Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
File:                     UjrFjamEDQscqom9_54NzkZ2fEo.mft (raw, json)
Hash identifier:          UmgUsvt5JXzpAqCaBa0CFit5i0zw2Z/oWzC+MFq7Moo=
Subject key identifier:   A3:9F:9C:32:EB:A7:78:BB:A2:A3:8D:5F:C3:B1:A6:F7:A5:4C:9E:6C
Authority key identifier: 52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A
Certificate issuer:       /CN=A9124B27/serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
Manifest number:          80
Signing time:             Sat 23 Aug 2025 06:58:49 +0000
Manifest this update:     Sat 23 Aug 2025 06:58:49 +0000
Manifest next update:     Sat 30 Aug 2025 06:58:49 +0000
Files and hashes:         1: UjrFjamEDQscqom9_54NzkZ2fEo.crl (hash: p2jaQkmIR+CbmdpmdiRWrjEuHMRTQ/S7OHjU8ahaqNk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl
                          rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:58:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124B27, serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
        Validity
            Not Before: Aug 23 06:58:49 2025 GMT
            Not After : Aug 30 06:58:49 2025 GMT
        Subject: CN=68a966a9-3b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b7:a4:a3:96:64:99:f8:b6:b1:3f:26:1f:bc:
                    62:32:14:bf:2a:fa:18:73:14:18:c3:09:7f:c8:49:
                    0d:8a:f8:f7:b8:b4:42:c0:06:aa:ee:87:7b:b5:74:
                    32:ed:f1:a6:56:ec:5e:4d:e8:42:03:75:89:ef:c7:
                    f2:fa:9b:7a:e4:4a:03:ca:34:e0:40:f4:6f:11:c8:
                    e4:d8:dc:e1:04:c9:12:ae:92:fc:11:ad:23:1f:89:
                    af:5a:2b:53:55:c5:76:69:a0:b8:a2:58:4b:b8:ef:
                    ba:6f:c5:c3:9e:8d:f2:81:36:a3:3c:75:80:9f:2c:
                    d0:5c:22:f9:cf:6c:f3:1f:44:1d:04:a0:36:d7:2c:
                    15:83:94:2c:97:d2:3e:10:c0:e8:18:40:c6:82:90:
                    da:99:bc:12:be:d9:95:71:e9:ba:e4:fc:20:12:33:
                    74:a0:90:40:97:e8:44:49:ea:d0:6d:5e:e5:5d:18:
                    6b:54:26:f5:74:f3:cc:53:8a:ca:4b:d9:8a:8a:a3:
                    3c:94:30:1a:77:56:2d:5f:11:30:fb:d1:72:23:f2:
                    2a:c2:b3:bf:9e:1f:15:01:8f:ea:54:c2:bc:0c:92:
                    07:ef:44:8d:43:70:a3:3f:a4:5f:b8:25:1a:dc:2a:
                    ca:b8:bb:8d:7c:b4:91:7b:2e:eb:cb:4e:15:ee:24:
                    8d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9F:9C:32:EB:A7:78:BB:A2:A3:8D:5F:C3:B1:A6:F7:A5:4C:9E:6C
            X509v3 Authority Key Identifier:
                keyid:52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b5:b0:2d:32:6e:a1:a4:0b:c4:cb:3d:5d:98:ac:44:69:70:
         e7:04:cc:fc:4b:ef:cc:f9:8f:ac:f7:83:47:03:92:33:06:45:
         ef:06:ae:63:32:67:1e:55:71:48:30:38:6f:bf:cb:d0:e5:12:
         76:ac:78:d4:d5:10:7b:cb:e8:4d:36:19:d1:2c:e6:36:6d:bf:
         4d:08:65:d3:6b:68:80:90:21:30:7c:3d:18:85:26:4d:8b:24:
         eb:ca:b1:b8:aa:ea:dc:31:bd:96:6d:fc:be:c6:8b:37:3c:c6:
         5b:9b:fd:dd:ec:f9:18:c0:09:06:a7:07:3a:bb:56:16:d2:ea:
         fc:60:e3:35:0b:6a:de:20:7d:cc:a9:ec:08:e0:16:4c:e8:50:
         e7:76:3a:6b:f0:a7:45:a4:71:e2:6e:50:1c:e1:1a:bf:46:8c:
         ad:44:e5:54:27:04:0c:60:88:78:8d:5d:a3:20:90:bf:0b:7b:
         09:32:eb:5d:7e:f8:b3:a5:8d:99:9d:77:2a:f0:a3:4a:d9:a3:
         ff:28:da:d8:8d:38:a7:54:f0:ab:04:5c:c5:5f:8f:5e:3b:69:
         b0:95:13:86:6b:4d:4d:51:5b:ad:80:97:9e:0f:ad:ee:08:c5:
         9c:c6:8f:05:b8:d9:e8:b7:1d:6f:6e:6a:f1:d3:15:33:85:14:
         2b:e0:9a:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjRCMjcxMTAvBgNVBAUTKDUyM0FDNThEQTk4NDBEMEIxQ0FBODlCREZGOUUwRENF
NDY3NjdDNEEwHhcNMjUwODIzMDY1ODQ5WhcNMjUwODMwMDY1ODQ5WjAYMRYwFAYD
VQQDEw02OGE5NjZhOS0zYjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxbeko5Zkmfi2sT8mH7xiMhS/KvoYcxQYwwl/yEkNivj3uLRCwAaq7od7tXQy
7fGmVuxeTehCA3WJ78fy+pt65EoDyjTgQPRvEcjk2NzhBMkSrpL8Ea0jH4mvWitT
VcV2aaC4olhLuO+6b8XDno3ygTajPHWAnyzQXCL5z2zzH0QdBKA21ywVg5Qsl9I+
EMDoGEDGgpDambwSvtmVcem65PwgEjN0oJBAl+hESerQbV7lXRhrVCb1dPPMU4rK
S9mKiqM8lDAad1YtXxEw+9FyI/IqwrO/nh8VAY/qVMK8DJIH70SNQ3CjP6RfuCUa
3CrKuLuNfLSRey7ry04V7iSN/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKOfnDLr
p3i7oqONX8OxpvelTJ5sMB8GA1UdIwQYMBaAFFI6xY2phA0LHKqJvf+eDc5GdnxK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEIyNy81MDA2MThEQ0M2
RTgxMUVGODdBRTY5MERDNEY5QUUwMi9VanJGamFtRURRc2Nxb205XzU0TnprWjJm
RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VqckZqYW1FRFFzY3FvbTlfNTROemtaMmZFby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NEIyNy81MDA2MThEQ0M2RTgxMUVGODdBRTY5MERDNEY5QUUwMi9VanJGamFtRURR
c2Nxb205XzU0TnprWjJmRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8tbAtMm6hpAvEyz1dmKxEaXDnBMz8S+/M+Y+s94NHA5IzBkXvBq5j
MmceVXFIMDhvv8vQ5RJ2rHjU1RB7y+hNNhnRLOY2bb9NCGXTa2iAkCEwfD0YhSZN
iyTryrG4qurcMb2Wbfy+xos3PMZbm/3d7PkYwAkGpwc6u1YW0ur8YOM1C2reIH3M
qewI4BZM6FDndjpr8KdFpHHiblAc4Rq/RoytROVUJwQMYIh4jV2jIJC/C3sJMutd
fvizpY2ZnXcq8KNK2aP/KNrYjTinVPCrBFzFX49eO2mwlROGa01NUVutgJeeD63u
CMWcxo8FuNnotx1vbmrx0xUzhRQr4JpL
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:59:24 2025 by rpki-client