Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
File:                     uHa2DaKzyctmxyu5_Kc77ssR_dE.mft (raw, json)
Hash identifier:          zP+qsPjPNynaXgJH5dX/MOGkA+RmfQoXCZdp/sWRd9Y=
Subject key identifier:   F1:0D:54:BD:BF:AF:F1:9C:ED:3E:2F:4E:33:8F:47:7C:1B:54:81:9A
Authority key identifier: B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1
Certificate issuer:       /CN=A912611F/serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1
Certificate serial:       0FEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
Manifest number:          1907
Signing time:             Sun 08 Jun 2025 17:20:58 +0000
Manifest this update:     Sun 08 Jun 2025 17:20:58 +0000
Manifest next update:     Sun 15 Jun 2025 17:20:58 +0000
Files and hashes:         1: uHa2DaKzyctmxyu5_Kc77ssR_dE.crl (hash: 6YNh53V7DNgv+II094+RBCLKJpdbb3DtSJ6vILRHZCw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl
                          rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 17:20:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4076 (0xfec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912611F, serialNumber=B876B60DA2B3C9CB66C72BB9FCA73BEECB11FDD1
        Validity
            Not Before: Jun  8 17:20:58 2025 GMT
            Not After : Jun 15 17:20:58 2025 GMT
        Subject: CN=6845c67a-34ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:18:20:dc:21:97:a7:68:2b:6c:08:97:34:
                    7d:93:03:75:09:3c:8e:86:22:9a:fb:62:e2:3b:01:
                    e0:e4:18:92:e7:8d:16:b9:37:a7:47:46:2f:be:0d:
                    cf:b0:56:7b:9b:8d:47:02:cf:46:62:4c:b1:dd:f0:
                    30:bb:80:f0:f4:a0:05:15:57:87:a5:ce:0c:61:27:
                    3f:e5:9c:be:24:5f:f8:42:d7:f3:1e:31:d0:29:65:
                    5a:4f:d6:56:3e:23:8d:70:c4:f7:10:12:5e:72:c0:
                    87:46:c5:a6:e5:f9:80:8e:77:e4:c0:ca:11:5d:a8:
                    2e:5e:52:a3:65:de:29:ea:f0:b2:db:99:de:c2:7f:
                    0f:1c:2c:5c:f1:bd:47:29:be:67:3b:15:20:7a:23:
                    33:0d:a6:a8:e1:cf:74:cd:ce:0a:ff:65:6e:f1:d6:
                    af:0f:02:1b:a5:7a:af:98:6b:74:33:6c:cf:4f:e0:
                    eb:86:e3:4c:75:6f:f2:82:04:d2:fe:fc:f0:5c:eb:
                    a3:52:82:6c:f3:a5:65:06:0b:fa:10:da:a2:f0:5d:
                    79:fd:49:ac:75:b2:b8:79:73:14:7f:f7:2e:80:4d:
                    54:28:73:07:be:f9:44:b5:c7:ec:0e:63:55:1e:48:
                    36:0f:7f:fa:3c:7d:a2:0a:12:90:d6:78:75:9c:22:
                    65:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0D:54:BD:BF:AF:F1:9C:ED:3E:2F:4E:33:8F:47:7C:1B:54:81:9A
            X509v3 Authority Key Identifier:
