Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
File:                     cuiGCytHM2W_JhQg0GtYqATClrI.mft (raw, json)
Hash identifier:          RQk5EXv50Grd6AfEJKLslk7FKsJXp7o9tmP7efIU2cs=
Subject key identifier:   2A:01:51:4A:5E:26:26:36:07:C6:6B:21:12:76:B7:18:0B:50:BE:DD
Authority key identifier: 72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2
Certificate issuer:       /CN=A916AC30/serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
Certificate serial:       B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
Manifest number:          A8
Signing time:             Sat 09 Aug 2025 06:49:17 +0000
Manifest this update:     Sat 09 Aug 2025 06:49:17 +0000
Manifest next update:     Sat 16 Aug 2025 06:49:16 +0000
Files and hashes:         1: cuiGCytHM2W_JhQg0GtYqATClrI.crl (hash: 4a8MBLm/d26kT4HlOjFlaP4fBRBd1+5o6Zs3k1EO3Ug=)
                          2: 8CBE22F8D33911EF9F576474C4F9AE02.roa (hash: NMDs0Vn0lErQbJ2ubqn2Wa0iHcDZLQ+NyOe8KJVyEl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl
                          rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC30, serialNumber=72E8860B2B473365BF261420D06B58A804C296B2
        Validity
            Not Before: Aug  9 06:49:17 2025 GMT
            Not After : Aug 16 06:49:16 2025 GMT
        Subject: CN=6896ef6d-1d10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:62:ac:21:aa:c9:0d:cd:51:94:a5:83:0e:
                    b3:b2:3d:87:4d:f3:3d:37:87:e2:7d:ea:65:7f:69:
                    10:50:17:81:03:3d:c1:7a:5e:04:ea:1d:14:86:e8:
                    9e:ab:ce:41:db:08:df:fe:d8:be:77:0c:a0:5d:ee:
                    fd:ea:bc:16:e2:ba:cc:50:eb:88:91:36:a6:14:f4:
                    d9:1b:7b:cf:11:c8:54:fa:5c:17:56:15:2f:1b:3c:
                    c9:a1:de:a8:76:42:94:5a:db:53:6f:c7:24:5b:f0:
                    4d:fb:48:10:9a:12:56:09:ac:2b:97:7c:ac:b0:eb:
                    77:ca:ad:d4:f3:22:c9:72:3d:3e:a2:c5:41:5b:67:
                    d2:62:f3:38:04:4d:53:92:5f:79:a7:19:ad:84:b5:
                    f4:2d:ce:3f:e5:ea:8e:e3:19:21:ee:70:f8:bc:89:
                    02:0d:e0:24:09:36:81:c3:4a:82:5a:87:2e:52:3f:
                    fc:e5:a2:5c:cb:a8:56:9f:08:7c:6c:7e:86:44:11:
                    cf:11:a9:f8:89:9d:8e:31:6b:3f:76:53:fe:83:5f:
                    79:9f:f7:4e:fe:8f:ab:1c:4c:38:2b:e4:fa:64:7d:
                    71:56:ef:81:1b:2d:23:22:8d:8a:85:d5:1c:4e:46:
                    3c:2e:54:c7:78:0f:51:7b:d8:1c:46:6d:b1:78:60:
                    e4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:01:51:4A:5E:26:26:36:07:C6:6B:21:12:76:B7:18:0B:50:BE:DD
            X509v3 Authority Key Identifier:
