Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
File:                     UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft (raw, json)
Hash identifier:          ws3zUxVuh/Ed6fkFzxp84TM0ibl63CwJ7SMV3911SGk=
Subject key identifier:   97:F4:55:D5:6F:7A:D7:1E:A6:F0:60:6D:3A:2B:3D:EF:A3:4D:F8:FF
Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56
Certificate issuer:       /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
Certificate serial:       01FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
Manifest number:          01F6
Signing time:             Fri 25 Apr 2025 01:50:47 +0000
Manifest this update:     Fri 25 Apr 2025 01:50:47 +0000
Manifest next update:     Fri 02 May 2025 01:50:47 +0000
Files and hashes:         1: UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl (hash: mDjfmNAk9izffL/Y+uSSQex2pO4fmVKHdWyO4s+lvWY=)
                          2: 58CA2F840D3E11F08AA20980C4F9AE02.roa (hash: o3WxnMuTVoZ5sDv98g86AWu9+ZVPEihcJKRFXeclwGE=)
                          3: ABBB590C0D3E11F081E68E80C4F9AE02.roa (hash: 21Xud0yuR+X8V9kV1r27e1DSMw9xVQDdRdNBmOLAKOs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl
                          rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508 (0x1fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656
        Validity
            Not Before: Apr 25 01:50:47 2025 GMT
            Not After : May  2 01:50:47 2025 GMT
        Subject: CN=680aea77-cd85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0c:3d:f6:c3:cf:a8:ae:a7:ee:84:6b:e0:16:
                    95:74:27:d9:91:55:b7:af:fb:e0:81:12:d0:64:e0:
                    39:f8:9f:04:ff:66:df:ad:fa:2c:a6:5e:7c:fd:d2:
                    d2:aa:10:c0:4d:cd:b0:00:2e:b0:b0:4d:f6:86:17:
                    29:ff:ad:5c:35:67:90:33:c0:08:0a:12:7e:72:94:
                    23:f0:6f:02:10:0c:c2:c7:e9:77:a8:f0:07:23:29:
                    72:8c:4c:6f:80:fb:79:81:5e:3a:99:82:8e:53:ee:
                    58:8b:0c:07:98:26:36:a5:e6:62:b9:8a:35:21:51:
                    2c:cd:64:36:17:4b:00:54:24:9c:cf:5c:4a:5d:de:
                    e7:98:d8:90:bc:7c:c1:07:66:53:1b:d8:75:00:a9:
                    e5:56:f9:93:aa:1b:ce:3f:78:d2:dc:e8:58:a6:af:
                    71:49:5e:2c:91:2a:b8:39:fb:40:c1:e9:2c:34:ed:
                    74:63:69:35:65:4a:63:a0:67:ae:64:21:38:fe:d3:
                    1c:c2:5d:60:b0:97:27:ed:76:d7:a4:1d:d0:e4:52:
                    67:d0:21:61:4f:fd:ba:3c:30:c3:f6:dd:9d:98:ab:
                    48:1c:99:bd:57:41:6b:63:ef:f4:ee:7c:0d:7a:a2:
                    84:9a:0e:10:29:09:9b:a8:f8:4d:f1:48:db:3f:a3:
                    91:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F4:55:D5:6F:7A:D7:1E:A6:F0:60:6D:3A:2B:3D:EF:A3:4D:F8:FF
            X509v3 Authority Key Identifier:
                keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:41:b8:e8:a4:d7:5f:e8:91:24:58:3b:91:3f:62:d9:38:77:
         aa:47:77:da:42:36:03:1e:73:c5:7e:19:2d:88:ed:45:57:63:
         f7:43:f6:9d:2f:37:91:5a:fb:94:73:1c:c4:ed:22:b5:20:e8:
         f8:ca:38:6d:41:f3:d2:b2:bd:94:28:18:a6:94:78:5d:d0:3d:
         f1:e2:ba:99:07:24:e5:fb:2a:c8:1e:f2:b6:8e:a4:0f:80:24:
         97:48:01:ea:50:10:8b:e5:5c:f2:76:f2:31:d0:f6:a5:a7:ef:
         c0:63:8c:cf:4c:55:77:83:30:2b:b9:83:58:58:02:45:9d:ed:
         40:b2:a0:18:26:50:90:13:4a:1f:52:67:58:c6:a3:df:e0:bd:
         0f:a2:49:6d:32:3f:a0:f9:7c:04:0d:23:4c:e1:42:62:c3:e3:
         00:f9:e7:ea:d7:e5:03:a7:5d:9b:27:d5:7b:22:46:ec:cf:db:
         50:fa:51:c5:c6:92:6d:55:26:67:5d:4a:c5:ee:63:c1:0e:47:
         61:ac:83:0e:a1:77:d3:4e:fb:a9:18:97:56:8a:47:3e:05:72:
         83:14:11:b3:92:de:5e:f8:aa:08:29:dc:51:b3:e9:60:39:75:
         5d:66:8b:bd:58:59:ff:b3:64:30:1d:ef:75:38:74:bc:58:91:
         f1:91:e8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:58:18 2025 by rpki-client