Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
File:                     0uwHkLxOvTQHyVB05rVrQAA4Eto.mft (raw, json)
Hash identifier:          zvzv5maRlaZNMdtJahhf0P9rpQYAmyCj2wHDN2PtDFw=
Subject key identifier:   AC:90:77:CB:35:A2:6D:95:23:A1:2E:5A:AD:E4:DE:ED:BA:0C:69:C8
Authority key identifier: D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA
Certificate issuer:       /CN=A91D87CF/serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
Certificate serial:       0AD6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
Manifest number:          0ACE
Signing time:             Sat 14 Jun 2025 19:16:48 +0000
Manifest this update:     Sat 14 Jun 2025 19:16:48 +0000
Manifest next update:     Sat 21 Jun 2025 19:16:48 +0000
Files and hashes:         1: 0uwHkLxOvTQHyVB05rVrQAA4Eto.crl (hash: qdYH7cV3G2RUjSrtMoL82u+Vs0W6QoyATqCqmhP3JlE=)
                          2: 5E2A4C584ED911EAA7F1A521C4F9AE02.roa (hash: QAE/MC+xtHDwjDC4We28f6uqNECigc7G6Vc7+DGOZ34=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl
                          rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 19:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2774 (0xad6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D87CF, serialNumber=D2EC0790BC4EBD3407C95074E6B56B40003812DA
        Validity
            Not Before: Jun 14 19:16:48 2025 GMT
            Not After : Jun 21 19:16:48 2025 GMT
        Subject: CN=684dcaa0-7801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:93:07:39:9e:6f:3e:57:8e:7c:1c:6c:c2:fd:
                    c6:84:fd:eb:0d:ff:09:81:31:3c:a8:af:d0:63:f9:
                    ca:ef:8d:88:2c:6d:e0:a0:87:db:db:08:7b:d8:50:
                    bc:72:47:54:63:42:dc:06:57:b4:d8:01:55:6d:51:
                    af:96:9f:22:6e:a9:3c:5c:57:ae:27:89:3c:26:c7:
                    5c:68:27:4a:27:2a:e9:dc:c8:06:df:16:94:3c:73:
                    d9:ed:49:43:88:fe:0e:be:5f:b9:46:46:f4:e4:f0:
                    5d:b9:cf:7d:29:ff:43:0b:b9:00:6a:27:9e:c3:59:
                    08:24:e1:a7:18:17:65:78:3b:70:c1:5f:0f:df:7b:
                    26:70:53:19:cd:14:91:ac:81:62:2a:7e:9c:04:a4:
                    b8:2f:45:22:49:91:04:27:ed:2a:b2:2e:71:9d:fe:
                    72:41:1d:73:04:e1:cc:b7:d5:02:7a:21:9e:99:87:
                    cd:4f:eb:12:4e:0b:27:cb:5f:00:61:1f:7c:86:84:
                    81:cd:b9:3b:54:28:87:ff:95:ab:d4:17:48:35:e7:
                    7f:b8:e5:22:6d:06:d0:2a:f4:41:bb:75:26:a8:aa:
                    df:84:55:30:8f:ed:9d:75:89:b7:ad:64:e3:d1:7a:
                    76:b2:35:34:d2:25:77:39:87:76:b9:b0:35:26:d6:
                    e3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:90:77:CB:35:A2:6D:95:23:A1:2E:5A:AD:E4:DE:ED:BA:0C:69:C8
            X509v3 Authority Key Identifier:
                keyid:D2:EC:07:90:BC:4E:BD:34:07:C9:50:74:E6:B5:6B:40:00:38:12:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0uwHkLxOvTQHyVB05rVrQAA4Eto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D87CF/E685B12A4ED711EA88E6051FC4F9AE02/0uwHkLxOvTQHyVB05rVrQAA4Eto.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3d:12:5c:6e:e2:41:82:d7:f9:5d:64:2a:2a:bb:f5:8e:5f:
         50:6f:0d:e4:c6:80:14:66:c4:df:f8:c0:1f:71:ff:d8:0c:a0:
         57:51:fb:f2:0d:bd:d7:17:bf:52:bd:96:1b:8b:31:bb:16:3e:
         f2:d6:33:f0:c1:ce:20:37:3b:55:52:30:8a:44:56:55:3d:20:
         a3:a7:ca:b7:15:ff:67:64:a6:7e:86:66:e0:8c:6b:cc:24:35:
         be:e2:98:ae:5d:9b:0e:2e:56:f5:47:da:10:9c:8a:56:48:4a:
         36:14:2f:ff:ec:a3:f6:26:71:a0:ba:7e:5f:32:e9:a3:37:62:
         38:9c:e7:9f:f0:85:f2:49:86:66:46:bb:f0:25:ad:33:e3:fa:
         66:71:fa:93:47:e8:87:04:de:48:1c:ee:87:6b:10:6b:37:2a:
         62:0d:e0:9e:d7:75:96:b8:76:12:c1:57:d0:95:f1:e7:4f:5d:
         31:b0:d4:21:bc:3b:08:a0:dd:05:04:dc:79:72:2a:3f:05:4a:
         ab:b1:85:07:4d:9b:7f:64:80:49:6c:06:6e:a4:b7:91:de:a2:
         93:89:3e:38:0b:70:41:af:b1:5e:fa:dc:85:13:1d:09:8c:1f:
         f4:a5:16:f7:1d:70:78:3d:73:97:bf:35:47:95:ec:ed:fa:2e:
         1f:d0:8b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:19:04 2025 by rpki-client