Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
File:                     fSxGJ1bUkw5gMpuitqcGbzsImu0.mft (raw, json)
Hash identifier:          AkKB++VrlzaY0id17fkfmOK74NUf6tzEqv2lQUeQ7ZA=
Subject key identifier:   2C:F1:11:80:77:25:E4:D3:50:80:97:C7:52:98:2F:B5:77:98:AA:5A
Authority key identifier: 7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED
Certificate issuer:       /CN=A9151631/serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED
Certificate serial:       063D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
Manifest number:          0637
Signing time:             Fri 18 Jul 2025 23:00:58 +0000
Manifest this update:     Fri 18 Jul 2025 23:00:58 +0000
Manifest next update:     Fri 25 Jul 2025 23:00:58 +0000
Files and hashes:         1: fSxGJ1bUkw5gMpuitqcGbzsImu0.crl (hash: hX0fSj1xXxO5/LahdRU8tRvUStib5msYVx+Ok2vOyWw=)
                          2: 44F388569DA411EBA820C56AC4F9AE02.roa (hash: 71xWzWQEtjmsg9iGQHPh0f8acNegF6g7VmKGwD79bmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl
                          rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 23:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1597 (0x63d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151631, serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED
        Validity
            Not Before: Jul 18 23:00:58 2025 GMT
            Not After : Jul 25 23:00:58 2025 GMT
        Subject: CN=687ad22a-660e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f7:95:af:93:e8:fb:e1:b7:29:a2:36:ca:10:
                    c7:05:fb:90:05:b0:85:9f:39:33:08:d8:05:e2:b0:
                    0b:3f:4b:b2:84:21:f0:c1:2a:1c:9c:39:eb:fe:a2:
                    81:53:de:3b:5a:51:85:9a:0b:09:15:10:80:1e:ea:
                    6d:47:35:61:83:67:eb:10:49:d1:4f:db:55:05:f8:
                    e9:26:83:e0:93:5e:40:7a:f5:f1:97:dc:07:f9:6f:
                    d0:0e:53:a7:a2:1b:af:b7:8d:92:de:aa:f0:bc:a8:
                    92:d5:64:a9:2d:38:e1:d1:9c:6e:38:e3:e7:1b:18:
                    5f:c7:89:9c:be:d1:7d:d6:52:5b:28:cf:62:c0:4a:
                    be:e3:e2:c1:be:b0:68:62:81:4c:29:ad:2a:88:3b:
                    0b:49:0a:af:34:77:ae:40:a5:e5:e6:56:eb:e9:55:
                    a6:8e:0c:d0:7a:14:c2:75:84:d1:62:c3:06:3d:66:
                    4e:ef:42:20:ae:fd:a7:aa:27:db:bf:8f:a6:32:6d:
                    7d:a1:bf:7c:73:ba:d0:46:58:10:82:f6:ce:d4:27:
                    de:c0:57:86:da:52:54:59:89:fd:0a:b5:22:48:5f:
                    ed:db:53:40:23:fa:d1:00:97:dc:56:6f:27:79:bb:
                    e7:c8:61:e1:43:a2:88:a8:33:85:95:ed:24:fc:27:
                    d4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F1:11:80:77:25:E4:D3:50:80:97:C7:52:98:2F:B5:77:98:AA:5A
