Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
File:                     UHF-n6DMN8QGf4M-kPt-chDzxZM.mft (raw, json)
Hash identifier:          MvRMTCA4LalbpdRhkGAN1psKnL3Jcah4130qbZDkiD0=
Subject key identifier:   BD:7F:0B:81:FD:1F:11:AD:B8:C5:29:60:C6:9B:1C:27:D5:AF:D2:0C
Authority key identifier: 50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93
Certificate issuer:       /CN=A917552B/serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593
Certificate serial:       075F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
Manifest number:          0759
Signing time:             Wed 14 May 2025 21:41:55 +0000
Manifest this update:     Wed 14 May 2025 21:41:54 +0000
Manifest next update:     Wed 21 May 2025 21:41:54 +0000
Files and hashes:         1: UHF-n6DMN8QGf4M-kPt-chDzxZM.crl (hash: 95EFAOae+KZ1JjlT8uFK3TtDa1qOcuTaAZLvtdcWfj0=)
                          2: BDAC3ACA1E7111EB93874336C4F9AE02.roa (hash: nkmWs3iqAu0OPxxjsFN0b2stVXj3stQjYTM1Oq4SJSE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl
                          rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 21:41:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917552B, serialNumber=50717E9FA0CC37C4067F833E90FB7E7210F3C593
        Validity
            Not Before: May 14 21:41:54 2025 GMT
            Not After : May 21 21:41:54 2025 GMT
        Subject: CN=68250e23-b653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2a:50:7c:80:80:2e:57:0d:85:aa:8c:15:c3:
                    5f:f1:b4:65:89:ea:8d:68:f8:b4:2b:04:c6:d8:91:
                    5e:e2:ee:cf:19:3a:6e:17:a1:a9:ea:b4:af:48:f6:
                    07:6b:82:bb:0b:8a:6d:83:f3:e8:67:16:5a:c8:4d:
                    a0:6c:56:8b:97:8b:cf:c6:98:cc:ef:51:73:7d:ea:
                    0e:60:6c:55:cc:ca:d2:f8:6b:31:1f:00:3a:0d:cb:
                    7a:c6:8c:e2:43:5c:8e:ec:51:3f:30:0e:ea:2b:d9:
                    8a:2c:67:c2:41:e6:32:2d:8a:84:7e:4a:68:36:46:
                    35:5f:18:f3:c0:be:52:39:fb:2a:29:86:b9:0d:03:
                    bc:d5:1c:e6:42:f3:32:ce:aa:20:e9:b7:e5:e3:99:
                    eb:e4:d6:11:b4:41:06:d7:65:d6:da:ef:cf:12:64:
                    4b:9d:c0:34:5d:53:76:2f:e8:89:5a:13:6d:3c:29:
                    85:d7:66:b8:66:8d:a8:43:a2:f1:4c:50:ce:3e:1f:
                    c2:d6:ed:19:e5:77:d3:f3:ab:45:b9:55:53:0c:c6:
                    f6:6a:be:4a:5b:c2:f4:a2:80:1d:dd:d0:38:34:ee:
                    ac:1c:e3:b0:94:14:17:1c:2f:c7:20:80:c2:a8:ea:
                    66:03:4a:5f:b0:20:47:00:cd:83:f1:bd:84:fa:83:
                    7e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7F:0B:81:FD:1F:11:AD:B8:C5:29:60:C6:9B:1C:27:D5:AF:D2:0C
            X509v3 Authority Key Identifier:
                keyid:50:71:7E:9F:A0:CC:37:C4:06:7F:83:3E:90:FB:7E:72:10:F3:C5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHF-n6DMN8QGf4M-kPt-chDzxZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917552B/D83D62941E6F11EBAA139E33C4F9AE02/UHF-n6DMN8QGf4M-kPt-chDzxZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:06:00:c3:11:5f:f0:ad:79:99:07:3e:ca:7d:f4:09:bd:38:
         33:f6:95:2b:c2:5c:07:4e:4e:4e:8e:d4:dc:44:1d:26:5e:27:
         c7:2b:d8:5e:12:18:1d:ab:09:57:ec:13:18:1f:c9:59:44:f1:
         49:f9:db:a2:47:64:2d:f3:61:14:90:a9:5e:a3:8c:1f:69:c7:
         ab:69:d4:83:cd:8d:b9:70:6c:d6:82:99:20:1b:e7:38:3d:a6:
         2f:84:1b:88:fa:b5:ae:85:01:6d:d8:6b:8b:69:ef:74:2b:a0:
         e3:1d:b4:de:d1:b0:70:7c:29:60:2c:98:bf:47:7f:1c:b5:5b:
         08:f8:30:a1:34:e9:a3:02:3b:1c:db:7d:e0:ae:14:1d:d2:45:
         7e:6f:34:3a:57:64:93:e5:4a:b6:f3:75:f4:a2:3d:42:35:28:
         a4:26:be:c4:94:61:a1:6a:67:35:45:22:e5:82:87:c1:1c:34:
         00:7d:39:79:49:0f:d2:1b:47:ac:3d:fc:8e:fb:7d:a8:74:b6:
         a9:45:16:db:d1:4c:20:c4:5a:1b:3b:25:96:b4:fd:d6:53:95:
         6e:1d:a5:8b:42:7b:dd:1e:47:d4:7c:0a:76:3e:cd:13:26:81:
         95:c6:06:6d:06:25:ed:c1:63:4c:76:37:ea:c4:ac:77:03:7a:
         99:60:68:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU1MkIxMTAvBgNVBAUTKDUwNzE3RTlGQTBDQzM3QzQwNjdGODMzRTkwRkI3RTcy
MTBGM0M1OTMwHhcNMjUwNTE0MjE0MTU0WhcNMjUwNTIxMjE0MTU0WjAYMRYwFAYD
VQQDEw02ODI1MGUyMy1iNjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7ipQfICALlcNhaqMFcNf8bRlieqNaPi0KwTG2JFe4u7PGTpuF6Gp6rSvSPYH
a4K7C4ptg/PoZxZayE2gbFaLl4vPxpjM71FzfeoOYGxVzMrS+GsxHwA6Dct6xozi
Q1yO7FE/MA7qK9mKLGfCQeYyLYqEfkpoNkY1XxjzwL5SOfsqKYa5DQO81RzmQvMy
zqog6bfl45nr5NYRtEEG12XW2u/PEmRLncA0XVN2L+iJWhNtPCmF12a4Zo2oQ6Lx
TFDOPh/C1u0Z5XfT86tFuVVTDMb2ar5KW8L0ooAd3dA4NO6sHOOwlBQXHC/HIIDC
qOpmA0pfsCBHAM2D8b2E+oN+2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL1/C4H9
HxGtuMUpYMabHCfVr9IMMB8GA1UdIwQYMBaAFFBxfp+gzDfEBn+DPpD7fnIQ88WT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTUyQi9EODNENjI5NDFF
NkYxMUVCQUExMzlFMzNDNEY5QUUwMi9VSEYtbjZETU44UUdmNE0ta1B0LWNoRHp4
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VIRi1uNkRNTjhRR2Y0TS1rUHQtY2hEenhaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTUyQi9EODNENjI5NDFFNkYxMUVCQUExMzlFMzNDNEY5QUUwMi9VSEYtbjZETU44
UUdmNE0ta1B0LWNoRHp4Wk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCoBgDDEV/wrXmZBz7KffQJvTgz9pUrwlwHTk5OjtTcRB0mXifHK9he
EhgdqwlX7BMYH8lZRPFJ+duiR2Qt82EUkKleo4wfaceradSDzY25cGzWgpkgG+c4
PaYvhBuI+rWuhQFt2GuLae90K6DjHbTe0bBwfClgLJi/R38ctVsI+DChNOmjAjsc
233grhQd0kV+bzQ6V2ST5Uq283X0oj1CNSikJr7ElGGhamc1RSLlgofBHDQAfTl5
SQ/SG0esPfyO+32odLapRRbb0UwgxFobOyWWtP3WU5VuHaWLQnvdHkfUfAp2Ps0T
JoGVxgZtBiXtwWNMdjfqxKx3A3qZYGhE
-----END CERTIFICATE-----
Generated at Fri May 16 09:43:11 2025 by rpki-client