Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
File:                     uttpn6AqlXLm70n0-Rof4Kc8LI0.mft (raw, json)
Hash identifier:          /zUEKdtatRAr3tfx2+vMRcwQ3JMRE8vPAEKja5Pom9g=
Subject key identifier:   42:47:A8:17:0F:11:F3:EB:D6:21:67:36:5A:EA:22:59:03:0C:0A:16
Authority key identifier: BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D
Certificate issuer:       /CN=A91E27B9/serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D
Certificate serial:       082E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
Manifest number:          0819
Signing time:             Fri 08 Aug 2025 21:17:55 +0000
Manifest this update:     Fri 08 Aug 2025 21:17:54 +0000
Manifest next update:     Fri 15 Aug 2025 21:17:54 +0000
Files and hashes:         1: uttpn6AqlXLm70n0-Rof4Kc8LI0.crl (hash: fQOkWAXYq+iA3z/V0tIwaD1xMpHmTM85xpMuOJLwQvA=)
                          2: C8BD376C3ADF11EC85EB255FC4F9AE02.roa (hash: wZOUAFh3yH4xpJik8Ps1Fk72+HENAnV8sf4x6n94egk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl
                          rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2094 (0x82e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E27B9, serialNumber=BADB699FA02A9572E6EF49F4F91A1FE0A73C2C8D
        Validity
            Not Before: Aug  8 21:17:54 2025 GMT
            Not After : Aug 15 21:17:54 2025 GMT
        Subject: CN=68966982-12d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8f:f7:3e:1e:25:61:0c:65:92:3f:d2:35:70:
                    97:6f:2e:26:3f:57:fb:01:14:15:16:ad:9f:21:b6:
                    59:2c:39:82:3b:25:47:53:c9:b5:e3:45:a0:e7:7d:
                    10:43:f3:00:66:3b:d6:e4:82:9a:2a:ab:78:be:41:
                    60:e9:41:9b:5e:cd:02:ed:3c:aa:68:a3:bc:8f:3f:
                    be:fb:60:b5:9d:a4:97:6f:21:54:2a:c9:1d:72:7a:
                    90:f5:b1:65:5f:7b:88:06:04:7f:20:96:a2:6c:d3:
                    db:4f:e7:33:47:af:1f:2e:0e:30:1a:72:ed:a0:4a:
                    e0:48:31:d6:d9:d1:a6:f2:84:22:50:f1:0b:57:bd:
                    e8:1a:fa:cd:72:39:5b:f4:d5:93:bd:b6:9d:29:46:
                    ac:7a:40:ed:81:a9:c5:6a:ac:0a:bf:a8:14:c6:ba:
                    af:44:e2:fe:f9:c7:07:7b:3a:0a:bf:78:e1:21:ef:
                    c8:eb:ce:18:9b:e1:5c:9f:5e:be:89:e9:2e:9a:23:
                    d3:2d:9f:9c:ab:c5:82:a3:29:74:61:fb:f7:80:2c:
                    d7:e6:5c:e6:87:9d:cb:b4:79:3a:8c:73:57:fd:d8:
                    2c:58:5d:b7:61:a1:c7:64:da:db:aa:41:a3:2b:58:
                    da:da:cb:18:44:cf:70:a9:51:12:af:23:df:92:d5:
                    4e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:47:A8:17:0F:11:F3:EB:D6:21:67:36:5A:EA:22:59:03:0C:0A:16
            X509v3 Authority Key Identifier:
                keyid:BA:DB:69:9F:A0:2A:95:72:E6:EF:49:F4:F9:1A:1F:E0:A7:3C:2C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uttpn6AqlXLm70n0-Rof4Kc8LI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E27B9/84BA7482F0CE11EA891B2C76C4F9AE02/uttpn6AqlXLm70n0-Rof4Kc8LI0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:55:3a:49:65:ce:91:77:2b:58:eb:c3:f9:02:64:a1:83:12:
         4f:95:8a:c7:ab:45:e0:ef:fb:bc:23:6b:79:b6:09:36:c1:98:
         25:d5:80:e1:29:3b:bf:86:2b:6d:3b:6d:d5:8c:95:0b:df:86:
         71:6a:f3:8f:bd:b8:c5:fc:3f:36:02:27:d2:d3:bb:28:6a:7a:
         f9:23:c7:48:fc:9a:9c:b3:b8:f8:a6:e7:49:55:97:c6:d3:cb:
         83:ba:ea:15:b5:7f:d5:e0:a7:72:d8:f1:3f:0c:b6:34:4d:70:
         01:8f:49:f1:75:61:2e:5c:56:cd:1a:d7:d6:96:ab:92:7a:f9:
         43:9b:fe:e2:bd:db:86:40:d2:5c:cc:7a:e3:01:0d:a6:ea:89:
         54:3d:e4:be:ca:34:0d:f4:e2:89:9a:ef:c7:48:3e:00:63:19:
         31:bb:34:b0:5a:f1:ab:a3:c1:f0:2a:e4:18:78:23:be:80:28:
         82:07:f1:45:e1:a8:59:8c:92:8a:75:09:25:4d:37:93:c9:54:
         17:72:4d:6b:33:b0:c7:93:8b:3b:d6:d1:10:2d:c8:54:cc:02:
         a9:59:b0:80:80:a2:73:00:cc:ec:51:bf:06:08:6f:46:ad:26:
         40:bd:5d:da:62:6c:64:70:18:59:07:e8:bf:30:bf:12:b0:1a:
         30:56:73:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI3QjkxMTAvBgNVBAUTKEJBREI2OTlGQTAyQTk1NzJFNkVGNDlGNEY5MUExRkUw
QTczQzJDOEQwHhcNMjUwODA4MjExNzU0WhcNMjUwODE1MjExNzU0WjAYMRYwFAYD
VQQDEw02ODk2Njk4Mi0xMmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtI/3Ph4lYQxlkj/SNXCXby4mP1f7ARQVFq2fIbZZLDmCOyVHU8m140Wg530Q
Q/MAZjvW5IKaKqt4vkFg6UGbXs0C7TyqaKO8jz+++2C1naSXbyFUKskdcnqQ9bFl
X3uIBgR/IJaibNPbT+czR68fLg4wGnLtoErgSDHW2dGm8oQiUPELV73oGvrNcjlb
9NWTvbadKUasekDtganFaqwKv6gUxrqvROL++ccHezoKv3jhIe/I684Ym+Fcn16+
iekumiPTLZ+cq8WCoyl0Yfv3gCzX5lzmh53LtHk6jHNX/dgsWF23YaHHZNrbqkGj
K1ja2ssYRM9wqVESryPfktVOMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEJHqBcP
EfPr1iFnNlrqIlkDDAoWMB8GA1UdIwQYMBaAFLrbaZ+gKpVy5u9J9PkaH+CnPCyN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjdCOS84NEJBNzQ4MkYw
Q0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxYTG03MG4wLVJvZjRLYzhM
STAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V0dHBuNkFxbFhMbTcwbjAtUm9mNEtjOExJMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MjdCOS84NEJBNzQ4MkYwQ0UxMUVBODkxQjJDNzZDNEY5QUUwMi91dHRwbjZBcWxY
TG03MG4wLVJvZjRLYzhMSTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAzVTpJZc6RdytY68P5AmShgxJPlYrHq0Xg7/u8I2t5tgk2wZgl1YDh
KTu/hittO23VjJUL34ZxavOPvbjF/D82AifS07soanr5I8dI/Jqcs7j4pudJVZfG
08uDuuoVtX/V4Kdy2PE/DLY0TXABj0nxdWEuXFbNGtfWlquSevlDm/7ivduGQNJc
zHrjAQ2m6olUPeS+yjQN9OKJmu/HSD4AYxkxuzSwWvGro8HwKuQYeCO+gCiCB/FF
4ahZjJKKdQklTTeTyVQXck1rM7DHk4s71tEQLchUzAKpWbCAgKJzAMzsUb8GCG9G
rSZAvV3aYmxkcBhZB+i/ML8SsBowVnMP
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:21:22 2025 by rpki-client