Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
File:                     UjrFjamEDQscqom9_54NzkZ2fEo.mft (raw, json)
Hash identifier:          mT1uhCvHWnixlMcD4Z7FkN6tSaZvUH9AFFIajDylB+k=
Subject key identifier:   2B:FC:95:A0:70:29:DA:FD:A2:54:E1:49:28:EC:C8:46:73:45:0A:48
Authority key identifier: 52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A
Certificate issuer:       /CN=A9124B27/serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
Certificate serial:       92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
Manifest number:          8D
Signing time:             Wed 17 Sep 2025 07:17:28 +0000
Manifest this update:     Wed 17 Sep 2025 07:17:27 +0000
Manifest next update:     Wed 24 Sep 2025 07:17:27 +0000
Files and hashes:         1: UjrFjamEDQscqom9_54NzkZ2fEo.crl (hash: Y5S93YefNUoCzxQd6mxB0r3aHUmIC07dQKAmQudSXjQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl
                          rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 07:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146 (0x92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124B27, serialNumber=523AC58DA9840D0B1CAA89BDFF9E0DCE46767C4A
        Validity
            Not Before: Sep 17 07:17:27 2025 GMT
            Not After : Sep 24 07:17:27 2025 GMT
        Subject: CN=68ca6088-a355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e4:6d:7c:80:b4:f5:57:df:a0:bd:95:7b:33:
                    65:3e:01:08:c6:98:d9:26:cc:93:0d:ff:d7:c2:81:
                    87:1c:88:b8:7d:37:c8:30:6d:6d:5e:5f:6b:36:d8:
                    db:d3:a1:d2:c9:3c:b1:76:b1:35:f7:67:05:87:c3:
                    b2:54:17:de:39:46:54:35:7b:35:21:e3:25:50:c5:
                    f7:9f:3a:b0:54:28:10:d8:f9:d7:33:98:f8:a4:cf:
                    c5:52:b8:5b:d3:fa:ee:6d:56:6f:28:91:da:dc:93:
                    98:65:35:1a:36:0a:45:0f:b7:50:d3:95:22:b5:42:
                    be:4a:16:cf:7d:14:f4:9b:64:ea:45:53:60:07:35:
                    97:42:fb:2f:47:45:ed:6a:32:45:f5:31:f2:67:a3:
                    0e:b2:dc:6c:90:de:f0:55:e8:b1:a2:28:ee:8d:2a:
                    f4:f5:4e:dc:35:21:19:65:94:04:e7:44:98:ae:bc:
                    75:41:0b:00:f2:8f:61:c7:a1:e1:ee:d9:c5:ca:5f:
                    88:23:d0:de:29:49:11:ba:d9:d6:07:83:2b:4e:30:
                    ce:c2:41:af:c4:2f:78:6f:72:32:cf:f1:47:8a:5f:
                    12:7e:02:4c:f6:4b:ec:46:16:8b:43:f6:ec:66:24:
                    4f:a3:1c:ce:d6:93:59:b3:e4:2d:9d:81:e0:b2:e3:
                    8f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FC:95:A0:70:29:DA:FD:A2:54:E1:49:28:EC:C8:46:73:45:0A:48
            X509v3 Authority Key Identifier:
                keyid:52:3A:C5:8D:A9:84:0D:0B:1C:AA:89:BD:FF:9E:0D:CE:46:76:7C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UjrFjamEDQscqom9_54NzkZ2fEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124B27/500618DCC6E811EF87AE690DC4F9AE02/UjrFjamEDQscqom9_54NzkZ2fEo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:99:ad:43:73:78:c3:d6:c7:52:f9:97:f0:e1:1b:9a:d9:59:
         9b:e9:cd:94:d8:a4:ed:ca:4b:c9:37:4c:b4:df:83:6b:0b:3a:
         53:d1:a5:73:fc:96:30:4b:15:4c:dd:af:a1:cb:38:ce:98:ce:
         dc:89:d4:d8:c0:25:8f:10:f9:9d:ef:5b:33:c3:29:f1:44:e6:
         e0:77:93:d0:77:7d:46:7b:fb:de:cc:81:84:d4:c5:c4:fa:fd:
         0d:e2:87:44:7c:a8:ab:d5:9e:2c:0e:fb:04:8b:ff:57:8f:41:
         8a:87:94:0a:ef:c7:19:97:4e:1a:bb:83:60:dd:6d:0f:77:eb:
         7d:c9:4c:03:30:5e:d1:93:b9:35:7e:0b:58:c3:13:91:0e:64:
         8b:49:4f:2a:c9:ec:3c:d9:76:35:5b:94:01:a7:3f:ac:e3:f3:
         83:9e:f3:f2:96:55:84:46:14:0e:c8:d6:60:5e:56:d7:ee:dc:
         d0:78:ad:99:15:3d:78:1c:9f:2a:4f:19:64:05:4f:72:9b:7d:
         5c:6e:bc:4b:5b:97:cb:59:cd:46:b6:2c:b9:00:51:80:8e:4c:
         e7:ce:32:fc:3c:97:13:10:1b:38:a6:ae:15:e1:26:f7:96:c3:
         27:6f:26:53:e7:24:3f:a3:21:fe:40:86:a6:55:4f:0f:b6:8b:
         7b:7b:20:94
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjRCMjcxMTAvBgNVBAUTKDUyM0FDNThEQTk4NDBEMEIxQ0FBODlCREZGOUUwRENF
NDY3NjdDNEEwHhcNMjUwOTE3MDcxNzI3WhcNMjUwOTI0MDcxNzI3WjAYMRYwFAYD
VQQDEw02OGNhNjA4OC1hMzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6+RtfIC09VffoL2VezNlPgEIxpjZJsyTDf/XwoGHHIi4fTfIMG1tXl9rNtjb
06HSyTyxdrE192cFh8OyVBfeOUZUNXs1IeMlUMX3nzqwVCgQ2PnXM5j4pM/FUrhb
0/rubVZvKJHa3JOYZTUaNgpFD7dQ05UitUK+ShbPfRT0m2TqRVNgBzWXQvsvR0Xt
ajJF9THyZ6MOstxskN7wVeixoijujSr09U7cNSEZZZQE50SYrrx1QQsA8o9hx6Hh
7tnFyl+II9DeKUkRutnWB4MrTjDOwkGvxC94b3Iyz/FHil8SfgJM9kvsRhaLQ/bs
ZiRPoxzO1pNZs+QtnYHgsuOPpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCv8laBw
Kdr9olThSSjsyEZzRQpIMB8GA1UdIwQYMBaAFFI6xY2phA0LHKqJvf+eDc5GdnxK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNEIyNy81MDA2MThEQ0M2
RTgxMUVGODdBRTY5MERDNEY5QUUwMi9VanJGamFtRURRc2Nxb205XzU0TnprWjJm
RW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VqckZqYW1FRFFzY3FvbTlfNTROemtaMmZFby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NEIyNy81MDA2MThEQ0M2RTgxMUVGODdBRTY5MERDNEY5QUUwMi9VanJGamFtRURR
c2Nxb205XzU0TnprWjJmRW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvma1Dc3jD1sdS+Zfw4Rua2Vmb6c2U2KTtykvJN0y034NrCzpT0aVz
/JYwSxVM3a+hyzjOmM7cidTYwCWPEPmd71szwynxRObgd5PQd31Ge/vezIGE1MXE
+v0N4odEfKir1Z4sDvsEi/9Xj0GKh5QK78cZl04au4Ng3W0Pd+t9yUwDMF7Rk7k1
fgtYwxORDmSLSU8qyew82XY1W5QBpz+s4/ODnvPyllWERhQOyNZgXlbX7tzQeK2Z
FT14HJ8qTxlkBU9ym31cbrxLW5fLWc1Gtiy5AFGAjkznzjL8PJcTEBs4pq4V4Sb3
lsMnbyZT5yQ/oyH+QIamVU8Ptot7eyCU
-----END CERTIFICATE-----
Generated at Fri Sep 19 04:01:46 2025 by rpki-client