Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File:                     uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier:          Z9HWRm53/ZPouzUeswITl6lfEzdto7uZs5n1CBNjG24=
Subject key identifier:   65:F9:60:BA:B5:AB:84:F4:85:01:3B:26:37:A3:A7:B9:28:2B:C4:C5
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer:       /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number:          87
Signing time:             Fri 25 Apr 2025 05:36:21 +0000
Manifest this update:     Fri 25 Apr 2025 05:36:20 +0000
Manifest next update:     Fri 02 May 2025 05:36:20 +0000
Files and hashes:         1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: CFMPyY6x2SuxZdip+m0h1IkRI1rk1clAcpGGKL0cCZY=)
                          2: 081FECF0FFB911EF955BB727C4F9AE02.roa (hash: i9koQs5gzKTA12WO2nbLKOn7G+eGstWSVbsuRXzqo6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
                          rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
        Validity
            Not Before: Apr 25 05:36:20 2025 GMT
            Not After : May  2 05:36:20 2025 GMT
        Subject: CN=680b1f55-1d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:44:f0:18:3f:24:63:0f:96:37:20:54:92:90:
                    8f:07:79:01:26:93:24:cc:e9:b6:aa:ba:79:7c:07:
                    7a:a3:ad:31:77:92:b5:ee:d5:47:8d:11:ec:dd:eb:
                    b6:6a:18:d4:2b:83:5a:4d:f0:ef:b4:27:af:d7:d3:
                    5b:48:70:67:a1:52:9d:a6:a7:65:75:51:f1:17:9e:
                    d2:de:d3:ca:e4:01:71:2b:55:cd:1b:d8:23:eb:e5:
                    98:a1:18:f7:a1:4d:ae:a0:a3:d2:50:20:63:11:70:
                    27:a2:1c:13:cd:ab:7d:e2:e1:41:9e:c7:5a:16:99:
                    ff:73:40:8b:04:c4:fe:e8:a1:f5:05:4d:e9:7f:57:
                    d3:0f:1d:d0:ea:49:b7:a4:a1:36:04:f1:ae:5e:93:
                    9e:e1:08:ee:42:ae:ae:fc:ba:36:a3:61:08:a1:99:
                    bc:26:31:0e:ca:2d:de:ef:c2:2c:b0:67:e5:4f:da:
                    24:b6:cc:d5:80:96:81:76:58:67:36:28:8e:ae:5f:
                    22:6f:c3:7e:e6:aa:85:9a:27:b0:20:83:96:f7:0b:
                    be:29:40:67:81:f4:19:7b:43:28:ec:e0:e6:87:32:
                    d4:46:17:5b:58:74:77:74:8a:a0:0d:91:9d:28:ab:
                    3e:1e:02:b5:38:15:e3:0b:af:ef:b2:7c:96:60:58:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F9:60:BA:B5:AB:84:F4:85:01:3B:26:37:A3:A7:B9:28:2B:C4:C5
            X509v3 Authority Key Identifier:
                keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:83:e1:ea:a7:ec:b8:60:08:97:99:8b:08:7b:a2:e9:26:b3:
         1a:3f:65:9e:0b:c5:21:11:e0:30:48:1c:fb:85:05:5d:64:72:
         7c:89:44:1a:75:5a:51:29:e0:42:e1:68:8a:6e:a7:f5:fc:ad:
         a3:fb:4e:63:57:92:0d:f0:63:26:12:00:62:8a:e6:14:9b:8a:
         4f:bc:10:81:65:63:0e:c6:4e:95:26:57:56:0f:d1:03:48:e0:
         9b:2f:b0:f4:98:27:63:13:47:78:15:88:48:5f:56:1a:87:e0:
         02:77:c1:b2:6a:36:c2:11:c9:3e:6b:b3:73:85:4f:28:f8:65:
         ae:79:29:99:fb:6b:07:6d:ce:e1:87:f4:d2:d0:a2:d4:e4:a8:
         41:84:18:43:e9:82:89:ae:b2:00:a4:f6:e0:54:c0:0e:17:70:
         be:dc:4b:82:de:2b:50:71:60:24:3f:1c:0a:aa:1c:74:2c:9e:
         e0:f1:8d:42:4f:af:27:91:88:11:c6:ae:5e:87:97:a2:ca:95:
         a6:76:12:02:d6:91:6a:41:74:25:1f:78:ec:7a:a7:57:a5:4d:
         69:26:87:a9:dd:3f:b1:2c:9c:02:9c:93:c2:5b:cc:d3:48:07:
         12:6d:96:39:24:29:d9:54:52:1c:c6:9b:1d:1d:60:8e:0d:8a:
         58:28:bf:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:03:21 2025 by rpki-client