            X509v3 Authority Key Identifier:
                keyid:7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:7e:43:c1:48:cc:3d:86:c5:9a:a4:e6:26:5a:e8:ad:6f:08:
         1f:71:79:a6:86:7c:a1:04:60:57:9b:fc:79:97:b0:7d:86:99:
         d1:a6:f6:34:4f:9a:c7:f8:bc:24:4f:66:43:b7:32:42:b9:8c:
         e9:15:a6:7d:89:3d:2e:8b:cc:eb:e0:04:37:d3:fb:bd:0e:4b:
         17:ea:32:67:54:b9:83:f3:b5:9f:5c:ff:ef:6b:d3:cd:9a:a0:
         5f:ad:2f:b4:e6:d0:0a:86:a3:b3:3f:c6:3f:b6:97:2e:f4:a7:
         16:e8:83:af:8c:15:1c:d7:65:e4:60:0f:59:25:1a:3b:a3:96:
         b2:31:b0:be:22:d4:5d:b9:2d:e3:2f:d1:b8:ff:a5:b1:7d:08:
         fd:70:a9:f9:73:43:07:3b:56:66:8e:e5:1b:6d:f0:06:c2:5b:
         74:fa:5f:8c:58:d3:dd:b1:89:fc:93:1e:fc:65:f1:b7:00:f3:
         5c:54:bd:30:47:1b:33:4e:ff:4e:22:68:8b:4a:87:9e:da:c0:
         46:44:a4:23:51:d4:c3:22:b5:e5:6d:cc:be:8b:ef:1f:78:1a:
         6e:5f:e7:47:cc:61:2f:29:2f:91:f1:b6:0a:d5:73:6f:4c:3c:
         d1:83:5e:ab:80:6d:89:9b:2f:46:a3:5b:72:73:ee:8e:c7:1f:
         a7:7c:03:5d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBj0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE2MzExMTAvBgNVBAUTKDdEMkM0NjI3NTZENDkzMEU2MDMyOUJBMkI2QTcwNjZG
M0IwODlBRUQwHhcNMjUwNzE4MjMwMDU4WhcNMjUwNzI1MjMwMDU4WjAYMRYwFAYD
VQQDEw02ODdhZDIyYS02NjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0feVr5Po++G3KaI2yhDHBfuQBbCFnzkzCNgF4rALP0uyhCHwwSocnDnr/qKB
U947WlGFmgsJFRCAHuptRzVhg2frEEnRT9tVBfjpJoPgk15AevXxl9wH+W/QDlOn
ohuvt42S3qrwvKiS1WSpLTjh0ZxuOOPnGxhfx4mcvtF91lJbKM9iwEq+4+LBvrBo
YoFMKa0qiDsLSQqvNHeuQKXl5lbr6VWmjgzQehTCdYTRYsMGPWZO70Igrv2nqifb
v4+mMm19ob98c7rQRlgQgvbO1CfewFeG2lJUWYn9CrUiSF/t21NAI/rRAJfcVm8n
ebvnyGHhQ6KIqDOFle0k/CfU0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCzxEYB3
JeTTUICXx1KYL7V3mKpaMB8GA1UdIwQYMBaAFH0sRidW1JMOYDKboranBm87CJrt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTYzMS9GMDUxNTgyNDlE
QTIxMUVCQjQzOUFBNjlDNEY5QUUwMi9mU3hHSjFiVWt3NWdNcHVpdHFjR2J6c0lt
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZTeEdKMWJVa3c1Z01wdWl0cWNHYnpzSW11MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTYzMS9GMDUxNTgyNDlEQTIxMUVCQjQzOUFBNjlDNEY5QUUwMi9mU3hHSjFiVWt3
NWdNcHVpdHFjR2J6c0ltdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC1fkPBSMw9hsWapOYmWuitbwgfcXmmhnyhBGBXm/x5l7B9hpnRpvY0
T5rH+LwkT2ZDtzJCuYzpFaZ9iT0ui8zr4AQ30/u9DksX6jJnVLmD87WfXP/va9PN
mqBfrS+05tAKhqOzP8Y/tpcu9KcW6IOvjBUc12XkYA9ZJRo7o5ayMbC+ItRduS3j
L9G4/6WxfQj9cKn5c0MHO1ZmjuUbbfAGwlt0+l+MWNPdsYn8kx78ZfG3APNcVL0w
RxszTv9OImiLSoee2sBGRKQjUdTDIrXlbcy+i+8feBpuX+dHzGEvKS+R8bYK1XNv
TDzRg16rgG2Jmy9Go1tyc+6Oxx+nfANd
-----END CERTIFICATE-----
Generated at Sun Jul 20 08:03:07 2025 by rpki-client