Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
File:                     UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft (raw, json)
Hash identifier:          rhG09Jrambi8YZ3577yw3XlVQGXHNj80TFatev3Jpo4=
Subject key identifier:   5D:38:11:CF:62:A5:6B:6D:06:57:D9:37:73:2D:1C:B5:96:77:34:93
Authority key identifier: 52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E
Certificate issuer:       /CN=A919EF51/serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
Certificate serial:       0B16
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
Manifest number:          0B0E
Signing time:             Sat 26 Apr 2025 19:03:15 +0000
Manifest this update:     Sat 26 Apr 2025 19:03:15 +0000
Manifest next update:     Sat 03 May 2025 19:03:15 +0000
Files and hashes:         1: UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl (hash: s+uxqr6LW5m0ergOyyORo/IBEzn+sW5Yy38XxQvdnqM=)
                          2: BC60BC2A63F711EA8CBEB029C4F9AE02.roa (hash: wRvd5l9La3MSVA49dLn9S92nbQQvOi4LJr/5XnlTFpc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl
                          rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2838 (0xb16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EF51, serialNumber=52D680E045DCE990789E0D7772617C60C36ED18E
        Validity
            Not Before: Apr 26 19:03:15 2025 GMT
            Not After : May  3 19:03:15 2025 GMT
        Subject: CN=680d2df3-14f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:69:55:12:02:68:ee:5b:a9:21:da:32:f9:
                    86:9e:3e:e4:bf:68:58:5d:07:8e:af:10:92:ea:f8:
                    09:80:ca:5d:fe:d4:f9:56:fc:2d:6e:f6:08:e0:4b:
                    4b:06:4e:f9:ad:55:51:ff:d1:40:49:0f:38:bd:0b:
                    42:4c:ae:15:f9:bc:6a:b0:c4:e4:69:b7:eb:0b:19:
                    5b:0d:b3:b7:e9:8f:02:37:30:52:59:d3:4f:b3:bc:
                    4d:73:85:1b:16:9a:49:b0:f2:e5:e9:36:c5:08:37:
                    1c:fc:03:8c:84:b8:a9:23:63:0f:47:93:f0:af:d2:
                    91:b5:11:f9:9e:ae:2f:40:c5:0d:e0:e7:0a:c4:41:
                    4f:0a:26:b2:af:2b:c5:6d:f8:3d:51:f8:af:13:3b:
                    37:b2:da:c8:c9:c3:8a:3d:d5:3a:13:81:a2:9e:b8:
                    5d:af:3e:81:d3:ff:3b:62:61:52:0b:c4:0b:c1:bd:
                    54:ad:4b:bb:b0:75:60:c3:5f:08:81:ca:76:1b:9c:
                    57:4f:6d:28:91:d9:07:6f:5c:b2:ef:5d:d1:f3:99:
                    8c:35:c2:9a:e3:7f:90:06:5b:b8:1f:3a:a6:93:64:
                    fb:ff:93:26:dc:f6:5c:e4:70:70:2c:c4:79:8c:86:
                    cd:c9:4e:d0:ff:26:77:be:29:20:4c:69:41:aa:10:
                    a9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:38:11:CF:62:A5:6B:6D:06:57:D9:37:73:2D:1C:B5:96:77:34:93
            X509v3 Authority Key Identifier:
