Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
File:                     UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft (raw, json)
Hash identifier:          631EPYuPjM8Xu7QlmuIRaxYjwJxpjlONpbmw/yKDUZI=
Subject key identifier:   19:FF:27:A2:D5:63:52:A2:5D:6D:F6:09:19:E9:C8:6E:2B:6E:1A:3C
Authority key identifier: 50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3
Certificate issuer:       /CN=A91E5191/serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
Certificate serial:       0767
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
Manifest number:          075F
Signing time:             Sat 26 Apr 2025 21:16:49 +0000
Manifest this update:     Sat 26 Apr 2025 21:16:49 +0000
Manifest next update:     Sat 03 May 2025 21:16:49 +0000
Files and hashes:         1: UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl (hash: s00Mff0ao8p+Nck0uXE35A0xdOxUt49W+1crdvJaUHs=)
                          2: 3E78F3541E2D11EB95754317C4F9AE02.roa (hash: zj2/IQcxrFfQP3sb/0xMN/kSgo/BiJLwAfEBd9gJdG8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl
                          rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1895 (0x767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5191, serialNumber=50A7116BB9F3697BC5E3E222EF035F70342CDDA3
        Validity
            Not Before: Apr 26 21:16:49 2025 GMT
            Not After : May  3 21:16:49 2025 GMT
        Subject: CN=680d4d41-b574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:40:4d:ef:b0:8f:0a:b4:79:fb:fc:66:03:bf:
                    65:da:c1:81:66:ba:a8:92:08:2e:16:8f:af:0d:97:
                    df:98:b2:a7:89:2e:22:cb:b6:ed:b4:48:0e:5a:4f:
                    f8:43:e8:7a:5c:35:03:2b:8f:a1:88:f4:9d:af:ce:
                    89:c8:21:06:f9:d2:24:b0:6a:fc:2b:92:b0:36:03:
                    3d:31:b1:cc:cf:59:d8:1e:77:7e:c8:a3:cd:7c:96:
                    5a:9f:6b:32:c6:8a:e1:1c:cf:35:22:d1:25:e8:e1:
                    78:85:10:72:53:9c:0a:da:8b:6b:f5:cb:bd:6b:15:
                    5f:78:14:0a:76:77:c4:49:a3:c3:4d:f8:51:de:a1:
                    ad:17:07:76:38:20:8d:36:18:54:b3:56:87:61:95:
                    14:80:67:bf:3b:c2:33:99:54:8d:e7:64:19:57:0e:
                    d0:ac:56:ea:79:f1:60:9b:3a:9a:76:55:51:18:62:
                    12:f4:70:63:4a:3c:b4:60:02:eb:5f:3c:af:6f:9e:
                    3d:93:53:20:d3:57:95:8e:30:f3:e7:f6:5c:1d:e9:
                    16:ab:38:d4:92:54:ba:33:44:aa:66:dc:91:c3:81:
                    35:4a:15:b4:ad:25:44:b3:a2:7d:7c:ca:54:bb:98:
                    df:fc:cb:cc:6a:44:c7:f3:cc:29:f4:b7:02:77:6f:
                    c9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FF:27:A2:D5:63:52:A2:5D:6D:F6:09:19:E9:C8:6E:2B:6E:1A:3C
            X509v3 Authority Key Identifier:
                keyid:50:A7:11:6B:B9:F3:69:7B:C5:E3:E2:22:EF:03:5F:70:34:2C:DD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5191/48AA0706197211EB805E6B7FC4F9AE02/UKcRa7nzaXvF4-Ii7wNfcDQs3aM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:11:64:ad:64:a6:7d:2f:da:ea:f5:be:00:12:58:0b:37:ad:
         c2:e0:74:6b:db:46:b4:09:8f:89:7d:30:20:14:9d:7f:dc:b9:
         c0:9c:9c:99:93:79:64:c7:f5:26:3b:26:4c:88:4e:79:72:b4:
         7e:3a:fa:38:7c:fe:8a:dd:76:f6:2b:f4:80:ce:81:c7:d3:8d:
         de:ad:e2:40:8a:c5:08:a5:8a:13:a2:fe:6a:f1:6f:1e:40:be:
         48:68:70:26:d4:22:07:a9:4f:b3:41:32:99:e5:ab:2b:fc:1d:
         df:9f:f0:cf:5b:ea:b0:c1:1c:f8:55:d2:07:21:66:5a:df:d4:
         b4:99:38:8b:c2:52:5b:76:c7:03:66:b6:d4:ce:61:b8:e2:41:
         e5:9c:dc:01:42:6c:53:10:fb:f3:49:2a:2f:ef:21:25:f9:d0:
         65:66:2c:50:a9:2d:ad:b3:25:b5:36:e7:9d:89:7f:d1:93:15:
         9a:d5:9e:1c:82:8e:d6:a3:94:30:f1:40:47:4c:ad:b2:bb:6d:
         2a:34:dc:39:ff:3f:66:fc:8c:39:86:11:bf:d5:f6:15:07:d4:
         b5:3c:7e:71:bd:91:ce:19:96:f3:40:fc:d2:91:f9:8e:52:e3:
         a8:cb:3f:86:87:f0:94:de:6b:29:b5:40:65:79:6f:36:d5:83:
         3f:a8:97:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:13 2025 by rpki-client on console.sobornost.net