Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
File:                     UWKb64D735TtmmQ_14yB2nO2uho.mft (raw, json)
Hash identifier:          xTiMo37Xx90lUhF9urKFuBWzrvMZRqeDLtkPMGxkTzU=
Subject key identifier:   EF:29:5C:14:96:DC:7F:79:7E:5B:D4:91:62:F5:A6:F1:34:15:10:1E
Authority key identifier: 51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A
Certificate issuer:       /CN=A915EAD0/serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
Certificate serial:       0A67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
Manifest number:          0A59
Signing time:             Mon 28 Apr 2025 20:03:08 +0000
Manifest this update:     Mon 28 Apr 2025 20:03:08 +0000
Manifest next update:     Mon 05 May 2025 20:03:08 +0000
Files and hashes:         1: UWKb64D735TtmmQ_14yB2nO2uho.crl (hash: FOVxLIy8M/RpKzZm9XTD5Ik2u0wqGx1ht3wMae4W1s8=)
                          2: 803C622E9B9111EDBC921164C4F9AE02.roa (hash: cOk9WkbMtekpbvbpWoDS8UUpnz2Yuo9L3yfei4T7i14=)
                          3: 7F1EA1189B9111EDBC921164C4F9AE02.roa (hash: B4bAqc6kkR7Hs43c2EHoV92Uje7SlbmocY/IyCwTMEI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl
                          rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:03:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2663 (0xa67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EAD0, serialNumber=51629BEB80FBDF94ED9A643FD78C81DA73B6BA1A
        Validity
            Not Before: Apr 28 20:03:08 2025 GMT
            Not After : May  5 20:03:08 2025 GMT
        Subject: CN=680fdefc-f935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c6:42:a2:05:2d:fd:db:55:c5:38:b2:d7:f0:
                    e6:5d:6c:4e:09:4e:15:e2:cb:a9:10:59:13:f8:ab:
                    9b:5e:fe:54:b6:b1:f9:ed:15:53:a9:1d:a5:db:64:
                    3e:10:25:4c:a0:33:a7:dd:b7:db:c4:e2:68:8b:14:
                    d1:fe:99:1b:7e:6f:bd:85:fd:70:39:67:be:49:3e:
                    ea:fd:06:0a:4e:42:41:1e:ec:70:cd:19:15:07:7e:
                    ef:eb:0c:87:6b:cb:77:e3:6b:c2:7b:d2:1e:a2:5b:
                    34:44:ab:38:33:9e:6d:25:7b:2e:0b:77:ba:00:3c:
                    90:52:af:ca:57:f1:d6:a2:d0:f7:6e:4a:ca:2b:8c:
                    e6:4c:a9:f9:51:41:93:88:fe:3a:26:32:2b:67:8c:
                    21:eb:d4:b8:ba:34:d8:07:cb:3c:15:3e:4d:6b:ae:
                    6e:4b:f7:8e:96:cd:15:9c:81:be:f2:c9:e0:90:1c:
                    7c:1e:a6:01:90:f6:ff:f2:c1:7e:42:c3:e8:98:b6:
                    a7:c3:8e:cf:90:74:e7:de:09:d3:b7:a2:7b:99:39:
                    c6:40:32:47:db:31:91:5e:81:bc:9d:1b:f0:21:c9:
                    79:03:36:ec:4f:f3:f0:1c:24:3c:4c:18:56:dc:a6:
                    56:7e:27:ab:13:36:5e:56:04:7b:47:6a:2a:30:a1:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:29:5C:14:96:DC:7F:79:7E:5B:D4:91:62:F5:A6:F1:34:15:10:1E
            X509v3 Authority Key Identifier:
                keyid:51:62:9B:EB:80:FB:DF:94:ED:9A:64:3F:D7:8C:81:DA:73:B6:BA:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UWKb64D735TtmmQ_14yB2nO2uho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAD0/21FA5B0661EE11EA925D6225C4F9AE02/UWKb64D735TtmmQ_14yB2nO2uho.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:80:74:15:9b:62:92:8f:ce:3d:1a:da:62:08:48:d5:88:1a:
         6a:60:6a:c2:7f:e8:e6:ac:9c:36:d0:83:c2:95:18:c7:88:6a:
         dc:12:1e:2c:b0:c7:cd:88:b3:ab:b3:63:ea:dc:d9:a8:e0:38:
         86:ce:62:a4:a2:30:23:f9:aa:64:b2:c2:35:e0:76:58:d2:3c:
         79:f1:00:67:88:a3:83:0b:eb:0b:ed:1a:07:64:36:69:32:8c:
         e6:e4:44:1a:6c:e3:d0:e1:34:7e:90:8b:fd:36:3f:f3:7d:c1:
         2a:49:72:89:ec:b0:9b:09:a6:12:9f:d1:70:5d:f7:de:0b:c9:
         32:15:0a:97:52:33:40:f7:42:7b:6f:40:0b:b7:93:60:cc:63:
         5c:f3:be:9c:7e:67:e5:a1:5b:c4:5d:8e:cc:e7:ef:79:41:62:
         1e:0f:c8:33:81:2d:1d:95:ea:b5:0f:e4:d7:8a:da:82:22:6c:
         81:44:3b:52:8a:aa:8f:b4:44:f4:36:f6:68:63:b0:5b:f0:61:
         3d:6e:ce:a4:ae:00:4b:f6:f9:1b:37:47:e4:01:31:75:a5:9d:
         12:af:21:bc:c9:22:b0:80:8e:65:cd:2d:a7:50:8f:4a:14:35:
         7b:3f:57:82:3b:9b:db:a0:89:65:16:91:87:a4:ce:18:2e:4c:
         ca:98:e7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:16 2025 by rpki-client on console.sobornost.net