Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
File:                     UHRCEm0jxuW-SuMZdJsnbhcum1w.mft (raw, json)
Hash identifier:          iddEJguDzYb7zovYVWUKi/CIoK36oXntwzweFJi6n8M=
Subject key identifier:   64:48:F6:4D:41:1A:00:77:E1:C6:1B:B3:7B:D3:60:52:03:81:18:14
Authority key identifier: 50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C
Certificate issuer:       /CN=A91790ED/serialNumber=507442126D23C6E5BE4AE319749B276E172E9B5C
Certificate serial:       0E74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
Manifest number:          0E74
Signing time:             Wed 20 Aug 2025 17:47:06 +0000
Manifest this update:     Wed 20 Aug 2025 17:47:05 +0000
Manifest next update:     Wed 27 Aug 2025 17:47:05 +0000
Files and hashes:         1: UHRCEm0jxuW-SuMZdJsnbhcum1w.crl (hash: tLjTM4D8VUA4wH0l24mcoARTUUI+bPcPkCLnjWptBao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.crl
                          rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 17:47:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3700 (0xe74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790ED, serialNumber=507442126D23C6E5BE4AE319749B276E172E9B5C
        Validity
            Not Before: Aug 20 17:47:05 2025 GMT
            Not After : Aug 27 17:47:05 2025 GMT
        Subject: CN=68a60a19-1b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ee:de:d6:80:0f:75:3f:6c:8d:90:10:bb:f8:
                    f3:9e:54:e9:3b:a9:a2:1a:a3:a5:ce:18:cc:6e:39:
                    00:51:f8:93:ea:33:79:65:5c:85:40:08:49:24:a4:
                    02:ae:8b:ca:6a:3e:76:06:2c:42:21:68:04:bf:48:
                    59:05:9d:bc:68:95:2b:8d:87:03:17:e0:c9:0c:40:
                    05:f0:1a:b3:a2:09:2e:ed:a8:2c:ba:ac:6d:34:43:
                    27:51:fc:ff:3e:5e:7c:ad:e3:6d:ae:58:81:21:02:
                    ae:81:af:6f:87:05:f7:e3:9c:5a:f1:da:c1:fa:b5:
                    3f:df:dd:42:65:9c:bd:47:03:1d:71:be:2d:0d:34:
                    36:9f:76:21:67:e7:d0:fe:84:ac:23:86:fb:e1:50:
                    46:7c:0d:fd:c0:e7:24:b4:8f:a3:d0:90:32:27:d7:
                    79:45:86:2c:68:45:59:a4:72:9f:8b:54:ad:51:04:
                    e2:c4:bf:30:b8:52:bf:3d:91:3b:f1:c9:7e:6b:66:
                    b3:d8:e6:15:bc:81:7f:e5:6b:e2:93:f3:fb:df:8a:
                    6b:36:d7:0f:53:f4:aa:69:b9:64:d6:4f:30:d2:f0:
                    b5:ad:30:ac:61:bc:cf:5e:bf:8e:65:62:a3:9d:d3:
                    37:e8:b2:df:cc:06:21:da:a2:fa:c7:cc:6a:99:9b:
                    7f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:48:F6:4D:41:1A:00:77:E1:C6:1B:B3:7B:D3:60:52:03:81:18:14
            X509v3 Authority Key Identifier:
