Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
File:                     bUGUPlFfU_mSYZyH8COTgRJT3mc.mft (raw, json)
Hash identifier:          cyTJ5iog4QCdyYTZRtU7vE1sq4QWy654/7MEBjbhpNY=
Subject key identifier:   BC:F5:60:35:DF:BE:8C:0F:FA:45:98:58:E9:9C:B6:36:00:E2:7F:43
Authority key identifier: 6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67
Certificate issuer:       /CN=A915216F/serialNumber=6D41943E515F53F992619C87F02393811253DE67
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
Manifest number:          0134
Signing time:             Tue 05 Aug 2025 05:01:23 +0000
Manifest this update:     Tue 05 Aug 2025 05:01:23 +0000
Manifest next update:     Tue 12 Aug 2025 05:01:23 +0000
Files and hashes:         1: bUGUPlFfU_mSYZyH8COTgRJT3mc.crl (hash: 4FVddq4UGulzuJgCWG1hKhl4vL6GBVzT8Jv4wKKKZ/g=)
                          2: 038457CEA3A011EEBE44947FC4F9AE02.roa (hash: PgCUtYUopFfJUcc6oCyLffXra/44Q+4sS+exi8w3QBc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl
                          rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 05:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915216F, serialNumber=6D41943E515F53F992619C87F02393811253DE67
        Validity
            Not Before: Aug  5 05:01:23 2025 GMT
            Not After : Aug 12 05:01:23 2025 GMT
        Subject: CN=68919023-4f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:03:94:b9:27:31:57:de:25:1f:04:e9:27:8a:
                    ed:9b:51:35:8b:b9:47:37:7d:71:4e:fe:f8:57:d7:
                    42:ad:a0:86:06:2e:be:fa:60:eb:6f:08:ee:b7:02:
                    36:97:3d:e8:50:d9:84:5b:46:50:51:4e:e6:47:2a:
                    87:81:bb:32:07:9e:62:43:de:8a:9c:07:49:c8:07:
                    f0:54:0c:5b:f1:11:1b:ec:e4:a3:c0:95:48:8e:fc:
                    1c:3c:92:79:df:fc:a7:16:66:e7:7d:47:04:d4:37:
                    10:88:a0:c0:5e:72:2a:2c:75:a2:c9:60:67:13:3a:
                    7d:74:2b:62:98:8b:01:88:6b:4e:f9:d2:59:b5:7f:
                    a3:2e:34:1e:f4:75:97:bf:d9:68:a6:02:d6:5d:79:
                    72:2d:dd:a0:f3:5a:4d:00:e4:e8:85:0f:6b:96:a0:
                    97:39:d9:88:26:8d:e6:49:cf:f2:d7:e8:63:83:1e:
                    2f:40:f2:a7:df:de:63:32:3b:64:52:0a:f6:34:d2:
                    85:ed:55:1e:c2:ec:c5:66:4e:78:99:0e:d2:ec:6a:
                    bc:dc:d3:d6:01:c0:78:26:bd:d2:80:f5:d8:09:de:
                    10:09:7d:e2:15:a9:6a:06:ed:18:08:3a:81:4f:e3:
                    ec:2d:56:26:e1:19:21:01:44:87:ad:9e:69:0f:e4:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F5:60:35:DF:BE:8C:0F:FA:45:98:58:E9:9C:B6:36:00:E2:7F:43
            X509v3 Authority Key Identifier:
