Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
File:                     ueYM8Xn06svblJK6X3ys9FI5zPQ.mft (raw, json)
Hash identifier:          C5jfAv99pu8B7BF+dSTnBWAWEyKdMizPBYS6rjyRe3w=
Subject key identifier:   07:C9:8F:BA:DC:A0:32:2C:8E:74:D4:D9:FF:BB:6E:BA:2F:7A:B6:9E
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
Manifest number:          019D
Signing time:             Fri 25 Apr 2025 03:09:54 +0000
Manifest this update:     Fri 25 Apr 2025 03:09:54 +0000
Manifest next update:     Fri 02 May 2025 03:09:54 +0000
Files and hashes:         1: ueYM8Xn06svblJK6X3ys9FI5zPQ.crl (hash: Bz04vTxFd3xRQdn7qVNPrN/PDEKGDo0kZ2L7nf3yGhI=)
                          2: 7362D03E37C511EFBA013C34C4F9AE02.roa (hash: 9qnuOOqog1w0/6Ft0fo80AwEmtyxbUWJdcXWk0vjBP0=)
                          3: 14C4C7D4002611EFBD462953C4F9AE02.roa (hash: hi6S2Mh9Zc0AeJAKr2eaBvvBpbecYaUaD50MlmI4NaA=)
                          4: D2DF3ACCE25911EF9C741573C4F9AE02.roa (hash: mzsLMpqKZHnpS1jxQCrwB8rjSWZK0J6cgj7y6Sy2ob0=)
                          5: 1DD3ED16BDB611EF8F65515FC4F9AE02.roa (hash: NYziG9pEfTMgU56vyqT4ECUx0+xGwWZL89cQ95occgk=)
                          6: E35133A60ED911EE8A4E0A23C4F9AE02.roa (hash: +LKQHGBjyQavtGbDYZoM0TZlAhYLHnodgT2xhs31P7o=)
                          7: A13BE9EE8EE911EE8698A64FC4F9AE02.roa (hash: BbLe+tzPbnaYWKG7gM1VjEH/wcUFNySxqBWUmVUdKKg=)
                          8: 139300E4BA6911EFA78E2F66C4F9AE02.roa (hash: ewdRPxERVjw1+imIbuRKiOzFgdfb8FXbS7BLrbgntiM=)
                          9: 3F3EDA068CAB11EF8A61C244C4F9AE02.roa (hash: n8rocIcqcCEqWOhQW6COhKUHQ1TT+r5yq9m/cXvntlg=)
                          10: 305C2134666211EFB1D51134C4F9AE02.roa (hash: 678Vn3LLWwx5u4uELhujFENcUsNRng8pzaOjm9n/20Y=)
                          11: AE0A263AB00411EF95939E11C4F9AE02.roa (hash: Hb3S2H5mvG6APMmAW4C0vTeaq85iORr/31KWRV1IZtk=)
                          12: E7DC24BCC4C211EF8670983EC4F9AE02.roa (hash: uEWJ7/SbDN/8MDuGUTA/PUoegQuUTtnZid1qI1+pgB0=)
                          13: 7857C144B87211EE98B04B19C4F9AE02.roa (hash: VfjibvprvBmnfdE90FAhNj0D7QO9B7oG8yc/kCD9FSM=)
                          14: A069EA0C8EE911EE8698A64FC4F9AE02.roa (hash: 1Kpd2YjRlMJbYQzqvODxmlNt6RPiHgoY7Xsf29roK9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:09:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Apr 25 03:09:54 2025 GMT
            Not After : May  2 03:09:54 2025 GMT
        Subject: CN=680afd02-b410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b0:80:a5:3b:e0:f3:de:4d:44:ec:2d:4e:09:
                    f9:19:53:33:61:31:0b:85:aa:73:04:64:e9:d6:c6:
                    ee:90:24:fb:18:7a:76:ef:20:a6:f5:72:54:ef:df:
                    de:00:9c:7c:ab:40:68:02:96:dd:31:83:87:3c:90:
                    ce:3c:7b:e1:d5:bb:c2:1d:c3:39:f5:11:c6:31:4f:
                    25:21:f2:b8:53:d0:fe:e3:46:c5:a4:7b:ed:8b:fe:
                    d6:5d:d8:c9:96:ff:69:92:ba:1a:16:1c:df:78:58:
                    07:36:ba:d7:63:c0:5a:26:35:e3:e0:99:06:b3:f2:
                    be:8f:cf:b2:2e:5a:e9:b9:b8:a7:cd:ab:d1:ba:f1:
                    66:fc:90:95:fd:91:ff:20:e9:9d:49:1d:6c:58:2c:
                    b3:86:26:28:cb:9e:75:ac:d0:1d:3e:e6:65:96:a8:
                    71:52:28:85:98:ff:28:aa:bc:a0:dc:f3:70:35:3a:
                    4e:45:38:d9:f2:b4:b7:29:65:f7:5a:d1:04:21:48:
                    78:78:d7:6f:95:c6:de:9e:09:9f:df:35:33:62:4c:
                    17:8e:81:e2:4c:5f:94:d1:e7:54:da:8e:83:de:f4:
                    c1:9f:e9:09:0d:80:82:43:81:e1:41:a4:ed:cd:2d:
                    a1:ce:91:dd:57:43:df:f1:c7:7a:a0:3a:cf:c9:14:
                    de:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:C9:8F:BA:DC:A0:32:2C:8E:74:D4:D9:FF:BB:6E:BA:2F:7A:B6:9E
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:48:40:51:4f:41:0b:6d:a3:b5:c8:b7:39:b9:2f:e4:fc:59:
         a9:ee:a2:e7:87:e0:ba:da:12:1d:72:5b:f5:36:fe:8e:10:84:
         e3:dc:68:32:6b:46:11:ac:f8:3b:1a:9b:ca:49:05:60:9e:92:
         b8:73:b5:2a:2a:9c:45:c9:7e:55:49:10:80:5a:1f:70:c0:44:
         76:76:43:46:83:67:07:1d:a1:75:5d:bc:44:f8:a4:85:78:59:
         27:68:29:3a:6a:69:bd:70:89:1c:8e:3e:d5:32:6b:f0:47:20:
         55:02:92:4b:b8:1f:63:ae:5b:83:92:1f:6f:43:a0:b2:c1:6b:
         80:b0:b5:b9:2b:97:5f:c0:17:af:21:5a:d7:2f:8e:83:29:c6:
         20:f4:e4:af:a5:b2:5c:71:f5:da:bf:02:b8:a9:72:c7:a8:3d:
         ed:85:97:b8:64:f8:08:32:3b:d8:09:8e:d5:c4:78:6c:8b:1f:
         c4:7d:00:ec:04:42:1b:01:05:3d:57:4f:1f:d6:75:9d:12:89:
         d2:4d:d4:4c:87:7e:13:41:2d:f5:e6:1b:44:5b:db:27:4c:c5:
         b0:17:8c:8a:92:0b:43:3f:cb:c7:25:53:58:6d:a0:0a:74:4b:
         e6:11:0c:4b:0e:ca:c6:5b:52:98:76:06:ea:92:ed:0e:e5:f3:
         8d:11:40:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:32:25 2025 by rpki-client