Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File:                     uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier:          5+2XIqY6pbH2ZRNfY8ztCgt2poJQzr5+2rH7YAPvmdU=
Subject key identifier:   18:DF:78:0F:3E:AF:02:6F:B8:3A:93:81:F6:D8:05:BD:54:7B:1B:C7
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer:       /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial:       B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number:          AA
Signing time:             Tue 01 Jul 2025 06:52:42 +0000
Manifest this update:     Tue 01 Jul 2025 06:52:42 +0000
Manifest next update:     Tue 08 Jul 2025 06:52:42 +0000
Files and hashes:         1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: bi0QccumQiWNpvyuBqwrF+SebJjTI66kkeNncGrqOJY=)
                          2: 0FB823502CB011F0A2157E15C4F9AE02.roa (hash: aewtQCUG7+5ML687Xz8ENKgAxLHbUhEu6uDVXdbbcGc=)
                          3: 286AB0F22CB011F084E4A915C4F9AE02.roa (hash: vZWC1pyitJpkKdITTAunKDCWOD3MkKIrS8Vik2p3gr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
                          rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 06:52:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
        Validity
            Not Before: Jul  1 06:52:42 2025 GMT
            Not After : Jul  8 06:52:42 2025 GMT
        Subject: CN=686385ba-e8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f1:b8:27:d5:c9:a2:32:94:13:aa:7f:e0:f7:
                    d8:2a:80:69:bf:94:1b:e3:68:d0:94:3b:6e:75:8e:
                    55:fa:fe:57:f8:cc:36:c5:ce:b2:9d:1c:eb:aa:b7:
                    8d:ba:75:f9:72:32:84:78:b2:1b:83:fb:70:81:8f:
                    a2:11:bc:28:16:4e:a4:12:65:79:04:85:57:1d:87:
                    56:f1:98:39:dd:eb:4d:c9:d1:8a:c5:01:4e:65:b9:
                    74:e2:1f:59:35:8c:49:e8:fa:3d:23:70:4e:c6:97:
                    6d:ba:2d:d9:d2:f5:d6:9b:c2:e3:d1:bf:0d:e0:e3:
                    c8:ae:de:d5:80:36:9b:70:22:70:53:41:c4:25:b6:
                    6f:24:a3:ba:36:d6:a2:23:12:2f:36:8f:77:f4:c3:
                    46:5d:eb:f3:91:80:a2:55:e5:e0:6f:80:95:b8:1c:
                    54:98:7d:18:2b:7e:25:03:b5:b2:c1:b4:74:e5:b6:
                    4d:fc:6a:ae:58:55:0d:fc:b4:70:2a:00:74:a5:01:
                    96:34:9e:17:ac:56:36:dc:18:ba:94:93:43:7a:d0:
                    00:8e:c5:5b:5e:db:5c:3e:48:c4:9f:1d:4c:01:6f:
                    0f:4a:c0:a7:6b:bd:55:5c:c1:27:96:9a:f1:50:b2:
                    62:63:1e:37:52:a9:6d:88:f3:f4:19:34:f8:81:80:
                    54:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DF:78:0F:3E:AF:02:6F:B8:3A:93:81:F6:D8:05:BD:54:7B:1B:C7
