Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
File:                     cuiGCytHM2W_JhQg0GtYqATClrI.mft (raw, json)
Hash identifier:          y14oJ51lK0pu//64l6/Xm3LvUaVdnGEo0hKmMkJfd7A=
Subject key identifier:   1B:45:EB:5E:7C:22:80:9F:65:63:23:60:6C:39:ED:1D:51:FD:33:C5
Authority key identifier: 72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2
Certificate issuer:       /CN=A916AC30/serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
Manifest number:          8C
Signing time:             Sun 15 Jun 2025 05:48:56 +0000
Manifest this update:     Sun 15 Jun 2025 05:48:55 +0000
Manifest next update:     Sun 22 Jun 2025 05:48:55 +0000
Files and hashes:         1: cuiGCytHM2W_JhQg0GtYqATClrI.crl (hash: P7APIMb50f9PYj5WWohxYXe9RNZup0j5JLr+Hkq+q2s=)
                          2: 8CBE22F8D33911EF9F576474C4F9AE02.roa (hash: NMDs0Vn0lErQbJ2ubqn2Wa0iHcDZLQ+NyOe8KJVyEl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl
                          rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC30, serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
        Validity
            Not Before: Jun 15 05:48:55 2025 GMT
            Not After : Jun 22 05:48:55 2025 GMT
        Subject: CN=684e5ec8-8590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:1b:1a:9d:cb:08:79:ec:ae:b3:4b:1e:44:
                    43:d6:1e:79:8c:14:98:57:a7:b5:b1:28:19:0a:0b:
                    bc:0e:54:9c:c3:a2:1a:b4:a5:87:e7:14:00:7c:f5:
                    a6:95:20:48:64:8d:d4:9b:09:e7:88:e8:c3:c4:30:
                    e8:4d:5c:83:60:f2:29:ab:4f:af:5e:a6:96:7f:51:
                    f2:a4:2d:1a:bc:50:48:58:c0:38:44:a2:e1:86:a1:
                    4d:03:17:17:b4:0f:9d:94:1f:38:d6:cb:c5:09:44:
                    b8:79:e2:ee:b6:db:4a:fa:95:5e:cb:70:64:97:85:
                    2b:fd:aa:b4:ed:dc:74:9a:7b:eb:7e:c3:46:e1:c3:
                    54:c6:ab:f3:9e:67:6d:72:b5:95:b1:41:18:1a:8c:
                    bd:49:f1:2c:96:a2:68:f4:85:9c:51:3d:4c:38:f2:
                    fb:39:6a:70:2f:e0:f4:2b:53:35:1d:94:fa:e5:98:
                    ee:89:7c:0b:fd:4a:d7:1b:2c:f4:c4:52:d4:f3:67:
                    6d:e4:5e:c2:12:b9:29:1b:72:f0:6b:83:12:14:3d:
                    bc:c6:70:65:b4:71:00:ba:d1:4b:a6:7a:07:2f:7d:
                    a8:2d:96:b9:96:6f:d9:10:c6:60:7f:e4:fc:97:0b:
                    f1:12:d7:7d:ba:06:ec:3e:f0:61:98:c9:37:3c:90:
                    31:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:45:EB:5E:7C:22:80:9F:65:63:23:60:6C:39:ED:1D:51:FD:33:C5
            X509v3 Authority Key Identifier:
                keyid:72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:14:8d:3d:28:4c:b0:eb:2f:0b:1d:47:c0:df:a3:b4:44:a0:
         c6:79:9c:b1:2a:d6:3b:54:70:23:d8:8c:62:03:70:88:14:c2:
         45:c0:15:2b:88:71:5a:26:9f:dd:7d:eb:c0:b6:7e:a8:38:43:
         32:ba:5f:73:b6:69:b5:88:4c:bf:be:4a:bd:a5:fd:ed:67:c8:
         20:5c:26:3b:02:8c:cd:75:72:10:5e:1c:0a:7a:2b:99:97:69:
         50:e8:f7:6d:a7:3b:ca:e1:08:88:36:f7:c2:fc:2e:5c:ba:18:
         a0:f7:1b:25:3d:0b:5a:cc:d3:f5:84:36:1f:e4:fe:7f:9d:43:
         32:eb:15:56:0d:94:c0:ba:5b:52:93:ee:64:4a:e4:31:24:95:
         2c:09:c8:92:60:ec:c1:19:d9:24:d6:e9:96:a2:ad:dd:39:c8:
         70:c8:17:04:83:56:e0:e5:a9:58:41:cc:2f:8d:e9:b2:4a:76:
         3c:18:00:d2:f3:8a:3a:ad:e0:0d:17:e7:8e:cd:3c:fe:29:42:
         cb:91:ae:de:4c:9b:78:3a:a4:f5:7c:3c:c3:c2:bc:de:92:25:
         db:d1:1f:bc:be:79:df:78:77:ca:7f:05:d9:3d:45:97:88:d7:
         12:ed:a5:06:a7:6e:fe:93:99:1a:86:2d:9e:5a:32:57:1c:bd:
         b8:3d:00:0a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFDMzAxMTAvBgNVBAUTKDcyRTg4NjBCMkI0NzMzNjVCRjI2MTQyMEQwNkI1OEE4
MDRDMjk2QjIwHhcNMjUwNjE1MDU0ODU1WhcNMjUwNjIyMDU0ODU1WjAYMRYwFAYD
VQQDEw02ODRlNWVjOC04NTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvssbGp3LCHnsrrNLHkRD1h55jBSYV6e1sSgZCgu8DlScw6IatKWH5xQAfPWm
lSBIZI3UmwnniOjDxDDoTVyDYPIpq0+vXqaWf1HypC0avFBIWMA4RKLhhqFNAxcX
tA+dlB841svFCUS4eeLutttK+pVey3Bkl4Ur/aq07dx0mnvrfsNG4cNUxqvznmdt
crWVsUEYGoy9SfEslqJo9IWcUT1MOPL7OWpwL+D0K1M1HZT65ZjuiXwL/UrXGyz0
xFLU82dt5F7CErkpG3Lwa4MSFD28xnBltHEAutFLpnoHL32oLZa5lm/ZEMZgf+T8
lwvxEtd9ugbsPvBhmMk3PJAxvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBtF6158
IoCfZWMjYGw57R1R/TPFMB8GA1UdIwQYMBaAFHLohgsrRzNlvyYUINBrWKgEwpay
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUMzMC83NjBENkE2NDhD
NjIxMUVGOTk0NjQwODVDNEY5QUUwMi9jdWlHQ3l0SE0yV19KaFFnMEd0WXFBVENs
ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N1aUdDeXRITTJXX0poUWcwR3RZcUFUQ2xySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUMzMC83NjBENkE2NDhDNjIxMUVGOTk0NjQwODVDNEY5QUUwMi9jdWlHQ3l0SE0y
V19KaFFnMEd0WXFBVENsckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvFI09KEyw6y8LHUfA36O0RKDGeZyxKtY7VHAj2IxiA3CIFMJFwBUr
iHFaJp/dfevAtn6oOEMyul9ztmm1iEy/vkq9pf3tZ8ggXCY7AozNdXIQXhwKeiuZ
l2lQ6PdtpzvK4QiINvfC/C5cuhig9xslPQtazNP1hDYf5P5/nUMy6xVWDZTAultS
k+5kSuQxJJUsCciSYOzBGdkk1umWoq3dOchwyBcEg1bg5alYQcwvjemySnY8GADS
84o6reANF+eOzTz+KULLka7eTJt4OqT1fDzDwrzekiXb0R+8vnnfeHfKfwXZPUWX
iNcS7aUGp27+k5kahi2eWjJXHL24PQAK
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:27:17 2025 by rpki-client