Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
File:                     uFvtmb90CrrVo5nJ31_plipt6PE.mft (raw, json)
Hash identifier:          dXNC4j403lZ2APwHlG2amAQmt8oPbaJz9838tgPze68=
Subject key identifier:   8B:17:0F:0B:C5:E5:BC:F5:47:99:6B:93:31:DB:81:DF:5B:B3:1B:96
Authority key identifier: B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1
Certificate issuer:       /CN=A9195DE5/serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
Certificate serial:       081B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
Manifest number:          0803
Signing time:             Sat 06 Sep 2025 21:11:45 +0000
Manifest this update:     Sat 06 Sep 2025 21:11:44 +0000
Manifest next update:     Sat 13 Sep 2025 21:11:44 +0000
Files and hashes:         1: uFvtmb90CrrVo5nJ31_plipt6PE.crl (hash: 2ArTfJouimOwQcDLxLf2DajVE8cZoh+9A8Sby2DG3t4=)
                          2: 709F917AF74111EF98C99938C4F9AE02.roa (hash: 1qf+iawoit0ys+iUAf7LEY7HtRnvUIOTI+MZhHCWuYU=)
                          3: C7ADA138F4C011EAA7B25986C4F9AE02.roa (hash: G5UBtJsfZQZ4SV+yPTNK/ejUFIGmrip9sZG7FP0b4Cg=)
                          4: C8633DEAF4C011EAA7B25986C4F9AE02.roa (hash: ux6FaGhfWyv2H1NDOSXEk7LrVXGwR7MCaj2E49kXMHg=)
                          5: 70017B5CF74111EF98C99938C4F9AE02.roa (hash: 2qfdADfdo36JxITYdf4pd34OcKO4BbP5IH9WNGohmvk=)
                          6: C6EDD52EF4C011EAA7B25986C4F9AE02.roa (hash: qyqw3i3GL6h/SgQPPtxyHJkhrm/uWWSr5nGAKt/Qapg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl
                          rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 21:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075 (0x81b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195DE5, serialNumber=B85BED99BF740ABAD5A399C9DF5FE9962A6DE8F1
        Validity
            Not Before: Sep  6 21:11:44 2025 GMT
            Not After : Sep 13 21:11:44 2025 GMT
        Subject: CN=68bca390-404f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d5:d5:5e:e8:f3:a8:10:ca:b9:72:23:ab:3e:
                    c5:80:fe:37:62:8d:fe:07:af:a2:32:07:9b:1a:ca:
                    06:f8:82:92:e1:75:af:65:df:a6:34:98:01:bb:fb:
                    88:ff:39:f1:5d:75:8b:f6:7b:4c:b3:46:ac:2d:ac:
                    44:f8:db:9c:a2:d1:25:32:51:f5:2a:1a:c8:d2:c2:
                    d2:27:0f:d9:05:3e:56:ab:91:a8:34:73:15:79:40:
                    eb:e3:df:f3:87:0b:7f:81:3a:50:6a:96:33:8e:4c:
                    d5:66:ac:39:b8:28:0e:b0:f5:b5:ff:0d:fa:c0:6a:
                    3d:12:c9:a1:d3:97:72:71:b8:1b:5e:d5:0c:79:fd:
                    a4:e4:eb:7d:ce:4b:6e:b7:fe:db:8c:95:ba:d0:d8:
                    21:6f:08:91:fb:0f:a1:51:a1:bb:6f:f6:05:66:79:
                    95:3d:4d:76:41:40:10:46:d0:47:47:7a:3d:73:e2:
                    d4:96:de:82:58:f4:6c:3c:d6:49:75:22:3c:90:0f:
                    1d:a8:30:e5:f0:0f:02:de:33:bf:bd:cf:dc:52:ab:
                    5d:8a:07:01:bf:a2:6e:e7:d1:f9:98:80:88:f5:71:
                    99:0f:f7:5c:54:98:4b:ee:2d:f6:7f:ec:25:3c:ab:
                    3d:01:8b:f4:fe:28:c0:df:be:23:40:cc:b5:fd:60:
                    9b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:17:0F:0B:C5:E5:BC:F5:47:99:6B:93:31:DB:81:DF:5B:B3:1B:96
            X509v3 Authority Key Identifier:
                keyid:B8:5B:ED:99:BF:74:0A:BA:D5:A3:99:C9:DF:5F:E9:96:2A:6D:E8:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uFvtmb90CrrVo5nJ31_plipt6PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195DE5/E3ED65D8F4BE11EA9C35FE6AC4F9AE02/uFvtmb90CrrVo5nJ31_plipt6PE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:3e:a6:7e:17:20:5b:78:00:98:25:6d:a9:7d:91:7a:30:4d:
         9c:bb:02:2e:31:dd:00:95:62:52:13:b4:32:f0:1e:04:b1:3c:
         75:df:e5:a7:ef:62:1a:f0:09:19:1b:32:d8:f9:2c:ea:bd:17:
         79:34:a9:4b:9f:57:72:76:38:4a:d6:71:06:9e:74:cd:5d:c4:
         e2:fc:a4:1e:60:b1:8a:0d:ee:0d:1f:0e:42:63:09:82:92:58:
         a1:7e:2b:fe:4e:f0:6a:14:bc:af:3a:fa:bc:c6:bd:8b:45:47:
         10:d3:84:fa:8c:66:36:7e:42:4c:18:89:9c:fe:e9:f3:95:48:
         47:22:e0:0c:10:38:a2:13:34:08:86:ca:19:d7:d9:ed:11:3d:
         7c:fe:3d:28:5b:d6:c9:7c:14:db:72:9f:4e:e6:5b:4d:0e:02:
         11:1e:dc:bc:be:ed:e7:1d:73:65:50:4f:6d:79:cf:2f:e8:c9:
         ce:5e:24:6a:e1:2d:51:f1:76:87:a0:dd:d4:35:5e:87:6e:12:
         7f:11:d6:3b:c5:76:6f:00:bd:48:fd:9a:53:77:55:41:63:f1:
         63:f8:e8:2e:1c:4f:4d:54:87:7b:49:df:7a:40:75:26:aa:0d:
         ab:78:40:9b:e3:5f:98:23:7f:27:4d:1e:47:e0:34:ac:b5:de:
         80:d6:06:83
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCBswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTVERTUxMTAvBgNVBAUTKEI4NUJFRDk5QkY3NDBBQkFENUEzOTlDOURGNUZFOTk2
MkE2REU4RjEwHhcNMjUwOTA2MjExMTQ0WhcNMjUwOTEzMjExMTQ0WjAYMRYwFAYD
VQQDEw02OGJjYTM5MC00MDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq9XVXujzqBDKuXIjqz7FgP43Yo3+B6+iMgebGsoG+IKS4XWvZd+mNJgBu/uI
/znxXXWL9ntMs0asLaxE+NucotElMlH1KhrI0sLSJw/ZBT5Wq5GoNHMVeUDr49/z
hwt/gTpQapYzjkzVZqw5uCgOsPW1/w36wGo9Esmh05dycbgbXtUMef2k5Ot9zktu
t/7bjJW60NghbwiR+w+hUaG7b/YFZnmVPU12QUAQRtBHR3o9c+LUlt6CWPRsPNZJ
dSI8kA8dqDDl8A8C3jO/vc/cUqtdigcBv6Ju59H5mICI9XGZD/dcVJhL7i32f+wl
PKs9AYv0/ijA374jQMy1/WCboQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIsXDwvF
5bz1R5lrkzHbgd9bsxuWMB8GA1UdIwQYMBaAFLhb7Zm/dAq61aOZyd9f6ZYqbejx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NURFNS9FM0VENjVEOEY0
QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENyclZvNW5KMzFfcGxpcHQ2
UEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VGdnRtYjkwQ3JyVm81bkozMV9wbGlwdDZQRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NURFNS9FM0VENjVEOEY0QkUxMUVBOUMzNUZFNkFDNEY5QUUwMi91RnZ0bWI5MENy
clZvNW5KMzFfcGxpcHQ2UEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtPqZ+FyBbeACYJW2pfZF6ME2cuwIuMd0AlWJSE7Qy8B4EsTx13+Wn
72Ia8AkZGzLY+SzqvRd5NKlLn1dydjhK1nEGnnTNXcTi/KQeYLGKDe4NHw5CYwmC
klihfiv+TvBqFLyvOvq8xr2LRUcQ04T6jGY2fkJMGImc/unzlUhHIuAMEDiiEzQI
hsoZ19ntET18/j0oW9bJfBTbcp9O5ltNDgIRHty8vu3nHXNlUE9tec8v6MnOXiRq
4S1R8XaHoN3UNV6HbhJ/EdY7xXZvAL1I/ZpTd1VBY/Fj+OguHE9NVId7Sd96QHUm
qg2reECb41+YI38nTR5H4DSstd6A1gaD
-----END CERTIFICATE-----
Generated at Mon Sep 8 14:54:43 2025 by rpki-client