Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
File:                     ulogxAaFivwlBqk1eGMWQUZSYJ0.mft (raw, json)
Hash identifier:          dMemLbD7tC1VtjqmPKz6kuDQ5mmq+zkK88Dlcg917AY=
Subject key identifier:   52:59:D5:43:32:88:86:F8:F7:83:B1:CA:D5:85:64:A5:CA:BA:11:6B
Authority key identifier: BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D
Certificate issuer:       /CN=A912C2D5/serialNumber=BA5A20C406858AFC2506A935786316414652609D
Certificate serial:       0A84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
Manifest number:          0A7E
Signing time:             Fri 08 Aug 2025 19:53:46 +0000
Manifest this update:     Fri 08 Aug 2025 19:53:46 +0000
Manifest next update:     Fri 15 Aug 2025 19:53:46 +0000
Files and hashes:         1: ulogxAaFivwlBqk1eGMWQUZSYJ0.crl (hash: RSmnrH3wRw8H8opWUmcrEoFWTU/BU4DxeRMbg07F8VA=)
                          2: BD63D19A650D11EA8FAFD931C4F9AE02.roa (hash: OYSrFAczlfKVSdgUfDN8+TnLYrywWcmrp5Q486bnheI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl
                          rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2692 (0xa84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2D5, serialNumber=BA5A20C406858AFC2506A935786316414652609D
        Validity
            Not Before: Aug  8 19:53:46 2025 GMT
            Not After : Aug 15 19:53:46 2025 GMT
        Subject: CN=689655ca-a5da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:01:1e:f6:6b:5e:95:e2:60:3d:a4:2e:80:
                    a7:a2:ce:b9:65:9b:7b:60:1d:a8:61:07:a1:99:15:
                    ea:fd:2d:ad:9a:14:7b:64:7d:ac:ed:e1:c2:b9:d6:
                    d7:f5:ca:e3:28:58:78:ec:1c:12:ef:f1:48:d1:93:
                    b4:20:f6:40:6d:69:af:51:d3:ae:70:ed:40:1e:31:
                    5b:f1:17:df:5f:d7:4a:9d:c3:22:ef:0d:e0:d2:ab:
                    e8:eb:19:c8:ba:a4:4e:2e:e7:63:bf:22:ee:8e:cb:
                    5b:3c:e6:ec:ac:36:c4:c9:1c:81:af:0d:a9:01:f2:
                    2f:f0:c8:b5:52:30:43:ce:39:4d:7b:f3:56:73:45:
                    08:53:44:ce:fc:20:0e:5b:ad:fa:57:4a:e7:5a:62:
                    dd:14:a0:63:8b:f6:9d:9b:b6:3f:25:27:50:48:85:
                    2b:f5:e0:6a:5b:2f:6f:5f:3b:e2:26:b1:02:e4:e2:
                    1a:cf:d1:7f:1e:ba:fa:b1:8a:03:66:7a:aa:cb:75:
                    a9:d9:fa:41:51:d8:37:8c:ab:f7:63:52:53:25:ae:
                    8c:a8:05:e9:f8:57:4a:86:86:fd:14:35:f2:ef:99:
                    55:b7:f7:26:ce:05:3b:3c:68:60:79:d6:5b:76:8c:
                    f6:27:6d:18:dd:3c:7e:da:a1:da:4d:70:74:70:36:
                    dd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:59:D5:43:32:88:86:F8:F7:83:B1:CA:D5:85:64:A5:CA:BA:11:6B