                keyid:72:E8:86:0B:2B:47:33:65:BF:26:14:20:D0:6B:58:A8:04:C2:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cuiGCytHM2W_JhQg0GtYqATClrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/760D6A648C6211EF99464085C4F9AE02/cuiGCytHM2W_JhQg0GtYqATClrI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d2:e9:29:e1:68:f1:ff:79:89:82:e2:6f:ae:c1:70:fa:af:
         4b:06:24:9b:a2:3f:97:ae:1e:20:5a:31:a9:8c:f1:2b:f0:bb:
         3a:9f:ef:45:fc:f3:ba:a4:d3:dd:26:3e:70:64:17:30:53:78:
         50:05:bb:f9:63:ce:83:0b:af:53:3b:13:a5:2a:5a:c3:4a:d8:
         de:57:81:d6:48:fd:45:68:2f:3b:73:57:ad:1a:91:23:30:13:
         3f:fd:f0:d0:a9:56:70:89:e0:8d:56:bd:cf:94:ea:18:2a:de:
         13:85:1e:c5:4f:91:bf:4e:14:1b:5d:e4:ed:50:bb:23:e3:6b:
         25:ac:65:5a:82:5e:d9:b7:6f:a4:cb:4c:2d:35:61:93:c2:9c:
         7f:40:ce:58:b3:95:0b:b3:c9:29:95:a3:75:43:a4:1a:e0:3f:
         ee:4f:09:37:eb:c7:38:73:87:2f:ae:82:58:c9:fe:10:cd:85:
         36:36:ce:5b:41:09:29:0f:cc:f8:0a:93:87:5e:3a:76:cc:58:
         cb:4a:84:8b:e9:69:34:2d:4f:a5:18:5b:b0:c7:99:4d:cc:84:
         41:41:40:06:94:fd:c8:b2:19:51:53:88:48:19:92:55:e0:b5:
         46:cf:e7:2f:44:c6:4d:22:fe:2e:7f:d6:d8:03:e1:a8:e8:0c:
         6e:4a:61:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFDMzAxMTAvBgNVBAUTKDcyRTg4NjBCMkI0NzMzNjVCRjI2MTQyMEQwNkI1OEE4
MDRDMjk2QjIwHhcNMjUwODA5MDY0OTE3WhcNMjUwODE2MDY0OTE2WjAYMRYwFAYD
VQQDEw02ODk2ZWY2ZC0xZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsRBirCGqyQ3NUZSlgw6zsj2HTfM9N4fifeplf2kQUBeBAz3Bel4E6h0Uhuie
q85B2wjf/ti+dwygXe796rwW4rrMUOuIkTamFPTZG3vPEchU+lwXVhUvGzzJod6o
dkKUWttTb8ckW/BN+0gQmhJWCawrl3yssOt3yq3U8yLJcj0+osVBW2fSYvM4BE1T
kl95pxmthLX0Lc4/5eqO4xkh7nD4vIkCDeAkCTaBw0qCWocuUj/85aJcy6hWnwh8
bH6GRBHPEan4iZ2OMWs/dlP+g195n/dO/o+rHEw4K+T6ZH1xVu+BGy0jIo2KhdUc
TkY8LlTHeA9Re9gcRm2xeGDkBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoBUUpe
JiY2B8ZrIRJ2txgLUL7dMB8GA1UdIwQYMBaAFHLohgsrRzNlvyYUINBrWKgEwpay
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUMzMC83NjBENkE2NDhD
NjIxMUVGOTk0NjQwODVDNEY5QUUwMi9jdWlHQ3l0SE0yV19KaFFnMEd0WXFBVENs
ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2N1aUdDeXRITTJXX0poUWcwR3RZcUFUQ2xySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUMzMC83NjBENkE2NDhDNjIxMUVGOTk0NjQwODVDNEY5QUUwMi9jdWlHQ3l0SE0y
V19KaFFnMEd0WXFBVENsckkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAP0ukp4Wjx/3mJguJvrsFw+q9LBiSboj+Xrh4gWjGpjPEr8Ls6n+9F
/PO6pNPdJj5wZBcwU3hQBbv5Y86DC69TOxOlKlrDStjeV4HWSP1FaC87c1etGpEj
MBM//fDQqVZwieCNVr3PlOoYKt4ThR7FT5G/ThQbXeTtULsj42slrGVagl7Zt2+k
y0wtNWGTwpx/QM5Ys5ULs8kplaN1Q6Qa4D/uTwk368c4c4cvroJYyf4QzYU2Ns5b
QQkpD8z4CpOHXjp2zFjLSoSL6Wk0LU+lGFuwx5lNzIRBQUAGlP3IshlRU4hIGZJV
4LVGz+cvRMZNIv4uf9bYA+Go6AxuSmE/
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:41 2025 by rpki-client