Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
File:                     uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json)
Hash identifier:          GvUox17q2Ch4V2qsorHLEPTqB9GUU5BtlJ2MoXIe6R0=
Subject key identifier:   B7:B5:01:61:A7:47:60:74:FF:76:3D:EF:2D:CB:E1:B3:58:6F:CC:FB
Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1
Certificate issuer:       /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1
Certificate serial:       0FEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
Manifest number:          190B
Signing time:             Thu 12 Jun 2025 17:22:31 +0000
Manifest this update:     Thu 12 Jun 2025 17:22:30 +0000
Manifest next update:     Thu 19 Jun 2025 17:22:30 +0000
Files and hashes:         1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: hPoS1ZEwfz8ijjaaPDccFzy3m0K6ctxfNYIOg26h1q4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl
                          rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 17:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4078 (0xfee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1
        Validity
            Not Before: Jun 12 17:22:30 2025 GMT
            Not After : Jun 19 17:22:30 2025 GMT
        Subject: CN=684b0cd7-51b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:42:7a:c2:0a:fc:af:ad:54:2f:33:61:2e:d3:
                    69:b5:cb:9a:dd:16:79:01:f9:ed:d4:b0:3e:0d:be:
                    50:03:0d:14:39:6d:65:e2:3f:c9:52:62:e1:9e:57:
                    86:dc:9f:52:d2:96:9b:3d:86:61:f2:bd:d7:5a:90:
                    fa:41:7c:b8:a1:a5:09:6c:a9:2b:8b:3a:98:23:b9:
                    ef:fa:e2:3b:45:66:28:e4:93:e0:33:4f:a4:00:da:
                    b6:e0:7d:14:2a:19:95:20:ce:37:10:93:c0:0d:f2:
                    7b:d8:d2:c8:64:0b:ef:f9:f3:3b:3f:f0:20:a5:bd:
                    d3:66:a8:cb:51:ea:42:6f:ed:46:dc:76:7e:4c:92:
                    57:f2:c5:1c:e7:a9:79:ed:3f:d0:02:48:67:7f:60:
                    de:34:06:5d:b4:a1:4c:92:e2:3d:71:a5:d4:97:65:
                    6b:82:69:76:10:ed:f6:43:ae:83:9e:e7:65:83:db:
                    d8:79:7d:8e:03:8d:c2:a2:92:fd:db:5e:35:9f:2b:
                    2c:72:30:4b:3a:b0:5f:8b:a8:66:d4:6d:cd:56:2a:
                    da:14:53:9e:d6:13:0e:39:3b:e4:ca:cb:06:6d:75:
                    52:bd:f0:c2:63:33:11:7d:34:a2:5d:1a:20:8d:37:
                    5c:51:34:36:3f:49:53:85:0d:e3:94:85:42:5c:f4:
                    ff:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B5:01:61:A7:47:60:74:FF:76:3D:EF:2D:CB:E1:B3:58:6F:CC:FB
            X509v3 Authority Key Identifier:
                keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:fc:4f:26:87:05:06:18:c9:21:12:ea:2e:6a:64:2b:0b:ee:
         ca:45:fb:6b:3f:cf:e0:a6:2c:dd:ab:76:5c:a3:77:ee:0b:74:
         03:e1:d9:27:30:9d:cd:ad:8c:4a:e5:15:d1:0f:9a:16:0c:fb:
         00:42:74:f6:be:0f:11:4b:64:fe:62:55:34:e6:b2:6b:d7:56:
         d0:ab:02:63:1f:23:fe:b1:42:a6:1c:8c:74:d2:12:02:bc:2c:
         d0:0e:60:02:69:87:14:39:6f:73:c8:f0:48:e1:24:73:46:91:
         ba:b8:45:fe:a9:12:22:21:2c:78:d7:e5:81:d6:a6:1b:a8:2d:
         17:83:d4:2b:4f:cd:cc:7c:5a:5a:a8:7b:60:68:6c:5d:2a:a0:
         49:00:ff:dc:fd:5b:28:b0:c7:8f:9a:00:8a:4b:c8:e9:d6:d8:
         74:b2:40:91:de:9e:d1:99:18:94:92:75:6b:e6:00:4d:48:e5:
         7d:3f:ef:d6:cd:68:91:c1:af:8e:aa:1b:f0:0f:71:9c:69:c8:
         b5:5b:f8:4c:78:33:69:6e:13:1f:b8:9b:e3:7d:54:a5:76:1a:
         15:10:a5:8c:ca:45:3a:12:d5:c9:ab:a5:89:3c:0d:27:95:25:
         58:9c:38:01:24:42:39:16:a4:b0:0d:8e:1f:c4:d5:7e:61:80:
         30:4b:a0:89
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF
Q0IxMUZERDEwHhcNMjUwNjEyMTcyMjMwWhcNMjUwNjE5MTcyMjMwWjAYMRYwFAYD
VQQDEw02ODRiMGNkNy01MWI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw0J6wgr8r61ULzNhLtNptcua3RZ5Afnt1LA+Db5QAw0UOW1l4j/JUmLhnleG
3J9S0pabPYZh8r3XWpD6QXy4oaUJbKkrizqYI7nv+uI7RWYo5JPgM0+kANq24H0U
KhmVIM43EJPADfJ72NLIZAvv+fM7P/Agpb3TZqjLUepCb+1G3HZ+TJJX8sUc56l5
7T/QAkhnf2DeNAZdtKFMkuI9caXUl2Vrgml2EO32Q66Dnudlg9vYeX2OA43CopL9
2141nysscjBLOrBfi6hm1G3NViraFFOe1hMOOTvkyssGbXVSvfDCYzMRfTSiXRog
jTdcUTQ2P0lThQ3jlIVCXPT/MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLe1AWGn
R2B0/3Y97y3L4bNYb8z7MB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD
N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj
dG14eXU1X0tjNzdzc1JfZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDS/E8mhwUGGMkhEuouamQrC+7KRftrP8/gpizdq3Zco3fuC3QD4dkn
MJ3NrYxK5RXRD5oWDPsAQnT2vg8RS2T+YlU05rJr11bQqwJjHyP+sUKmHIx00hIC
vCzQDmACaYcUOW9zyPBI4SRzRpG6uEX+qRIiISx41+WB1qYbqC0Xg9QrT83MfFpa
qHtgaGxdKqBJAP/c/VsosMePmgCKS8jp1th0skCR3p7RmRiUknVr5gBNSOV9P+/W
zWiRwa+OqhvwD3Gcaci1W/hMeDNpbhMfuJvjfVSldhoVEKWMykU6EtXJq6WJPA0n
lSVYnDgBJEI5FqSwDY4fxNV+YYAwS6CJ
-----END CERTIFICATE-----
Generated at Sat Jun 14 00:30:20 2025 by rpki-client