            X509v3 Authority Key Identifier:
                keyid:BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b6:d1:5c:b1:53:73:4e:4a:26:02:4d:c5:0c:56:30:aa:97:
         dc:51:91:71:b4:ee:d9:0c:f5:8e:b4:55:aa:14:f9:0b:54:1f:
         a5:45:50:a1:2b:5f:a9:98:8d:f2:01:3c:2c:98:c6:98:b8:45:
         d3:19:52:3f:9c:fb:b5:4b:0a:48:3f:26:8e:88:14:9b:f1:c1:
         29:29:62:74:08:12:3d:4a:d0:e5:cf:bb:8a:34:bc:9d:57:94:
         54:70:14:5a:89:05:05:5e:84:4a:86:01:1e:a7:59:ab:e5:0d:
         5d:d2:72:63:15:8f:38:d8:5c:f2:94:05:c5:31:72:c3:4d:fb:
         93:f8:9f:96:9c:29:5d:45:7d:bb:e5:c8:e6:fe:85:6f:bd:66:
         a4:ed:22:2e:b2:9b:55:13:8b:5d:da:d7:dd:50:39:32:48:15:
         72:85:4f:cf:8a:e0:e5:83:26:6d:5c:31:90:29:bd:52:fc:ce:
         3b:95:3c:3b:67:7e:8c:61:e1:47:01:0f:ef:29:b9:49:46:9e:
         12:07:51:ce:5c:99:2b:09:f9:bb:d0:fb:79:f0:1c:1f:9f:57:
         7f:35:7a:d0:21:16:1b:61:54:a4:f0:c6:ed:fd:8e:a5:df:55:
         6c:6d:c5:66:39:8b:e6:46:1f:2f:a1:07:10:94:f4:cd:4d:c1:
         c9:76:fa:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCoQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkMyRDUxMTAvBgNVBAUTKEJBNUEyMEM0MDY4NThBRkMyNTA2QTkzNTc4NjMxNjQx
NDY1MjYwOUQwHhcNMjUwODA4MTk1MzQ2WhcNMjUwODE1MTk1MzQ2WjAYMRYwFAYD
VQQDEw02ODk2NTVjYS1hNWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwgoBHvZrXpXiYD2kLoCnos65ZZt7YB2oYQehmRXq/S2tmhR7ZH2s7eHCudbX
9crjKFh47BwS7/FI0ZO0IPZAbWmvUdOucO1AHjFb8RffX9dKncMi7w3g0qvo6xnI
uqROLudjvyLujstbPObsrDbEyRyBrw2pAfIv8Mi1UjBDzjlNe/NWc0UIU0TO/CAO
W636V0rnWmLdFKBji/adm7Y/JSdQSIUr9eBqWy9vXzviJrEC5OIaz9F/Hrr6sYoD
Znqqy3Wp2fpBUdg3jKv3Y1JTJa6MqAXp+FdKhob9FDXy75lVt/cmzgU7PGhgedZb
doz2J20Y3Tx+2qHaTXB0cDbdvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJZ1UMy
iIb494OxytWFZKXKuhFrMB8GA1UdIwQYMBaAFLpaIMQGhYr8JQapNXhjFkFGUmCd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzJENS8zNzdBRjgyNjY0
MUIxMUVBOTkwNDJGMjBDNEY5QUUwMi91bG9neEFhRml2d2xCcWsxZUdNV1FVWlNZ
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Vsb2d4QWFGaXZ3bEJxazFlR01XUVVaU1lKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QzJENS8zNzdBRjgyNjY0MUIxMUVBOTkwNDJGMjBDNEY5QUUwMi91bG9neEFhRml2
d2xCcWsxZUdNV1FVWlNZSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGttFcsVNzTkomAk3FDFYwqpfcUZFxtO7ZDPWOtFWqFPkLVB+lRVCh
K1+pmI3yATwsmMaYuEXTGVI/nPu1SwpIPyaOiBSb8cEpKWJ0CBI9StDlz7uKNLyd
V5RUcBRaiQUFXoRKhgEep1mr5Q1d0nJjFY842FzylAXFMXLDTfuT+J+WnCldRX27
5cjm/oVvvWak7SIusptVE4td2tfdUDkySBVyhU/PiuDlgyZtXDGQKb1S/M47lTw7
Z36MYeFHAQ/vKblJRp4SB1HOXJkrCfm70Pt58Bwfn1d/NXrQIRYbYVSk8Mbt/Y6l
31VsbcVmOYvmRh8voQcQlPTNTcHJdvo7
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:24:48 2025 by rpki-client