Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
File:                     UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json)
Hash identifier:          /bEKz2/H18HHlvfscyIaW+XlaS19eShsvfpF/Irx1ps=
Subject key identifier:   F5:70:74:85:CB:34:3C:82:B5:6C:34:99:8C:DC:64:6B:3D:1D:13:F7
Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
Certificate issuer:       /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Certificate serial:       01FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
Manifest number:          01F7
Signing time:             Sun 27 Apr 2025 01:41:42 +0000
Manifest this update:     Sun 27 Apr 2025 01:41:42 +0000
Manifest next update:     Sun 04 May 2025 01:41:42 +0000
Files and hashes:         1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: l+sAw9YM3N49bJanv5hUgFuAPewsYTs6IIeuHVchAp0=)
                          2: 58CA2F840D3E11F08AA20980C4F9AE02.roa (hash: o3WxnMuTVoZ5sDv98g86AWu9+ZVPEihcJKRFXeclwGE=)
                          3: ABBB590C0D3E11F081E68E80C4F9AE02.roa (hash: 21Xud0yuR+X8V9kV1r27e1DSMw9xVQDdRdNBmOLAKOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
                          rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 01:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
        Validity
            Not Before: Apr 27 01:41:42 2025 GMT
            Not After : May  4 01:41:42 2025 GMT
        Subject: CN=680d8b56-4e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b0:d6:1b:a0:91:7a:73:1c:34:1d:63:b3:5a:
                    c9:b7:a8:0b:8c:60:7e:c4:31:10:9e:0a:d8:b2:95:
                    03:94:dc:43:7a:5d:a6:06:79:58:1f:4b:7c:4f:c1:
                    9a:46:fe:98:d3:6c:3b:9d:47:ee:fc:82:15:ba:0a:
                    1b:ac:c1:91:3b:67:3c:e0:49:6f:88:1f:ab:09:14:
                    7d:0d:1f:61:86:a0:9c:cc:0a:62:5c:41:08:68:fa:
                    e6:8e:bd:3f:b0:aa:5a:86:79:a9:75:82:55:96:78:
                    e4:47:94:d0:a2:db:74:e9:02:9f:17:df:b3:b8:b5:
                    90:94:bb:f9:17:9c:f1:0c:5a:42:2e:23:38:87:84:
                    1e:1f:8f:26:e1:e0:cf:35:1e:2d:a2:68:9b:69:fa:
                    2d:3d:1c:8d:9d:da:1d:7c:eb:9b:67:25:59:ba:fb:
                    e4:f9:6e:bf:3d:34:6f:22:7b:57:f3:40:a5:ca:69:
                    11:a8:0f:51:83:f3:f0:56:15:2e:5a:c2:e8:e2:0a:
                    2e:2c:59:aa:0d:17:01:41:72:3f:40:95:ea:85:2a:
                    15:62:77:a1:74:f5:19:d2:62:75:e0:f5:0f:5b:34:
                    99:c7:ed:f5:39:ff:f8:66:ac:4a:c2:32:12:5c:08:
                    63:80:5b:99:25:c0:84:05:c0:6f:e9:f5:67:da:71:
                    5e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:70:74:85:CB:34:3C:82:B5:6C:34:99:8C:DC:64:6B:3D:1D:13:F7
            X509v3 Authority Key Identifier:
                keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:a1:89:77:dd:3a:6a:ef:8e:2a:8e:f4:07:87:6d:63:4a:8c:
         a9:b0:a6:94:6a:dc:d5:0a:b7:10:e8:66:c2:70:4a:2c:ed:cd:
         5c:46:de:41:b2:79:5f:34:4d:38:21:a8:9b:ce:1a:c0:c4:9d:
         9d:15:1c:fc:f6:ea:e0:94:2e:80:ad:6a:2d:fe:ec:f3:85:df:
         7c:46:60:a8:2a:ea:74:28:fa:82:a8:31:f4:6b:20:0f:06:f1:
         8c:a0:ad:fc:df:65:c9:25:04:6e:16:2a:08:18:39:ba:4d:92:
         83:6e:bd:c6:3e:47:66:31:2f:59:11:b7:31:33:16:97:83:e0:
         3f:30:15:19:81:b9:71:d6:3c:1b:ac:92:49:1d:67:ea:99:6e:
         7e:96:19:ec:d5:39:74:0e:d9:e8:46:7f:69:7d:1e:fe:11:a9:
         59:00:3f:c4:52:83:54:f1:2d:bf:8a:5f:e6:ad:96:ef:a4:34:
         95:28:8a:3e:b6:c4:09:79:75:85:c8:65:d3:3c:94:88:a0:9f:
         52:60:69:cf:18:5b:d9:a5:7c:24:ab:ea:4c:31:54:a0:cf:a6:
         aa:1a:b1:90:0b:9c:38:9a:dd:50:42:cf:d9:cb:b8:45:e2:9a:
         8d:93:7d:1d:ed:09:a0:a8:cd:e5:3d:04:da:45:6b:98:0e:fc:
         29:45:10:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:22:12 2025 by rpki-client