Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft
File:                     Uaqsf29Y90cHLIfsL0h47xy49M4.mft (raw, json)
Hash identifier:          /4Mm9381Dd6xFHB4a2G5sp9LUfDho+nGJLrnRrRIMgk=
Subject key identifier:   38:76:32:F0:F5:D5:B4:F8:D7:5D:1E:32:AD:C4:98:12:23:12:86:B3
Authority key identifier: 51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE
Certificate issuer:       /CN=A916BCDF/serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE
Certificate serial:       1216
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft
Manifest number:          1202
Signing time:             Thu 24 Apr 2025 17:10:55 +0000
Manifest this update:     Thu 24 Apr 2025 17:10:55 +0000
Manifest next update:     Thu 01 May 2025 17:10:55 +0000
Files and hashes:         1: Uaqsf29Y90cHLIfsL0h47xy49M4.crl (hash: wOvgsARLo1/6QK9xM5UfwW5HQ2sER9YkQSKZ3FtNsGc=)
                          2: AA47599A985F11EEBA5D186DC4F9AE02.roa (hash: abD2sJSusd+EergprKNOfnX9AY5e5SRUlXGm1ps4L/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl
                          rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 17:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4630 (0x1216)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCDF, serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE
        Validity
            Not Before: Apr 24 17:10:55 2025 GMT
            Not After : May  1 17:10:55 2025 GMT
        Subject: CN=680a709f-78ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:be:f5:7c:0c:c4:9b:9d:b9:a5:61:75:92:7c:
                    0a:7e:21:df:40:34:d5:7d:31:b7:65:d6:a5:ec:6f:
                    cd:59:61:de:a3:16:b1:7f:dd:67:59:7e:98:40:31:
                    d0:40:b1:03:1c:b3:eb:0e:bc:70:b8:c9:5d:3f:c5:
                    6d:37:aa:7b:f0:61:c0:07:a2:c7:c1:31:2f:1b:1a:
                    fb:f8:60:c8:84:85:73:0c:f5:b8:6d:4a:9f:ac:de:
                    44:e8:50:cf:fa:e7:8a:a2:a3:86:36:65:a4:8c:7e:
                    55:91:8b:d3:8a:18:ad:a5:6f:be:de:99:69:a5:b9:
                    d2:45:20:5a:73:11:c7:24:23:db:c9:d4:22:19:95:
                    7c:22:02:f8:eb:4b:ae:09:0e:2a:89:d0:98:32:4c:
                    20:d3:a4:b3:c7:60:2a:9e:91:6c:fd:8b:26:ba:47:
                    04:0d:f6:99:9b:af:29:c4:2d:67:a8:bf:7d:9a:85:
                    cf:c5:60:2e:c6:84:8a:23:6b:53:21:47:72:a5:db:
                    b5:fd:1b:6b:8c:fa:21:e3:1f:80:4c:57:c7:a8:5e:
                    a4:20:f1:92:ac:00:60:13:23:d8:2a:71:e3:28:10:
                    33:24:ae:c4:15:7f:bd:95:33:9c:67:aa:bc:ab:61:
                    3b:27:cc:6c:c1:e4:cf:90:36:6e:cf:e0:ee:bc:15:
                    2e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:76:32:F0:F5:D5:B4:F8:D7:5D:1E:32:AD:C4:98:12:23:12:86:B3
            X509v3 Authority Key Identifier:
                keyid:51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d2:28:90:48:37:15:35:1d:7f:0e:ff:1a:65:dd:a2:1a:0b:
         16:27:cf:8b:b9:27:f0:d3:9d:2f:fa:2b:81:ca:91:84:cd:f9:
         6b:a9:f0:36:49:20:e8:1c:d7:fa:2c:15:5f:7a:ef:57:8b:64:
         eb:85:92:63:8b:6a:e8:a8:8b:b6:98:bd:ee:a8:12:63:f6:c0:
         50:51:fe:f9:5c:a7:f5:70:d6:56:6b:c5:fe:f0:3e:07:65:e9:
         ab:dc:87:5a:92:3c:f5:dd:da:c1:ba:94:21:bc:36:54:1d:f8:
         02:0a:dc:f0:59:ed:42:17:eb:97:35:5a:c6:a0:5b:8d:ed:f1:
         0d:15:7d:1a:ec:c5:ac:59:22:f5:3f:b1:13:f2:8f:c4:a2:bd:
         2c:e3:49:7d:be:23:51:51:44:ac:28:05:84:38:b7:dd:0c:fc:
         c1:7a:70:c8:3f:24:74:aa:cc:32:95:fe:7f:65:12:9c:52:cd:
         d9:11:23:8e:e8:a9:a5:84:f0:1e:68:1d:03:38:50:f5:0b:3d:
         a8:dd:b3:3a:de:d6:43:a5:54:03:b3:a9:26:3a:5b:e6:c7:92:
         4f:5b:2e:ad:6c:ec:d5:40:0a:15:15:bf:cd:82:4b:b3:da:40:
         a8:84:7c:da:c7:e5:11:06:ba:b9:da:ac:5a:80:c9:d2:e7:23:
         d7:f0:d7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:13:22 2025 by rpki-client