Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
File:                     rLLFTvC2TcIQCkhqe49ZMkute0k.mft (raw, json)
Hash identifier:          F0GqMVrwpyiockGg8QYe2DGzEJlNy8DDFkMODR0cxZg=
Subject key identifier:   DE:9D:46:6C:E9:41:DD:94:61:1B:F3:59:63:4F:4C:29:A3:71:15:07
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Certificate issuer:       /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial:       017E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
Manifest number:          0178
Signing time:             Wed 23 Jul 2025 04:01:39 +0000
Manifest this update:     Wed 23 Jul 2025 04:01:39 +0000
Manifest next update:     Wed 30 Jul 2025 04:01:39 +0000
Files and hashes:         1: rLLFTvC2TcIQCkhqe49ZMkute0k.crl (hash: BNRRXRE8Tqux2PiQRHtG6mo/5KYdcE4ZJmBgjVmo5Wk=)
                          2: B76A1A109B5411EF9756FD79C4F9AE02.roa (hash: nEnauNcK30SC5dUj0ntjcanTMyK24OfS+HXF4N9+TpI=)
                          3: C4D5BB009B5411EFBBEFF384C4F9AE02.roa (hash: QDeaqdoBnFXV+JmRiyCNSIMZmZka/hyC5/9UzKXY3ZA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
                          rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 04:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
        Validity
            Not Before: Jul 23 04:01:39 2025 GMT
            Not After : Jul 30 04:01:39 2025 GMT
        Subject: CN=68805ea3-3510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:50:b1:e5:99:67:be:15:58:fe:6f:94:5b:
                    e2:2e:50:43:13:6d:c1:1b:bd:01:49:ec:fb:0b:53:
                    63:d5:43:c7:99:2b:0f:9e:4b:c8:af:a7:2f:e1:70:
                    f1:f3:39:92:54:cd:e1:e9:b8:7f:b5:03:1e:23:71:
                    b3:8a:44:bb:36:92:da:a3:5a:ba:cf:3d:dd:40:3b:
                    df:be:e5:16:82:55:20:af:22:02:2a:51:8d:41:73:
                    06:54:40:53:8a:52:5c:d5:e8:6b:eb:0b:38:14:f8:
                    54:52:af:cc:54:f0:42:9f:f9:a7:9d:cb:e4:69:07:
                    51:f1:1c:70:fe:57:95:34:d9:a4:bd:4c:3d:9a:01:
                    45:59:be:79:8c:3c:8a:73:ce:d9:c9:3b:1f:31:03:
                    10:10:51:ef:68:e1:73:7e:3c:08:d8:57:39:cb:96:
                    85:43:ef:bb:75:79:17:f6:b8:22:18:86:ed:e0:90:
                    42:f8:75:f3:25:8a:fb:b0:f2:51:69:5f:06:38:3b:
                    5c:fd:39:74:c7:b3:4a:00:79:c6:29:b6:50:a5:53:
                    54:37:9a:75:24:26:40:23:2f:8e:4d:0f:c5:c4:18:
                    53:f5:74:ce:2a:b7:14:23:57:1d:ef:18:76:08:0c:
                    95:e0:c9:d6:5b:de:c4:c4:9e:d6:db:34:da:d1:d8:
                    01:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9D:46:6C:E9:41:DD:94:61:1B:F3:59:63:4F:4C:29:A3:71:15:07
