Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File:                     uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier:          o+IfoK+MhPTH3lkV5D/RhwuZgceb/kR9IB17ZW5b1NE=
Subject key identifier:   19:BA:57:DA:99:82:4B:A1:E5:EB:6A:30:19:AD:79:0B:BE:E4:65:F0
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer:       /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial:       07E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number:          07CE
Signing time:             Sat 26 Apr 2025 20:49:54 +0000
Manifest this update:     Sat 26 Apr 2025 20:49:53 +0000
Manifest next update:     Sat 03 May 2025 20:49:53 +0000
Files and hashes:         1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: Vh/Km34rsAtcRNAhwCGqcL0w7MXmkQr1F0jHdmxZilw=)
                          2: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: r8A/94ghc8/XPx2goFiqLMeQN6YHcN5iJvMsFi80QDA=)
                          3: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: mT5QuDERTmVPlXZR5moXPT7cKPExBS2mAmCXS/H0poY=)
                          4: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XvMq/9vITeOjRr0vA0uouJy5AhVhjzN8FwnxzNY6RG4=)
                          5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: T7wBB0Q/OxACrFHdpRUHNW4aCrfVBO0wryHpyaFwA8M=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
                          rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2024 (0x7e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
        Validity
            Not Before: Apr 26 20:49:53 2025 GMT
            Not After : May  3 20:49:53 2025 GMT
        Subject: CN=680d46f2-956b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:99:68:a6:eb:39:25:54:98:d8:08:18:ac:
                    74:70:d4:87:30:f2:e1:b2:b6:2e:d9:dc:84:39:83:
                    53:1b:ab:65:44:89:0d:13:7a:6f:ed:48:49:48:c9:
                    8e:8d:f3:79:ce:6f:36:ab:27:04:2c:83:b5:9e:cb:
                    cb:41:2c:ce:70:dd:d4:80:12:35:08:ab:ce:3f:61:
                    2d:0e:84:ba:c2:37:07:4a:bd:0f:00:e6:00:5c:04:
                    df:98:30:f1:55:9e:84:68:8a:dc:fe:bf:c5:7a:ae:
                    6c:79:e2:19:9c:a0:83:7c:68:00:b4:8d:ff:72:9f:
                    88:7b:d1:b8:2d:d5:4f:0c:b9:ce:ce:84:e1:ec:51:
                    6b:a1:2c:4b:a5:9b:2f:16:13:41:9d:f0:a2:59:73:
                    ca:1d:0d:48:0e:88:3a:ad:7c:1c:75:7e:5a:63:b5:
                    b0:a7:8f:f0:c2:70:49:6b:45:6f:41:e0:fc:c1:91:
                    db:bc:de:0c:0d:cb:4c:2a:07:ef:b9:6c:a5:8d:2e:
                    bb:ed:13:b7:16:09:03:d0:36:b0:a4:32:cf:b9:52:
                    de:51:0f:c9:c7:1c:ae:05:7a:4c:f8:30:81:a0:d1:
                    43:ba:d4:52:51:ed:13:d2:d2:41:24:92:34:fd:77:
                    37:95:6f:fe:d9:4f:77:c4:a7:ba:a4:58:af:ad:fa:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BA:57:DA:99:82:4B:A1:E5:EB:6A:30:19:AD:79:0B:BE:E4:65:F0
            X509v3 Authority Key Identifier:
                keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:47:12:06:12:8f:bf:10:31:fa:3d:01:b6:54:a9:7a:96:17:
         bd:09:f2:fc:8c:6b:44:c0:c6:ef:e9:c0:46:0e:74:d5:af:c2:
         65:66:c8:31:29:2a:08:f1:ab:f7:d9:28:72:c0:dd:b7:d8:a2:
         9b:80:24:11:32:4c:40:99:09:1a:7f:bd:4e:ab:48:16:cb:09:
         74:0c:c0:2c:a1:a3:6e:85:2b:55:f9:7c:67:34:3a:f2:f2:36:
         aa:26:c8:9b:25:e1:58:e2:7f:bd:93:a7:58:62:aa:19:e2:07:
         43:a1:a3:ba:26:77:18:2e:56:aa:e6:6f:cb:9a:22:a8:cf:27:
         00:ad:99:86:06:7a:bc:49:34:17:65:31:64:f4:23:07:a6:45:
         fc:64:a1:19:d8:2a:e4:47:58:6d:29:5b:e9:83:df:8f:cf:2a:
         53:24:4a:31:1d:66:aa:52:e1:46:44:fa:33:b7:79:a1:70:f9:
         80:20:fa:9f:46:16:97:80:2b:38:90:fa:fd:19:8d:df:48:3b:
         3d:f8:18:59:c4:92:30:65:5d:fe:e8:4c:15:41:40:01:01:b2:
         d2:bf:8b:9d:86:77:91:b0:79:0b:1e:d2:a8:cf:e5:42:53:f2:
         56:5a:31:0f:e4:01:80:75:1a:e1:7e:85:04:65:3e:59:e3:99:
         5e:7c:c7:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUU4M0IxMTAvBgNVBAUTKEI4QTYyQ0YxREU4QjI2MkUxNDczN0Q5M0VFM0U2RjM2
QzNBMEUxQzkwHhcNMjUwNDI2MjA0OTUzWhcNMjUwNTAzMjA0OTUzWjAYMRYwFAYD
VQQDEw02ODBkNDZmMi05NTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuCmZaKbrOSVUmNgIGKx0cNSHMPLhsrYu2dyEOYNTG6tlRIkNE3pv7UhJSMmO
jfN5zm82qycELIO1nsvLQSzOcN3UgBI1CKvOP2EtDoS6wjcHSr0PAOYAXATfmDDx
VZ6EaIrc/r/Feq5seeIZnKCDfGgAtI3/cp+Ie9G4LdVPDLnOzoTh7FFroSxLpZsv
FhNBnfCiWXPKHQ1IDog6rXwcdX5aY7Wwp4/wwnBJa0VvQeD8wZHbvN4MDctMKgfv
uWyljS677RO3FgkD0DawpDLPuVLeUQ/JxxyuBXpM+DCBoNFDutRSUe0T0tJBJJI0
/Xc3lW/+2U93xKe6pFivrfrzQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBm6V9qZ
gkuh5etqMBmteQu+5GXwMB8GA1UdIwQYMBaAFLimLPHeiyYuFHN9k+4+bzbDoOHJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTgzQi83OTJEMTQ4QUYy
ODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEppNFVjMzJUN2o1dk5zT2c0
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VLWXM4ZDZMSmk0VWMzMlQ3ajV2TnNPZzRjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RTgzQi83OTJEMTQ4QUYyODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEpp
NFVjMzJUN2o1dk5zT2c0Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBbRxIGEo+/EDH6PQG2VKl6lhe9CfL8jGtEwMbv6cBGDnTVr8JlZsgx
KSoI8av32ShywN232KKbgCQRMkxAmQkaf71Oq0gWywl0DMAsoaNuhStV+XxnNDry
8jaqJsibJeFY4n+9k6dYYqoZ4gdDoaO6JncYLlaq5m/LmiKozycArZmGBnq8STQX
ZTFk9CMHpkX8ZKEZ2CrkR1htKVvpg9+PzypTJEoxHWaqUuFGRPozt3mhcPmAIPqf
RhaXgCs4kPr9GY3fSDs9+BhZxJIwZV3+6EwVQUABAbLSv4udhneRsHkLHtKoz+VC
U/JWWjEP5AGAdRrhfoUEZT5Z45lefMfh
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:07 2025 by rpki-client on console.sobornost.net