Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
File:                     UhRr8Q81lfF6kjn1NmTdbAE-L58.mft (raw, json)
Hash identifier:          gfs7Jw0sAC7b9O0BKSJ2T7P5yjJGK4admDxdOiNl9kY=
Subject key identifier:   58:4E:CA:44:F0:55:57:9C:C8:D7:00:86:5D:CC:C2:6E:11:FC:3C:A4
Authority key identifier: 52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F
Certificate issuer:       /CN=A912B8A1/serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
Certificate serial:       0309
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
Manifest number:          0305
Signing time:             Thu 03 Jul 2025 01:37:36 +0000
Manifest this update:     Thu 03 Jul 2025 01:37:35 +0000
Manifest next update:     Thu 10 Jul 2025 01:37:35 +0000
Files and hashes:         1: UhRr8Q81lfF6kjn1NmTdbAE-L58.crl (hash: 4qk8l2XziMMooO54GaKTaMqW5VKG193K1Z0v4Of4Loo=)
                          2: 1A922B26DCD711EC87E30728C4F9AE02.roa (hash: XEGSj7dQ6VTCZmneur6OMrLP6cXWkey7miJkuempT94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl
                          rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 777 (0x309)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B8A1, serialNumber=52146BF10F3595F17A9239F53664DD6C013E2F9F
        Validity
            Not Before: Jul  3 01:37:35 2025 GMT
            Not After : Jul 10 01:37:35 2025 GMT
        Subject: CN=6865dedf-b212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:26:45:b2:c3:66:46:18:af:2c:f8:b0:50:
                    4c:f9:7d:48:e7:e6:b0:5c:aa:67:f3:ed:1b:09:21:
                    07:ed:59:21:67:a8:ad:fd:a0:e3:cd:f9:0f:9a:94:
                    54:17:aa:eb:ca:74:2b:dc:ee:e4:e5:e9:62:1f:2c:
                    fa:78:80:76:3b:5d:66:d9:e0:76:0a:77:ef:cd:81:
                    04:ee:0b:8a:40:da:d0:ef:e3:67:81:99:00:b5:06:
                    fc:ae:ef:d0:8a:75:12:46:8b:ac:61:b4:af:1a:6d:
                    c0:29:12:67:5b:e0:f8:f8:d0:34:d5:d9:a7:a4:08:
                    22:79:45:4f:74:cb:dc:d5:5d:40:3f:c5:08:36:b4:
                    d2:11:7d:dd:68:59:74:ad:97:f9:dd:02:45:14:31:
                    e6:a2:a4:2c:18:9f:70:14:c5:c6:52:5f:d0:8c:2b:
                    b0:2d:26:7d:48:34:d5:06:f9:82:3c:46:bb:f5:1e:
                    01:be:fe:11:e5:7d:be:ca:bb:18:d2:f8:3e:6d:d2:
                    76:38:96:6f:e3:8e:11:a6:6d:18:0a:9c:74:46:67:
                    3f:6c:48:c2:c2:a1:17:bc:58:c3:2c:93:00:03:4f:
                    12:ac:27:e4:79:00:27:12:cc:29:c6:f5:19:61:92:
                    3a:32:4a:fa:f5:7d:33:17:55:84:2a:05:1f:49:48:
                    7e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:4E:CA:44:F0:55:57:9C:C8:D7:00:86:5D:CC:C2:6E:11:FC:3C:A4
            X509v3 Authority Key Identifier:
                keyid:52:14:6B:F1:0F:35:95:F1:7A:92:39:F5:36:64:DD:6C:01:3E:2F:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UhRr8Q81lfF6kjn1NmTdbAE-L58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B8A1/A1119CA0DCD111ECBA66D637C4F9AE02/UhRr8Q81lfF6kjn1NmTdbAE-L58.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:7e:0a:2f:cb:13:0c:cd:33:f8:0d:29:87:1a:68:ad:92:a7:
         88:2b:9e:eb:1a:f4:c3:ee:f8:b3:f4:25:0e:aa:73:93:f8:6d:
         03:ec:b7:61:50:f5:7f:a9:9f:fe:1a:8e:cc:6b:82:e1:e6:59:
         ba:f3:a7:d1:74:ab:90:24:44:e2:04:eb:53:cc:05:0e:74:4a:
         e7:2a:17:1d:96:71:a5:60:9b:bb:c1:b5:84:aa:59:53:a3:dd:
         ed:d8:71:14:37:9f:7a:3f:a9:4d:64:f9:bf:4a:d2:65:4c:e3:
         25:4e:6f:b3:0b:5d:bc:39:e7:8a:f5:fa:ad:16:c6:97:61:0a:
         07:fc:94:8b:7b:a4:7d:d4:a2:5b:4a:95:b4:33:67:81:fb:71:
         12:30:fd:0a:11:03:50:27:ec:9c:68:70:cf:03:7a:4c:cb:26:
         3c:b0:01:f9:aa:25:95:c2:bc:7d:89:15:cc:b0:22:d3:97:2e:
         5a:1e:0a:c6:fe:0c:fe:46:d7:05:a9:59:e3:f5:c9:df:97:ed:
         5d:f0:0c:6a:62:72:1e:77:f7:1d:5c:1b:a9:4d:0c:22:a4:57:
         2f:6a:6f:8a:ac:64:e9:1e:73:90:23:00:51:88:0f:07:be:71:
         6f:18:66:18:d2:87:85:de:30:39:cf:4f:01:b4:fe:39:e1:43:
         86:e6:89:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkI4QTExMTAvBgNVBAUTKDUyMTQ2QkYxMEYzNTk1RjE3QTkyMzlGNTM2NjRERDZD
MDEzRTJGOUYwHhcNMjUwNzAzMDEzNzM1WhcNMjUwNzEwMDEzNzM1WjAYMRYwFAYD
VQQDEw02ODY1ZGVkZi1iMjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArWMmRbLDZkYYryz4sFBM+X1I5+awXKpn8+0bCSEH7VkhZ6it/aDjzfkPmpRU
F6rrynQr3O7k5eliHyz6eIB2O11m2eB2CnfvzYEE7guKQNrQ7+NngZkAtQb8ru/Q
inUSRousYbSvGm3AKRJnW+D4+NA01dmnpAgieUVPdMvc1V1AP8UINrTSEX3daFl0
rZf53QJFFDHmoqQsGJ9wFMXGUl/QjCuwLSZ9SDTVBvmCPEa79R4Bvv4R5X2+yrsY
0vg+bdJ2OJZv444Rpm0YCpx0Rmc/bEjCwqEXvFjDLJMAA08SrCfkeQAnEswpxvUZ
YZI6Mkr69X0zF1WEKgUfSUh+BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFhOykTw
VVecyNcAhl3Mwm4R/DykMB8GA1UdIwQYMBaAFFIUa/EPNZXxepI59TZk3WwBPi+f
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjhBMS9BMTExOUNBMERD
RDExMUVDQkE2NkQ2MzdDNEY5QUUwMi9VaFJyOFE4MWxmRjZram4xTm1UZGJBRS1M
NTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VoUnI4UTgxbGZGNmtqbjFObVRkYkFFLUw1OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjhBMS9BMTExOUNBMERDRDExMUVDQkE2NkQ2MzdDNEY5QUUwMi9VaFJyOFE4MWxm
RjZram4xTm1UZGJBRS1MNTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJfgovyxMMzTP4DSmHGmitkqeIK57rGvTD7viz9CUOqnOT+G0D7Ldh
UPV/qZ/+Go7Ma4Lh5lm686fRdKuQJETiBOtTzAUOdErnKhcdlnGlYJu7wbWEqllT
o93t2HEUN596P6lNZPm/StJlTOMlTm+zC128OeeK9fqtFsaXYQoH/JSLe6R91KJb
SpW0M2eB+3ESMP0KEQNQJ+ycaHDPA3pMyyY8sAH5qiWVwrx9iRXMsCLTly5aHgrG
/gz+RtcFqVnj9cnfl+1d8AxqYnIed/cdXBupTQwipFcvam+KrGTpHnOQIwBRiA8H
vnFvGGYY0oeF3jA5z08BtP454UOG5olQ
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:27:58 2025 by rpki-client