Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
File:                     kuuO8sbiYWmIqY_VsT7io2siHEM.mft (raw, json)
Hash identifier:          6aqCgV5upRUn0Ueby1q+by5pmf1X8A3zWOt4e/Z/Qds=
Subject key identifier:   FE:8D:93:CD:73:63:8A:66:C3:8F:8F:6B:44:E3:B9:66:D9:86:E5:CD
Authority key identifier: 92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43
Certificate issuer:       /CN=A91A15FB/serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
Certificate serial:       D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
Manifest number:          D5
Signing time:             Sun 03 Aug 2025 05:56:18 +0000
Manifest this update:     Sun 03 Aug 2025 05:56:17 +0000
Manifest next update:     Sun 10 Aug 2025 05:56:17 +0000
Files and hashes:         1: kuuO8sbiYWmIqY_VsT7io2siHEM.crl (hash: LEMFR1S/0kHKyzu2LFrJ+EU4ez61oFMQu4fv/LVzKJQ=)
                          2: E61BEE5C605711EF9150403FC4F9AE02.roa (hash: CCiK9Z7hOvpBEdDuVHROFOhxvRBudD3Mcnii4SWAHa4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl
                          rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 05:56:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A15FB, serialNumber=92EB8EF2C6E2616988A98FD5B13EE2A36B221C43
        Validity
            Not Before: Aug  3 05:56:17 2025 GMT
            Not After : Aug 10 05:56:17 2025 GMT
        Subject: CN=688efa01-65f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:02:37:72:e7:29:8c:86:a4:ab:a2:be:64:86:
                    c4:30:80:0f:27:7f:d1:81:97:82:ea:53:01:b1:ce:
                    c1:12:b9:1e:df:b3:e1:40:d8:79:90:12:0b:fc:fc:
                    b6:58:6e:22:7f:6a:52:c8:56:7a:fe:3c:80:ab:52:
                    7f:1f:86:5b:59:6f:4a:64:c1:d8:bf:e3:d4:d0:06:
                    0f:35:f8:8d:eb:32:5a:86:ab:4f:4c:c8:ed:34:c9:
                    95:44:91:1f:12:5e:23:c8:2b:ef:de:8a:41:c2:25:
                    df:04:fa:bc:01:55:4b:b2:7d:73:d5:06:f7:30:9e:
                    18:8a:79:4e:34:6c:1f:1d:99:c7:f0:7c:1e:f2:4a:
                    a5:51:a6:0a:e8:09:6f:7a:41:c7:95:64:eb:8e:7f:
                    b9:ce:fa:69:29:eb:e5:00:9d:43:e7:ce:ef:6c:b3:
                    f2:45:68:c4:fb:c3:55:82:ec:17:a2:ed:57:aa:62:
                    00:27:34:ec:05:54:a2:99:fe:55:c7:a4:b7:41:c3:
                    b4:76:f2:12:ff:71:11:2b:15:71:5d:48:4f:bc:e3:
                    96:1d:90:af:35:6c:f6:15:99:04:22:d8:5e:bd:4d:
                    a0:a8:8b:ce:f5:26:54:5d:46:b2:44:ed:06:21:da:
                    67:0a:21:22:12:31:f6:80:23:a8:7d:d1:5a:9f:cc:
                    34:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8D:93:CD:73:63:8A:66:C3:8F:8F:6B:44:E3:B9:66:D9:86:E5:CD
            X509v3 Authority Key Identifier:
