Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
File:                     hUw8jb_u2qy7OypCS1iyWaFMnws.mft (raw, json)
Hash identifier:          wfVVGAFCiEZgRSN3wNiqAcWQtiWPZ+svBOGSAw+2fZ4=
Subject key identifier:   47:C0:3C:83:3A:95:EB:A2:9C:AF:36:B1:2A:6F:01:E4:92:A5:6F:4B
Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Certificate issuer:       /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Certificate serial:       01E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
Manifest number:          01D8
Signing time:             Sat 19 Jul 2025 03:02:23 +0000
Manifest this update:     Sat 19 Jul 2025 03:02:22 +0000
Manifest next update:     Sat 26 Jul 2025 03:02:22 +0000
Files and hashes:         1: hUw8jb_u2qy7OypCS1iyWaFMnws.crl (hash: EWcXWXXehzUUuobRdM+DHPTtMYq4d/ExnreAf1UEG/E=)
                          2: F8582E301E6411EF99A50843C4F9AE02.roa (hash: ShXADDJpnj7w4eyyUS0fvnc0x0GGma16cf7GD5v3SiE=)
                          3: CF4B4BC61E6411EF8AA5A942C4F9AE02.roa (hash: kzhQlx9+qX+tcsUYqFntEgfacYCnpt0zMHVXOQLV78s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
                          rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 03:02:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DBBF, serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
        Validity
            Not Before: Jul 19 03:02:22 2025 GMT
            Not After : Jul 26 03:02:22 2025 GMT
        Subject: CN=687b0abf-e064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:34:f1:ae:20:bd:ac:ab:f3:92:98:82:97:28:
                    c1:54:6b:81:c3:27:4c:96:24:33:be:24:ad:d8:44:
                    14:da:2f:1b:28:c6:f4:b2:12:3d:99:92:8b:d1:ae:
                    9f:86:22:1d:06:29:a8:50:5d:b5:3e:bc:8c:cf:36:
                    96:fd:82:3a:d1:60:1d:7c:a1:fa:06:7a:ba:92:ba:
                    41:8d:11:6c:2a:49:3e:e4:74:27:18:9d:0f:59:1b:
                    cb:23:a3:49:b5:92:98:58:cc:74:8d:55:b6:8a:bf:
                    4b:c9:45:4d:04:0a:db:85:fb:fc:29:08:65:a3:fd:
                    e0:02:6d:e0:bd:34:30:fc:c7:18:55:8d:13:d4:bc:
                    53:c3:31:67:02:bb:1c:63:f5:55:a1:0b:31:c1:d1:
                    5a:d2:0a:8b:1a:a9:9e:f5:e2:5c:b0:21:ac:44:c6:
                    e7:2d:d5:af:d3:45:4a:04:64:e5:64:f4:42:cb:9e:
                    60:3d:67:b8:c6:82:f5:6e:ac:34:2f:aa:45:4d:71:
                    fc:4f:22:0e:30:4c:80:06:dd:a2:a5:00:45:ab:1c:
                    75:70:a6:bb:b6:68:76:0b:33:81:ac:4d:7f:e7:06:
                    7a:11:f3:e9:ae:38:2a:e2:0f:a5:a8:0c:f4:37:2b:
                    71:e0:11:20:fc:3a:c2:06:9e:84:74:e2:9f:97:dc:
                    7c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C0:3C:83:3A:95:EB:A2:9C:AF:36:B1:2A:6F:01:E4:92:A5:6F:4B
