Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
File:                     UBJV6QF6Y3iSbTaute_xnEXWV04.mft (raw, json)
Hash identifier:          biv0S+fK8ncJxHMRFefRL13an/DIqRMXHn7inw4Zwlk=
Subject key identifier:   BF:84:33:92:3F:6F:AF:59:FA:16:6C:2E:01:36:73:DA:C4:CE:0C:8B
Authority key identifier: 50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E
Certificate issuer:       /CN=A916523A/serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
Manifest number:          0C
Signing time:             Thu 03 Jul 2025 08:25:18 +0000
Manifest this update:     Thu 03 Jul 2025 08:25:18 +0000
Manifest next update:     Thu 10 Jul 2025 08:25:18 +0000
Files and hashes:         1: UBJV6QF6Y3iSbTaute_xnEXWV04.crl (hash: clp4zBEpiaUe0WH++Y/z+BV4PURVd+SYyFd3xF1fOVU=)
                          2: 6654FB224CDE11F092AD8884C4F9AE02.roa (hash: liQT4xahQ5o7fJUAyQXDum5T6VsmCHKLCFUQqV7AJDM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl
                          rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916523A, serialNumber=501255E9017A6378926D36AEB5EFF19C45D6574E
        Validity
            Not Before: Jul  3 08:25:18 2025 GMT
            Not After : Jul 10 08:25:18 2025 GMT
        Subject: CN=68663e6e-01b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:76:63:ca:98:dd:fa:a3:e9:1d:75:0c:c4:94:
                    af:3e:35:5f:17:36:d3:50:e2:ae:e2:13:ef:40:db:
                    be:40:d4:24:4e:a5:61:7e:dd:ea:48:67:0a:22:a9:
                    be:fb:b8:97:73:68:2e:2f:ff:4c:f4:fe:a1:20:8d:
                    30:80:59:8d:d8:e1:95:dd:95:ad:3f:68:dd:fb:82:
                    d3:b4:45:d0:d8:7d:fa:2b:1b:94:af:cc:06:91:74:
                    c8:c3:68:45:be:c8:ec:2f:20:1d:cc:7d:d7:54:3e:
                    fd:53:1b:f3:93:8d:c0:8b:e3:af:70:51:33:48:b2:
                    a3:3c:75:6c:ef:8e:e9:d2:fc:07:8c:db:6c:f3:c2:
                    c0:d1:3e:61:92:ee:04:85:6c:21:6a:58:c5:ae:33:
                    0c:c1:00:f0:e8:98:44:16:ca:58:15:73:39:1d:22:
                    2d:a7:c4:c8:71:f4:d7:e2:7d:45:cc:18:62:35:32:
                    39:3f:c7:f8:08:76:83:a3:78:6f:ba:32:9f:c8:6a:
                    5b:b7:e9:b3:b4:10:0a:fd:5a:8c:c1:a7:cf:a7:83:
                    e7:1d:fc:ed:e9:bc:7d:af:47:6d:cc:60:8c:cc:92:
                    a8:72:32:cd:20:1c:1b:2b:5d:68:f9:8f:5a:87:0f:
                    c8:22:c6:27:79:b9:5b:9b:65:cd:30:c3:fc:ad:7e:
                    1d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:84:33:92:3F:6F:AF:59:FA:16:6C:2E:01:36:73:DA:C4:CE:0C:8B
            X509v3 Authority Key Identifier:
