Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
File:                     CcSauZoFYD1stgicc9N2kJhCHgA.mft (raw, json)
Hash identifier:          SfK31aRBA+H4jOGhcB/Hip3F3BCwSpQ1s+mBLjrGVa4=
Subject key identifier:   62:12:84:A4:DE:B9:FD:5C:96:E7:D6:1F:B2:33:76:BD:86:E9:43:D3
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Certificate issuer:       /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial:       014D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
Manifest number:          0144
Signing time:             Sat 23 Aug 2025 04:29:41 +0000
Manifest this update:     Sat 23 Aug 2025 04:29:41 +0000
Manifest next update:     Sat 30 Aug 2025 04:29:41 +0000
Files and hashes:         1: CcSauZoFYD1stgicc9N2kJhCHgA.crl (hash: mKfE9PC/NQvsSRRTau/Is8kuP0GDRuwq9+zcRWHCSQI=)
                          2: 8415F4AA928511EE8AE43D75C4F9AE02.roa (hash: Fl6atygIAOnJfBaO72/s6xAJoCMVco87/j+JtQku3zQ=)
                          3: 7C76E4F6928611EE9B72027FC4F9AE02.roa (hash: Fm2GFDeckTvyapLgYWUd+q+9ZGt0Kt0IDFuGxReJTVw=)
                          4: 7BFABFDE928611EE9B72027FC4F9AE02.roa (hash: kWW5cRDXuhjkk+iiH/wUKjwNBV8vRl665o5zsQhUdP0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
                          rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
        Validity
            Not Before: Aug 23 04:29:41 2025 GMT
            Not After : Aug 30 04:29:41 2025 GMT
        Subject: CN=68a943b5-7a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fc:79:6b:9b:73:57:c4:11:85:e6:20:81:35:
                    6b:97:ad:86:23:8d:b2:18:92:3f:b1:f3:79:88:f0:
                    a2:59:68:5d:ad:90:23:93:50:f8:ed:30:3a:77:df:
                    5b:65:ab:c0:86:31:5a:bc:07:fb:6d:ff:10:90:6f:
                    00:0e:5a:79:88:9e:fb:0a:c8:4d:73:ce:76:81:3d:
                    1d:f0:62:8b:4c:96:0a:46:22:ea:4d:6f:cc:4e:d1:
                    06:ab:aa:a8:ac:f7:ad:2f:a9:e8:5e:e6:b3:e9:51:
                    31:b8:d0:85:d5:00:72:b1:25:0e:69:14:79:e0:46:
                    4e:fe:80:36:86:2b:a7:c7:0b:eb:2b:a2:e5:2e:71:
                    55:3d:69:86:37:e6:ab:7e:16:6e:7d:12:de:30:1c:
                    61:9a:b3:21:cc:a7:14:4c:d1:20:d0:ef:8b:a2:b1:
                    3e:8d:87:1e:db:eb:56:b6:c0:15:a7:de:93:fa:b1:
                    c9:9f:e5:a7:e7:ae:f2:e1:93:60:e2:5f:14:3b:31:
                    dd:63:ac:a5:e6:91:31:2d:aa:ec:c1:62:43:e2:bc:
                    0a:99:a4:ca:97:97:4a:8f:4e:e1:7c:3f:ee:96:8c:
                    59:49:90:3a:80:5e:f5:eb:a2:6c:3e:21:84:90:68:
                    c0:f8:85:ee:1f:c8:e8:bd:1e:35:84:bd:86:53:76:
                    91:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:12:84:A4:DE:B9:FD:5C:96:E7:D6:1F:B2:33:76:BD:86:E9:43:D3
