Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
File:                     dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft (raw, json)
Hash identifier:          +LuzWNuNMnE3TE2xfVHcGKXNgE+5hjMwaHqo2zoGURs=
Subject key identifier:   25:F9:59:86:67:8B:F0:E1:BD:05:4C:0E:B5:F7:2D:18:59:61:63:46
Authority key identifier: 76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11
Certificate issuer:       /CN=A91B29F8/serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
Certificate serial:       0685
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
Manifest number:          066C
Signing time:             Fri 18 Jul 2025 22:51:28 +0000
Manifest this update:     Fri 18 Jul 2025 22:51:28 +0000
Manifest next update:     Fri 25 Jul 2025 22:51:28 +0000
Files and hashes:         1: dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl (hash: U4Ds4TTIOYBUJ8BjOUV5qbVwyRmkVfXW3RcVm9/G26Y=)
                          2: 94F5846AE0D011ECAF88A30DC4F9AE02.roa (hash: Tkim0bj/DqFtnK3qLWdBDKeH3dbPF/RS93ZGfjewyNw=)
                          3: 9056CDF6A6D211EDA1D2862BC4F9AE02.roa (hash: l25nuyCLbxX8YszYNp7Lh0hCVKg/XaMvp8JSklUBmx4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl
                          rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 22:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B29F8, serialNumber=76C8E0115549EDA92DE22236A2A5A50AF09F8411
        Validity
            Not Before: Jul 18 22:51:28 2025 GMT
            Not After : Jul 25 22:51:28 2025 GMT
        Subject: CN=687acff0-5318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:8c:3a:a2:89:a1:8f:0a:5e:35:77:14:10:
                    21:8e:25:8a:28:c5:f0:2c:b8:2c:5c:98:10:2a:71:
                    7d:4e:e9:19:6c:cc:f2:5a:e5:f8:dc:4e:4a:4e:80:
                    35:06:d6:6a:0a:eb:eb:2c:30:64:68:be:2f:4a:d0:
                    b6:98:2f:9b:f6:1c:42:71:04:4a:98:03:fa:1f:08:
                    66:bc:bf:c4:c9:02:4a:38:fd:29:cc:6a:8e:fd:f6:
                    62:d3:a3:09:6a:44:52:c3:7f:43:c9:e0:b7:17:30:
                    66:20:2d:5f:1c:f4:31:5a:ba:c7:44:62:01:b8:b1:
                    28:49:ef:76:99:a7:50:03:13:7c:5e:67:c6:70:b2:
                    fd:47:15:cd:67:2d:7b:b9:ed:03:17:de:ae:fd:5a:
                    a4:1b:2c:70:bb:ca:31:6e:02:58:b8:2f:82:76:0b:
                    69:a3:f8:7a:86:ed:38:79:7e:30:36:c8:38:3b:66:
                    fb:18:3c:e0:5a:9a:57:55:9b:56:98:4c:fa:00:a4:
                    85:86:59:de:ef:70:4a:7a:3b:8b:d6:76:cc:59:30:
                    e0:f1:ec:a0:70:e8:9d:d9:97:f4:09:1b:4e:46:59:
                    42:26:9c:8b:e8:83:6d:15:a7:26:f5:7e:ed:20:41:
                    f5:f1:0e:56:55:95:db:53:c5:ac:c3:10:aa:68:5f:
                    97:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:F9:59:86:67:8B:F0:E1:BD:05:4C:0E:B5:F7:2D:18:59:61:63:46
