Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
File:                     evNKJg5qKenXvIqxrCZW4Ue4iiI.mft (raw, json)
Hash identifier:          ev3eWG6sAIfrAv9d6HUDDkK8y1Dk8WzH39OHv+5K9ME=
Subject key identifier:   91:6F:A7:3C:94:6F:40:06:10:C6:CA:CB:4A:01:F3:9A:F6:E8:26:02
Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
Certificate issuer:       /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Certificate serial:       0233
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
Manifest number:          0214
Signing time:             Fri 25 Jul 2025 02:37:45 +0000
Manifest this update:     Fri 25 Jul 2025 02:37:44 +0000
Manifest next update:     Fri 01 Aug 2025 02:37:44 +0000
Files and hashes:         1: evNKJg5qKenXvIqxrCZW4Ue4iiI.crl (hash: Dh1ETmaLs9Q7NKKD4DUHCQb8V7ULtoXTO8IRoe8gLOQ=)
                          2: A1740AE6F44A11EFBDAE4F7BC4F9AE02.roa (hash: zcojx0ZkQFta/eHlUHGOuBKvCSA32o0JspTRYlkMoDI=)
                          3: 881750D0E04511EF8BD5FA0EC4F9AE02.roa (hash: PAN71XRdBizmCnmbth6bc3U7C1SlwCeBKZgyo5Yoesk=)
                          4: 870547C4E04511EF8BD5FA0EC4F9AE02.roa (hash: ercDyfbZZj81eG2rt4VTnpYu27D4sWw7nv/fhjhfp3g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl
                          rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 02:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 563 (0x233)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4D1F, serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
        Validity
            Not Before: Jul 25 02:37:44 2025 GMT
            Not After : Aug  1 02:37:44 2025 GMT
        Subject: CN=6882edf8-3f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:86:60:e4:2c:fc:b7:c1:07:dc:21:62:ff:d6:
                    fc:56:81:b2:67:28:cf:39:63:68:35:23:61:f7:09:
                    65:07:6b:b5:09:b8:67:4e:4c:5e:c6:6c:68:f6:3a:
                    2e:c0:f2:aa:e8:c2:6e:19:39:70:bb:95:e0:46:f7:
                    f7:f7:7e:e4:33:39:e8:66:3d:4b:77:94:f6:8d:ea:
                    49:cf:08:77:e3:8e:33:90:6d:93:8b:84:e8:af:9c:
                    57:a6:d9:03:bb:d3:9e:0f:b2:fa:a8:40:04:ea:71:
                    15:7b:c5:c5:0b:01:ce:ec:a0:84:46:70:20:e9:9e:
                    f1:b9:86:a0:b0:b4:9b:67:f9:49:42:c3:42:9b:2d:
                    b2:37:17:fb:f3:8c:e4:91:13:56:5b:ab:79:be:5a:
                    80:29:23:27:ed:d4:e2:0d:3a:81:f0:eb:c2:da:7a:
                    7a:e4:6d:86:ce:41:75:26:59:a6:22:0b:57:3f:11:
                    99:2a:b0:2d:5d:16:7e:31:36:7b:20:0f:e1:12:b8:
                    e1:f2:db:d9:26:3f:c6:be:85:f5:71:03:31:83:ae:
                    ae:06:fc:05:d4:b6:46:f9:8c:02:db:58:74:cb:7c:
                    ad:47:f1:bf:57:64:64:da:e7:71:e9:f8:80:ab:60:
                    ef:51:d8:76:8c:a0:1a:27:81:90:01:ac:a0:74:f5:
                    04:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6F:A7:3C:94:6F:40:06:10:C6:CA:CB:4A:01:F3:9A:F6:E8:26:02
            X509v3 Authority Key Identifier:
                keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:da:79:02:d0:df:bb:f4:80:b7:5c:4b:04:f7:4d:e2:35:21:
         0c:2b:fc:e3:8b:6d:34:2b:50:52:34:6e:d6:71:51:f2:5b:b0:
         95:09:7e:86:82:53:ec:2c:e1:69:23:f1:5b:f9:1d:ff:a0:dd:
         5d:b7:ed:68:4d:8e:5f:a0:ef:ba:3c:13:9e:80:81:39:70:3e:
         ba:bf:9b:04:ee:29:16:74:80:2d:ec:cf:59:50:f2:0d:99:5f:
         89:7f:ce:29:00:11:04:aa:af:e9:87:1b:ae:14:ce:f9:bd:1c:
         08:9b:c0:76:cf:64:ba:51:70:af:cc:a9:3d:8b:e7:3e:bc:fc:
         67:f8:9f:c4:10:2d:06:b9:32:33:f4:a4:21:1c:05:93:66:19:
         dd:df:7e:51:27:ff:9b:95:86:a5:17:e0:f9:b6:ce:5d:17:b0:
         26:2c:d6:78:35:da:74:b4:89:75:41:20:d7:c1:68:44:8f:87:
         83:e9:20:87:96:2b:64:1b:65:45:d5:6b:4d:fe:07:33:67:11:
         15:28:48:02:e0:f9:ad:e1:67:10:db:49:39:92:4b:5c:88:bd:
         ed:71:20:b4:7a:ec:ad:99:62:d6:4e:38:38:8c:ca:fc:b5:3d:
         d3:2e:7b:8e:e4:65:16:45:a1:a2:88:55:d0:50:4b:89:59:a8:
         d1:3e:6c:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAjMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTREMUYxMTAvBgNVBAUTKDdBRjM0QTI2MEU2QTI5RTlEN0JDOEFCMUFDMjY1NkUx
NDdCODhBMjIwHhcNMjUwNzI1MDIzNzQ0WhcNMjUwODAxMDIzNzQ0WjAYMRYwFAYD
VQQDEw02ODgyZWRmOC0zZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu4Zg5Cz8t8EH3CFi/9b8VoGyZyjPOWNoNSNh9wllB2u1CbhnTkxexmxo9jou
wPKq6MJuGTlwu5XgRvf3937kMznoZj1Ld5T2jepJzwh3444zkG2Ti4Tor5xXptkD
u9OeD7L6qEAE6nEVe8XFCwHO7KCERnAg6Z7xuYagsLSbZ/lJQsNCmy2yNxf784zk
kRNWW6t5vlqAKSMn7dTiDTqB8OvC2np65G2GzkF1JlmmIgtXPxGZKrAtXRZ+MTZ7
IA/hErjh8tvZJj/GvoX1cQMxg66uBvwF1LZG+YwC21h0y3ytR/G/V2Rk2udx6fiA
q2DvUdh2jKAaJ4GQAaygdPUEcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFvpzyU
b0AGEMbKy0oB85r26CYCMB8GA1UdIwQYMBaAFHrzSiYOainp17yKsawmVuFHuIoi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEQxRi80OTE1MkE0NDY4
MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtlblh2SXF4ckNaVzRVZTRp
aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V2TktKZzVxS2VuWHZJcXhyQ1pXNFVlNGlpSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEQxRi80OTE1MkE0NDY4MDQxMUVEQTJEMkJEM0NDNEY5QUUwMi9ldk5LSmc1cUtl
blh2SXF4ckNaVzRVZTRpaUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCH2nkC0N+79IC3XEsE903iNSEMK/zji200K1BSNG7WcVHyW7CVCX6G
glPsLOFpI/Fb+R3/oN1dt+1oTY5foO+6PBOegIE5cD66v5sE7ikWdIAt7M9ZUPIN
mV+Jf84pABEEqq/phxuuFM75vRwIm8B2z2S6UXCvzKk9i+c+vPxn+J/EEC0GuTIz
9KQhHAWTZhnd335RJ/+blYalF+D5ts5dF7AmLNZ4Ndp0tIl1QSDXwWhEj4eD6SCH
litkG2VF1WtN/gczZxEVKEgC4Pmt4WcQ20k5kktciL3tcSC0euytmWLWTjg4jMr8
tT3TLnuO5GUWRaGiiFXQUEuJWajRPmzZ
-----END CERTIFICATE-----
Generated at Fri Jul 25 05:25:01 2025 by rpki-client