Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft
File:                     aUugcLYm4WhY1mDyEg50tvw_cuw.mft (raw, json)
Hash identifier:          GDOh1a5Tv3PceEpAEq175gwQznluvOiHhtMYTfIqJDc=
Subject key identifier:   46:8A:BB:F6:DE:51:8B:F8:9E:F3:7C:81:97:E8:27:D6:CB:07:24:F5
Authority key identifier: 69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC
Certificate issuer:       /CN=A91C7426/serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC
Certificate serial:       3471
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft
Manifest number:          3471
Signing time:             Thu 24 Apr 2025 15:06:23 +0000
Manifest this update:     Thu 24 Apr 2025 15:06:22 +0000
Manifest next update:     Thu 01 May 2025 15:06:22 +0000
Files and hashes:         1: aUugcLYm4WhY1mDyEg50tvw_cuw.crl (hash: lqGyHMZ8ZODUWw2T3vdPJRB/9RLmn8z+j5c34v1mM+o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl
                          rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13425 (0x3471)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7426, serialNumber=694BA070B626E16858D660F2120E74B6FC3F72EC
        Validity
            Not Before: Apr 24 15:06:22 2025 GMT
            Not After : May  1 15:06:22 2025 GMT
        Subject: CN=680a536f-ec44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:94:59:bf:ae:87:da:e8:86:8c:2e:74:ed:d2:
                    40:b4:52:20:a9:02:f2:ed:9a:80:c1:f6:29:7b:48:
                    98:16:1c:21:5c:54:65:96:2c:ce:12:3c:c9:7d:33:
                    2c:d0:cf:07:ff:1b:9e:cc:12:49:68:f0:6b:ed:6e:
                    95:98:74:7a:3e:90:d0:60:45:d7:1b:cd:63:2c:c9:
                    a2:e1:b3:41:11:42:41:82:29:8f:f5:63:d9:15:d7:
                    6b:44:fc:db:62:e2:56:e1:f7:f1:09:04:5e:15:37:
                    0d:6f:4e:b1:3d:26:3b:a2:13:3f:2c:96:e5:49:39:
                    d2:4a:9c:0a:c9:a5:f2:fa:8f:d8:02:ee:2c:2d:cb:
                    24:bd:68:94:1f:9d:6a:4f:d0:b1:10:39:cd:44:7d:
                    30:43:90:54:33:aa:c1:b7:ac:a3:54:96:cc:89:d8:
                    e1:ce:dd:1f:17:08:1a:67:28:37:4b:38:4f:c5:34:
                    d0:96:4e:66:8b:ae:93:73:97:62:e0:2c:60:f7:af:
                    ba:dc:da:ba:f2:22:13:20:e1:6f:a7:b5:23:18:c5:
                    99:6a:90:ac:e5:b2:54:2f:95:b2:4b:11:a3:60:82:
                    b3:77:73:c3:27:04:ee:8e:28:12:7c:62:ef:b0:1b:
                    5c:65:4b:11:fb:e0:57:16:63:31:69:7d:85:2d:ab:
                    b6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8A:BB:F6:DE:51:8B:F8:9E:F3:7C:81:97:E8:27:D6:CB:07:24:F5
            X509v3 Authority Key Identifier:
                keyid:69:4B:A0:70:B6:26:E1:68:58:D6:60:F2:12:0E:74:B6:FC:3F:72:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUugcLYm4WhY1mDyEg50tvw_cuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7426/2128796C1DA211E28F51D29408B02CD2/aUugcLYm4WhY1mDyEg50tvw_cuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:eb:0a:da:29:44:13:25:99:d7:c3:42:67:3f:17:ab:96:05:
         c3:11:f5:e3:98:dc:22:93:3a:82:91:2d:07:9a:fd:a1:52:23:
         90:91:dc:c7:8d:d1:35:c7:7d:5f:1a:ec:9b:46:90:f7:87:13:
         41:10:12:e2:ec:27:31:c5:7c:03:67:d9:2f:dc:97:02:40:56:
         e1:2a:db:29:a9:5b:d2:05:33:45:65:4c:f1:8f:0c:f0:1e:37:
         e9:32:68:8f:a1:c6:19:11:2b:9a:f5:80:d0:28:c2:58:60:50:
         19:2b:1e:76:41:e1:5b:7e:89:0f:4f:cc:27:9e:56:36:0f:8b:
         73:97:35:eb:72:97:8d:33:c6:8b:44:9b:d9:29:d1:c1:db:02:
         f1:b9:06:cd:14:26:ce:2e:d7:f0:69:84:d2:40:17:e5:88:90:
         9f:cd:b2:d3:88:1f:66:37:14:ee:8e:84:a5:7c:e8:43:1e:df:
         63:23:a6:cf:97:8f:36:7a:a7:90:63:39:c6:6d:4e:dc:76:15:
         1e:12:e5:7e:47:fb:46:4d:77:bf:4d:85:a9:7b:b5:3f:8e:4f:
         6d:9f:91:23:2f:3a:7a:5a:9f:6d:b0:22:67:9c:f3:a5:18:c7:
         3e:ed:1c:a5:b4:a2:c4:9b:ff:c3:e4:6a:b5:d0:8c:10:50:d3:
         19:a1:02:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:15:38 2025 by rpki-client