                keyid:50:74:42:12:6D:23:C6:E5:BE:4A:E3:19:74:9B:27:6E:17:2E:9B:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UHRCEm0jxuW-SuMZdJsnbhcum1w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790ED/0ABB86429D1B11E9BDD6E574C4F9AE02/UHRCEm0jxuW-SuMZdJsnbhcum1w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:cf:cf:ab:de:5a:d2:85:11:25:19:26:ce:3a:c9:50:60:63:
         0f:51:c7:9a:a4:4a:5c:57:51:b8:c7:b5:05:ff:d9:f0:44:0a:
         8d:94:fb:b7:50:f3:d0:d5:23:75:cf:90:60:82:59:b5:1b:8f:
         e2:78:70:5b:4d:db:58:ac:53:49:b0:5b:60:6d:ab:1e:6b:75:
         0a:92:90:7d:1b:d5:25:a2:87:32:50:0f:34:90:80:57:0a:c5:
         92:5b:80:19:a6:42:ad:4f:00:a2:bc:f9:66:20:6d:11:c1:ee:
         f2:ca:c5:32:23:a2:6f:5e:03:4d:2a:20:d6:82:63:2f:8d:8b:
         e0:38:76:25:58:19:77:bb:60:1e:02:ec:04:57:38:38:f6:b0:
         7c:0f:c9:89:c6:64:4a:52:cd:bb:44:50:a7:71:7a:90:e4:a1:
         8e:6d:33:ef:dc:1d:9c:d8:b4:1e:b0:44:b4:ce:b3:c2:da:5b:
         87:43:60:09:36:1e:16:f6:a4:ff:17:f4:4e:42:7b:57:53:e6:
         56:2f:32:81:b2:45:33:a5:5d:e0:74:e5:ce:ad:ce:1c:73:ce:
         8c:df:40:be:f8:e8:29:fa:10:74:0a:18:df:2a:ed:51:4b:e3:
         c9:45:52:43:0a:e6:29:7b:69:d3:4e:ee:71:fd:f2:b5:a8:91:
         2c:eb:2d:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzkwRUQxMTAvBgNVBAUTKDUwNzQ0MjEyNkQyM0M2RTVCRTRBRTMxOTc0OUIyNzZF
MTcyRTlCNUMwHhcNMjUwODIwMTc0NzA1WhcNMjUwODI3MTc0NzA1WjAYMRYwFAYD
VQQDEw02OGE2MGExOS0xYjRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu+7e1oAPdT9sjZAQu/jznlTpO6miGqOlzhjMbjkAUfiT6jN5ZVyFQAhJJKQC
rovKaj52BixCIWgEv0hZBZ28aJUrjYcDF+DJDEAF8Bqzogku7agsuqxtNEMnUfz/
Pl58reNtrliBIQKuga9vhwX345xa8drB+rU/391CZZy9RwMdcb4tDTQ2n3YhZ+fQ
/oSsI4b74VBGfA39wOcktI+j0JAyJ9d5RYYsaEVZpHKfi1StUQTixL8wuFK/PZE7
8cl+a2az2OYVvIF/5Wvik/P734prNtcPU/Sqablk1k8w0vC1rTCsYbzPXr+OZWKj
ndM36LLfzAYh2qL6x8xqmZt/9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRI9k1B
GgB34cYbs3vTYFIDgRgUMB8GA1UdIwQYMBaAFFB0QhJtI8blvkrjGXSbJ24XLptc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTBFRC8wQUJCODY0MjlE
MUIxMUU5QkRENkU1NzRDNEY5QUUwMi9VSFJDRW0wanh1Vy1TdU1aZEpzbmJoY3Vt
MXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VIUkNFbTBqeHVXLVN1TVpkSnNuYmhjdW0xdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OTBFRC8wQUJCODY0MjlEMUIxMUU5QkRENkU1NzRDNEY5QUUwMi9VSFJDRW0wanh1
Vy1TdU1aZEpzbmJoY3VtMXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBTz8+r3lrShRElGSbOOslQYGMPUceapEpcV1G4x7UF/9nwRAqNlPu3
UPPQ1SN1z5Bgglm1G4/ieHBbTdtYrFNJsFtgbasea3UKkpB9G9UloocyUA80kIBX
CsWSW4AZpkKtTwCivPlmIG0Rwe7yysUyI6JvXgNNKiDWgmMvjYvgOHYlWBl3u2Ae
AuwEVzg49rB8D8mJxmRKUs27RFCncXqQ5KGObTPv3B2c2LQesES0zrPC2luHQ2AJ
Nh4W9qT/F/ROQntXU+ZWLzKBskUzpV3gdOXOrc4cc86M30C++Ogp+hB0ChjfKu1R
S+PJRVJDCuYpe2nTTu5x/fK1qJEs6y17
-----END CERTIFICATE-----
Generated at Fri Aug 22 16:36:06 2025 by rpki-client