Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft
File:                     Uaqsf29Y90cHLIfsL0h47xy49M4.mft (raw, json)
Hash identifier:          o2cofFq6jId7p5wS0VBQiutN46SZJKqxLTCZo41Unu0=
Subject key identifier:   9D:B4:E0:EE:C5:ED:0C:C0:F7:16:82:B9:A6:D8:0B:70:F7:CB:FE:E6
Authority key identifier: 51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE
Certificate issuer:       /CN=A916BCDF/serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE
Certificate serial:       122F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft
Manifest number:          121B
Signing time:             Sat 14 Jun 2025 17:06:00 +0000
Manifest this update:     Sat 14 Jun 2025 17:06:00 +0000
Manifest next update:     Sat 21 Jun 2025 17:06:00 +0000
Files and hashes:         1: Uaqsf29Y90cHLIfsL0h47xy49M4.crl (hash: 39rSbXFDE7fw/tkAzXrGdyX3ej0PZkVTRHIFBUFkwkE=)
                          2: AA47599A985F11EEBA5D186DC4F9AE02.roa (hash: abD2sJSusd+EergprKNOfnX9AY5e5SRUlXGm1ps4L/Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl
                          rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 17:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4655 (0x122f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BCDF, serialNumber=51AAAC7F6F58F747072C87EC2F4878EF1CB8F4CE
        Validity
            Not Before: Jun 14 17:06:00 2025 GMT
            Not After : Jun 21 17:06:00 2025 GMT
        Subject: CN=684dabf8-2844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:16:9b:6b:88:5d:42:4c:18:3a:1c:83:47:14:
                    8a:50:9f:57:d6:72:9b:23:91:db:f1:8a:a2:ce:3d:
                    16:c8:94:a9:b0:fd:35:78:3c:b0:f9:7e:39:46:88:
                    e0:1d:40:d2:32:d2:54:0d:91:35:57:22:71:bc:42:
                    2d:f1:84:b2:f4:af:3f:00:7f:26:8a:58:9e:57:35:
                    2a:17:b2:e2:02:d7:a3:8e:51:fa:14:3a:d4:5a:18:
                    06:13:71:14:c9:28:5a:99:56:f8:42:81:17:69:55:
                    ea:89:96:a4:3e:89:ab:02:94:dc:a9:ca:29:2b:fb:
                    29:02:a3:c9:dc:e0:34:ed:83:ba:f0:17:d1:84:c7:
                    57:84:43:0d:6c:d0:df:15:cb:6e:04:dc:ea:b4:80:
                    cc:d0:fd:70:a7:91:a6:fd:e7:89:8d:42:01:ff:ca:
                    77:08:ef:72:e6:c0:fc:55:11:c8:94:bc:cb:43:f3:
                    4a:b1:1d:b4:b2:be:0d:9e:73:c7:56:c5:ec:0d:e9:
                    30:1f:98:08:81:1c:79:29:32:a1:3b:56:5b:dc:68:
                    41:9b:04:82:4f:45:77:55:2a:17:a0:a9:bf:7b:2f:
                    33:d8:7e:df:f0:39:18:b9:2c:0b:41:15:5c:51:42:
                    fc:f7:b1:33:08:90:34:b9:6d:a8:ae:18:8d:e5:fd:
                    f0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B4:E0:EE:C5:ED:0C:C0:F7:16:82:B9:A6:D8:0B:70:F7:CB:FE:E6
            X509v3 Authority Key Identifier:
                keyid:51:AA:AC:7F:6F:58:F7:47:07:2C:87:EC:2F:48:78:EF:1C:B8:F4:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uaqsf29Y90cHLIfsL0h47xy49M4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BCDF/F858344EE36D11E8956F3516C4F9AE02/Uaqsf29Y90cHLIfsL0h47xy49M4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c3:cc:a9:3b:2f:60:05:da:96:79:3c:76:7a:b0:be:bd:76:
         90:d5:9f:87:ea:4a:e6:fe:c3:0a:e9:99:26:55:4f:4d:07:6a:
         55:1b:3c:75:a1:a0:cb:0c:18:ac:ed:5d:94:22:da:83:b4:2c:
         c3:9b:05:fd:48:db:dc:49:22:fe:e2:dc:42:84:8a:a4:52:af:
         74:1a:54:6d:33:0b:e8:45:32:ed:bb:43:f2:d2:51:45:eb:95:
         3c:dd:e7:f4:10:b7:0f:46:3e:75:99:33:20:1c:0c:5a:32:2a:
         9a:92:05:22:19:09:e3:d1:1b:01:fb:90:3c:13:c5:97:df:13:
         4c:1b:d4:92:fa:00:d8:61:84:46:90:83:fb:b6:5d:ff:df:a4:
         d1:fa:f1:21:db:f5:75:62:23:d8:7c:72:7c:46:ac:70:0f:8e:
         87:80:5c:aa:17:01:20:4b:62:f2:2d:02:6e:1d:2c:68:3c:5e:
         39:ab:03:69:33:3d:f3:ad:33:b7:c3:48:b9:3f:06:e7:18:36:
         08:59:f9:93:27:0a:4f:d0:2e:00:11:c8:1c:17:62:95:f3:9b:
         7f:3b:dc:3a:69:ef:9e:0d:9e:8b:29:a1:d8:b4:26:1b:80:e6:
         9a:c4:fa:71:e5:29:36:c6:77:91:1a:3c:41:c8:e0:24:a4:c5:
         6b:14:c2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:35:12 2025 by rpki-client