Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
File:                     Ska_UrGTBkf9JbeWkm28YUBL4-0.mft (raw, json)
Hash identifier:          4MuVEbuRVgAcVpW73HBisKCzHy4AMvzT0lPU7Ud2HaM=
Subject key identifier:   B0:47:84:05:27:91:20:12:AE:AD:39:0D:B9:30:8C:80:11:4C:B9:41
Authority key identifier: 4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED
Certificate issuer:       /CN=A91A8859/serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
Certificate serial:       0C39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
Manifest number:          0C31
Signing time:             Thu 24 Apr 2025 18:23:52 +0000
Manifest this update:     Thu 24 Apr 2025 18:23:51 +0000
Manifest next update:     Thu 01 May 2025 18:23:51 +0000
Files and hashes:         1: Ska_UrGTBkf9JbeWkm28YUBL4-0.crl (hash: ifJMHsMC0PvCFGxGhdtmZdibh+OUkvRuBIUR6oT8Ho0=)
                          2: 692ABA5A09DF11EAA6052433C4F9AE02.roa (hash: Ry01yZ5BQjClLdraAGF0vxY6zRTp62DNKwkQE7m6ywY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl
                          rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 18:23:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3129 (0xc39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8859, serialNumber=4A46BF52B1930647FD25B796926DBC61404BE3ED
        Validity
            Not Before: Apr 24 18:23:51 2025 GMT
            Not After : May  1 18:23:51 2025 GMT
        Subject: CN=680a81b7-f8f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2b:ca:a5:89:df:34:02:5f:51:af:ab:4c:c4:
                    b3:c7:7b:5e:c0:a2:84:f1:67:15:6e:66:6c:76:11:
                    2e:59:10:0b:fd:10:1d:c3:2f:a7:12:d3:c9:c6:45:
                    63:ad:ea:42:ae:b2:2c:9e:9e:3a:14:48:68:d9:63:
                    43:fb:67:25:a0:9e:c7:01:17:a0:57:ea:6c:29:15:
                    01:f8:d3:b8:f8:14:c9:29:3c:f1:31:45:54:1c:52:
                    d3:c5:12:5e:82:5d:4c:47:7f:fd:77:20:b2:09:6f:
                    e3:04:28:b0:59:28:03:8f:ad:b4:0e:30:b2:74:fc:
                    dc:20:9e:59:d9:97:29:1b:8b:cd:b6:c2:49:b6:cc:
                    d4:2b:6f:d2:2b:f9:db:50:f2:f4:26:1e:26:8c:13:
                    12:2e:d0:0a:af:c8:9d:85:af:12:5f:69:2c:ae:d1:
                    ea:8a:28:a8:6c:b5:ee:4a:20:20:b7:47:a4:43:55:
                    7c:e5:e8:c1:a4:0f:4a:c4:24:e7:e8:e1:16:e2:df:
                    31:97:9b:7a:60:c5:57:2c:1c:c3:4d:a6:5c:89:cb:
                    7f:d0:9d:dc:ea:40:81:66:f8:f1:b3:da:85:62:4a:
                    03:78:96:97:52:fd:7d:6a:a8:b1:db:86:d9:79:68:
                    63:94:db:7c:90:ee:25:9f:d8:2e:d9:08:02:25:88:
                    c3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:47:84:05:27:91:20:12:AE:AD:39:0D:B9:30:8C:80:11:4C:B9:41
            X509v3 Authority Key Identifier:
                keyid:4A:46:BF:52:B1:93:06:47:FD:25:B7:96:92:6D:BC:61:40:4B:E3:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ska_UrGTBkf9JbeWkm28YUBL4-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8859/8DBD7DBA052711EA8F17C731C4F9AE02/Ska_UrGTBkf9JbeWkm28YUBL4-0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:73:cd:f5:5b:36:b6:50:88:32:2f:e4:5b:cd:88:bc:57:59:
         13:d3:ab:ee:3b:27:a3:ef:6b:ef:11:fd:7b:b3:2c:b0:70:eb:
         f1:b7:1d:bb:0a:0b:f9:60:fd:8d:2d:c5:0b:73:e6:33:1c:bb:
         4e:a0:8b:4a:96:48:42:43:d0:91:26:72:36:22:e0:d3:e9:4a:
         9b:c6:e6:8c:df:a0:b8:de:73:59:c3:bd:bb:57:20:5c:df:c6:
         6c:5f:49:0d:27:74:4e:b0:37:da:aa:95:b8:43:07:56:77:09:
         ea:94:44:2a:f8:4c:38:44:91:1c:85:9d:49:ce:6a:a6:10:4a:
         ee:19:c6:17:4f:df:05:54:4e:5a:19:6d:2c:d3:b1:55:aa:44:
         b3:6a:50:f0:d3:54:8c:51:8d:d7:60:c9:2b:4e:0d:b8:f4:d1:
         d2:3f:ad:d2:f5:1a:83:92:34:56:4d:cc:5e:bc:92:bb:83:28:
         78:30:88:9c:53:c8:0c:02:f8:09:05:d8:c5:3f:59:96:70:71:
         91:ea:4e:17:1e:97:c0:7f:3e:df:44:99:6e:88:0c:3f:74:32:
         fb:f0:a7:16:d3:24:67:b4:44:c0:bb:64:c6:99:60:5f:2b:70:
         e5:41:51:04:a1:b1:e8:d0:6e:b1:d2:9b:26:6b:2a:fd:17:99:
         23:73:e6:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:57:18 2025 by rpki-client