                keyid:B8:76:B6:0D:A2:B3:C9:CB:66:C7:2B:B9:FC:A7:3B:EE:CB:11:FD:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHa2DaKzyctmxyu5_Kc77ssR_dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912611F/4A8B04EA4C7C11E981A43969C4F9AE02/uHa2DaKzyctmxyu5_Kc77ssR_dE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:7b:2a:ad:3d:f7:92:3c:5b:75:b0:21:d3:19:fe:a6:4a:65:
         9f:f5:61:27:bb:2e:c1:4c:1c:83:20:a1:8b:58:15:c5:a5:ef:
         e2:4d:46:98:4e:d1:b9:54:24:9a:1f:98:90:8c:16:b9:a9:3c:
         2c:bd:79:a2:0b:b1:ef:ba:92:b9:e7:a5:d6:af:f8:e6:69:3a:
         06:98:da:84:01:92:6f:2c:02:bb:11:00:da:2d:0b:9d:73:dc:
         b9:59:a6:82:2c:d3:d0:3a:cc:f5:7b:66:45:64:76:86:cf:ac:
         39:75:db:10:6b:82:f0:53:1a:f7:47:c3:62:6d:9a:9f:44:2d:
         85:78:42:26:3f:4c:94:9f:03:25:52:2b:57:82:a5:9c:29:e3:
         0e:87:db:f8:d5:c7:5e:9a:e6:cd:4e:de:b8:eb:2a:43:f1:78:
         af:7c:92:63:48:52:29:9f:d4:0f:a2:44:8a:92:f9:0f:07:04:
         f6:6c:1f:6c:ab:ac:99:33:f4:d6:e6:2b:3c:19:bc:ae:f5:e1:
         2a:56:0d:4c:b1:91:4c:ae:21:b1:38:4e:dd:a0:94:ca:ff:34:
         b4:90:97:18:be:e1:cc:df:69:b3:0b:b1:44:80:71:cf:a1:7b:
         fe:96:0e:45:1b:72:92:b2:26:02:95:e0:10:f9:dc:89:ff:c7:
         22:a8:43:6f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD+wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYxMUYxMTAvBgNVBAUTKEI4NzZCNjBEQTJCM0M5Q0I2NkM3MkJCOUZDQTczQkVF
Q0IxMUZERDEwHhcNMjUwNjA4MTcyMDU4WhcNMjUwNjE1MTcyMDU4WjAYMRYwFAYD
VQQDEw02ODQ1YzY3YS0zNGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz6UYINwhl6doK2wIlzR9kwN1CTyOhiKa+2LiOwHg5BiS540WuTenR0Yvvg3P
sFZ7m41HAs9GYkyx3fAwu4Dw9KAFFVeHpc4MYSc/5Zy+JF/4QtfzHjHQKWVaT9ZW
PiONcMT3EBJecsCHRsWm5fmAjnfkwMoRXaguXlKjZd4p6vCy25newn8PHCxc8b1H
Kb5nOxUgeiMzDaao4c90zc4K/2Vu8davDwIbpXqvmGt0M2zPT+DrhuNMdW/yggTS
/vzwXOujUoJs86VlBgv6ENqi8F15/UmsdbK4eXMUf/cugE1UKHMHvvlEtcfsDmNV
Hkg2D3/6PH2iChKQ1nh1nCJlhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPENVL2/
r/Gc7T4vTjOPR3wbVIGaMB8GA1UdIwQYMBaAFLh2tg2is8nLZscrufynO+7LEf3R
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjExRi80QThCMDRFQTRD
N0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenljdG14eXU1X0tjNzdzc1Jf
ZEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VIYTJEYUt6eWN0bXh5dTVfS2M3N3NzUl9kRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjExRi80QThCMDRFQTRDN0MxMUU5ODFBNDM5NjlDNEY5QUUwMi91SGEyRGFLenlj
dG14eXU1X0tjNzdzc1JfZEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDceyqtPfeSPFt1sCHTGf6mSmWf9WEnuy7BTByDIKGLWBXFpe/iTUaY
TtG5VCSaH5iQjBa5qTwsvXmiC7HvupK556XWr/jmaToGmNqEAZJvLAK7EQDaLQud
c9y5WaaCLNPQOsz1e2ZFZHaGz6w5ddsQa4LwUxr3R8NibZqfRC2FeEImP0yUnwMl
UitXgqWcKeMOh9v41cdemubNTt646ypD8XivfJJjSFIpn9QPokSKkvkPBwT2bB9s
q6yZM/TW5is8Gbyu9eEqVg1MsZFMriGxOE7doJTK/zS0kJcYvuHM32mzC7FEgHHP
oXv+lg5FG3KSsiYCleAQ+dyJ/8ciqENv
-----END CERTIFICATE-----
Generated at Tue Jun 10 05:48:13 2025 by rpki-client