Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
File:                     RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft (raw, json)
Hash identifier:          b25mOxDp5wl3NWNuoujyvPwOAYpBQPxIQOtryRnfJAI=
Subject key identifier:   59:34:B9:0F:D0:22:AD:E1:8E:0E:C2:BC:13:CB:FE:75:66:B7:BC:D3
Authority key identifier: 46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73
Certificate issuer:       /CN=A915B2EC/serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
Certificate serial:       052D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
Manifest number:          0500
Signing time:             Sun 27 Jul 2025 00:03:20 +0000
Manifest this update:     Sun 27 Jul 2025 00:03:20 +0000
Manifest next update:     Sun 03 Aug 2025 00:03:20 +0000
Files and hashes:         1: RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl (hash: mfJQZesVV/d08vo06wWLKqBDHqNjR8HQH1cTo5tDWkE=)
                          2: 7AD7390CD15111EE98EBEC1EC4F9AE02.roa (hash: EYW2sKPf+G2Sx9ydD4pDWi9he+aSK802wxvxfjM5I2Y=)
                          3: 20C2C8980D4111EEB385BA83C4F9AE02.roa (hash: 9YEdcRP/xwcEXvASqrHWB8HPt3we6VKlBGcd9dDANWk=)
                          4: 5A306016D15111EE98E6801EC4F9AE02.roa (hash: +6P6AQHkzNOzm6kHVQO5a81bv5yPJUOJbWXMWV3KVfA=)
                          5: D26FE5F62BC511EEA4569A67C4F9AE02.roa (hash: HwIXxMyVB5TDC6OnRXgKUZIRg3PpPlLxsrzUfJFlIrY=)
                          6: C6E67CEACB0911ECA16E4A19C4F9AE02.roa (hash: eSOO4OZJq9oAUGzG+Jm/RF9DAg/VCtKcVYa1dGAc4zo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl
                          rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 Aug 2025 00:03:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1325 (0x52d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B2EC, serialNumber=46922C565440040BD99AFD4E329ED9DEB6F92573
        Validity
            Not Before: Jul 27 00:03:20 2025 GMT
            Not After : Aug  3 00:03:20 2025 GMT
        Subject: CN=68856cc8-13bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:94:6a:8b:17:c0:c1:ab:e3:e2:d3:31:9a:b3:
                    d4:eb:36:f2:d7:5a:7b:ee:7f:4f:02:f2:6b:9f:20:
                    d8:be:b3:f7:8d:92:d0:77:c5:f0:e0:65:4d:bd:b9:
                    bd:e1:3b:b5:ea:d4:95:2a:c4:2b:9b:49:ec:27:d4:
                    02:8a:c6:cd:3c:33:df:32:fb:c3:97:dc:ce:08:38:
                    87:ef:9a:c2:78:99:14:75:5f:7f:52:48:37:08:38:
                    8f:0a:aa:9c:31:5e:ee:23:7a:6c:2d:53:78:ae:db:
                    e2:1f:3f:4b:02:c0:22:ff:23:4b:85:49:3c:24:6a:
                    3a:f6:06:81:16:e6:0a:73:2b:d4:5a:10:3f:ed:94:
                    7e:92:73:d3:b9:d9:4d:4c:2c:2f:bf:2e:fd:c4:8f:
                    b4:9a:a0:38:3e:de:a5:1d:c1:75:bf:7b:98:50:73:
                    1f:f2:c4:9a:69:01:d8:bf:a8:0c:d7:6f:67:28:ef:
                    55:bb:93:b9:13:c7:e3:30:a6:ad:03:1d:5c:12:27:
                    d5:2f:ff:f0:12:7a:6f:c3:77:a5:d1:c0:0a:82:8a:
                    40:95:b7:16:54:49:99:cc:f6:c6:47:61:14:ba:54:
                    3a:fc:ec:4d:08:1f:ea:ff:d0:3e:7b:96:d4:ff:2a:
                    85:6b:61:4c:18:26:80:cc:59:ce:2b:c4:5b:b1:d6:
                    cd:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:34:B9:0F:D0:22:AD:E1:8E:0E:C2:BC:13:CB:FE:75:66:B7:BC:D3
            X509v3 Authority Key Identifier:
                keyid:46:92:2C:56:54:40:04:0B:D9:9A:FD:4E:32:9E:D9:DE:B6:F9:25:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RpIsVlRABAvZmv1OMp7Z3rb5JXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B2EC/842759562B0911EC851B980EC4F9AE02/RpIsVlRABAvZmv1OMp7Z3rb5JXM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8c:e7:ae:0a:67:dc:0f:7d:74:e7:f8:dc:50:be:07:6c:d5:
         16:24:40:96:38:c7:62:c3:43:ca:56:77:5a:ca:dd:60:4b:b6:
         50:1d:0a:8a:03:83:b7:54:fa:8f:20:d1:de:39:ea:78:c3:b5:
         b5:e3:ea:34:ab:7a:71:6a:22:71:b2:d7:ac:42:67:b3:46:c1:
         0c:db:32:a8:36:b7:e1:d6:85:8a:71:d2:de:b1:70:44:bc:cb:
         8c:6a:76:ee:e2:02:ca:01:c9:25:e2:09:7c:57:09:4e:fe:96:
         b2:dc:2f:3a:5b:9c:76:a0:94:71:1a:23:92:fa:53:ca:e4:e1:
         dd:b7:67:75:1d:9f:19:3e:ec:6b:06:49:04:9f:ed:35:51:4e:
         0f:44:67:ae:88:ae:91:7a:e9:38:f3:60:46:cf:00:1d:e8:5b:
         f7:f5:b4:e6:6e:c9:15:1a:f7:cf:f0:c5:0b:0d:ca:68:60:b5:
         fe:59:25:ff:b8:44:fc:1a:70:b5:7b:1e:70:61:43:03:9d:51:
         2d:37:b0:9a:24:75:46:ed:fc:38:b4:1e:3c:fd:4f:13:3b:c2:
         d2:b4:cc:43:9e:86:b9:b9:61:4c:05:eb:1b:e7:c5:3e:47:95:
         e0:ca:43:84:b8:02:fc:c0:eb:70:0c:17:ff:fb:87:eb:b4:03:
         c0:cb:39:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIyRUMxMTAvBgNVBAUTKDQ2OTIyQzU2NTQ0MDA0MEJEOTlBRkQ0RTMyOUVEOURF
QjZGOTI1NzMwHhcNMjUwNzI3MDAwMzIwWhcNMjUwODAzMDAwMzIwWjAYMRYwFAYD
VQQDEw02ODg1NmNjOC0xM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1ZRqixfAwavj4tMxmrPU6zby11p77n9PAvJrnyDYvrP3jZLQd8Xw4GVNvbm9
4Tu16tSVKsQrm0nsJ9QCisbNPDPfMvvDl9zOCDiH75rCeJkUdV9/Ukg3CDiPCqqc
MV7uI3psLVN4rtviHz9LAsAi/yNLhUk8JGo69gaBFuYKcyvUWhA/7ZR+knPTudlN
TCwvvy79xI+0mqA4Pt6lHcF1v3uYUHMf8sSaaQHYv6gM129nKO9Vu5O5E8fjMKat
Ax1cEifVL//wEnpvw3el0cAKgopAlbcWVEmZzPbGR2EUulQ6/OxNCB/q/9A+e5bU
/yqFa2FMGCaAzFnOK8RbsdbNpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFk0uQ/Q
Iq3hjg7CvBPL/nVmt7zTMB8GA1UdIwQYMBaAFEaSLFZUQAQL2Zr9TjKe2d62+SVz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjJFQy84NDI3NTk1NjJC
MDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJBdlptdjFPTXA3WjNyYjVK
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JwSXNWbFJBQkF2Wm12MU9NcDdaM3JiNUpYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjJFQy84NDI3NTk1NjJCMDkxMUVDODUxQjk4MEVDNEY5QUUwMi9ScElzVmxSQUJB
dlptdjFPTXA3WjNyYjVKWE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKjOeuCmfcD3105/jcUL4HbNUWJECWOMdiw0PKVndayt1gS7ZQHQqK
A4O3VPqPINHeOep4w7W14+o0q3pxaiJxstesQmezRsEM2zKoNrfh1oWKcdLesXBE
vMuManbu4gLKAckl4gl8VwlO/pay3C86W5x2oJRxGiOS+lPK5OHdt2d1HZ8ZPuxr
BkkEn+01UU4PRGeuiK6Reuk482BGzwAd6Fv39bTmbskVGvfP8MULDcpoYLX+WSX/
uET8GnC1ex5wYUMDnVEtN7CaJHVG7fw4tB48/U8TO8LStMxDnoa5uWFMBesb58U+
R5XgykOEuAL8wOtwDBf/+4frtAPAyzmM
-----END CERTIFICATE-----
Generated at Sun Jul 27 14:29:42 2025 by rpki-client