Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
File:                     uwO40kR--BOjepWHdmoB9zWd10A.mft (raw, json)
Hash identifier:          Qdk2hGhDwEzkfPuwHA49FpocZpQbt7trHfEGkzRVJpo=
Subject key identifier:   0C:3B:8D:79:58:75:94:5B:96:95:F9:97:21:B4:DB:CF:2B:D8:48:62
Authority key identifier: BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40
Certificate issuer:       /CN=A91D2779/serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
Certificate serial:       07A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
Manifest number:          0789
Signing time:             Wed 18 Jun 2025 21:19:59 +0000
Manifest this update:     Wed 18 Jun 2025 21:19:58 +0000
Manifest next update:     Wed 25 Jun 2025 21:19:58 +0000
Files and hashes:         1: uwO40kR--BOjepWHdmoB9zWd10A.crl (hash: kR9ZgT6EYMd3CfGBqte7E1ds7YtCmrSMOXA/hZaE168=)
                          2: 33284BD019C311EBB9C1D063C4F9AE02.roa (hash: TqtodbfH2773RSeSZS8HBt7Fg3MhzGZkdJHAeKBdxNI=)
                          3: 99DF3B20183A11EBB9F78E80C4F9AE02.roa (hash: E+nOxjyrsiWeh2pSdTI7eBtCxdY2UG5bXebW7kl/SNQ=)
                          4: 991F1FE8183A11EBB9F78E80C4F9AE02.roa (hash: WdQW9sjBymvB0klEN4W168ArFaUHAakmSi85CGroy+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl
                          rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 20:52:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1960 (0x7a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2779, serialNumber=BB03B8D2447EF813A37A9587766A01F7359DD740
        Validity
            Not Before: Jun 18 21:19:58 2025 GMT
            Not After : Jun 25 21:19:58 2025 GMT
        Subject: CN=68532d7e-2828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ad:45:d7:d7:58:7c:64:36:9f:e4:a3:6e:f0:
                    a7:02:0a:ff:e2:d7:57:7d:c7:ec:9c:8c:35:a2:de:
                    eb:8c:52:e0:f4:7c:be:45:e8:3c:da:83:d1:39:00:
                    08:99:3d:0e:64:38:b4:7b:7e:ca:e1:7a:2e:06:0c:
                    c9:95:b9:64:a2:e2:af:d1:9a:00:14:96:f3:42:9b:
                    e0:3a:f5:5d:70:7b:c3:5b:eb:58:56:b1:43:f3:99:
                    e0:be:5e:8a:b1:52:82:8c:ab:1d:0a:87:13:99:01:
                    5c:e8:4f:a1:13:01:0f:12:5d:c1:06:b6:8c:4c:49:
                    40:6f:95:62:6c:e5:61:d7:80:28:61:eb:23:1a:73:
                    1a:78:ad:34:66:4a:48:41:2a:c1:7d:57:a6:a6:9a:
                    81:50:5b:2d:df:fa:17:ac:dd:21:af:9f:23:1a:38:
                    e2:56:55:ec:0f:ce:2c:21:3f:c7:61:2f:7c:64:8b:
                    a8:94:26:ca:07:de:aa:e3:b6:9e:71:a6:f8:d5:97:
                    13:1e:11:0f:23:ba:6f:c1:d0:42:37:52:01:bd:2d:
                    9c:f8:54:35:66:5e:1f:e1:26:58:ad:f6:df:bf:6c:
                    71:e9:b0:38:c9:ee:63:cb:3e:b0:fc:26:66:0e:fe:
                    dd:d2:d6:e7:22:cb:e3:74:82:56:36:da:4b:54:f3:
                    77:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3B:8D:79:58:75:94:5B:96:95:F9:97:21:B4:DB:CF:2B:D8:48:62
            X509v3 Authority Key Identifier:
                keyid:BB:03:B8:D2:44:7E:F8:13:A3:7A:95:87:76:6A:01:F7:35:9D:D7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uwO40kR--BOjepWHdmoB9zWd10A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2779/89024994183711EB8064B07AC4F9AE02/uwO40kR--BOjepWHdmoB9zWd10A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:6f:bb:3f:35:30:17:af:35:aa:11:39:9d:1c:b5:a4:92:37:
         ce:51:eb:6b:1d:95:6d:3e:cb:10:54:ce:94:32:d6:8a:58:ec:
         c0:62:24:f7:0c:7b:89:0c:df:24:d0:cb:a7:b0:8d:da:3d:74:
         3f:4d:d5:f4:d6:93:f8:65:92:ac:91:a1:d8:24:75:03:d4:83:
         aa:df:81:cb:6e:f9:b8:48:27:c8:b1:d5:8a:0b:cc:22:73:d5:
         90:5a:ea:7b:93:30:07:67:c4:03:8c:d6:73:fc:2c:40:8a:8b:
         b3:72:ca:ad:17:eb:f4:d9:52:f1:8d:ef:45:2f:5c:44:bb:bb:
         09:ad:78:f7:0f:6d:97:58:4a:40:d3:f8:1b:5a:10:f8:2b:7a:
         2e:7f:44:d7:d4:b8:04:56:89:e1:0f:4a:be:dd:88:09:43:b7:
         97:7c:bd:e1:38:b5:3f:59:51:1d:68:13:77:44:6f:e1:3c:03:
         93:82:58:34:ea:b1:94:73:98:6a:a4:10:a1:87:77:a7:4b:08:
         67:34:b2:d4:3e:b3:15:42:09:9a:ef:6a:05:2f:fc:02:ed:ec:
         fe:52:e7:a2:57:df:9f:bf:e4:b2:87:c9:6e:62:1e:cf:4d:0e:
         44:16:80:0f:33:f6:a8:b2:40:0a:bd:f3:29:de:cc:21:75:42:
         bd:37:8f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:19:41 2025 by rpki-client