Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
File:                     UCfzGS691UlQo5w9EwlKcfHTMmY.mft (raw, json)
Hash identifier:          KfiIS3vsyuakZS06UMsMgS4rxutVlSqP6UUXhI6y7yU=
Subject key identifier:   53:27:B0:FC:6A:2E:02:E1:9C:2F:61:BD:A4:41:76:66:8E:AE:3A:96
Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66
Certificate issuer:       /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266
Certificate serial:       0B2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
Manifest number:          0B0C
Signing time:             Fri 08 Aug 2025 19:38:08 +0000
Manifest this update:     Fri 08 Aug 2025 19:38:07 +0000
Manifest next update:     Fri 15 Aug 2025 19:38:07 +0000
Files and hashes:         1: UCfzGS691UlQo5w9EwlKcfHTMmY.crl (hash: D5qTmuKE5N6PqsT/GfQzfx16RVr2gWKH/vYwxL1pokM=)
                          2: F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (hash: YSanlXPMFGlUc59onSU43QiRooXV0uHeNRhQl6sQvzs=)
                          3: CDD62642854E11EBA2CFDC87C4F9AE02.roa (hash: EMIkCzah8q7OcQkgGcb8CJSovHyJ1MV1+D6g6V84DdU=)
                          4: CEFEEFEA854E11EBA2CFDC87C4F9AE02.roa (hash: neskcJ2ryIraX5yGhHnDKoHimVr5nfZfeUgF/8p7xpw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl
                          rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2859 (0xb2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3078, serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266
        Validity
            Not Before: Aug  8 19:38:07 2025 GMT
            Not After : Aug 15 19:38:07 2025 GMT
        Subject: CN=6896521f-a4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:05:10:df:db:d8:d4:21:bd:46:0f:e5:78:
                    23:c3:9f:d0:c0:27:97:e8:36:a0:43:f7:7a:cf:1f:
                    92:95:f3:17:6c:29:2c:10:f8:2f:d4:ac:3f:bb:9a:
                    7a:7e:98:d2:35:35:ba:fd:47:66:3a:0e:ab:70:52:
                    28:b0:2e:a0:80:37:6f:c2:16:a7:8d:d3:f9:76:f0:
                    94:44:5b:0b:b2:8e:9d:82:8b:a2:ce:8b:d7:3f:3a:
                    97:7a:ec:52:67:b5:8d:7a:b5:08:88:72:ae:4d:4b:
                    05:69:32:34:75:8d:1d:4c:77:ed:c1:01:b6:03:3f:
                    48:c5:f6:25:4c:7e:ec:d2:de:01:23:9e:64:d1:47:
                    69:b8:9b:f9:e4:b8:83:51:c3:d9:41:60:bb:31:23:
                    25:b9:93:00:95:55:d2:84:00:ab:56:cd:76:9b:d3:
                    90:09:dc:26:c3:2d:c1:bc:ce:b8:c3:39:9f:ea:31:
                    ef:25:7d:57:9c:2b:ed:da:dd:81:ab:86:59:8e:c3:
                    e6:6a:98:be:db:3d:5f:9f:e7:3c:46:b6:4c:06:da:
                    3a:51:b1:60:9a:0e:af:03:fd:54:be:2a:27:fa:16:
                    a1:41:18:a4:8b:57:36:77:53:9e:c2:38:49:44:80:
                    e5:85:cf:fc:77:5f:6f:5b:10:f1:d1:f6:8e:08:30:
                    ff:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:27:B0:FC:6A:2E:02:E1:9C:2F:61:BD:A4:41:76:66:8E:AE:3A:96
            X509v3 Authority Key Identifier:
                keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d0:a3:b1:ca:a2:87:b4:65:44:67:aa:37:f6:98:79:d4:35:
         68:78:b9:8a:00:d0:9f:2b:7c:8f:70:7c:08:92:fe:b5:aa:0c:
         c6:a7:3c:91:97:af:96:89:5e:0a:42:8b:3f:08:70:ab:76:da:
         54:db:e3:e5:ca:88:14:79:e9:ac:b8:fb:af:32:a8:81:4d:30:
         ad:ad:06:60:3b:17:94:4f:f8:0b:df:c5:5b:a7:29:05:ac:6b:
         9a:31:9c:8a:a0:aa:42:b6:ee:d8:ec:98:45:4e:bd:74:21:f8:
         ff:6a:e8:92:3c:0e:ee:0b:3a:58:60:e4:d0:0f:58:04:37:b0:
         9e:a8:d9:d1:8d:16:0c:7d:36:a0:c3:79:00:a9:86:3e:af:e2:
         74:72:99:83:98:09:e5:75:cb:9e:93:e2:cb:1f:72:bd:f1:1e:
         6c:e4:09:da:cd:ec:be:20:d9:da:35:f5:ec:63:f7:18:3c:03:
         5b:81:a2:22:d3:e3:4b:3e:f1:40:b0:22:6c:1c:d2:c2:c4:5b:
         c7:05:48:98:aa:2e:20:cd:8c:01:d7:18:31:3c:1c:55:b7:e8:
         13:ad:14:b8:9c:6d:5e:44:2c:08:6b:58:09:18:46:eb:09:c9:
         83:b4:3c:ef:fb:0c:01:6a:d0:69:bc:d6:2d:56:22:a0:13:88:
         71:23:66:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTMwNzgxMTAvBgNVBAUTKDUwMjdGMzE5MkVCREQ1NDk1MEEzOUMzRDEzMDk0QTcx
RjFEMzMyNjYwHhcNMjUwODA4MTkzODA3WhcNMjUwODE1MTkzODA3WjAYMRYwFAYD
VQQDEw02ODk2NTIxZi1hNGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAshYFEN/b2NQhvUYP5Xgjw5/QwCeX6DagQ/d6zx+SlfMXbCksEPgv1Kw/u5p6
fpjSNTW6/UdmOg6rcFIosC6ggDdvwhanjdP5dvCURFsLso6dgouizovXPzqXeuxS
Z7WNerUIiHKuTUsFaTI0dY0dTHftwQG2Az9IxfYlTH7s0t4BI55k0UdpuJv55LiD
UcPZQWC7MSMluZMAlVXShACrVs12m9OQCdwmwy3BvM64wzmf6jHvJX1XnCvt2t2B
q4ZZjsPmapi+2z1fn+c8RrZMBto6UbFgmg6vA/1Uvion+hahQRiki1c2d1OewjhJ
RIDlhc/8d19vWxDx0faOCDD/eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMnsPxq
LgLhnC9hvaRBdmaOrjqWMB8GA1UdIwQYMBaAFFAn8xkuvdVJUKOcPRMJSnHx0zJm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMzA3OC84NjMwQjFDODRD
OEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFVbFFvNXc5RXdsS2NmSFRN
bVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VDZnpHUzY5MVVsUW81dzlFd2xLY2ZIVE1tWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MzA3OC84NjMwQjFDODRDOEMxMUVBQjlFMjcwNTdDNEY5QUUwMi9VQ2Z6R1M2OTFV
bFFvNXc5RXdsS2NmSFRNbVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAi0KOxyqKHtGVEZ6o39ph51DVoeLmKANCfK3yPcHwIkv61qgzGpzyR
l6+WiV4KQos/CHCrdtpU2+PlyogUeemsuPuvMqiBTTCtrQZgOxeUT/gL38VbpykF
rGuaMZyKoKpCtu7Y7JhFTr10Ifj/auiSPA7uCzpYYOTQD1gEN7CeqNnRjRYMfTag
w3kAqYY+r+J0cpmDmAnldcuek+LLH3K98R5s5Anazey+INnaNfXsY/cYPANbgaIi
0+NLPvFAsCJsHNLCxFvHBUiYqi4gzYwB1xgxPBxVt+gTrRS4nG1eRCwIa1gJGEbr
CcmDtDzv+wwBatBpvNYtViKgE4hxI2ad
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:28:49 2025 by rpki-client