Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
File:                     uYUInIuVHhACl2u9XU0d0kGB8Z8.mft (raw, json)
Hash identifier:          8Akv+xfGFFcmFsnUWYOdLlUv4aam3Xx2lLnbwRRgVwg=
Subject key identifier:   C5:6A:EA:4F:49:B7:A3:F4:52:F5:2A:B2:D8:85:F6:CD:51:DE:86:FD
Authority key identifier: B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F
Certificate issuer:       /CN=A919CA3C/serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F
Certificate serial:       05B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
Manifest number:          05B0
Signing time:             Thu 24 Apr 2025 22:55:58 +0000
Manifest this update:     Thu 24 Apr 2025 22:55:58 +0000
Manifest next update:     Thu 01 May 2025 22:55:58 +0000
Files and hashes:         1: uYUInIuVHhACl2u9XU0d0kGB8Z8.crl (hash: N7RTQnNKK0PuzToW3MwvdDa/Ll2bjKSJzWvnKzJgje0=)
                          2: 432BBA90C1F611EBAD8D7477C4F9AE02.roa (hash: hkJ88WsZE+BHMinN6yfbuiaAGQUAch41Smzi5V2G9DM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl
                          rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:55:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1461 (0x5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919CA3C, serialNumber=B985089C8B951E1002976BBD5D4D1DD24181F19F
        Validity
            Not Before: Apr 24 22:55:58 2025 GMT
            Not After : May  1 22:55:58 2025 GMT
        Subject: CN=680ac17e-a60d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:bd:29:a5:63:a7:53:a5:60:d6:41:71:6f:11:
                    5f:fe:c3:08:4a:49:ec:43:c6:9d:89:92:8e:46:d5:
                    e2:1e:fd:47:47:38:d7:e0:df:cf:0d:72:9d:02:41:
                    b4:37:d7:d5:c2:5b:76:9d:13:32:c3:a6:22:8d:8b:
                    96:61:8b:84:1f:9d:01:29:5f:a1:9a:09:6c:96:9d:
                    6c:83:28:d9:01:53:2e:a1:c5:65:48:b8:b6:d5:1c:
                    23:2c:21:cf:89:da:0c:92:ba:77:da:3e:47:31:9b:
                    45:21:77:f1:46:43:cf:c2:32:38:bf:9d:f9:69:4b:
                    d5:a8:a4:e9:40:f5:b9:e8:69:9d:be:ac:fd:d0:8f:
                    c2:c0:65:23:83:95:01:68:b8:c2:f5:22:1b:48:17:
                    c6:ef:cd:c2:65:fb:5f:37:42:f6:5b:3f:f1:9e:de:
                    28:cf:1f:28:3f:a0:03:55:2a:d3:76:e9:f9:a2:d5:
                    ad:4f:3b:ea:b5:81:79:02:a4:c4:2f:a8:14:7f:fb:
                    0f:60:7e:e2:79:6a:2c:e5:b5:6f:5d:1f:7a:a5:13:
                    98:a0:cc:91:5f:fd:6a:7f:6e:e7:19:e2:83:6e:7a:
                    b5:08:a8:91:59:16:be:2a:cd:d0:ca:7b:a2:4e:2b:
                    16:67:55:21:56:57:ef:0d:31:d3:60:8f:40:1e:4d:
                    77:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6A:EA:4F:49:B7:A3:F4:52:F5:2A:B2:D8:85:F6:CD:51:DE:86:FD
            X509v3 Authority Key Identifier:
                keyid:B9:85:08:9C:8B:95:1E:10:02:97:6B:BD:5D:4D:1D:D2:41:81:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uYUInIuVHhACl2u9XU0d0kGB8Z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919CA3C/D83646FEC1F211EB98564174C4F9AE02/uYUInIuVHhACl2u9XU0d0kGB8Z8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6c:08:0d:d5:e1:fb:92:e7:4e:7d:cf:08:22:b5:db:5f:76:
         fa:4e:fd:e6:81:5f:d4:ee:d7:9d:f7:71:ff:dd:58:d8:e3:c1:
         10:08:5c:bd:5c:50:f4:f8:92:8d:df:e2:2f:65:2b:c9:70:c2:
         88:f3:44:91:5e:20:31:9c:2e:8b:07:13:16:7c:fb:99:3b:40:
         88:57:28:64:03:2b:12:e1:75:37:9d:a6:7f:98:ef:27:5e:aa:
         fd:31:67:eb:b8:0e:3a:4e:50:6a:24:29:3e:20:af:63:43:19:
         4c:16:11:7c:ba:62:18:c3:94:6a:a6:7e:3a:42:d2:0f:2d:92:
         83:78:42:f3:67:4f:d7:a9:e3:a6:8e:70:0e:af:4a:10:2b:2c:
         86:16:12:20:6c:60:e1:b7:28:a3:9b:76:ea:72:11:4f:b8:4e:
         b6:56:b6:8a:98:19:8e:a0:15:8f:4d:3d:88:a4:21:ee:de:83:
         94:e1:e2:e2:b8:3b:51:f6:cf:6e:63:aa:aa:27:37:99:6e:35:
         28:c9:fe:6a:e5:f0:3e:c5:82:fd:4f:b8:dc:58:7e:f1:67:d7:
         44:c9:c7:f1:aa:55:75:1b:29:c4:d8:50:78:04:1d:55:79:59:
         8f:39:2a:a3:c7:4e:38:09:87:dd:64:a0:34:27:0c:d7:b6:a1:
         52:93:a9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:43:59 2025 by rpki-client