Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File:                     uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier:          YI8U7EB71znD8Ydq7nW5WpZTexVghB1VTGEWb0F98DU=
Subject key identifier:   7C:99:01:41:60:DD:8E:3F:45:F3:A4:F1:33:00:F5:12:1D:D1:98:52
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer:       /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial:       0821
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number:          0803
Signing time:             Fri 08 Aug 2025 21:20:48 +0000
Manifest this update:     Fri 08 Aug 2025 21:20:47 +0000
Manifest next update:     Fri 15 Aug 2025 21:20:47 +0000
Files and hashes:         1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: zY+qBQpt1SuFUcZHiojW3NLPPPiCQGGTK0z2xmTMWAY=)
                          2: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: RcdkSPfjnAmz3uVP4FBhLTQ0GFBSdezmu4kQPa/+yaY=)
                          3: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: A1w8tHzqGX+jD/ISNBe9aPcQuL2J3HJQzhH/YAzCdq0=)
                          4: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XTLM9Il3d4SVArTDp/CLgDo1h6RlBLONdep9WAa5H5I=)
                          5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: cXIuMnEWUiuT4kupzUNHJo4zj/W45Qb9cwkr7yvw0vc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
                          rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2081 (0x821)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
        Validity
            Not Before: Aug  8 21:20:47 2025 GMT
            Not After : Aug 15 21:20:47 2025 GMT
        Subject: CN=68966a2f-72c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:28:22:33:bb:06:e8:ca:ef:2a:14:6f:fb:
                    61:fd:1a:4e:69:67:f0:0e:37:41:c5:3a:9a:c2:c6:
                    a8:0b:1e:24:b9:52:94:4a:8a:fc:62:a8:b6:64:95:
                    78:4d:32:f8:98:5e:36:f4:95:45:dd:62:7b:3d:49:
                    ab:77:ab:d1:28:4a:4b:49:5a:49:22:07:a3:78:25:
                    1f:53:9c:93:1c:d6:41:25:47:ae:29:8a:89:0e:48:
                    44:21:c8:d1:76:20:4e:4a:33:af:32:9a:e2:ff:97:
                    ad:0e:fe:9c:70:7e:50:87:e2:71:db:ae:b6:83:6b:
                    c6:b5:07:c9:2b:ea:e6:1f:f9:4d:91:9d:27:34:5a:
                    f1:96:6a:64:9a:56:63:d7:2c:10:d3:31:5e:56:7c:
                    12:3e:8a:f4:f2:32:dc:f7:b9:5a:89:3a:26:14:1b:
                    94:ba:a9:43:5c:74:41:54:48:b5:23:f2:e5:ff:78:
                    97:e0:fd:48:03:11:ec:2b:b9:2e:9b:46:3a:fd:90:
                    a6:0c:e8:36:49:61:8b:fc:e2:00:9f:15:93:10:9b:
                    12:57:6a:aa:48:9a:d4:12:e8:02:3b:ca:6b:ce:ae:
                    11:cc:aa:75:fb:32:5f:6e:3e:06:72:59:34:32:e4:
                    ee:76:32:a8:3e:37:d7:23:f7:c7:4c:ce:4d:9f:96:
                    e1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:99:01:41:60:DD:8E:3F:45:F3:A4:F1:33:00:F5:12:1D:D1:98:52
            X509v3 Authority Key Identifier:
                keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3e:52:ac:e6:91:99:da:94:78:5b:6b:42:73:86:fd:0b:74:
         36:a9:e9:d2:f4:58:86:8e:bd:21:10:6e:2f:1d:31:ba:37:ca:
         f2:71:27:7c:93:59:35:2c:15:9c:5a:da:ad:c6:e4:26:7e:c1:
         5b:52:f7:77:0d:46:de:4e:13:3d:8a:d2:5b:bf:d9:d4:f0:cb:
         3d:0b:1f:3a:a5:46:22:9b:00:b2:28:bb:21:72:bf:50:7a:a6:
         13:e4:1a:bb:8e:f6:cd:66:99:f8:d1:53:17:c5:2a:1c:33:77:
         51:23:c7:3c:65:de:cd:5b:c1:58:a1:52:76:7f:6e:ce:15:7b:
         8c:09:0c:6f:cc:0a:1e:9e:5e:c9:d0:2c:af:af:41:3f:23:72:
         64:75:d6:a6:a7:47:5a:bb:8c:b4:d2:fa:9d:9c:5f:1e:f0:eb:
         85:32:ae:6d:3d:35:2f:1c:19:92:58:63:53:3b:f0:00:ed:c7:
         b5:5f:ea:48:fd:69:35:9a:6c:45:06:dd:4f:5b:21:16:b8:63:
         f4:83:a4:63:fb:70:9e:b9:89:f0:af:40:15:b9:8b:7a:7a:6f:
         f3:d3:e5:d9:cc:06:dd:c6:f8:98:32:f6:a1:16:af:0c:fe:ff:
         80:e3:73:8b:e8:7c:0b:4d:8c:f6:f1:a0:c3:fe:87:ee:92:04:
         a1:64:c4:d4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUU4M0IxMTAvBgNVBAUTKEI4QTYyQ0YxREU4QjI2MkUxNDczN0Q5M0VFM0U2RjM2
QzNBMEUxQzkwHhcNMjUwODA4MjEyMDQ3WhcNMjUwODE1MjEyMDQ3WjAYMRYwFAYD
VQQDEw02ODk2NmEyZi03MmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwScoIjO7BujK7yoUb/th/RpOaWfwDjdBxTqawsaoCx4kuVKUSor8Yqi2ZJV4
TTL4mF429JVF3WJ7PUmrd6vRKEpLSVpJIgejeCUfU5yTHNZBJUeuKYqJDkhEIcjR
diBOSjOvMpri/5etDv6ccH5Qh+Jx2662g2vGtQfJK+rmH/lNkZ0nNFrxlmpkmlZj
1ywQ0zFeVnwSPor08jLc97laiTomFBuUuqlDXHRBVEi1I/Ll/3iX4P1IAxHsK7ku
m0Y6/ZCmDOg2SWGL/OIAnxWTEJsSV2qqSJrUEugCO8przq4RzKp1+zJfbj4Gclk0
MuTudjKoPjfXI/fHTM5Nn5bhGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyZAUFg
3Y4/RfOk8TMA9RId0ZhSMB8GA1UdIwQYMBaAFLimLPHeiyYuFHN9k+4+bzbDoOHJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTgzQi83OTJEMTQ4QUYy
ODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEppNFVjMzJUN2o1dk5zT2c0
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VLWXM4ZDZMSmk0VWMzMlQ3ajV2TnNPZzRjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RTgzQi83OTJEMTQ4QUYyODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEpp
NFVjMzJUN2o1dk5zT2c0Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAAPlKs5pGZ2pR4W2tCc4b9C3Q2qenS9FiGjr0hEG4vHTG6N8rycSd8
k1k1LBWcWtqtxuQmfsFbUvd3DUbeThM9itJbv9nU8Ms9Cx86pUYimwCyKLshcr9Q
eqYT5Bq7jvbNZpn40VMXxSocM3dRI8c8Zd7NW8FYoVJ2f27OFXuMCQxvzAoenl7J
0Cyvr0E/I3Jkddamp0dau4y00vqdnF8e8OuFMq5tPTUvHBmSWGNTO/AA7ce1X+pI
/Wk1mmxFBt1PWyEWuGP0g6Rj+3CeuYnwr0AVuYt6em/z0+XZzAbdxviYMvahFq8M
/v+A43OL6HwLTYz28aDD/ofukgShZMTU
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:45:04 2025 by rpki-client