Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
File:                     uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft (raw, json)
Hash identifier:          kvfi/HYDD0zUC5/XBdXrzqcz+ZGHXitZ6/DAIy7j4is=
Subject key identifier:   46:40:D0:7A:9D:6A:13:B9:FD:51:3B:ED:97:C7:0A:83:1C:CD:F7:21
Authority key identifier: B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9
Certificate issuer:       /CN=A919E83B/serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
Certificate serial:       082F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
Manifest number:          0811
Signing time:             Thu 04 Sep 2025 21:10:59 +0000
Manifest this update:     Thu 04 Sep 2025 21:10:58 +0000
Manifest next update:     Thu 11 Sep 2025 21:10:58 +0000
Files and hashes:         1: uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl (hash: 6dvfw1ytt9KOjP1sVkkAOCg2E2cTt3nplfleAy2of2s=)
                          2: E68BF368DD9911EF85614A53C4F9AE02.roa (hash: RcdkSPfjnAmz3uVP4FBhLTQ0GFBSdezmu4kQPa/+yaY=)
                          3: 8BB3088E982F11ED9D647578C4F9AE02.roa (hash: A1w8tHzqGX+jD/ISNBe9aPcQuL2J3HJQzhH/YAzCdq0=)
                          4: F89E68D6982911ED90F8C877C4F9AE02.roa (hash: XTLM9Il3d4SVArTDp/CLgDo1h6RlBLONdep9WAa5H5I=)
                          5: 2DCC2988982711ED9D75C85AC4F9AE02.roa (hash: cXIuMnEWUiuT4kupzUNHJo4zj/W45Qb9cwkr7yvw0vc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl
                          rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 21:10:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2095 (0x82f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E83B, serialNumber=B8A62CF1DE8B262E14737D93EE3E6F36C3A0E1C9
        Validity
            Not Before: Sep  4 21:10:58 2025 GMT
            Not After : Sep 11 21:10:58 2025 GMT
        Subject: CN=68ba0063-f436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d4:4b:a3:12:49:33:73:90:4b:ab:13:00:08:
                    40:bc:cc:3b:ef:01:b6:99:63:1c:7b:b7:e8:53:d8:
                    b7:a8:f5:23:51:8b:b9:91:aa:6e:eb:ed:a3:73:31:
                    ed:8f:8e:b9:b8:a3:e0:bc:37:75:aa:db:d8:65:38:
                    34:e0:a3:03:26:10:9e:9c:73:0e:1a:e4:82:c4:24:
                    81:e3:3d:25:00:1f:c1:8b:f5:fb:7b:b8:92:ee:cf:
                    00:63:92:fd:86:25:78:85:cc:dd:f7:05:db:69:f7:
                    f6:19:5d:32:dc:25:91:a5:e5:91:a2:44:fe:aa:72:
                    72:39:75:58:cb:b9:40:6c:19:18:f0:02:23:d1:26:
                    34:85:26:b8:af:57:4a:97:2b:81:8e:d3:59:fb:31:
                    e9:3b:a5:f5:cc:b5:29:73:18:d4:f5:8a:08:ef:9c:
                    b5:97:28:e6:eb:31:92:8a:7d:26:2b:df:ae:f6:92:
                    99:12:5a:ec:4d:56:b7:9b:f2:3b:fb:25:e3:23:c3:
                    be:d4:14:a2:8d:94:a0:d1:03:ad:1a:fc:3e:9e:5e:
                    23:42:3e:6a:96:e5:cc:67:8d:29:d4:c1:d5:22:19:
                    26:7c:b4:72:ee:07:3d:51:63:2c:07:19:f5:8d:ec:
                    40:71:76:4b:52:fb:f3:9a:69:ba:39:1e:2f:a9:a9:
                    5a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:40:D0:7A:9D:6A:13:B9:FD:51:3B:ED:97:C7:0A:83:1C:CD:F7:21
            X509v3 Authority Key Identifier:
                keyid:B8:A6:2C:F1:DE:8B:26:2E:14:73:7D:93:EE:3E:6F:36:C3:A0:E1:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uKYs8d6LJi4Uc32T7j5vNsOg4ck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E83B/792D148AF28111EA8A6FC66DC4F9AE02/uKYs8d6LJi4Uc32T7j5vNsOg4ck.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:63:50:bf:3f:70:a2:31:55:22:28:93:47:5c:8d:f9:21:f3:
         7b:34:df:d0:8a:8f:e0:ba:28:28:a2:fd:3c:1d:01:12:1c:c4:
         c2:eb:02:e2:21:15:6b:99:50:fb:c5:ff:9a:1c:c7:41:b0:60:
         71:9c:02:a1:3b:65:f4:06:72:8b:6f:23:76:4b:de:37:21:5b:
         b0:8e:c9:00:a2:4e:c4:e7:d3:91:1d:e0:f8:e4:e1:47:d9:8e:
         dc:7e:4d:8a:9e:c9:fb:6a:66:d9:8f:ca:e9:42:19:04:7a:53:
         f7:20:a4:dd:13:11:64:bd:7e:09:de:a2:5b:0e:2d:89:a3:3b:
         0c:00:83:89:1c:df:93:87:8f:18:bb:89:9e:3e:98:d9:53:7f:
         a5:1a:95:5e:25:44:aa:6e:1c:c8:0b:2a:a0:8c:ae:8c:6b:f6:
         00:05:cf:15:5b:7a:15:94:03:6d:24:50:64:c7:2f:c4:54:60:
         7e:cb:6f:74:35:aa:93:d3:4e:ed:ae:cd:ad:05:eb:6e:b7:a4:
         c8:39:cb:f0:8f:2b:a0:5f:fe:62:fc:66:0f:80:bc:fd:5c:e4:
         67:7d:9a:44:00:e6:21:bb:20:56:ad:9d:7d:16:13:fa:d9:2e:
         a0:55:49:ff:5e:49:3c:ff:74:b6:4e:c8:0f:cb:5c:5a:e3:6a:
         46:01:df:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUU4M0IxMTAvBgNVBAUTKEI4QTYyQ0YxREU4QjI2MkUxNDczN0Q5M0VFM0U2RjM2
QzNBMEUxQzkwHhcNMjUwOTA0MjExMDU4WhcNMjUwOTExMjExMDU4WjAYMRYwFAYD
VQQDEw02OGJhMDA2My1mNDM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1tRLoxJJM3OQS6sTAAhAvMw77wG2mWMce7foU9i3qPUjUYu5kapu6+2jczHt
j465uKPgvDd1qtvYZTg04KMDJhCenHMOGuSCxCSB4z0lAB/Bi/X7e7iS7s8AY5L9
hiV4hczd9wXbaff2GV0y3CWRpeWRokT+qnJyOXVYy7lAbBkY8AIj0SY0hSa4r1dK
lyuBjtNZ+zHpO6X1zLUpcxjU9YoI75y1lyjm6zGSin0mK9+u9pKZElrsTVa3m/I7
+yXjI8O+1BSijZSg0QOtGvw+nl4jQj5qluXMZ40p1MHVIhkmfLRy7gc9UWMsBxn1
jexAcXZLUvvzmmm6OR4vqalaOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEZA0Hqd
ahO5/VE77ZfHCoMczfchMB8GA1UdIwQYMBaAFLimLPHeiyYuFHN9k+4+bzbDoOHJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RTgzQi83OTJEMTQ4QUYy
ODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEppNFVjMzJUN2o1dk5zT2c0
Y2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VLWXM4ZDZMSmk0VWMzMlQ3ajV2TnNPZzRjay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RTgzQi83OTJEMTQ4QUYyODExMUVBOEE2RkM2NkRDNEY5QUUwMi91S1lzOGQ2TEpp
NFVjMzJUN2o1dk5zT2c0Y2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgY1C/P3CiMVUiKJNHXI35IfN7NN/Qio/guigoov08HQESHMTC6wLi
IRVrmVD7xf+aHMdBsGBxnAKhO2X0BnKLbyN2S943IVuwjskAok7E59ORHeD45OFH
2Y7cfk2Knsn7ambZj8rpQhkEelP3IKTdExFkvX4J3qJbDi2JozsMAIOJHN+Th48Y
u4mePpjZU3+lGpVeJUSqbhzICyqgjK6Ma/YABc8VW3oVlANtJFBkxy/EVGB+y290
NaqT007trs2tBetut6TIOcvwjyugX/5i/GYPgLz9XORnfZpEAOYhuyBWrZ19FhP6
2S6gVUn/Xkk8/3S2TsgPy1xa42pGAd+9
-----END CERTIFICATE-----
Generated at Sat Sep 6 12:06:30 2025 by rpki-client