                keyid:50:12:55:E9:01:7A:63:78:92:6D:36:AE:B5:EF:F1:9C:45:D6:57:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UBJV6QF6Y3iSbTaute_xnEXWV04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916523A/DE82CB484CDD11F0BFA08F80C4F9AE02/UBJV6QF6Y3iSbTaute_xnEXWV04.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:6f:be:b5:1e:ca:38:eb:01:cc:3b:ad:23:38:ce:c0:47:c0:
         42:92:72:c3:b6:cf:86:e8:75:8f:a7:81:2c:cf:aa:a7:b7:06:
         eb:67:55:06:89:f4:f3:0b:8b:38:e8:12:9d:43:75:9d:8a:52:
         c7:6b:d8:9c:a8:60:56:e7:72:9d:69:78:22:a5:1d:c8:4a:ac:
         6b:f7:7d:76:65:8e:41:d5:53:28:f5:a9:5f:f9:41:11:3a:4a:
         bd:ad:63:70:3a:12:e0:27:da:80:a0:2b:dc:ad:6c:56:2b:6c:
         a4:5a:75:70:e3:1f:9c:6e:31:49:4f:83:09:0f:5d:15:57:34:
         01:fe:a8:0c:08:ea:25:ee:a3:cd:6c:3e:70:12:62:fe:9a:7c:
         e9:cc:0c:df:b8:73:43:e8:60:ac:64:c7:0c:d8:94:22:c0:6c:
         79:a4:a4:1c:6b:64:a6:18:07:6e:41:ca:22:e7:cb:c1:77:17:
         2c:43:d2:38:2c:a7:b4:39:70:d1:15:2d:65:d0:f0:b5:5a:38:
         1d:90:4c:b4:4a:18:6a:5d:aa:1c:90:b9:b2:09:64:21:f9:fd:
         cd:08:61:e4:c5:ee:78:f8:ee:66:1e:a7:6f:6d:b8:17:9e:cb:
         13:47:1d:d2:f4:b3:4b:c5:40:a2:42:c7:8a:ba:1c:7a:13:13:
         25:db:04:49
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NTIzQTExMC8GA1UEBRMoNTAxMjU1RTkwMTdBNjM3ODkyNkQzNkFFQjVFRkYxOUM0
NUQ2NTc0RTAeFw0yNTA3MDMwODI1MThaFw0yNTA3MTAwODI1MThaMBgxFjAUBgNV
BAMTDTY4NjYzZTZlLTAxYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYdmPKmN36o+kddQzElK8+NV8XNtNQ4q7iE+9A275A1CROpWF+3epIZwoiqb77
uJdzaC4v/0z0/qEgjTCAWY3Y4ZXdla0/aN37gtO0RdDYfforG5SvzAaRdMjDaEW+
yOwvIB3MfddUPv1TG/OTjcCL469wUTNIsqM8dWzvjunS/AeM22zzwsDRPmGS7gSF
bCFqWMWuMwzBAPDomEQWylgVczkdIi2nxMhx9NfifUXMGGI1Mjk/x/gIdoOjeG+6
Mp/Ialu36bO0EAr9WozBp8+ng+cd/O3pvH2vR23MYIzMkqhyMs0gHBsrXWj5j1qH
D8gixid5uVubZc0ww/ytfh3VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUv4Qzkj9v
r1n6FmwuATZz2sTODIswHwYDVR0jBBgwFoAUUBJV6QF6Y3iSbTaute/xnEXWV04w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1MjNBL0RFODJDQjQ4NENE
RDExRjBCRkEwOEY4MEM0RjlBRTAyL1VCSlY2UUY2WTNpU2JUYXV0ZV94bkVYV1Yw
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVUJKVjZRRjZZM2lTYlRhdXRlX3huRVhXVjA0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1
MjNBL0RFODJDQjQ4NENERDExRjBCRkEwOEY4MEM0RjlBRTAyL1VCSlY2UUY2WTNp
U2JUYXV0ZV94bkVYV1YwNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHtvvrUeyjjrAcw7rSM4zsBHwEKScsO2z4bodY+ngSzPqqe3ButnVQaJ
9PMLizjoEp1DdZ2KUsdr2JyoYFbncp1peCKlHchKrGv3fXZljkHVUyj1qV/5QRE6
Sr2tY3A6EuAn2oCgK9ytbFYrbKRadXDjH5xuMUlPgwkPXRVXNAH+qAwI6iXuo81s
PnASYv6afOnMDN+4c0PoYKxkxwzYlCLAbHmkpBxrZKYYB25ByiLny8F3FyxD0jgs
p7Q5cNEVLWXQ8LVaOB2QTLRKGGpdqhyQubIJZCH5/c0IYeTF7nj47mYep29tuBee
yxNHHdL0s0vFQKJCx4q6HHoTEyXbBEk=
-----END CERTIFICATE-----
Generated at Fri Jul 4 00:04:51 2025 by rpki-client