Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
File:                     fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json)
Hash identifier:          KoAlLLqHfr/sSi8HucM3F7lMruh1tnuozD8IL5p/zZk=
Subject key identifier:   54:94:EA:92:16:5F:29:E8:70:06:53:B0:8E:84:0F:BA:B6:9D:97:A5
Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6
Certificate issuer:       /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
Certificate serial:       02F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
Manifest number:          02EE
Signing time:             Fri 25 Jul 2025 01:41:29 +0000
Manifest this update:     Fri 25 Jul 2025 01:41:29 +0000
Manifest next update:     Fri 01 Aug 2025 01:41:29 +0000
Files and hashes:         1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: I6hLsT4iMa3ZCt1PzDcN0XYLzJIOF1sNM1Me4ERGGFA=)
                          2: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (hash: fawgiTLHzpx5EX5PXRfNoSCoBTl9+GYe2SP8BVC/WiU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 01:41:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 755 (0x2f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
        Validity
            Not Before: Jul 25 01:41:29 2025 GMT
            Not After : Aug  1 01:41:29 2025 GMT
        Subject: CN=6882e0c9-ef15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:ac:45:b0:89:fa:45:32:d0:4e:b8:ef:db:
                    55:bc:fa:46:48:b7:03:32:15:15:d0:9a:fa:50:d2:
                    36:9c:c8:3b:16:91:27:51:ef:c5:c8:c4:06:bd:25:
                    1a:bb:8a:1d:4b:59:1e:41:99:b8:4f:70:89:69:66:
                    f5:9a:84:97:27:99:53:d4:f8:ce:a9:b4:6d:bd:19:
                    e4:75:88:2b:7c:90:85:45:af:7a:3a:04:d1:0f:6e:
                    d1:cf:76:80:5a:38:2c:8e:ca:fd:22:dc:28:24:48:
                    97:ea:65:e2:10:e0:a4:c6:82:bb:6d:c7:e2:96:17:
                    2f:f6:77:cb:1b:41:6b:11:ce:7a:06:a4:cf:bf:78:
                    b8:39:5a:db:4f:c2:c3:79:b6:34:af:1b:5f:27:2a:
                    fc:31:f4:19:c3:31:a8:09:44:49:cc:8c:75:70:0e:
                    d8:79:46:f6:5d:a1:3d:1d:10:b9:b9:26:ec:2e:bd:
                    49:da:f8:24:3e:a4:29:91:e5:92:a5:4c:3d:bb:ca:
                    d7:ea:1f:86:7d:20:75:26:7c:55:d3:ff:8e:7a:d3:
                    27:82:6a:8e:65:f0:b5:97:fc:4e:28:25:68:3e:17:
                    02:e9:a9:0a:50:84:8b:08:9d:23:ab:74:7f:18:e4:
                    08:b2:db:8d:04:6f:de:ca:78:16:c4:69:f0:89:9e:
                    67:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:94:EA:92:16:5F:29:E8:70:06:53:B0:8E:84:0F:BA:B6:9D:97:A5
            X509v3 Authority Key Identifier:
                keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:0a:60:a4:ae:fa:fb:02:cd:7e:6d:71:bf:f1:36:ce:89:49:
         98:37:6a:a0:83:a3:a4:11:62:25:cf:14:c7:13:65:f8:d3:39:
         75:a9:9e:89:bb:cf:9a:f4:b6:9c:68:18:21:4b:45:70:17:1f:
         57:b7:66:5c:a9:64:7e:26:17:34:64:79:76:e3:32:ac:38:aa:
         0e:19:ea:4b:5e:6a:54:04:ba:62:91:fd:33:aa:18:00:b3:a3:
         a7:8f:12:65:5e:8d:5f:2d:4d:2a:6f:0f:04:56:34:03:9b:de:
         28:3e:05:96:26:3d:ce:23:20:bf:e8:31:0e:2e:a2:ac:1e:65:
         d0:b6:31:f5:44:fe:ae:55:ff:d2:c1:d9:95:7a:38:3c:b0:30:
         fc:e5:5b:6c:f3:5b:15:0a:cc:56:8d:c4:1f:8f:bb:32:a9:38:
         bd:a1:2c:ec:e5:a9:45:2a:eb:c8:a2:f4:51:de:08:2a:f3:18:
         6d:af:8e:5a:29:0b:fe:2d:0c:70:c5:5b:cb:8f:2b:86:80:fa:
         63:07:42:3a:45:ad:e7:7c:16:38:0a:85:f8:c1:98:59:60:d8:
         48:96:db:64:7a:e7:d3:31:23:34:d0:08:7b:64:42:e1:af:90:
         2e:71:a4:61:32:07:5d:97:59:4a:e0:db:e3:68:f5:35:b5:f6:
         95:69:fe:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAvMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5NzMxMTAvBgNVBAUTKDdDOEM5RjdCMTZDQzlFQ0I0NEYwMzIwREM3OENCODE0
Q0Q0MkE3QTYwHhcNMjUwNzI1MDE0MTI5WhcNMjUwODAxMDE0MTI5WjAYMRYwFAYD
VQQDEw02ODgyZTBjOS1lZjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwOWsRbCJ+kUy0E6479tVvPpGSLcDMhUV0Jr6UNI2nMg7FpEnUe/FyMQGvSUa
u4odS1keQZm4T3CJaWb1moSXJ5lT1PjOqbRtvRnkdYgrfJCFRa96OgTRD27Rz3aA
Wjgsjsr9ItwoJEiX6mXiEOCkxoK7bcfilhcv9nfLG0FrEc56BqTPv3i4OVrbT8LD
ebY0rxtfJyr8MfQZwzGoCURJzIx1cA7YeUb2XaE9HRC5uSbsLr1J2vgkPqQpkeWS
pUw9u8rX6h+GfSB1JnxV0/+OetMngmqOZfC1l/xOKCVoPhcC6akKUISLCJ0jq3R/
GOQIstuNBG/eyngWxGnwiZ5nCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSU6pIW
XynocAZTsI6ED7q2nZelMB8GA1UdIwQYMBaAFHyMn3sWzJ7LRPAyDceMuBTNQqem
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODk3My81NjA2QUUyMkVC
NDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5zdEU4RElOeDR5NEZNMUNw
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZJeWZleGJNbnN0RThESU54NHk0Rk0xQ3A2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODk3My81NjA2QUUyMkVCNDQxMUVDQURFMUVENjJDNEY5QUUwMi9mSXlmZXhiTW5z
dEU4RElOeDR5NEZNMUNwNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQADCmCkrvr7As1+bXG/8TbOiUmYN2qgg6OkEWIlzxTHE2X40zl1qZ6J
u8+a9LacaBghS0VwFx9Xt2ZcqWR+Jhc0ZHl24zKsOKoOGepLXmpUBLpikf0zqhgA
s6OnjxJlXo1fLU0qbw8EVjQDm94oPgWWJj3OIyC/6DEOLqKsHmXQtjH1RP6uVf/S
wdmVejg8sDD85Vts81sVCsxWjcQfj7syqTi9oSzs5alFKuvIovRR3ggq8xhtr45a
KQv+LQxwxVvLjyuGgPpjB0I6Ra3nfBY4CoX4wZhZYNhIlttkeufTMSM00Ah7ZELh
r5AucaRhMgddl1lK4NvjaPU1tfaVaf5i
-----END CERTIFICATE-----
Generated at Fri Jul 25 05:27:22 2025 by rpki-client