Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File:                     u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier:          K62y/O5t8JTzfIqZIxcc2IQPLLOvyCOCzC9SbQshkp4=
Subject key identifier:   15:96:62:5E:7A:0F:26:95:97:7C:EE:33:08:4C:A9:8E:9E:C7:13:C0
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer:       /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial:       01CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number:          01C8
Signing time:             Fri 25 Apr 2025 02:05:38 +0000
Manifest this update:     Fri 25 Apr 2025 02:05:38 +0000
Manifest next update:     Fri 02 May 2025 02:05:38 +0000
Files and hashes:         1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: OAlb2ga08EA1mWtbpNVK8w80GtSe8I0ZrlxbUoeICdY=)
                          2: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: d6lR5DCUUt64f3jfT2Upe1NvnvCxTNK9tDR0OuYVOnY=)
                          3: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: Wx96a0pCwu7Is08OfwVpC7A3eb6MBe8Us9jhb4i3wps=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
                          rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:05:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
        Validity
            Not Before: Apr 25 02:05:38 2025 GMT
            Not After : May  2 02:05:38 2025 GMT
        Subject: CN=680aedf2-7414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5d:63:af:22:a0:bc:69:4d:8b:83:09:c2:c6:
                    9b:06:c1:e0:85:52:95:ae:03:ac:68:b2:38:ed:e7:
                    69:23:79:45:24:2e:3f:54:61:03:b1:77:16:ef:2d:
                    55:88:15:d8:a9:d7:67:66:ef:c8:23:1d:95:f0:5a:
                    78:25:83:db:64:8f:be:91:d7:70:12:ca:5e:0e:e6:
                    c2:18:b1:b9:60:d9:61:85:a6:a6:44:09:ac:cc:0a:
                    62:d2:96:6d:e7:80:e5:84:d1:81:d5:00:16:bc:09:
                    db:18:a5:ae:92:75:81:51:b7:75:3f:46:5b:ac:af:
                    02:a8:fd:11:2d:0e:5c:18:83:58:9d:74:08:1a:9b:
                    ce:5c:a5:8d:1c:85:06:9e:01:02:f8:d8:18:66:46:
                    0c:8c:6b:79:ec:9d:e7:d7:50:23:e1:ab:e3:14:fc:
                    9a:06:15:a4:12:2e:87:04:9a:c6:15:91:24:a4:23:
                    61:54:c9:06:7a:8e:99:34:1f:33:29:fd:b6:fa:b3:
                    10:26:54:46:9a:21:23:16:13:bf:9b:9e:ea:35:93:
                    17:d0:43:0d:84:28:d5:13:bb:2f:98:6b:04:03:8a:
                    d4:69:1e:6a:f1:c2:8f:a9:88:bc:62:3a:96:77:2c:
                    9d:1d:ff:f7:c5:7b:8b:88:a5:50:dd:e1:43:6e:03:
                    18:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:96:62:5E:7A:0F:26:95:97:7C:EE:33:08:4C:A9:8E:9E:C7:13:C0
            X509v3 Authority Key Identifier:
                keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:6f:33:7e:06:c1:af:e8:90:69:e3:17:0c:3e:26:8b:06:00:
         05:d1:4c:18:9f:90:2c:d9:9e:3f:12:be:00:6c:ed:6b:e5:3e:
         ee:35:dc:e5:82:ef:ce:36:0b:16:e5:70:05:39:25:fc:6c:e9:
         bb:64:92:97:a9:91:4d:8b:ec:ed:1e:4b:42:95:c5:2d:0f:c4:
         2c:e4:ef:f4:cd:b4:8e:86:ad:c6:03:9e:b0:1f:1f:fe:77:83:
         2f:92:23:e9:a9:55:08:25:f3:7d:67:8f:ce:b3:8f:e3:0e:76:
         c3:ef:0e:df:30:31:c6:85:7f:c9:5e:5e:d4:b9:60:1b:54:c4:
         be:b3:6a:62:4d:ad:3e:3a:eb:1e:b1:38:98:04:b7:4c:00:83:
         e7:ad:cb:5e:f1:52:d5:b5:8a:66:f4:3c:ca:50:4d:e9:ab:10:
         bb:39:37:db:37:6a:07:95:c2:ab:e6:3f:06:88:73:d1:f3:c7:
         83:32:28:8a:87:c9:78:bb:58:58:fe:d7:8f:85:59:ae:3f:e0:
         56:38:f4:20:d5:8e:81:1e:cf:c4:30:0b:c3:81:c1:43:ea:e5:
         5d:2d:b3:5d:a6:49:f4:a5:9d:bd:38:f7:ed:15:1a:9c:76:c0:
         50:9e:78:e1:6c:09:a4:c1:a4:f2:be:af:65:9c:d5:2e:5d:8a:
         67:bd:c6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:01:29 2025 by rpki-client