Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
File:                     uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json)
Hash identifier:          iiY1pYpIkL1y7lXEnFB3KBVOsjVq0nyDfuN92XMXvTY=
Subject key identifier:   6A:93:65:81:4D:A7:C5:07:8C:DA:1C:86:61:C2:CA:88:08:A9:46:1E
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Certificate issuer:       /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial:       0368
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
Manifest number:          0359
Signing time:             Sun 15 Jun 2025 00:42:32 +0000
Manifest this update:     Sun 15 Jun 2025 00:42:31 +0000
Manifest next update:     Sun 22 Jun 2025 00:42:31 +0000
Files and hashes:         1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: Pzh1rLLcXSU341oWKHbEiwbjPZsNVvM8caDNuR/O/8U=)
                          2: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: F6jPBh9YlNU7RVZYywXLeNlWgnFuc8x8f5OICDCdyXk=)
                          3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: 2CbWH78pD8qfhUqfDIT0bY8YAkS+SCmh9qliGFNOvyU=)
                          4: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: vsntEPAhq1q52SAuxi87DOT8T6ZFM5p3hlzlxYIzgx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
                          rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 00:42:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872 (0x368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
        Validity
            Not Before: Jun 15 00:42:31 2025 GMT
            Not After : Jun 22 00:42:31 2025 GMT
        Subject: CN=684e16f7-2b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e0:76:d3:4a:5f:8b:69:64:58:97:5d:c7:d8:
                    55:fd:3c:01:cf:c7:1e:9e:d8:45:58:59:a6:2c:af:
                    22:d3:69:e8:c0:69:05:6e:72:9c:63:05:bd:cf:db:
                    8f:98:7f:f5:34:11:a4:f2:7b:8b:53:fc:75:4d:65:
                    b8:f3:27:a0:f1:bf:88:5b:d5:50:6f:8d:15:c4:86:
                    6e:9e:57:56:0c:59:48:f3:20:58:05:ec:b5:08:35:
                    36:15:93:74:40:51:b5:c5:a1:e7:b5:27:3c:b7:14:
                    a6:5a:3d:e2:98:2f:71:e4:e8:83:d4:27:6d:43:2a:
                    de:93:75:d5:e9:62:ef:1d:37:3e:b3:61:0d:71:93:
                    35:b8:e7:ba:41:8a:15:e6:e1:f4:22:d8:bf:04:11:
                    1a:5e:f1:0b:97:46:4c:4f:14:8e:12:f0:a8:8b:21:
                    52:d6:1c:0e:ce:a0:13:1f:f6:bd:90:34:e7:e8:da:
                    d3:c0:0a:f9:ae:0c:1c:20:0c:18:cd:ee:8f:dd:42:
                    36:c5:cf:74:41:d3:ad:8f:f2:be:e4:f6:6b:e9:8b:
                    c3:bf:db:6a:29:de:df:1c:95:f5:1e:81:d8:29:02:
                    1c:ff:b4:7c:34:a0:bf:6e:97:84:1b:31:f7:69:bd:
                    bb:c6:19:23:8c:a2:b7:38:ff:ba:b0:0b:30:6b:32:
                    fc:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:93:65:81:4D:A7:C5:07:8C:DA:1C:86:61:C2:CA:88:08:A9:46:1E
            X509v3 Authority Key Identifier:
                keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:ea:c2:da:69:68:19:07:7a:03:bf:8a:76:35:f9:81:7c:7b:
         50:c2:0b:e0:5b:29:70:3d:c0:9d:ca:0a:1d:02:11:e6:09:de:
         27:53:67:09:10:01:b6:bd:01:88:63:fb:15:98:50:32:7a:b2:
         37:ca:69:f5:83:39:bb:dd:97:a0:05:c1:17:22:23:ee:7a:ff:
         1f:95:f5:2f:e1:33:ab:97:de:5e:30:ce:53:08:9d:03:79:21:
         0c:2b:87:4f:a7:0b:c7:14:02:fa:d2:68:b1:c8:7b:92:cf:fd:
         82:28:83:8d:93:d7:b2:88:ec:d5:db:8f:55:31:ed:6c:0c:12:
         79:db:1b:ec:64:09:e2:fc:f7:d9:60:da:35:2d:d7:33:3f:41:
         87:94:5d:b1:c2:0d:d2:5a:8a:33:fa:eb:db:21:ff:05:ed:aa:
         82:47:eb:23:ba:e5:54:6f:ef:0a:f5:dd:3f:5e:f9:19:f3:c4:
         6b:39:da:51:ef:09:ee:1e:f5:bd:2d:81:74:53:a3:67:58:60:
         76:9c:d1:83:80:39:da:79:61:c0:55:0f:89:c0:d2:ef:70:fc:
         f9:49:cd:a8:d3:f0:a2:d3:95:a6:a8:f2:60:c9:41:85:46:d4:
         7b:ac:47:3b:8a:57:7d:b0:7b:5f:e8:ac:7d:ac:c1:41:d6:cb:
         25:9b:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:44:02 2025 by rpki-client