Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
File:                     03yc1lDAIKNQDtybQKVGqEw_Jgs.mft (raw, json)
Hash identifier:          P95E4SOcdZxs/Q4keULb/CHJsygZ7rnlVlthQruOzrk=
Subject key identifier:   DD:8E:08:A4:7C:89:89:97:2D:0F:56:C5:A4:FD:00:6D:8D:07:A8:FE
Authority key identifier: D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B
Certificate issuer:       /CN=A9153C50/serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
Certificate serial:       04DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
Manifest number:          04D5
Signing time:             Fri 25 Jul 2025 00:09:15 +0000
Manifest this update:     Fri 25 Jul 2025 00:09:14 +0000
Manifest next update:     Fri 01 Aug 2025 00:09:14 +0000
Files and hashes:         1: 03yc1lDAIKNQDtybQKVGqEw_Jgs.crl (hash: lGhvWGHyyEPRVV5u1qSTjekz8KUrcuKRhjXcRd6uzIw=)
                          2: 8B97D7A22CD911ECA528B744C4F9AE02.roa (hash: ejQetAzLgqVtDolBJZWz4Zc5LEXRfg3VkvX111clMEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl
                          rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 00:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1243 (0x4db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153C50, serialNumber=D37C9CD650C020A3500EDC9B40A546A84C3F260B
        Validity
            Not Before: Jul 25 00:09:14 2025 GMT
            Not After : Aug  1 00:09:14 2025 GMT
        Subject: CN=6882cb2b-6499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e6:75:e7:63:ef:80:a8:56:d2:18:83:97:71:
                    00:ea:f1:d6:02:1d:21:c7:38:f9:c4:92:e5:33:5d:
                    4c:12:f7:39:0e:3d:ae:86:58:d6:c5:1e:65:01:f1:
                    9d:0a:24:ed:0b:db:58:f5:45:cf:c4:27:19:0b:5f:
                    57:6e:a8:43:3a:22:9d:77:0c:14:fc:64:2f:e6:76:
                    36:ec:50:37:5a:cf:7d:74:10:59:df:e3:51:18:93:
                    42:f7:17:1d:06:6c:db:cf:55:5c:86:5b:f2:57:2a:
                    4b:65:cc:78:e7:28:c9:d2:aa:02:53:4f:b8:03:2d:
                    e8:eb:69:8c:29:08:34:82:ae:8f:36:dc:e6:6c:ad:
                    47:41:53:37:08:ef:e8:ab:be:99:8d:ee:d2:d5:0e:
                    7e:6e:13:c5:b5:bc:15:da:da:b0:cf:4a:99:5f:74:
                    1d:c3:5b:16:2f:42:79:75:a4:d1:4b:b5:73:46:cb:
                    65:ea:f4:e1:6f:05:93:1c:b3:fd:95:1e:78:4a:f9:
                    8c:5c:df:89:be:84:af:b8:8e:a7:cc:06:d8:79:1e:
                    fa:2d:78:59:07:da:89:d5:f2:5c:46:13:a9:b1:cb:
                    7e:60:0c:7d:16:a0:95:c5:9b:86:6f:98:af:1d:28:
                    bb:a0:84:63:35:55:26:28:f8:3b:f2:43:52:61:cd:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8E:08:A4:7C:89:89:97:2D:0F:56:C5:A4:FD:00:6D:8D:07:A8:FE
            X509v3 Authority Key Identifier:
                keyid:D3:7C:9C:D6:50:C0:20:A3:50:0E:DC:9B:40:A5:46:A8:4C:3F:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/03yc1lDAIKNQDtybQKVGqEw_Jgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153C50/4B9063022CD611ECA5DA3534C4F9AE02/03yc1lDAIKNQDtybQKVGqEw_Jgs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fc:fd:bb:d7:c9:1c:3b:e1:4c:c1:95:1c:fa:42:c5:2c:98:
         54:c5:c8:3c:cd:d0:c1:de:83:77:11:22:23:28:5b:ca:5f:9a:
         fb:21:7d:7f:9c:02:58:1f:02:a8:37:d7:8a:75:45:52:cc:8f:
         75:f3:41:39:87:4b:39:c2:d5:c7:26:c3:33:6a:a7:84:a1:99:
         36:80:ea:ac:39:ba:67:84:f3:28:c3:a3:6e:48:c3:15:e1:fa:
         93:d0:20:65:bc:9b:73:53:df:c2:13:de:44:05:47:07:71:6e:
         ba:cd:30:06:57:ab:09:6f:d8:c8:a1:cc:db:ef:d6:3e:ae:ac:
         89:37:06:89:58:aa:80:61:cb:f3:7d:6a:bd:91:2d:8c:73:5a:
         a0:ff:6e:e3:59:e1:2c:fb:e7:9d:d9:e2:bb:18:99:67:67:9c:
         ac:9b:bf:1d:1d:18:a6:d0:18:dc:51:3a:43:73:b8:f5:ec:a8:
         f7:e1:f6:7e:03:fe:b4:45:41:b9:fc:4b:b6:da:68:ff:e2:a2:
         b6:21:12:d7:24:70:77:56:18:39:91:bd:45:04:67:bd:72:dc:
         6a:ac:10:d9:af:9f:38:c9:2a:14:65:0e:96:00:c8:e5:a5:7b:
         45:09:2d:f0:17:93:eb:f5:ab:c0:13:0e:e0:fb:35:0b:37:44:
         a5:48:de:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTNDNTAxMTAvBgNVBAUTKEQzN0M5Q0Q2NTBDMDIwQTM1MDBFREM5QjQwQTU0NkE4
NEMzRjI2MEIwHhcNMjUwNzI1MDAwOTE0WhcNMjUwODAxMDAwOTE0WjAYMRYwFAYD
VQQDEw02ODgyY2IyYi02NDk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmuZ152PvgKhW0hiDl3EA6vHWAh0hxzj5xJLlM11MEvc5Dj2uhljWxR5lAfGd
CiTtC9tY9UXPxCcZC19XbqhDOiKddwwU/GQv5nY27FA3Ws99dBBZ3+NRGJNC9xcd
Bmzbz1VchlvyVypLZcx45yjJ0qoCU0+4Ay3o62mMKQg0gq6PNtzmbK1HQVM3CO/o
q76Zje7S1Q5+bhPFtbwV2tqwz0qZX3Qdw1sWL0J5daTRS7VzRstl6vThbwWTHLP9
lR54SvmMXN+JvoSvuI6nzAbYeR76LXhZB9qJ1fJcRhOpsct+YAx9FqCVxZuGb5iv
HSi7oIRjNVUmKPg78kNSYc028wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN2OCKR8
iYmXLQ9WxaT9AG2NB6j+MB8GA1UdIwQYMBaAFNN8nNZQwCCjUA7cm0ClRqhMPyYL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1M0M1MC80QjkwNjMwMjJD
RDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlLTlFEdHliUUtWR3FFd19K
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzAzeWMxbERBSUtOUUR0eWJRS1ZHcUV3X0pncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
M0M1MC80QjkwNjMwMjJDRDYxMUVDQTVEQTM1MzRDNEY5QUUwMi8wM3ljMWxEQUlL
TlFEdHliUUtWR3FFd19KZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAz/P2718kcO+FMwZUc+kLFLJhUxcg8zdDB3oN3ESIjKFvKX5r7IX1/
nAJYHwKoN9eKdUVSzI9180E5h0s5wtXHJsMzaqeEoZk2gOqsObpnhPMow6NuSMMV
4fqT0CBlvJtzU9/CE95EBUcHcW66zTAGV6sJb9jIoczb79Y+rqyJNwaJWKqAYcvz
fWq9kS2Mc1qg/27jWeEs++ed2eK7GJlnZ5ysm78dHRim0BjcUTpDc7j17Kj34fZ+
A/60RUG5/Eu22mj/4qK2IRLXJHB3Vhg5kb1FBGe9ctxqrBDZr584ySoUZQ6WAMjl
pXtFCS3wF5Pr9avAEw7g+zULN0SlSN53
-----END CERTIFICATE-----
Generated at Fri Jul 25 05:27:20 2025 by rpki-client