                keyid:52:D6:80:E0:45:DC:E9:90:78:9E:0D:77:72:61:7C:60:C3:6E:D1:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EF51/BA3CD4A63D8211EA9F267370C4F9AE02/UtaA4EXc6ZB4ng13cmF8YMNu0Y4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:03:ab:30:21:64:df:d9:6d:0e:c0:4c:91:d5:fb:35:be:f8:
         b9:87:07:d2:bc:ea:9d:24:33:91:a3:73:fb:e0:7a:78:66:1d:
         bf:c9:a8:d7:2c:85:08:89:8b:d5:a0:05:d2:28:26:a3:85:c7:
         cd:6a:0b:bf:c9:7b:6c:6e:a3:23:1c:12:90:8d:0f:87:20:ad:
         bb:8c:58:de:8a:98:33:15:72:db:ff:12:e2:f5:42:45:7c:78:
         f7:e6:b1:0c:be:1a:b9:41:6f:a9:41:00:28:46:eb:2d:6e:8e:
         81:bb:b4:11:57:3d:75:95:eb:ba:e1:2a:83:d9:ac:a1:5a:89:
         ee:c9:8c:dc:d6:5e:f7:8d:3c:62:a5:e2:32:ea:a2:44:2a:80:
         cd:7d:d1:c0:bf:1d:46:82:fe:b3:84:57:4d:26:7d:37:8d:fc:
         67:ee:dc:3a:e9:03:25:42:c1:23:6d:0a:be:6f:37:3d:25:ba:
         bc:63:2b:00:07:e7:27:ee:d8:2a:af:69:38:75:ef:ab:47:5a:
         df:90:0b:53:d7:59:8f:c7:6c:a6:db:cd:0e:f5:80:eb:a9:c9:
         b3:4c:32:32:9d:4a:dc:61:21:54:14:a7:ac:79:d9:f0:cc:4d:
         a4:51:d5:b4:70:9e:a5:31:a4:d0:5b:e3:ac:04:e5:02:c2:ec:
         6b:c6:b5:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCxYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVGNTExMTAvBgNVBAUTKDUyRDY4MEUwNDVEQ0U5OTA3ODlFMEQ3NzcyNjE3QzYw
QzM2RUQxOEUwHhcNMjUwNDI2MTkwMzE1WhcNMjUwNTAzMTkwMzE1WjAYMRYwFAYD
VQQDEw02ODBkMmRmMy0xNGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArK1pVRICaO5bqSHaMvmGnj7kv2hYXQeOrxCS6vgJgMpd/tT5VvwtbvYI4EtL
Bk75rVVR/9FASQ84vQtCTK4V+bxqsMTkabfrCxlbDbO36Y8CNzBSWdNPs7xNc4Ub
FppJsPLl6TbFCDcc/AOMhLipI2MPR5Pwr9KRtRH5nq4vQMUN4OcKxEFPCiayryvF
bfg9UfivEzs3strIycOKPdU6E4Ginrhdrz6B0/87YmFSC8QLwb1UrUu7sHVgw18I
gcp2G5xXT20okdkHb1yy713R85mMNcKa43+QBlu4Hzqmk2T7/5Mm3PZc5HBwLMR5
jIbNyU7Q/yZ3vikgTGlBqhCpFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF04Ec9i
pWttBlfZN3MtHLWWdzSTMB8GA1UdIwQYMBaAFFLWgOBF3OmQeJ4Nd3JhfGDDbtGO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUY1MS9CQTNDRDRBNjNE
ODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZaQjRuZzEzY21GOFlNTnUw
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1V0YUE0RVhjNlpCNG5nMTNjbUY4WU1OdTBZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUY1MS9CQTNDRDRBNjNEODIxMUVBOUYyNjczNzBDNEY5QUUwMi9VdGFBNEVYYzZa
QjRuZzEzY21GOFlNTnUwWTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRA6swIWTf2W0OwEyR1fs1vvi5hwfSvOqdJDORo3P74Hp4Zh2/yajX
LIUIiYvVoAXSKCajhcfNagu/yXtsbqMjHBKQjQ+HIK27jFjeipgzFXLb/xLi9UJF
fHj35rEMvhq5QW+pQQAoRustbo6Bu7QRVz11leu64SqD2ayhWonuyYzc1l73jTxi
peIy6qJEKoDNfdHAvx1Ggv6zhFdNJn03jfxn7tw66QMlQsEjbQq+bzc9Jbq8YysA
B+cn7tgqr2k4de+rR1rfkAtT11mPx2ym280O9YDrqcmzTDIynUrcYSFUFKesednw
zE2kUdW0cJ6lMaTQW+OsBOUCwuxrxrVZ
-----END CERTIFICATE-----
Generated at Sat Apr 26 21:01:58 2025 by rpki-client on console.sobornost.net