            X509v3 Authority Key Identifier:
                keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:ba:7a:aa:bb:92:a6:9d:c7:5e:7d:8e:e8:ba:a9:be:c7:b1:
         09:98:8a:c2:b9:c3:4b:c2:fd:03:36:79:cc:74:32:77:87:fb:
         75:a8:7c:5e:af:19:78:34:65:67:fa:8d:d8:78:50:36:3a:e6:
         79:53:a5:36:96:9e:e6:a3:1f:2f:a7:9f:17:44:06:45:49:3a:
         6d:2c:39:48:93:e0:e3:10:d7:d5:3f:63:26:18:5a:3d:58:25:
         1b:74:d1:8b:bd:ab:9b:86:c0:cf:a4:fb:5c:98:20:78:5f:81:
         b3:1a:12:9a:89:da:88:22:d7:83:27:80:57:41:8c:0b:26:19:
         bf:35:d8:c6:f9:9e:1c:75:b9:1e:86:5e:80:ad:e4:1c:58:dc:
         7c:7a:b1:e1:55:82:59:93:f0:25:63:2b:72:df:03:e4:f8:b4:
         c2:35:0e:2f:b4:db:0d:ee:34:b1:ff:5c:9e:36:b9:d6:bf:31:
         9c:1a:ed:db:5b:16:72:b9:f2:b5:60:ec:d8:79:e7:9d:b8:b0:
         45:35:ec:40:10:7c:20:6f:67:14:3a:b4:95:34:f8:89:57:c5:
         b5:70:f2:8b:ad:44:3d:f6:88:57:55:0f:dd:6a:95:b9:f7:d2:
         ea:02:3c:3c:d3:6a:fb:12:a2:cd:21:b1:6b:3f:9f:c9:0c:a3:
         62:1d:75:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQxMDkxMTAvBgNVBAUTKDA5QzQ5QUI5OUEwNTYwM0Q2Q0I2MDg5QzczRDM3Njkw
OTg0MjFFMDAwHhcNMjUwODIzMDQyOTQxWhcNMjUwODMwMDQyOTQxWjAYMRYwFAYD
VQQDEw02OGE5NDNiNS03YTliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5/x5a5tzV8QRheYggTVrl62GI42yGJI/sfN5iPCiWWhdrZAjk1D47TA6d99b
ZavAhjFavAf7bf8QkG8ADlp5iJ77CshNc852gT0d8GKLTJYKRiLqTW/MTtEGq6qo
rPetL6noXuaz6VExuNCF1QBysSUOaRR54EZO/oA2hiunxwvrK6LlLnFVPWmGN+ar
fhZufRLeMBxhmrMhzKcUTNEg0O+LorE+jYce2+tWtsAVp96T+rHJn+Wn567y4ZNg
4l8UOzHdY6yl5pExLarswWJD4rwKmaTKl5dKj07hfD/uloxZSZA6gF7166JsPiGE
kGjA+IXuH8jovR41hL2GU3aRXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGIShKTe
uf1clufWH7Izdr2G6UPTMB8GA1UdIwQYMBaAFAnEmrmaBWA9bLYInHPTdpCYQh4A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDEwOS8xNThEOEZDMDky
ODUxMUVFQThDNUQyNERDNEY5QUUwMi9DY1NhdVpvRllEMXN0Z2ljYzlOMmtKaENI
Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NjU2F1Wm9GWUQxc3RnaWNjOU4ya0poQ0hnQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDEwOS8xNThEOEZDMDkyODUxMUVFQThDNUQyNERDNEY5QUUwMi9DY1NhdVpvRllE
MXN0Z2ljYzlOMmtKaENIZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDnunqqu5KmncdefY7ouqm+x7EJmIrCucNLwv0DNnnMdDJ3h/t1qHxe
rxl4NGVn+o3YeFA2OuZ5U6U2lp7mox8vp58XRAZFSTptLDlIk+DjENfVP2MmGFo9
WCUbdNGLvaubhsDPpPtcmCB4X4GzGhKaidqIIteDJ4BXQYwLJhm/NdjG+Z4cdbke
hl6AreQcWNx8erHhVYJZk/AlYyty3wPk+LTCNQ4vtNsN7jSx/1yeNrnWvzGcGu3b
WxZyufK1YOzYeeeduLBFNexAEHwgb2cUOrSVNPiJV8W1cPKLrUQ99ohXVQ/dapW5
99LqAjw802r7EqLNIbFrP5/JDKNiHXW5
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:02:56 2025 by rpki-client