb:d1:23:77:1e:06:6e:e1:a8:14:df:
                    61:e5:e0:c4:10:31:ad:7b:03:c7:d7:59:0e:b0:fe:
                    58:2a:d3:5f:23:f7:49:78:f6:a5:b2:ff:7c:79:87:
                    08:38:06:1a:09:3a:e9:19:54:03:76:f3:be:7c:9c:
                    b9:5f:75:b4:aa:6a:c8:03:40:63:6a:8f:fe:b3:2c:
                    60:dd:ad:9c:cd:80:3e:ae:2a:17:8a:3d:d5:f4:56:
                    91:ec:49:c2:21:c0:2f:b2:1c:ca:b1:a9:3b:39:b5:
                    df:df:a7:df:9e:d7:a8:86:9f:ce:ef:ac:f4:2a:bb:
                    8b:dd:d3:28:dc:60:59:af:01:93:5e:55:3c:c7:fc:
                    00:47:e7:f4:de:e0:30:0d:59:b4:ea:7b:83:28:27:
                    ab:30:dc:01:b0:12:79:2f:e3:fa:8f:dd:ff:45:33:
                    b3:a9:ef:95:86:2c:e9:8b:15:4d:d2:17:d4:be:cb:
                    be:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AA:CD:F2:48:8A:38:CF:2C:44:58:51:59:4D:6C:49:84:29:C3:28
            X509v3 Authority Key Identifier:
                keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d0:11:e0:0f:e0:a7:0e:dd:a7:5b:08:e7:ee:bb:da:8c:c9:
         17:d6:9e:a0:32:f7:82:24:57:8b:bb:67:1e:45:4e:2c:0e:75:
         4e:8b:c6:4f:b1:de:1e:bf:51:e1:e7:ba:45:2e:dc:92:79:27:
         ee:46:d0:3f:cb:ca:fd:34:37:74:56:f3:a9:94:06:56:d4:e6:
         e0:87:d0:1d:52:ec:29:5d:4b:b9:4c:db:aa:2a:78:43:ed:f0:
         65:a5:33:ca:1a:3f:a5:a8:48:f2:7f:3c:35:a8:99:0e:3f:c4:
         7b:2e:34:4a:cf:45:9c:6c:32:bf:90:15:05:84:d2:2d:71:89:
         a9:df:23:fb:c9:25:8f:b2:47:dc:29:fc:f0:7b:cd:ca:f2:36:
         05:14:a2:e4:b2:65:8d:7e:30:88:f2:f1:b5:3c:ac:88:d3:05:
         7b:a1:7e:2d:28:86:cb:ac:02:9a:a1:67:ee:75:13:fe:f1:9d:
         94:2a:76:e8:31:cf:52:6e:24:97:41:cc:5c:d2:82:bd:99:93:
         aa:fe:cf:f1:1d:15:5f:59:3e:50:62:7c:e7:bc:06:59:5a:da:
         77:4e:99:15:97:93:dc:84:39:df:b2:f0:61:d7:eb:bb:f1:ad:
         d2:3d:d2:52:22:37:f7:6f:b1:9f:fc:74:96:6d:0d:49:c0:03:
         cf:2c:a5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:45:50 2025 by rpki-client