Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
File:                     uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft (raw, json)
Hash identifier:          s0wycaNphYHbDNN6ADfws2e/aqDjynvLJSNKJkUCKUY=
Subject key identifier:   CC:24:FB:14:45:16:BF:A4:C4:B9:D8:64:9B:BE:01:15:6C:14:E1:E0
Authority key identifier: BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44
Certificate issuer:       /CN=A9154388/serialNumber=BB2A0F49321E080B2270BD0C8D9B8D4B793B1044
Certificate serial:       65
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
Manifest number:          65
Signing time:             Sun 27 Apr 2025 05:49:56 +0000
Manifest this update:     Sun 27 Apr 2025 05:49:56 +0000
Manifest next update:     Sun 04 May 2025 05:49:56 +0000
Files and hashes:         1: uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl (hash: bdBkbIQVskskg1LBmmcPDhu9Z/YirfBcsoLaYBfD+Ok=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl
                          rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154388, serialNumber=BB2A0F49321E080B2270BD0C8D9B8D4B793B1044
        Validity
            Not Before: Apr 27 05:49:56 2025 GMT
            Not After : May  4 05:49:56 2025 GMT
        Subject: CN=680dc584-6865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:08:32:e0:e3:46:5b:74:db:47:67:f5:30:
                    d6:d8:df:3f:2a:57:60:65:d3:f9:6b:81:b2:1b:09:
                    0b:aa:b1:2d:6d:96:dd:22:4e:3c:16:6b:7d:7f:2a:
                    e6:1d:1f:c5:f6:29:73:3f:3d:7e:aa:27:2a:dd:bb:
                    47:53:8f:b6:cd:a8:5f:cb:b1:dc:33:e7:13:0d:86:
                    46:71:48:f8:d4:5f:d5:b9:f9:44:31:12:bb:4c:f8:
                    8c:21:dc:e0:73:fa:8e:16:52:5d:68:0f:58:6f:d2:
                    15:40:27:63:0f:b8:8b:bc:02:a7:27:1c:1c:a7:76:
                    e5:4f:a4:aa:20:87:27:36:24:2c:56:fc:3d:de:c9:
                    74:26:e6:a9:f3:48:4d:f6:cb:32:74:49:94:27:aa:
                    2f:1d:59:9d:3a:88:99:57:41:d3:3c:bd:75:f2:89:
                    8d:17:70:42:8f:1a:57:19:5c:15:0c:63:75:73:3d:
                    45:47:5c:73:8a:cb:7b:f0:ee:f1:20:c8:2f:59:bd:
                    08:06:a1:f0:e5:a2:ec:9f:d2:6d:5e:77:3e:bf:57:
                    4e:03:16:cd:62:83:0e:59:35:ce:c9:d9:2d:14:56:
                    66:0b:20:8a:ee:65:36:4d:10:c5:77:f5:99:57:90:
                    ba:a3:4e:12:1f:4e:6b:18:08:84:cd:ed:4d:95:7e:
                    93:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:24:FB:14:45:16:BF:A4:C4:B9:D8:64:9B:BE:01:15:6C:14:E1:E0
            X509v3 Authority Key Identifier:
                keyid:BB:2A:0F:49:32:1E:08:0B:22:70:BD:0C:8D:9B:8D:4B:79:3B:10:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/uyoPSTIeCAsicL0MjZuNS3k7EEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154388/38457CF68C3711EF80901C2EC4F9AE02/uyoPSTIeCAsicL0MjZuNS3k7EEQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:b9:a3:21:d0:4f:a2:21:51:70:9a:8e:aa:6f:a4:3e:f8:b0:
         5e:c0:7e:2b:9f:fd:a1:cc:6c:4d:cd:5d:97:c0:44:d9:2d:76:
         2d:bb:e4:a6:e9:50:f8:5e:b8:b0:8c:55:42:96:11:5a:15:e8:
         d8:17:c5:79:1f:af:44:82:49:b4:fa:e6:11:f6:a7:08:0a:98:
         48:28:76:62:a2:f4:9f:65:1c:80:63:2b:a8:fe:24:96:f0:a6:
         ec:01:6c:cc:ea:d5:59:8f:0e:b6:e9:b3:83:1a:9b:77:8e:8a:
         01:d5:27:da:62:33:03:0c:ce:e5:2a:87:6e:99:ce:02:3a:c1:
         fc:43:6d:c6:d8:5a:cd:17:3f:2f:a2:63:f1:ee:45:bb:05:12:
         ec:8d:ee:57:73:ef:c5:31:0e:8d:09:eb:bf:c0:d1:bf:82:0d:
         63:cf:47:c5:10:2d:cc:b5:92:ce:8c:c3:9a:f8:d9:c3:6c:f4:
         db:c1:c2:35:39:60:e9:cd:70:d2:9f:2f:b0:9f:af:7c:0e:6f:
         b1:d6:0b:6e:31:66:3c:31:6e:2a:78:30:b5:a2:d1:76:cf:4e:
         32:bd:31:0b:ec:9a:0f:7b:e9:ee:a0:70:44:6b:e6:34:21:3d:
         81:97:2a:31:18:e6:b7:71:5b:7b:50:c9:44:de:73:ba:59:af:
         fe:bd:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net