            X509v3 Authority Key Identifier:
                keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:d3:b3:dd:54:3d:de:43:d4:b4:df:e4:88:42:50:20:0c:1c:
         43:84:a5:8e:69:cb:87:7e:64:ab:84:69:0a:97:98:3e:08:25:
         bf:e9:66:1a:cf:56:9e:c5:8e:c2:b3:d0:5a:b4:a0:93:fd:f0:
         d8:a1:40:6b:6c:39:21:1e:6a:8e:29:01:c3:60:e1:e6:c0:bc:
         5e:46:6a:81:7f:d6:73:b0:4c:9f:d9:d9:db:c9:fd:aa:d0:46:
         3e:24:7d:dc:45:a0:70:02:45:e3:6a:81:db:cd:76:12:22:e0:
         8f:07:be:4a:35:7f:c9:12:4a:b0:b0:8f:90:d6:dc:43:41:f3:
         76:bd:18:29:d4:73:44:d5:f0:32:c4:1e:88:1c:7a:72:56:37:
         ec:e7:52:85:56:ce:cd:fe:f2:38:af:5a:e0:62:8f:2c:d2:41:
         8f:22:8d:e0:99:ce:fd:24:c3:0e:c0:8b:62:dc:a7:59:94:c9:
         d6:0d:01:e0:6c:cc:83:f4:4f:b4:e6:3b:80:03:a0:09:81:f3:
         6c:29:75:79:8e:f8:f9:26:79:ec:05:45:1b:8f:f2:e3:60:c6:
         16:18:61:58:47:ca:18:e3:d5:f1:62:8a:e8:02:56:78:5a:b3:
         27:81:1f:14:98:95:eb:2b:35:c1:35:25:c9:9d:15:6a:26:a1:
         77:8f:7e:90
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYxQTcxMTAvBgNVBAUTKEJBRUY3OEY3OERDN0NCRjlCNzMxMjcwQUFCMTA2OUY1
RTM0MzNDQkIwHhcNMjUwNzAxMDY1MjQyWhcNMjUwNzA4MDY1MjQyWjAYMRYwFAYD
VQQDEw02ODYzODViYS1lOGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtPG4J9XJojKUE6p/4PfYKoBpv5Qb42jQlDtudY5V+v5X+Mw2xc6ynRzrqreN
unX5cjKEeLIbg/twgY+iEbwoFk6kEmV5BIVXHYdW8Zg53etNydGKxQFOZbl04h9Z
NYxJ6Po9I3BOxpdtui3Z0vXWm8Lj0b8N4OPIrt7VgDabcCJwU0HEJbZvJKO6Ntai
IxIvNo939MNGXevzkYCiVeXgb4CVuBxUmH0YK34lA7WywbR05bZN/GquWFUN/LRw
KgB0pQGWNJ4XrFY23Bi6lJNDetAAjsVbXttcPkjEnx1MAW8PSsCna71VXMEnlprx
ULJiYx43UqltiPP0GTT4gYBU7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjfeA8+
rwJvuDqTgfbYBb1UexvHMB8GA1UdIwQYMBaAFLrvePeNx8v5tzEnCqsQafXjQzy7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjFBNy8wRjQ5OTIwNDVC
QTExMUVGOUE3OUU5NjFDNEY5QUUwMi91dTk0OTQzSHlfbTNNU2NLcXhCcDllTkRQ
THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3V1OTQ5NDNIeV9tM01TY0txeEJwOWVORFBMcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjFBNy8wRjQ5OTIwNDVCQTExMUVGOUE3OUU5NjFDNEY5QUUwMi91dTk0OTQzSHlf
bTNNU2NLcXhCcDllTkRQTHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA607PdVD3eQ9S03+SIQlAgDBxDhKWOacuHfmSrhGkKl5g+CCW/6WYa
z1aexY7Cs9BatKCT/fDYoUBrbDkhHmqOKQHDYOHmwLxeRmqBf9ZzsEyf2dnbyf2q
0EY+JH3cRaBwAkXjaoHbzXYSIuCPB75KNX/JEkqwsI+Q1txDQfN2vRgp1HNE1fAy
xB6IHHpyVjfs51KFVs7N/vI4r1rgYo8s0kGPIo3gmc79JMMOwIti3KdZlMnWDQHg
bMyD9E+05juAA6AJgfNsKXV5jvj5JnnsBUUbj/LjYMYWGGFYR8oY49XxYoroAlZ4
WrMngR8UmJXrKzXBNSXJnRVqJqF3j36Q
-----END CERTIFICATE-----
Generated at Wed Jul 2 22:31:22 2025 by rpki-client