            X509v3 Authority Key Identifier:
                keyid:76:C8:E0:11:55:49:ED:A9:2D:E2:22:36:A2:A5:A5:0A:F0:9F:84:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dsjgEVVJ7akt4iI2oqWlCvCfhBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B29F8/92D0BE02906811EB9E3FC66CC4F9AE02/dsjgEVVJ7akt4iI2oqWlCvCfhBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:dd:46:d4:9d:11:b0:44:0a:56:c6:c8:d2:f0:6d:85:5b:15:
         9b:5d:0c:bf:d7:4c:c7:de:c6:ac:fc:5d:d4:83:9e:3b:22:5b:
         be:89:2b:cd:e4:c3:2f:22:91:de:00:b7:4e:85:3a:2b:41:9d:
         16:ee:f7:33:f1:6c:d0:6c:3a:aa:e9:30:58:77:20:1f:fc:f6:
         e3:cd:2a:04:ae:12:71:29:03:52:e1:49:07:25:18:01:45:53:
         cb:32:00:9a:ae:c3:2a:24:55:c0:4e:0d:6f:20:df:7a:a8:ba:
         9c:0d:95:42:cc:bc:51:5d:52:79:4b:d0:7b:61:54:88:e1:34:
         15:88:52:52:d2:53:7b:3b:37:90:be:d7:30:0b:35:ec:78:5d:
         93:65:f0:4e:e2:fe:72:3f:0d:e6:ef:94:eb:b0:83:a4:70:69:
         fb:a6:ad:e5:cc:da:0b:f0:35:90:34:ec:36:af:1e:96:10:19:
         d7:86:71:6b:2e:05:84:14:cb:53:43:b9:90:72:d9:85:6b:28:
         21:28:0c:c1:bf:98:62:63:e6:69:01:2e:9f:67:6f:ab:1f:7d:
         74:15:51:81:7a:06:66:a8:27:32:86:20:ae:df:d5:4f:fa:01:
         4f:97:20:02:25:69:bc:66:26:ec:9b:e9:21:ef:16:58:f7:77:
         06:2d:cc:e5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjI5RjgxMTAvBgNVBAUTKDc2QzhFMDExNTU0OUVEQTkyREUyMjIzNkEyQTVBNTBB
RjA5Rjg0MTEwHhcNMjUwNzE4MjI1MTI4WhcNMjUwNzI1MjI1MTI4WjAYMRYwFAYD
VQQDEw02ODdhY2ZmMC01MzE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmPiMOqKJoY8KXjV3FBAhjiWKKMXwLLgsXJgQKnF9TukZbMzyWuX43E5KToA1
BtZqCuvrLDBkaL4vStC2mC+b9hxCcQRKmAP6HwhmvL/EyQJKOP0pzGqO/fZi06MJ
akRSw39DyeC3FzBmIC1fHPQxWrrHRGIBuLEoSe92madQAxN8XmfGcLL9RxXNZy17
ue0DF96u/VqkGyxwu8oxbgJYuC+Cdgtpo/h6hu04eX4wNsg4O2b7GDzgWppXVZtW
mEz6AKSFhlne73BKejuL1nbMWTDg8eygcOid2Zf0CRtORllCJpyL6INtFacm9X7t
IEH18Q5WVZXbU8WswxCqaF+XBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCX5WYZn
i/DhvQVMDrX3LRhZYWNGMB8GA1UdIwQYMBaAFHbI4BFVSe2pLeIiNqKlpQrwn4QR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMjlGOC85MkQwQkUwMjkw
NjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdha3Q0aUkyb3FXbEN2Q2Zo
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RzamdFVlZKN2FrdDRpSTJvcVdsQ3ZDZmhCRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MjlGOC85MkQwQkUwMjkwNjgxMUVCOUUzRkM2NkNDNEY5QUUwMi9kc2pnRVZWSjdh
a3Q0aUkyb3FXbEN2Q2ZoQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC+3UbUnRGwRApWxsjS8G2FWxWbXQy/10zH3sas/F3Ug547Ilu+iSvN
5MMvIpHeALdOhTorQZ0W7vcz8WzQbDqq6TBYdyAf/PbjzSoErhJxKQNS4UkHJRgB
RVPLMgCarsMqJFXATg1vIN96qLqcDZVCzLxRXVJ5S9B7YVSI4TQViFJS0lN7OzeQ
vtcwCzXseF2TZfBO4v5yPw3m75TrsIOkcGn7pq3lzNoL8DWQNOw2rx6WEBnXhnFr
LgWEFMtTQ7mQctmFayghKAzBv5hiY+ZpAS6fZ2+rH310FVGBegZmqCcyhiCu39VP
+gFPlyACJWm8Zibsm+kh7xZY93cGLczl
-----END CERTIFICATE-----
Generated at Sun Jul 20 14:22:52 2025 by rpki-client