Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
File:                     UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft (raw, json)
Hash identifier:          L06zmjimmlPH1VAWyGL/zVkBzJhU4mML9qw+vFZK4Ko=
Subject key identifier:   7A:FD:7A:87:B8:84:CA:D3:D1:2E:B2:FB:AD:D4:4A:63:8F:84:67:7D
Authority key identifier: 50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C
Certificate issuer:       /CN=A91EEE06/serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
Certificate serial:       0469
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
Manifest number:          0440
Signing time:             Fri 25 Apr 2025 00:07:22 +0000
Manifest this update:     Fri 25 Apr 2025 00:07:22 +0000
Manifest next update:     Fri 02 May 2025 00:07:21 +0000
Files and hashes:         1: UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl (hash: FI66hkV9cwMYzwtqQGiY6p0bbyZDjVxOjIDSJiDPF54=)
                          2: DEBDCECAC2CF11EFA805380FC4F9AE02.roa (hash: eaNFZvdgLDMBAG06T+DPbwJUZEPPcKT9xtvEgKy6kbA=)
                          3: 0294E1EADB0D11EE88489759C4F9AE02.roa (hash: hDxnlutqT9/pJfzJ08YZAIv8bDDIJuJIHzivB3I12dU=)
                          4: 01CF36F2DB0D11EE88489759C4F9AE02.roa (hash: waCwgO5G1eWxvmW8D4proRstxdhAb+1liP0DXd6paFo=)
                          5: 0104D0BADB0D11EE88489759C4F9AE02.roa (hash: LPhjXW7HkqepU7G8SEAF/BpJh0/ofgBAEpXIt/PkqcQ=)
                          6: 71A1BB74759711EFA89BA96BC4F9AE02.roa (hash: 6cUJTPCAVeXzehLIW6gFSNQlXybCjLDilQnNjh4uWfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE06, serialNumber=5073951E5C1582693A87072EE548C65485B05A2C
        Validity
            Not Before: Apr 25 00:07:22 2025 GMT
            Not After : May  2 00:07:21 2025 GMT
        Subject: CN=680ad23a-997c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:f6:22:0c:06:6d:1a:4e:d4:9d:48:bb:83:
                    b6:78:5b:74:c6:46:02:66:44:0b:ad:d2:9e:01:f1:
                    39:b9:ff:81:93:ad:88:95:c9:76:60:b5:ca:d1:8e:
                    dc:5c:95:e5:15:09:d1:71:8c:51:4c:ec:ad:d7:99:
                    b0:bd:1d:a9:82:7d:fc:b8:ce:d9:93:0d:6c:37:14:
                    44:4f:b0:76:9c:b3:75:99:67:43:ac:b8:b6:f0:9d:
                    9b:76:d7:80:72:d3:f5:c8:dd:97:41:15:8d:a4:9e:
                    f8:94:ca:90:5a:d2:ef:a0:23:28:fa:4b:01:d0:bb:
                    22:2e:5e:6b:63:2c:97:ce:22:a3:3c:c1:15:72:1b:
                    71:69:c4:e7:38:3e:fa:46:ce:88:3b:8a:92:3d:4c:
                    ab:1a:3f:91:a0:4b:35:31:ce:fd:ef:c4:9b:53:99:
                    89:48:39:53:3a:21:53:e7:1c:db:2c:f1:e2:b6:93:
                    ad:56:ba:05:4d:dd:d2:13:5c:db:41:8d:f1:cb:a3:
                    b6:ea:1c:65:7c:e4:ac:9b:83:08:14:71:9c:97:63:
                    c1:1c:ea:cf:ec:fb:60:71:86:ba:d8:7e:16:1b:ec:
                    9f:8a:b3:70:18:ae:50:49:df:fb:33:d8:40:4b:22:
                    19:0b:5d:db:87:5c:28:72:c0:b0:39:e9:40:fb:5c:
                    ce:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FD:7A:87:B8:84:CA:D3:D1:2E:B2:FB:AD:D4:4A:63:8F:84:67:7D
            X509v3 Authority Key Identifier:
                keyid:50:73:95:1E:5C:15:82:69:3A:87:07:2E:E5:48:C6:54:85:B0:5A:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHOVHlwVgmk6hwcu5UjGVIWwWiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE06/0559EEAE5CBE11ECB273DC7CC4F9AE02/UHOVHlwVgmk6hwcu5UjGVIWwWiw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:83:21:71:3f:6e:07:c9:d9:a6:c4:3e:58:d0:56:ad:18:b0:
         92:c5:04:9f:99:d0:08:51:21:53:28:74:7b:2c:ef:aa:ad:a0:
         f6:4a:21:c0:d9:ea:53:95:e4:5d:8f:0d:dc:6a:17:89:6e:ef:
         2a:02:8d:33:b3:87:50:04:81:0d:c3:c1:f3:a0:f9:88:3c:6f:
         25:2c:98:e3:1e:f7:29:65:ac:90:4c:03:1f:48:b1:17:58:a3:
         c1:04:3d:e1:49:d4:7e:76:bd:5b:ef:6a:47:6b:02:3b:08:0a:
         6b:65:45:06:3e:d6:86:92:49:cc:69:32:87:2b:f2:d7:e6:81:
         63:79:42:44:15:ac:41:7a:79:6f:41:f2:3c:72:a1:a5:a9:d0:
         0d:ec:ea:71:f8:e9:b6:55:f1:fb:ed:b8:7e:98:b8:e8:02:9a:
         e7:0b:5a:b1:61:cf:c7:bc:36:98:79:86:2e:ba:c1:fe:ad:b2:
         fa:3f:38:96:e1:dd:a3:de:03:5e:0e:d7:1b:ea:2a:85:f1:a3:
         45:76:3d:b8:d0:bc:60:57:eb:c1:f0:0c:2e:e2:6a:ea:b4:d1:
         cd:80:9b:60:cd:cf:f0:d8:42:91:1d:67:bf:d6:76:bf:5c:fa:
         60:34:ce:9d:a1:a4:7c:51:f6:60:47:41:53:9e:d5:87:55:2d:
         80:47:79:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:38:38 2025 by rpki-client