Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
File:                     uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft (raw, json)
Hash identifier:          iaWywLSo/JC9TfKn/pMJyrlU6//RVBlhIGQMl8luzQs=
Subject key identifier:   E0:02:DF:83:5F:ED:D2:45:B9:66:B6:F9:12:1A:12:2F:B8:F0:79:F1
Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36
Certificate issuer:       /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
Manifest number:          5B
Signing time:             Sun 27 Apr 2025 06:02:30 +0000
Manifest this update:     Sun 27 Apr 2025 06:02:30 +0000
Manifest next update:     Sun 04 May 2025 06:02:30 +0000
Files and hashes:         1: uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl (hash: BTxA6ZjPRC566v0NVa3ibvKDfK5atVKvipZm9742SgE=)
                          2: B035E67615D311F09BAD2971C4F9AE02.roa (hash: m6K1ejQzgZZN/JIHhR+mHfBRgRA0KhwEs/admphjKvc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl
                          rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
        Validity
            Not Before: Apr 27 06:02:30 2025 GMT
            Not After : May  4 06:02:30 2025 GMT
        Subject: CN=680dc876-c7de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:66:56:72:b8:49:ff:e7:61:58:f8:4f:ee:6f:
                    c1:fb:a9:72:3b:21:a4:61:3e:1d:1b:26:49:b9:96:
                    87:42:f0:dc:48:72:b4:a4:ed:86:2e:08:e3:8c:b4:
                    75:cc:32:e6:66:6d:ce:a3:c3:77:ba:50:ef:2e:44:
                    ce:e4:6e:f3:95:a3:91:86:a7:78:ea:6c:23:b8:32:
                    4c:52:b4:bd:ec:f0:12:02:60:82:17:fa:f3:35:35:
                    43:0a:43:63:d2:2a:7f:50:78:c1:9b:54:9f:97:d4:
                    db:d5:31:e1:79:76:ee:e1:3d:0f:91:66:23:3a:ca:
                    58:82:29:59:98:66:57:39:59:9d:9c:f5:e4:c8:06:
                    b3:dc:61:34:cd:f5:98:93:e2:ac:90:fa:ce:9c:ce:
                    18:c3:77:29:1d:e2:a5:bf:76:c6:57:df:b5:75:b3:
                    e0:c7:61:4f:a1:f6:82:91:f6:a1:f8:a4:cf:89:69:
                    79:fb:f0:c5:e4:03:14:90:98:3d:0a:de:d0:32:e5:
                    d3:5b:38:75:de:f6:87:21:9e:47:59:c3:c3:3a:d3:
                    25:e2:34:f7:0b:09:73:ec:8e:bc:42:ea:16:43:80:
                    1a:30:59:b7:b9:2d:ee:6e:e7:1b:16:52:cb:1e:54:
                    91:a1:7a:2f:38:36:f8:1a:fc:7a:45:69:8d:c4:6f:
                    4a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:02:DF:83:5F:ED:D2:45:B9:66:B6:F9:12:1A:12:2F:B8:F0:79:F1
            X509v3 Authority Key Identifier:
                keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:cb:d2:2b:b0:f0:22:e2:d8:6f:c5:e6:d8:b4:ec:f1:ba:0e:
         17:53:24:86:97:0f:33:12:08:a5:56:a8:c8:6f:9c:27:a3:20:
         b9:b0:bb:3a:47:6a:de:49:62:bf:79:a0:d4:10:72:3b:5b:e5:
         19:75:18:04:e0:4e:1a:3c:4e:57:5d:47:05:14:49:8b:63:1b:
         dd:68:c6:6d:03:d6:94:b6:9e:a8:eb:aa:83:5d:9e:f0:74:f2:
         31:dd:52:40:06:e8:62:54:f8:1e:01:5a:ab:19:64:c6:16:d8:
         df:0d:9e:44:67:9e:53:bd:73:32:f8:ff:7f:de:0d:0f:47:26:
         27:35:56:cb:2f:47:fc:7b:0c:bf:bd:de:99:44:86:c3:fd:61:
         aa:c9:7a:52:0a:f9:1b:79:51:e6:8e:09:6f:36:99:30:27:d5:
         a3:c4:3f:3d:86:79:5b:8d:fe:17:7c:54:a3:7c:9b:78:0e:bb:
         1d:f0:d8:66:c8:8b:a6:80:00:4f:27:a5:76:b1:a9:90:3b:63:
         99:b5:8d:86:26:09:30:04:f9:d8:15:84:90:37:a8:56:69:4c:
         f6:94:48:69:12:d9:e4:11:a8:b8:2b:1e:04:1e:e1:ba:ed:5f:
         67:a7:11:c0:76:e2:d7:29:c4:6b:25:58:d4:4b:d6:66:7a:09:
         31:29:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net