Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
File:                     uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft (raw, json)
Hash identifier:          wpSg1c47mvprVZvI94BWH7+q+psnOirCW2GIIeK84n4=
Subject key identifier:   96:DA:49:49:4A:E1:FC:21:E6:05:F1:AF:77:58:7F:88:EA:63:DC:1D
Authority key identifier: B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B
Certificate issuer:       /CN=A91B4DC7/serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
Certificate serial:       0384
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
Manifest number:          0375
Signing time:             Sat 09 Aug 2025 01:26:21 +0000
Manifest this update:     Sat 09 Aug 2025 01:26:21 +0000
Manifest next update:     Sat 16 Aug 2025 01:26:21 +0000
Files and hashes:         1: uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl (hash: g8GUq50uhEoL0aU/YjVnUUgk/AjHKIXaFDw4WiKNxkE=)
                          2: F8400A20C80811ED9ADBA05EC4F9AE02.roa (hash: F6jPBh9YlNU7RVZYywXLeNlWgnFuc8x8f5OICDCdyXk=)
                          3: A6168350176711EFA13E2C6DC4F9AE02.roa (hash: 2CbWH78pD8qfhUqfDIT0bY8YAkS+SCmh9qliGFNOvyU=)
                          4: 9ABED502176711EFA0260C6DC4F9AE02.roa (hash: vsntEPAhq1q52SAuxi87DOT8T6ZFM5p3hlzlxYIzgx0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl
                          rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900 (0x384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4DC7, serialNumber=B88911178068D575DFDDF84940CABEAF451C8C2B
        Validity
            Not Before: Aug  9 01:26:21 2025 GMT
            Not After : Aug 16 01:26:21 2025 GMT
        Subject: CN=6896a3bd-2a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:58:ff:03:3a:45:39:77:3f:12:be:b8:99:69:
                    f3:f2:e5:4c:15:f0:2b:3a:36:8a:21:b5:29:7a:3f:
                    4b:ea:9b:26:08:2d:66:2a:61:d4:dc:e0:ac:69:60:
                    be:e9:1a:19:9a:9a:25:41:19:8e:87:5b:ab:c3:06:
                    32:fd:4a:43:20:fc:43:6b:d3:d4:06:ab:8e:85:fc:
                    1e:6c:8f:62:e1:d7:47:6e:ef:95:16:6f:1e:59:39:
                    c4:bb:8b:44:85:c0:1d:21:89:06:8f:a2:9f:c8:fa:
                    37:46:d3:7e:1d:e6:19:8d:fa:87:ce:b8:ee:12:2e:
                    6a:69:9e:1e:fe:ee:ba:25:bb:a2:1e:f3:81:37:78:
                    8a:c8:84:b3:b8:6e:61:26:54:c8:75:64:35:cd:49:
                    55:a8:13:50:39:b3:c1:76:a3:84:0a:20:97:9a:59:
                    50:af:1b:f7:d3:3d:a7:f1:83:cf:fa:04:9b:c2:26:
                    7d:cb:13:66:70:36:4b:4c:78:77:e5:83:ff:61:98:
                    7e:52:e7:a5:15:9b:04:0b:ba:51:26:6f:c6:a4:c9:
                    a3:d3:57:44:d0:eb:3b:53:dd:52:14:9b:db:38:19:
                    af:95:28:ea:15:3a:8d:65:87:9a:4c:9a:2e:e7:b6:
                    c9:75:10:d7:42:29:d9:d7:1c:9f:0f:24:cb:e3:43:
                    7a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:DA:49:49:4A:E1:FC:21:E6:05:F1:AF:77:58:7F:88:EA:63:DC:1D
            X509v3 Authority Key Identifier:
                keyid:B8:89:11:17:80:68:D5:75:DF:DD:F8:49:40:CA:BE:AF:45:1C:8C:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4DC7/F3F1020EBB1011ECB675EF51C4F9AE02/uIkRF4Bo1XXf3fhJQMq-r0UcjCs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:b3:62:e0:2a:62:da:cb:b0:88:15:d9:1d:d6:e6:dd:00:7c:
         5f:f4:de:b6:08:5f:77:c3:f8:ef:4c:74:e0:55:d9:d1:1f:8b:
         56:aa:4c:c6:4d:c4:68:da:aa:04:02:e9:d5:e1:60:ba:a9:a6:
         9b:0c:21:2e:8c:e8:ad:16:17:37:48:5f:52:e9:39:b6:95:8d:
         0b:d4:98:eb:4b:24:7c:96:7a:d0:10:08:19:58:8e:44:f3:c3:
         55:47:18:3d:9d:11:44:59:6d:b0:72:7f:cf:3a:5e:7b:47:b1:
         54:93:33:1e:7a:a1:39:ca:6b:d6:01:01:db:d4:c8:47:68:51:
         88:03:6d:8d:42:95:b6:45:92:1b:00:c1:c8:3a:2c:56:98:c8:
         14:5f:17:3a:f3:a0:f2:02:92:13:7a:8f:ba:09:6a:ff:25:50:
         05:52:08:8e:9b:84:dd:b9:af:96:2f:20:f9:bf:23:1c:6d:d3:
         98:68:53:a5:49:21:a7:c2:a4:ec:88:f0:8a:e2:8c:22:ec:fd:
         9b:49:89:96:4f:c2:88:21:d0:ed:66:27:2a:5d:a4:b4:6d:ff:
         53:c3:99:4f:40:9e:e8:24:c2:d5:ef:4f:22:ab:29:29:9e:df:
         cd:a4:52:b3:fd:24:70:74:b1:a4:1d:b4:01:1f:b2:ac:3e:bc:
         4f:c7:60:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjREQzcxMTAvBgNVBAUTKEI4ODkxMTE3ODA2OEQ1NzVERkRERjg0OTQwQ0FCRUFG
NDUxQzhDMkIwHhcNMjUwODA5MDEyNjIxWhcNMjUwODE2MDEyNjIxWjAYMRYwFAYD
VQQDEw02ODk2YTNiZC0yYTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzlj/AzpFOXc/Er64mWnz8uVMFfArOjaKIbUpej9L6psmCC1mKmHU3OCsaWC+
6RoZmpolQRmOh1urwwYy/UpDIPxDa9PUBquOhfwebI9i4ddHbu+VFm8eWTnEu4tE
hcAdIYkGj6KfyPo3RtN+HeYZjfqHzrjuEi5qaZ4e/u66JbuiHvOBN3iKyISzuG5h
JlTIdWQ1zUlVqBNQObPBdqOECiCXmllQrxv30z2n8YPP+gSbwiZ9yxNmcDZLTHh3
5YP/YZh+UuelFZsEC7pRJm/GpMmj01dE0Os7U91SFJvbOBmvlSjqFTqNZYeaTJou
57bJdRDXQinZ1xyfDyTL40N65QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbaSUlK
4fwh5gXxr3dYf4jqY9wdMB8GA1UdIwQYMBaAFLiJEReAaNV13934SUDKvq9FHIwr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNERDNy9GM0YxMDIwRUJC
MTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFYWGYzZmhKUU1xLXIwVWNq
Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VJa1JGNEJvMVhYZjNmaEpRTXEtcjBVY2pDcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NERDNy9GM0YxMDIwRUJCMTAxMUVDQjY3NUVGNTFDNEY5QUUwMi91SWtSRjRCbzFY
WGYzZmhKUU1xLXIwVWNqQ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRs2LgKmLay7CIFdkd1ubdAHxf9N62CF93w/jvTHTgVdnRH4tWqkzG
TcRo2qoEAunV4WC6qaabDCEujOitFhc3SF9S6Tm2lY0L1JjrSyR8lnrQEAgZWI5E
88NVRxg9nRFEWW2wcn/POl57R7FUkzMeeqE5ymvWAQHb1MhHaFGIA22NQpW2RZIb
AMHIOixWmMgUXxc686DyApITeo+6CWr/JVAFUgiOm4Tdua+WLyD5vyMcbdOYaFOl
SSGnwqTsiPCK4owi7P2bSYmWT8KIIdDtZicqXaS0bf9Tw5lPQJ7oJMLV708iqykp
nt/NpFKz/SRwdLGkHbQBH7KsPrxPx2Cd
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:05:03 2025 by rpki-client