Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
File:                     uIC429cILNkYtiF73qCXWEWR290.mft (raw, json)
Hash identifier:          Ky3StJQTaaDcbuWrA8q3sY4FsKh8rW3GdYQ56BJaTP4=
Subject key identifier:   FB:AF:43:2B:DB:56:F2:8E:7D:C1:6E:39:A1:67:BE:90:46:B5:BB:D2
Authority key identifier: B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD
Certificate issuer:       /CN=A913EF9C/serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
Manifest number:          52
Signing time:             Thu 19 Jun 2025 06:39:20 +0000
Manifest this update:     Thu 19 Jun 2025 06:39:19 +0000
Manifest next update:     Thu 26 Jun 2025 06:39:19 +0000
Files and hashes:         1: uIC429cILNkYtiF73qCXWEWR290.crl (hash: klNlwi0HJvJRIPqAacLPRYrNpNbddac119Jtnqx3ytA=)
                          2: 08476846D3EC11EFBFE6E864C4F9AE02.roa (hash: rxJJmD5OYbq6xF7owInMRKSqMF5l2EY96R9IaFA9M1E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl
                          rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 06:39:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF9C, serialNumber=B880B8DBD7082CD918B6217BDEA097584591DBDD
        Validity
            Not Before: Jun 19 06:39:19 2025 GMT
            Not After : Jun 26 06:39:19 2025 GMT
        Subject: CN=6853b097-c464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b9:f1:3f:80:b1:f2:63:e8:9c:1f:a7:07:b0:
                    9a:58:65:5f:74:d0:63:c5:2b:38:90:92:bb:86:b9:
                    b0:e3:f8:b3:b0:8d:ea:87:87:b0:09:62:a7:fd:51:
                    43:d9:81:4b:d0:d2:14:8c:ad:c0:75:3b:5b:b7:f1:
                    58:e9:06:e0:19:31:76:8c:67:a6:3a:c1:dc:e3:b1:
                    e3:34:18:70:07:a3:00:dd:82:8b:19:f7:bf:fa:44:
                    27:ad:63:e3:a1:2a:e0:30:18:85:69:93:ea:44:58:
                    58:3d:88:74:cb:0b:55:8a:ea:60:fc:e5:a7:3c:d5:
                    9a:0c:67:4c:3e:2c:54:84:69:bf:e7:b4:63:fb:50:
                    27:50:8f:8d:0f:7c:13:9e:21:a2:1d:fb:73:a9:3d:
                    ff:55:28:2d:de:66:d5:23:65:30:12:19:e2:68:ad:
                    11:60:9f:17:65:9c:22:89:aa:dc:33:86:d2:e2:17:
                    6a:ef:7c:63:8e:4c:ce:b5:d8:8a:9b:41:ad:95:97:
                    4c:09:5a:0e:cf:8d:1b:38:16:78:1e:2b:e9:c4:96:
                    f9:81:ea:6f:72:79:b4:9b:85:74:24:cf:41:f5:0f:
                    8a:0d:3f:62:2b:b7:95:2e:10:78:9a:ad:ae:88:17:
                    ad:d4:aa:42:a9:7b:58:e4:cb:9d:03:02:3f:60:ae:
                    15:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:AF:43:2B:DB:56:F2:8E:7D:C1:6E:39:A1:67:BE:90:46:B5:BB:D2
            X509v3 Authority Key Identifier:
                keyid:B8:80:B8:DB:D7:08:2C:D9:18:B6:21:7B:DE:A0:97:58:45:91:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uIC429cILNkYtiF73qCXWEWR290.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/C4FEC288D3EA11EFA66C4760C4F9AE02/uIC429cILNkYtiF73qCXWEWR290.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:16:7c:7f:a6:ce:66:e3:18:74:8c:de:83:9b:9e:83:81:21:
         cf:db:a6:3a:ab:cc:62:d8:d9:12:b5:34:90:4d:be:85:55:a8:
         b5:ce:f6:53:a1:9b:6d:b5:48:e1:24:9e:63:bd:1d:23:90:11:
         28:c2:50:ad:64:4f:3e:60:67:fd:4d:f8:7b:3a:99:88:72:27:
         bb:75:c8:79:98:bc:7c:98:ec:74:c8:01:2d:8b:fb:ff:4f:61:
         71:db:2f:69:86:28:c3:33:75:c9:a9:4d:a4:e0:ba:53:10:4a:
         e1:24:8c:02:7e:47:4b:54:1f:9e:5a:09:33:06:89:c7:5a:dd:
         f6:16:f9:06:6b:ed:48:48:4c:94:37:9e:49:04:a9:f6:ad:f9:
         27:97:0b:ee:f0:ba:95:39:22:b9:e3:53:6f:d1:2b:21:b1:a6:
         19:30:13:92:9b:f8:ea:b5:9a:28:b9:3a:a1:62:a8:0f:8d:af:
         a6:fa:eb:78:8a:2b:d0:2d:91:77:f3:60:8b:58:0b:50:42:49:
         38:80:50:44:70:ad:24:1d:68:cd:54:bd:da:8b:da:b7:e6:d1:
         5e:de:d1:18:a3:32:b5:cb:15:43:0d:9d:45:8c:2e:33:17:0b:
         47:cb:c4:ff:76:0e:1f:ba:56:5a:8f:40:10:94:e5:c9:60:33:
         75:d5:2b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 06:26:26 2025 by rpki-client