Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
File:                     T96UkP8v8-m_k7SY108x916p_P8.mft (raw, json)
Hash identifier:          Oxrna5EXlp0O/vAnlbL/zI17MoMS+hqYuHWqYWa8siA=
Subject key identifier:   B6:44:E3:EE:45:91:B2:06:FB:26:AB:F9:3C:8A:34:64:9C:1A:43:3F
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Certificate issuer:       /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial:       03B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
Manifest number:          03A1
Signing time:             Sat 19 Jul 2025 01:12:54 +0000
Manifest this update:     Sat 19 Jul 2025 01:12:53 +0000
Manifest next update:     Sat 26 Jul 2025 01:12:53 +0000
Files and hashes:         1: T96UkP8v8-m_k7SY108x916p_P8.crl (hash: FnU/W7rXlJgFW00YUma5Zwk7tG8QxfLMhc2YoYdug9U=)
                          2: D791DEB48DEE11EEB451D416C4F9AE02.roa (hash: xWMMfEWphw+jGw6vFyTgUW/C6T4JCFAjmX3tY8qjIQU=)
                          3: 152E5750901211EEA25BED1EC4F9AE02.roa (hash: q9Ub/O/CxWNZ+a3hm7Iv+ArFH+XEypUPU6PVAyD6z+U=)
                          4: D226E012A4EA11ECA8C4D151C4F9AE02.roa (hash: JV8w5HTbgBjA5P018WfQWq636lJGXmUnJAVnuy5z5CQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
                          rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 01:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944 (0x3b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
        Validity
            Not Before: Jul 19 01:12:53 2025 GMT
            Not After : Jul 26 01:12:53 2025 GMT
        Subject: CN=687af116-5c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:a1:f2:a7:84:7d:49:29:26:19:39:05:74:
                    a3:2e:0f:5e:69:97:50:a0:fa:96:40:e2:3b:d6:0c:
                    07:9f:fb:1c:72:69:ce:bc:74:28:85:b5:1c:cb:c6:
                    2a:e2:7a:61:62:54:88:b5:6f:d8:0e:8f:3a:72:3d:
                    fe:4c:ea:f3:dc:a7:3f:69:0d:51:49:60:9b:e0:48:
                    5b:f7:35:6b:9f:78:8d:b0:ad:17:9f:ec:81:4e:31:
                    dd:c6:23:0e:1d:25:9a:d9:86:c0:f1:fe:49:9a:ec:
                    ea:c0:78:13:fc:14:02:5d:dd:36:36:5c:c8:d7:ad:
                    1a:a3:60:ef:d1:b4:61:27:db:57:f8:f6:39:d2:2c:
                    f6:ed:52:30:34:67:a1:23:47:f7:ca:15:5a:ce:7f:
                    ad:f2:09:22:77:0e:27:05:d6:c9:2d:13:15:3a:85:
                    df:a3:a1:2e:b6:de:a2:20:29:bf:e8:8a:51:55:d1:
                    56:7d:89:b5:ac:a3:23:6c:a3:b5:ec:44:36:b3:0e:
                    e8:f7:8d:97:2e:ae:44:a1:74:38:a6:87:83:17:4a:
                    cc:63:15:b2:69:82:ec:c3:52:eb:e8:77:18:e4:fd:
                    7c:6e:38:06:c0:e6:3b:d0:f9:da:05:66:ab:4a:10:
                    df:32:e4:fb:2f:11:83:f1:c5:58:c2:cd:bc:48:c8:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:44:E3:EE:45:91:B2:06:FB:26:AB:F9:3C:8A:34:64:9C:1A:43:3F
            X509v3 Authority Key Identifier:
                keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d2:ac:14:b1:a1:1b:89:35:d1:eb:6c:4f:4a:9d:f6:60:be:
         eb:3d:a8:7e:20:93:42:4a:e8:15:8b:7b:82:30:a2:99:d7:cc:
         f9:43:6c:20:bc:a9:65:79:94:2b:c1:4e:9a:1d:55:3b:a3:a1:
         a0:75:30:15:04:de:f4:ae:32:a7:f8:97:2c:8c:52:33:d8:e1:
         83:5b:15:2b:5e:46:97:24:88:41:13:b4:90:5f:ef:cb:30:e2:
         e3:9f:51:d7:d3:45:93:12:83:59:4a:7c:7f:4b:89:21:d3:87:
         85:95:52:55:c6:d4:2a:ec:03:4a:e0:cb:70:0e:f6:03:9d:c1:
         6b:67:df:cb:50:0d:45:e7:6d:59:09:a6:bd:1e:23:99:7e:05:
         2c:ba:cb:c0:88:ae:06:1a:70:f8:bf:56:ab:63:1c:fd:50:d3:
         b9:25:af:36:c8:a9:0f:86:d8:1e:10:92:b4:b6:27:69:43:59:
         10:f2:0e:03:8d:52:50:8f:14:2c:fb:4a:00:17:9c:d9:88:0b:
         c0:33:b0:96:a6:e5:64:d0:65:f5:49:b4:fe:a2:b1:04:98:b2:
         b7:5f:fa:8b:ee:dc:d7:86:e5:37:5d:4e:ed:c3:4f:f7:bf:41:
         8d:e2:b2:fe:b1:0a:bc:9e:98:aa:16:5a:07:1e:d8:ed:96:6e:
         9f:06:59:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQxNEIxMTAvBgNVBAUTKDRGREU5NDkwRkYyRkYzRTlCRjkzQjQ5OEQ3NEYzMUY3
NUVBOUZDRkYwHhcNMjUwNzE5MDExMjUzWhcNMjUwNzI2MDExMjUzWjAYMRYwFAYD
VQQDEw02ODdhZjExNi01Yzk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnuuh8qeEfUkpJhk5BXSjLg9eaZdQoPqWQOI71gwHn/sccmnOvHQohbUcy8Yq
4nphYlSItW/YDo86cj3+TOrz3Kc/aQ1RSWCb4Ehb9zVrn3iNsK0Xn+yBTjHdxiMO
HSWa2YbA8f5JmuzqwHgT/BQCXd02NlzI160ao2Dv0bRhJ9tX+PY50iz27VIwNGeh
I0f3yhVazn+t8gkidw4nBdbJLRMVOoXfo6Eutt6iICm/6IpRVdFWfYm1rKMjbKO1
7EQ2sw7o942XLq5EoXQ4poeDF0rMYxWyaYLsw1Lr6HcY5P18bjgGwOY70PnaBWar
ShDfMuT7LxGD8cVYws28SMgiPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZE4+5F
kbIG+yar+TyKNGScGkM/MB8GA1UdIwQYMBaAFE/elJD/L/Ppv5O0mNdPMfdeqfz/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDE0Qi9EQzFFNzIxNEE0
RTYxMUVDOUVGNDMxNERDNEY5QUUwMi9UOTZVa1A4djgtbV9rN1NZMTA4eDkxNnBf
UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q5NlVrUDh2OC1tX2s3U1kxMDh4OTE2cF9QOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDE0Qi9EQzFFNzIxNEE0RTYxMUVDOUVGNDMxNERDNEY5QUUwMi9UOTZVa1A4djgt
bV9rN1NZMTA4eDkxNnBfUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCO0qwUsaEbiTXR62xPSp32YL7rPah+IJNCSugVi3uCMKKZ18z5Q2wg
vKlleZQrwU6aHVU7o6GgdTAVBN70rjKn+JcsjFIz2OGDWxUrXkaXJIhBE7SQX+/L
MOLjn1HX00WTEoNZSnx/S4kh04eFlVJVxtQq7ANK4MtwDvYDncFrZ9/LUA1F521Z
Caa9HiOZfgUsusvAiK4GGnD4v1arYxz9UNO5Ja82yKkPhtgeEJK0tidpQ1kQ8g4D
jVJQjxQs+0oAF5zZiAvAM7CWpuVk0GX1SbT+orEEmLK3X/qL7tzXhuU3XU7tw0/3
v0GN4rL+sQq8npiqFloHHtjtlm6fBlny
-----END CERTIFICATE-----
Generated at Sun Jul 20 15:02:00 2025 by rpki-client