Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
File:                     uAcN_Ffq4OvoruS7XJHQar0cpxo.mft (raw, json)
Hash identifier:          t01Rsg100nxRuZsFQ36QqJ17bltOhffkmHoLd9tQI7o=
Subject key identifier:   2D:3C:36:C3:8F:23:AF:BD:91:8A:D8:CC:0D:C3:29:EC:9F:69:17:FC
Authority key identifier: B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A
Certificate issuer:       /CN=A9196977/serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
Certificate serial:       05ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
Manifest number:          05E2
Signing time:             Thu 24 Apr 2025 22:47:15 +0000
Manifest this update:     Thu 24 Apr 2025 22:47:14 +0000
Manifest next update:     Thu 01 May 2025 22:47:14 +0000
Files and hashes:         1: uAcN_Ffq4OvoruS7XJHQar0cpxo.crl (hash: qaR78rOqlY8dv24ik9bebNnY0ZSrD0vt6YXPkPSCPD4=)
                          2: E40449BED7A011EFB0DF210CC4F9AE02.roa (hash: ars+4kUYh+fBY0hItqO0CQ4bv/P8oF+2aWPQbb5TTz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl
                          rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:47:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1517 (0x5ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196977, serialNumber=B8070DFC57EAE0EBE8AEE4BB5C91D06ABD1CA71A
        Validity
            Not Before: Apr 24 22:47:14 2025 GMT
            Not After : May  1 22:47:14 2025 GMT
        Subject: CN=680abf72-31b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:0e:1c:fa:ed:b8:c2:2a:73:64:68:62:be:
                    b1:b6:5e:4b:83:86:01:13:3e:8b:68:19:7e:84:44:
                    65:a0:b3:0c:a7:9b:5e:50:f6:56:ed:ec:a8:87:2b:
                    af:3f:2b:b8:f2:1b:98:69:08:a6:af:b0:44:54:d4:
                    1d:21:df:2e:23:15:f1:48:b7:87:1d:25:7b:30:42:
                    fe:85:ba:64:bc:e7:ae:dd:90:5b:f4:03:eb:f3:fa:
                    cf:73:68:95:b0:7a:f9:fb:65:7d:52:d2:3b:95:d1:
                    66:f2:00:44:07:9e:f6:08:10:df:df:6b:0b:91:4d:
                    fd:9d:df:12:f9:bc:4e:ed:ab:c9:76:c0:d6:63:ee:
                    5c:45:c6:07:54:8c:e9:6f:33:af:4d:bb:23:4a:3f:
                    3a:b6:95:82:2f:44:73:9b:c8:a7:e3:ae:3f:eb:7d:
                    af:15:57:ea:10:ab:f8:b0:3b:44:85:18:bf:7c:16:
                    aa:e6:43:b8:02:19:64:08:e2:4b:57:05:a4:53:2a:
                    e6:b7:79:1f:e7:3c:ce:c6:ac:cc:a7:87:ee:d7:75:
                    8e:35:ae:ce:ac:ed:d7:54:e7:cf:3c:cd:bf:ee:6b:
                    eb:74:aa:79:3a:2c:5b:47:82:e4:30:8f:69:5b:74:
                    27:3b:9e:52:c9:67:e7:24:b2:12:52:cc:11:05:4b:
                    05:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:3C:36:C3:8F:23:AF:BD:91:8A:D8:CC:0D:C3:29:EC:9F:69:17:FC
            X509v3 Authority Key Identifier:
                keyid:B8:07:0D:FC:57:EA:E0:EB:E8:AE:E4:BB:5C:91:D0:6A:BD:1C:A7:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uAcN_Ffq4OvoruS7XJHQar0cpxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196977/B94B8C98B20411EB9CC7F449C4F9AE02/uAcN_Ffq4OvoruS7XJHQar0cpxo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:22:f6:1a:fa:14:d6:62:14:2a:40:ea:6e:66:db:e2:93:90:
         91:68:fd:0b:ec:44:c9:a5:4e:d4:0c:dd:24:04:c4:8b:7d:b9:
         39:ab:19:3e:91:b5:14:7a:59:33:f5:72:b4:ed:19:6a:62:a8:
         4a:49:15:a5:af:72:fb:af:f4:b2:47:d4:1c:a0:9b:f7:82:8f:
         c4:93:e1:94:77:fc:07:1f:9d:13:cb:ac:31:79:5b:4f:89:60:
         fe:fa:04:61:a7:75:3e:cb:76:9d:c6:8b:cd:8d:10:a1:3f:86:
         ee:56:fe:db:b3:7e:63:42:09:cd:5f:4b:8d:39:51:74:9e:1f:
         c7:1f:e3:98:15:5e:08:93:f9:f7:70:53:30:e6:d4:e1:76:50:
         3f:e9:e1:37:c2:02:9f:d7:54:65:f7:ef:d5:ec:95:5f:dc:f5:
         e9:3c:6d:43:be:e9:97:4f:0f:f6:79:a0:04:04:39:72:a8:05:
         16:2a:c9:86:e4:70:51:78:ed:d0:09:b4:71:86:7f:51:81:c0:
         72:c2:0a:7e:8e:15:92:40:a4:f7:00:22:8f:08:49:c7:17:ca:
         a7:25:70:c1:b7:f2:66:df:35:ea:75:92:06:67:cf:98:2f:79:
         9a:87:0c:db:a0:70:7d:9a:8e:54:b3:3b:38:38:c0:4e:c2:4f:
         1f:ec:c2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:29:52 2025 by rpki-client