Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
File:                     Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft (raw, json)
Hash identifier:          c8dmkkcUt5Ff3eihe4E8qmTwxtx6VVLKEb2L8+KWAIQ=
Subject key identifier:   D9:F4:52:1E:E5:31:92:22:C2:B9:89:C4:CD:B0:15:F3:58:32:3E:46
Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
Certificate issuer:       /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Certificate serial:       99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
Manifest number:          95
Signing time:             Fri 25 Apr 2025 05:28:34 +0000
Manifest this update:     Fri 25 Apr 2025 05:28:33 +0000
Manifest next update:     Fri 02 May 2025 05:28:33 +0000
Files and hashes:         1: Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl (hash: y83NJ6LdIfCkSPk7alu1Ps/QsUopOnl6RMfK7ul4c2w=)
                          2: DD5C17BA1F5611F08154983AC4F9AE02.roa (hash: 8Snwt8B2JLJEJ5JimGWRrVqz/OGA5xhfuPXAO9BWHlA=)
                          3: 627CDAE66FE011EF937A9931C4F9AE02.roa (hash: sF1oxR3P0INbgPwkH87j+/9/A1n7qBr9P83Zm+8FV2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
                          rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:28:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 153 (0x99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
        Validity
            Not Before: Apr 25 05:28:33 2025 GMT
            Not After : May  2 05:28:33 2025 GMT
        Subject: CN=680b1d82-57a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:1a:0a:ce:4b:a3:d3:92:77:b9:54:bf:8b:
                    ff:ae:17:95:b0:eb:d2:83:0e:78:ee:b4:f1:ad:ae:
                    88:96:04:a1:e5:af:cb:03:60:ed:94:c5:59:7c:58:
                    9e:10:bf:cf:4c:f0:d1:c7:60:1b:5e:65:c1:6a:7e:
                    e8:25:82:f6:ef:cb:ef:fb:39:70:3f:2d:8c:49:c5:
                    7f:fb:23:2f:f3:ee:e4:d6:54:70:2c:36:25:6f:44:
                    b2:eb:15:88:8a:e0:69:da:e4:32:c2:5c:09:56:27:
                    81:9f:d0:cf:f4:31:53:f6:d8:1e:8a:03:ae:2f:95:
                    b0:05:61:ab:b4:94:d6:b4:60:15:f7:41:fe:4b:97:
                    16:31:06:af:16:8c:30:b3:71:8c:0e:fd:be:39:e8:
                    ff:b9:12:84:27:c0:f5:72:5c:47:26:6a:e2:dc:4a:
                    21:14:c0:01:3a:9c:39:e4:2e:b6:53:bc:bb:27:cd:
                    1b:b2:45:df:0f:0b:0f:e0:fe:72:80:25:6a:a4:ea:
                    50:47:2c:6f:64:bf:c5:bf:77:51:17:fe:0e:72:18:
                    3e:4c:3a:66:41:1d:7f:3d:26:d9:b6:80:29:e8:ff:
                    4b:cc:f3:25:56:e4:80:e4:bf:c2:86:8f:a1:a4:45:
                    08:f6:5f:6f:8a:04:eb:26:f4:dc:37:f8:c4:cc:6e:
                    f5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F4:52:1E:E5:31:92:22:C2:B9:89:C4:CD:B0:15:F3:58:32:3E:46
            X509v3 Authority Key Identifier:
                keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:55:3b:b7:dd:b0:d8:88:b1:26:55:04:45:7c:dd:a4:f1:74:
         30:5a:ae:dd:c7:ce:e1:ee:c6:7e:a0:0e:53:f5:82:30:7e:a8:
         f9:a1:41:6a:65:f2:d7:5c:a5:a9:88:a9:c3:23:33:a8:5b:c1:
         19:5b:ae:88:7d:e5:16:5d:06:40:93:67:5f:58:67:02:e3:fa:
         b2:fd:b9:53:b7:8f:bc:ce:47:54:81:ff:61:ea:63:0c:66:81:
         bd:40:d0:b1:22:bb:7c:a4:bf:17:90:65:e3:97:c3:07:7f:8b:
         1e:c6:0f:c9:c1:7c:6b:80:b1:8d:8f:cf:a7:df:f8:a2:e3:ba:
         24:e4:d6:0d:30:d7:0d:6b:d7:c3:46:fb:e7:11:9a:e4:94:61:
         d0:c0:11:6a:24:47:20:f4:14:b5:bf:e5:5d:0e:12:9e:d0:76:
         f0:d6:f6:a4:97:97:09:da:ce:ac:ca:f5:f0:8e:b4:47:de:bc:
         6b:f3:0e:56:cb:8a:94:13:e2:98:09:bc:f8:86:76:0b:83:e0:
         e5:e0:10:4e:e9:05:db:60:02:a6:99:08:fe:ff:75:75:c9:11:
         0c:88:6a:24:0c:01:28:dd:1e:e9:61:20:40:ab:4f:46:ca:a2:
         c2:c8:2e:7a:a2:c4:fa:ca:2d:7c:7d:53:5e:7a:dd:0e:aa:1f:
         dc:0f:33:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:21:14 2025 by rpki-client