            X509v3 Authority Key Identifier:
                keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:e8:ca:9b:a9:9c:aa:c1:98:c4:73:bf:18:ee:c7:0c:9e:b2:
         51:ca:bf:d8:96:d8:50:bb:a6:e1:00:8e:22:60:5e:9f:c5:17:
         01:fd:2a:47:3c:e1:f4:f9:57:95:d8:8d:a2:d4:c7:8d:af:73:
         d0:c2:d7:d6:cd:b1:71:9a:b8:52:87:02:05:ea:76:ee:cd:35:
         af:67:e7:ec:4c:af:22:47:7a:7f:7f:ad:53:ef:87:8c:d1:d2:
         ad:09:d5:66:e5:57:c2:98:bc:5e:c9:07:34:83:52:ad:fa:e3:
         9d:29:9d:4d:b4:92:08:ab:2e:78:e7:2c:fc:3a:ab:c1:d7:cc:
         8f:71:a6:6d:a7:f2:64:e8:8c:c2:e0:7e:ce:76:dd:f1:11:0b:
         ce:d6:cc:40:4d:c1:3a:82:42:5a:3f:41:d3:9d:ab:c9:f6:de:
         ef:c3:0b:8c:1c:8d:a5:59:29:e4:52:f5:3d:70:8b:35:cb:2d:
         60:ea:70:a1:a7:b7:20:c1:1d:33:77:5f:f8:0e:32:39:5c:07:
         fd:8a:8a:d7:94:de:22:f4:09:c0:b8:53:57:83:7e:3a:51:9b:
         38:5b:91:99:dc:b5:5c:7d:88:eb:4a:c7:f8:cf:bf:9f:9d:30:
         81:24:81:2c:a7:aa:ad:07:84:1a:5f:ca:ee:61:89:19:18:4c:
         28:d2:f2:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURCQkYxMTAvBgNVBAUTKDg1NEMzQzhEQkZFRURBQUNCQjNCMkE0MjRCNThCMjU5
QTE0QzlGMEIwHhcNMjUwNzE5MDMwMjIyWhcNMjUwNzI2MDMwMjIyWjAYMRYwFAYD
VQQDEw02ODdiMGFiZi1lMDY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzjTxriC9rKvzkpiClyjBVGuBwydMliQzviSt2EQU2i8bKMb0shI9mZKL0a6f
hiIdBimoUF21PryMzzaW/YI60WAdfKH6Bnq6krpBjRFsKkk+5HQnGJ0PWRvLI6NJ
tZKYWMx0jVW2ir9LyUVNBArbhfv8KQhlo/3gAm3gvTQw/McYVY0T1LxTwzFnArsc
Y/VVoQsxwdFa0gqLGqme9eJcsCGsRMbnLdWv00VKBGTlZPRCy55gPWe4xoL1bqw0
L6pFTXH8TyIOMEyABt2ipQBFqxx1cKa7tmh2CzOBrE1/5wZ6EfPprjgq4g+lqAz0
Nytx4BEg/DrCBp6EdOKfl9x88QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfAPIM6
leuinK82sSpvAeSSpW9LMB8GA1UdIwQYMBaAFIVMPI2/7tqsuzsqQktYslmhTJ8L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REJCRi9CNTk1QTY2ODlC
RjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJxeTdPeXBDUzFpeVdhRk1u
d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hVdzhqYl91MnF5N095cENTMWl5V2FGTW53cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
REJCRi9CNTk1QTY2ODlCRjcxMUVEQTFEQzVFNkZDNEY5QUUwMi9oVXc4amJfdTJx
eTdPeXBDUzFpeVdhRk1ud3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC36MqbqZyqwZjEc78Y7scMnrJRyr/YlthQu6bhAI4iYF6fxRcB/SpH
POH0+VeV2I2i1MeNr3PQwtfWzbFxmrhShwIF6nbuzTWvZ+fsTK8iR3p/f61T74eM
0dKtCdVm5VfCmLxeyQc0g1Kt+uOdKZ1NtJIIqy545yz8OqvB18yPcaZtp/Jk6IzC
4H7Odt3xEQvO1sxATcE6gkJaP0HTnavJ9t7vwwuMHI2lWSnkUvU9cIs1yy1g6nCh
p7cgwR0zd1/4DjI5XAf9iorXlN4i9AnAuFNXg346UZs4W5GZ3LVcfYjrSsf4z7+f
nTCBJIEsp6qtB4QaX8ruYYkZGEwo0vLL
-----END CERTIFICATE-----
Generated at Sun Jul 20 07:29:15 2025 by rpki-client