Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
File:                     UWKb64D735TtmmQ_14yB2nO2uho.mft (raw, json)
Hash identifier:          MKSpzIpvvEGYh1QtuyWlUmTLVbXXuLNGCRoxjEWEAOQ=
Subject key identifier:   AA:F6:66:D4:8E:92:4C:20:66:C2:B9:6D:35:85:FC:11:13:06:EC:9D
Authority key identifier: 51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A
Certificate issuer:       /CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
Certificate serial:       0A65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
Manifest number:          0A57
Signing time:             Thu 24 Apr 2025 19:33:20 +0000
Manifest this update:     Thu 24 Apr 2025 19:33:20 +0000
Manifest next update:     Thu 01 May 2025 19:33:20 +0000
Files and hashes:         1: UWKb64D735TtmmQ_14yB2nO2uho.crl (hash: 4kPmlKERJxMtZ7M49gzPBo/iE+NyBUXy4T+L42j77MY=)
                          2: 803C622E9B9111EDBC921164C4F9AE02.roa (hash: cOk9WkbMtekpbvbpWoDS8UUpnz2Yuo9L3yfei4T7i14=)
                          3: 7F1EA1189B9111EDBC921164C4F9AE02.roa (hash: B4bAqc6kkR7Hs43c2EHoV92Uje7SlbmocY/IyCwTMEI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl
                          rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 19:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2661 (0xa65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EAD0, serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
        Validity
            Not Before: Apr 24 19:33:20 2025 GMT
            Not After : May  1 19:33:20 2025 GMT
        Subject: CN=680a9200-277b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:cc:19:06:2b:c4:90:20:0b:36:62:1a:52:
                    0d:04:bb:60:7f:f0:09:07:1a:fd:30:57:bd:d4:f3:
                    03:b2:f3:c6:2a:c8:a4:f8:2c:dc:1e:59:e7:79:32:
                    39:d7:93:0e:31:a9:53:45:6e:62:30:21:72:6f:d1:
                    c2:69:6f:d9:0b:58:bf:f5:46:10:c8:76:a6:93:f0:
                    2f:7a:0d:a9:39:83:d2:5e:67:c2:25:6b:03:33:68:
                    ac:95:75:7c:4e:1c:3d:77:34:84:b4:3d:dd:29:5c:
                    52:0e:94:67:bc:82:4e:a6:4d:c2:7c:08:c7:f5:fc:
                    4c:f4:2a:4d:ad:0c:43:a9:b9:88:b8:bf:f1:2d:d0:
                    9a:95:04:be:d3:4b:c0:2d:d6:95:cc:92:8e:75:f0:
                    e5:54:b6:f4:b3:4b:c8:f9:8a:9c:75:1a:08:4a:fb:
                    cd:32:4e:38:ad:6d:0e:64:fe:32:32:94:6b:79:3f:
                    25:52:65:98:49:6d:83:d5:6a:8c:f9:71:4f:5b:86:
                    4c:63:80:77:bf:21:82:8e:2e:58:e6:d9:6c:6b:d4:
                    7d:18:3c:38:e7:29:27:b0:82:32:3e:d4:4f:e9:f0:
                    de:a5:31:b9:5b:21:38:24:3c:c1:42:f7:3b:8b:06:
                    2e:e9:f4:4a:43:ee:06:3c:c0:29:93:fd:84:28:23:
                    b5:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F6:66:D4:8E:92:4C:20:66:C2:B9:6D:35:85:FC:11:13:06:EC:9D
            X509v3 Authority Key Identifier:
                keyid:51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:7a:f7:81:34:77:53:d5:9a:4a:32:ed:31:85:c6:ed:f9:98:
         1b:22:b9:b4:28:28:e3:3d:ee:4a:49:d0:1d:43:44:1b:99:35:
         04:66:d1:46:b6:0a:00:23:54:be:98:20:aa:c7:1c:11:0b:96:
         d8:c5:39:4c:49:6f:09:4b:b1:61:49:96:e6:42:dd:6e:17:cc:
         02:55:a9:a1:76:fa:e4:79:fc:84:9c:cc:28:82:b0:a5:6b:fa:
         29:81:2f:85:c9:b8:f9:d1:fb:fb:cc:8e:de:cc:3e:c1:cf:8e:
         af:81:1c:48:49:78:94:55:20:3e:71:ce:2b:63:ef:0e:76:4d:
         48:81:95:2b:a0:db:95:45:28:ad:dc:72:52:fa:90:63:bf:84:
         f7:5b:f0:2b:3e:a4:72:3b:f3:e2:62:c6:58:85:ef:a9:44:5c:
         41:5a:8b:aa:f1:fb:23:40:cd:a9:92:38:0a:11:be:e5:4e:62:
         d4:4a:24:30:b1:83:d6:a2:92:da:1e:f3:d8:10:e1:5d:93:6a:
         45:1e:23:3b:26:3a:0f:c3:74:83:a8:96:48:49:09:f3:48:0e:
         fb:61:11:fc:3c:14:76:b4:4b:0b:37:3d:b9:27:30:80:d1:1b:
         ad:30:71:fe:74:8c:e2:2a:0f:58:42:6d:69:6c:f5:4e:8f:0c:
         fd:b3:63:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:31:27 2025 by rpki-client