            X509v3 Authority Key Identifier:
                keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:16:ad:8d:fd:2e:87:5b:a0:0d:15:0c:0a:5e:2c:3d:00:de:
         a4:4a:e6:99:2c:ed:02:8c:8d:df:5e:db:1c:fd:f9:e8:af:74:
         04:57:34:fd:42:74:68:39:5e:e8:7e:a7:38:88:37:3a:d8:f3:
         e1:8d:67:22:f7:ac:80:a9:11:0f:59:cd:57:d8:e3:5d:3e:5c:
         8c:06:5d:7f:4b:25:b0:73:0c:63:72:f2:70:38:dd:13:ef:8e:
         88:9e:f5:a7:9a:65:66:ae:f7:c4:af:c4:db:03:39:a3:65:2d:
         69:66:85:14:97:e3:2c:98:ca:db:0c:29:63:eb:43:be:6b:c5:
         a8:58:97:b3:36:b9:de:80:c2:34:a2:f3:84:28:54:3d:97:59:
         25:e9:98:01:9b:cb:41:32:6e:3c:73:24:fc:20:ec:83:e5:35:
         25:b2:d7:87:5b:77:10:52:b0:36:a1:6f:6c:4e:81:31:0e:dd:
         c5:aa:dd:d2:ee:3a:ba:5b:9c:e0:71:a3:5c:01:84:0c:a3:b5:
         04:5e:a7:f6:a4:17:24:85:91:e7:2e:73:75:80:59:13:03:47:
         52:04:3b:89:05:11:45:9b:7e:aa:16:54:f7:cd:dd:0b:31:f0:
         62:65:63:1a:e2:e4:17:cd:8d:da:f5:f5:90:d5:56:02:46:df:
         71:83:11:d3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU2NzMxMTAvBgNVBAUTKEFDQjJDNTRFRjBCNjREQzIxMDBBNDg2QTdCOEY1OTMy
NEJBRDdCNDkwHhcNMjUwNzIzMDQwMTM5WhcNMjUwNzMwMDQwMTM5WjAYMRYwFAYD
VQQDEw02ODgwNWVhMy0zNTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvFNQseWZZ74VWP5vlFviLlBDE23BG70BSez7C1Nj1UPHmSsPnkvIr6cv4XDx
8zmSVM3h6bh/tQMeI3GzikS7NpLao1q6zz3dQDvfvuUWglUgryICKlGNQXMGVEBT
ilJc1ehr6ws4FPhUUq/MVPBCn/mnncvkaQdR8Rxw/leVNNmkvUw9mgFFWb55jDyK
c87ZyTsfMQMQEFHvaOFzfjwI2Fc5y5aFQ++7dXkX9rgiGIbt4JBC+HXzJYr7sPJR
aV8GODtc/Tl0x7NKAHnGKbZQpVNUN5p1JCZAIy+OTQ/FxBhT9XTOKrcUI1cd7xh2
CAyV4MnWW97ExJ7W2zTa0dgBFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN6dRmzp
Qd2UYRvzWWNPTCmjcRUHMB8GA1UdIwQYMBaAFKyyxU7wtk3CEApIanuPWTJLrXtJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTY3My84MDNBQ0QyQzMy
OTIxMUVFOTg2RjE0MUZDNEY5QUUwMi9yTExGVHZDMlRjSVFDa2hxZTQ5Wk1rdXRl
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JMTEZUdkMyVGNJUUNraHFlNDlaTWt1dGUway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTY3My84MDNBQ0QyQzMyOTIxMUVFOTg2RjE0MUZDNEY5QUUwMi9yTExGVHZDMlRj
SVFDa2hxZTQ5Wk1rdXRlMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDEFq2N/S6HW6ANFQwKXiw9AN6kSuaZLO0CjI3fXtsc/fnor3QEVzT9
QnRoOV7ofqc4iDc62PPhjWci96yAqREPWc1X2ONdPlyMBl1/SyWwcwxjcvJwON0T
746InvWnmmVmrvfEr8TbAzmjZS1pZoUUl+MsmMrbDClj60O+a8WoWJezNrnegMI0
ovOEKFQ9l1kl6ZgBm8tBMm48cyT8IOyD5TUlsteHW3cQUrA2oW9sToExDt3Fqt3S
7jq6W5zgcaNcAYQMo7UEXqf2pBckhZHnLnN1gFkTA0dSBDuJBRFFm36qFlT3zd0L
MfBiZWMa4uQXzY3a9fWQ1VYCRt9xgxHT
-----END CERTIFICATE-----
Generated at Thu Jul 24 12:15:31 2025 by rpki-client