                keyid:6D:41:94:3E:51:5F:53:F9:92:61:9C:87:F0:23:93:81:12:53:DE:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bUGUPlFfU_mSYZyH8COTgRJT3mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915216F/11B2C80AA39E11EE9DC71C60C4F9AE02/bUGUPlFfU_mSYZyH8COTgRJT3mc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:2a:a3:18:e9:b0:55:96:95:a4:a5:fe:ed:af:a6:b9:89:84:
         e3:3f:59:4d:28:93:33:12:fc:df:96:3e:c5:07:fb:87:3a:70:
         76:2d:bd:a5:6a:15:bc:91:a7:b6:c8:b1:89:85:60:2c:57:b0:
         3c:12:2d:08:70:38:0b:36:0e:52:a7:9f:f7:67:57:de:5b:e5:
         8d:ce:86:8f:ba:59:8d:09:8d:b8:40:74:bc:ae:3c:34:66:fa:
         17:ba:2a:a5:73:e2:93:41:e7:3d:6d:63:35:51:b1:73:d6:e9:
         53:7a:8b:cb:aa:11:0c:7c:11:07:87:9e:e9:da:c0:59:e1:30:
         01:da:d3:45:27:e4:25:ff:75:3c:74:2c:5f:68:90:57:51:a0:
         58:76:ba:3d:76:4c:ec:dd:c6:06:f5:d1:a1:7b:36:15:ad:f1:
         bc:d1:6f:a1:ce:e0:c4:82:1a:cf:52:e2:aa:b7:e6:be:5f:44:
         e6:06:88:b0:46:77:14:a9:25:2c:b4:ba:05:d3:e4:43:40:2d:
         fe:35:b6:6b:ac:9b:1a:9e:ad:45:ab:d9:94:be:ac:da:6b:15:
         08:ed:84:46:b8:89:6f:33:0a:bd:dd:01:81:fe:c5:37:5d:e3:
         35:32:63:15:34:6c:61:35:27:ba:46:3a:1a:c0:75:76:88:fd:
         4b:8c:f9:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTIxNkYxMTAvBgNVBAUTKDZENDE5NDNFNTE1RjUzRjk5MjYxOUM4N0YwMjM5Mzgx
MTI1M0RFNjcwHhcNMjUwODA1MDUwMTIzWhcNMjUwODEyMDUwMTIzWjAYMRYwFAYD
VQQDEw02ODkxOTAyMy00ZjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxwOUuScxV94lHwTpJ4rtm1E1i7lHN31xTv74V9dCraCGBi6++mDrbwjutwI2
lz3oUNmEW0ZQUU7mRyqHgbsyB55iQ96KnAdJyAfwVAxb8REb7OSjwJVIjvwcPJJ5
3/ynFmbnfUcE1DcQiKDAXnIqLHWiyWBnEzp9dCtimIsBiGtO+dJZtX+jLjQe9HWX
v9lopgLWXXlyLd2g81pNAOTohQ9rlqCXOdmIJo3mSc/y1+hjgx4vQPKn395jMjtk
Ugr2NNKF7VUewuzFZk54mQ7S7Gq83NPWAcB4Jr3SgPXYCd4QCX3iFalqBu0YCDqB
T+PsLVYm4RkhAUSHrZ5pD+R1/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLz1YDXf
vowP+kWYWOmctjYA4n9DMB8GA1UdIwQYMBaAFG1BlD5RX1P5kmGch/Ajk4ESU95n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjE2Ri8xMUIyQzgwQUEz
OUUxMUVFOURDNzFDNjBDNEY5QUUwMi9iVUdVUGxGZlVfbVNZWnlIOENPVGdSSlQz
bWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JVR1VQbEZmVV9tU1laeUg4Q09UZ1JKVDNtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MjE2Ri8xMUIyQzgwQUEzOUUxMUVFOURDNzFDNjBDNEY5QUUwMi9iVUdVUGxGZlVf
bVNZWnlIOENPVGdSSlQzbWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAOKqMY6bBVlpWkpf7tr6a5iYTjP1lNKJMzEvzflj7FB/uHOnB2Lb2l
ahW8kae2yLGJhWAsV7A8Ei0IcDgLNg5Sp5/3Z1feW+WNzoaPulmNCY24QHS8rjw0
ZvoXuiqlc+KTQec9bWM1UbFz1ulTeovLqhEMfBEHh57p2sBZ4TAB2tNFJ+Ql/3U8
dCxfaJBXUaBYdro9dkzs3cYG9dGhezYVrfG80W+hzuDEghrPUuKqt+a+X0TmBoiw
RncUqSUstLoF0+RDQC3+NbZrrJsanq1Fq9mUvqzaaxUI7YRGuIlvMwq93QGB/sU3
XeM1MmMVNGxhNSe6RjoawHV2iP1LjPlU
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:05:17 2025 by rpki-client