                keyid:92:EB:8E:F2:C6:E2:61:69:88:A9:8F:D5:B1:3E:E2:A3:6B:22:1C:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kuuO8sbiYWmIqY_VsT7io2siHEM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/C73C45982EC711EF82208273C4F9AE02/kuuO8sbiYWmIqY_VsT7io2siHEM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a0:99:e6:a8:29:b3:c2:f1:19:d6:d1:3e:33:6e:19:01:2e:
         f4:97:70:e3:8d:ff:a7:b9:b3:a1:02:ff:43:8a:93:08:4a:f4:
         dc:fb:87:90:e1:ae:3e:2d:df:31:55:22:f2:f8:2c:e6:ea:84:
         99:c9:d5:70:1a:1a:d6:c0:23:fd:39:35:2c:70:9b:06:bb:31:
         77:fb:e0:e3:fc:5e:0b:b4:1b:e9:3d:8a:ec:e2:dd:8a:80:ab:
         a8:64:07:ea:e1:c9:22:34:bf:01:c5:5b:73:ed:34:29:6d:14:
         df:ec:d5:97:52:e0:ff:72:b3:05:23:f8:59:f3:ba:54:0d:b2:
         7a:15:cb:cc:78:49:ff:c7:8f:59:5e:8e:a8:97:9c:3a:ac:a3:
         fc:2e:24:f3:8a:4b:d3:5e:50:13:08:94:48:5b:49:59:fe:14:
         75:88:a2:f0:26:a5:6b:9c:3b:52:bf:3a:55:35:39:45:cc:0e:
         b5:ae:6a:ab:d2:32:02:4f:c3:0e:77:c5:bd:b7:ea:a0:01:e0:
         46:ba:63:f6:30:29:be:55:49:25:85:bd:07:ab:b9:66:71:49:
         d9:b8:fd:56:f9:d8:7a:39:ea:9c:42:74:d0:cf:2c:c2:ee:45:
         ff:23:1e:c5:93:2b:56:81:f1:c6:a4:0e:e0:01:5f:61:b1:97:
         1c:df:06:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE1RkIxMTAvBgNVBAUTKDkyRUI4RUYyQzZFMjYxNjk4OEE5OEZENUIxM0VFMkEz
NkIyMjFDNDMwHhcNMjUwODAzMDU1NjE3WhcNMjUwODEwMDU1NjE3WjAYMRYwFAYD
VQQDEw02ODhlZmEwMS02NWY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvAI3cucpjIakq6K+ZIbEMIAPJ3/RgZeC6lMBsc7BErke37PhQNh5kBIL/Py2
WG4if2pSyFZ6/jyAq1J/H4ZbWW9KZMHYv+PU0AYPNfiN6zJahqtPTMjtNMmVRJEf
El4jyCvv3opBwiXfBPq8AVVLsn1z1Qb3MJ4YinlONGwfHZnH8Hwe8kqlUaYK6Alv
ekHHlWTrjn+5zvppKevlAJ1D587vbLPyRWjE+8NVguwXou1XqmIAJzTsBVSimf5V
x6S3QcO0dvIS/3ERKxVxXUhPvOOWHZCvNWz2FZkEIthevU2gqIvO9SZUXUayRO0G
IdpnCiEiEjH2gCOofdFan8w09wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP6Nk81z
Y4pmw4+Pa0TjuWbZhuXNMB8GA1UdIwQYMBaAFJLrjvLG4mFpiKmP1bE+4qNrIhxD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTVGQi9DNzNDNDU5ODJF
QzcxMUVGODIyMDgyNzNDNEY5QUUwMi9rdXVPOHNiaVlXbUlxWV9Wc1Q3aW8yc2lI
RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2t1dU84c2JpWVdtSXFZX1ZzVDdpbzJzaUhFTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTVGQi9DNzNDNDU5ODJFQzcxMUVGODIyMDgyNzNDNEY5QUUwMi9rdXVPOHNiaVlX
bUlxWV9Wc1Q3aW8yc2lIRU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBXoJnmqCmzwvEZ1tE+M24ZAS70l3Djjf+nubOhAv9DipMISvTc+4eQ
4a4+Ld8xVSLy+Czm6oSZydVwGhrWwCP9OTUscJsGuzF3++Dj/F4LtBvpPYrs4t2K
gKuoZAfq4ckiNL8BxVtz7TQpbRTf7NWXUuD/crMFI/hZ87pUDbJ6FcvMeEn/x49Z
Xo6ol5w6rKP8LiTzikvTXlATCJRIW0lZ/hR1iKLwJqVrnDtSvzpVNTlFzA61rmqr
0jICT8MOd8W9t+qgAeBGumP2MCm+VUklhb0Hq7lmcUnZuP1W+dh6OeqcQnTQzyzC
7kX/Ix7FkytWgfHGpA7gAV9hsZcc3wZn
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:01:39 2025 by rpki-client