Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
File:                     AwUYVzXgl--zaoYGU7JTq-n-EVw.mft (raw, json)
Hash identifier:          tIFsHP/ks5NHL/+YXI/rEwTqNF3MtEF3ZbstaLoxqkg=
Subject key identifier:   56:BF:66:40:B2:B0:F6:1A:7F:70:79:E2:51:08:43:29:19:D8:E3:82
Authority key identifier: 03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C
Certificate issuer:       /CN=A91AEE40/serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
Certificate serial:       0298
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
Manifest number:          0290
Signing time:             Sat 19 Jul 2025 02:04:13 +0000
Manifest this update:     Sat 19 Jul 2025 02:04:13 +0000
Manifest next update:     Sat 26 Jul 2025 02:04:13 +0000
Files and hashes:         1: AwUYVzXgl--zaoYGU7JTq-n-EVw.crl (hash: SE5fJe9gnTZNeeTKcA3Vt8v5prGgJDeZAw6a4wcxg4M=)
                          2: 411831E23FC011F097A38852C4F9AE02.roa (hash: jz8AloENe0TPp9OJIqM52pwRF95JvO77nx4Ot9bcENs=)
                          3: 485DCAA8418111F093EDEF69C4F9AE02.roa (hash: N98ZAqtSjhk7d30tVEfzffIJ5/FjeJUTPsh4dCjO5no=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl
                          rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:04:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEE40, serialNumber=0305185735E097EFB36A860653B253ABE9FE115C
        Validity
            Not Before: Jul 19 02:04:13 2025 GMT
            Not After : Jul 26 02:04:13 2025 GMT
        Subject: CN=687afd1d-cea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:75:0e:0a:e8:b2:89:1a:01:5c:a5:1c:b6:e0:
                    87:ac:5b:b2:98:e9:7e:87:1b:b8:84:3d:d3:9d:32:
                    e1:f3:71:84:0e:ef:e2:5d:5d:1c:15:c2:13:c6:25:
                    46:3c:84:7e:63:f6:f5:a3:2c:5f:c4:bb:68:4c:20:
                    c9:89:f2:46:7b:a8:8d:a4:45:35:c6:7b:71:93:38:
                    44:73:06:df:a8:24:89:4b:8c:e7:ca:ce:54:60:b4:
                    5b:91:54:ec:2d:a6:2a:8c:45:c8:12:db:37:33:06:
                    86:68:a6:42:76:20:03:20:3c:55:61:ab:75:fe:e9:
                    5c:21:4d:89:9b:00:d3:90:31:f9:0b:a4:65:ce:b3:
                    a4:1b:cb:fb:1b:7b:d3:8a:a3:b0:be:96:aa:68:20:
                    13:2a:c1:14:e3:85:de:d9:33:f2:33:01:e9:ee:c0:
                    ea:1a:7e:37:3d:59:44:fc:21:24:a5:ea:b3:74:53:
                    8d:91:31:b2:86:48:22:a7:45:06:b4:7e:7b:09:2a:
                    8e:e9:f3:ae:e7:6a:96:e6:b4:0b:40:48:7b:ec:76:
                    35:49:62:c1:73:5b:36:71:ad:f2:2d:5a:4f:1f:2b:
                    32:71:c3:0b:a5:bd:e7:ba:b5:90:e1:65:e0:d3:13:
                    b6:41:02:1d:56:0b:81:f9:eb:f9:5d:e6:53:85:0e:
                    f7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:BF:66:40:B2:B0:F6:1A:7F:70:79:E2:51:08:43:29:19:D8:E3:82
            X509v3 Authority Key Identifier:
                keyid:03:05:18:57:35:E0:97:EF:B3:6A:86:06:53:B2:53:AB:E9:FE:11:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AwUYVzXgl--zaoYGU7JTq-n-EVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEE40/0EEC29F80F3011EDB3568A84C4F9AE02/AwUYVzXgl--zaoYGU7JTq-n-EVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:fb:a5:68:ae:98:c6:63:1c:f8:52:57:85:e0:2c:81:ce:d6:
         45:3a:22:b8:f0:c3:a6:f6:f7:f3:7c:ad:eb:a1:46:64:87:e6:
         68:ed:e6:0c:d6:5a:43:1a:da:a8:b8:0c:b8:95:57:ea:95:7a:
         eb:93:9a:1e:ef:70:eb:3b:a1:77:6c:ba:9b:85:af:fa:1e:97:
         e0:57:5d:9e:90:12:d1:92:49:cd:0c:b0:6e:d4:6b:1b:a8:e2:
         3a:f0:f2:ff:18:8d:6a:1e:fb:6d:b5:13:1a:13:55:f2:69:e0:
         38:70:0e:ba:a4:4d:d5:1e:4f:0f:30:95:7c:eb:38:76:a7:fe:
         25:15:7f:4f:bc:90:db:25:c5:9b:7c:7e:23:28:79:c8:ab:29:
         0a:5a:c0:e5:aa:58:d3:61:d9:b8:0b:71:da:d7:32:57:7c:66:
         a1:02:d5:d5:df:54:9b:30:a5:84:3c:57:72:21:c7:00:cc:61:
         0f:d2:5f:cc:f7:f6:e4:15:1c:39:83:8c:af:31:07:23:43:e8:
         bd:7c:f5:02:63:98:f6:d5:ed:df:90:e3:7f:b2:b3:9c:ec:39:
         3a:f1:05:40:75:6c:42:e1:bf:cf:7c:e4:5a:55:52:cf:62:1d:
         33:bb:6c:ed:ea:79:e8:15:ca:05:67:4f:96:bb:cc:15:a9:d4:
         2f:e8:a0:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICApgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUVFNDAxMTAvBgNVBAUTKDAzMDUxODU3MzVFMDk3RUZCMzZBODYwNjUzQjI1M0FC
RTlGRTExNUMwHhcNMjUwNzE5MDIwNDEzWhcNMjUwNzI2MDIwNDEzWjAYMRYwFAYD
VQQDEw02ODdhZmQxZC1jZWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApXUOCuiyiRoBXKUctuCHrFuymOl+hxu4hD3TnTLh83GEDu/iXV0cFcITxiVG
PIR+Y/b1oyxfxLtoTCDJifJGe6iNpEU1xntxkzhEcwbfqCSJS4znys5UYLRbkVTs
LaYqjEXIEts3MwaGaKZCdiADIDxVYat1/ulcIU2JmwDTkDH5C6RlzrOkG8v7G3vT
iqOwvpaqaCATKsEU44Xe2TPyMwHp7sDqGn43PVlE/CEkpeqzdFONkTGyhkgip0UG
tH57CSqO6fOu52qW5rQLQEh77HY1SWLBc1s2ca3yLVpPHysyccMLpb3nurWQ4WXg
0xO2QQIdVguB+ev5XeZThQ73uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFa/ZkCy
sPYaf3B54lEIQykZ2OOCMB8GA1UdIwQYMBaAFAMFGFc14Jfvs2qGBlOyU6vp/hFc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUU0MC8wRUVDMjlGODBG
MzAxMUVEQjM1NjhBODRDNEY5QUUwMi9Bd1VZVnpYZ2wtLXphb1lHVTdKVHEtbi1F
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0F3VVlWelhnbC0temFvWUdVN0pUcS1uLUVWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RUU0MC8wRUVDMjlGODBGMzAxMUVEQjM1NjhBODRDNEY5QUUwMi9Bd1VZVnpYZ2wt
LXphb1lHVTdKVHEtbi1FVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCE+6VorpjGYxz4UleF4CyBztZFOiK48MOm9vfzfK3roUZkh+Zo7eYM
1lpDGtqouAy4lVfqlXrrk5oe73DrO6F3bLqbha/6HpfgV12ekBLRkknNDLBu1Gsb
qOI68PL/GI1qHvtttRMaE1XyaeA4cA66pE3VHk8PMJV86zh2p/4lFX9PvJDbJcWb
fH4jKHnIqykKWsDlqljTYdm4C3Ha1zJXfGahAtXV31SbMKWEPFdyIccAzGEP0l/M
9/bkFRw5g4yvMQcjQ+i9fPUCY5j21e3fkON/srOc7Dk68QVAdWxC4b/PfORaVVLP
Yh0zu2zt6nnoFcoFZ0+Wu8wVqdQv6KAR
-----END CERTIFICATE-----
Generated at Sun Jul 20 03:21:35 2025 by rpki-client