Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
File:                     RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft (raw, json)
Hash identifier:          KIHo3CMsIZn8nr4ZPh9UrI2zkTtnbXGiWV7WmPDF6So=
Subject key identifier:   FB:D2:DC:5F:02:90:0B:97:A7:13:52:07:D7:7E:7D:FE:6F:B3:9F:BB
Authority key identifier: 44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9
Certificate issuer:       /CN=A91F8E9B/serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
Certificate serial:       01E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
Manifest number:          01DA
Signing time:             Wed 23 Jul 2025 03:01:32 +0000
Manifest this update:     Wed 23 Jul 2025 03:01:31 +0000
Manifest next update:     Wed 30 Jul 2025 03:01:31 +0000
Files and hashes:         1: RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl (hash: fc/gYNP+NOn0HwtKTDNPGsOUsvTDiXgqRC30etaJv8I=)
                          2: 6549AD3EAC1011ED8592693FC4F9AE02.roa (hash: ksp6qBpZ5kB0EysEaPobcR9QCXbiquNMVXrarPKPN4A=)
                          3: 64B2DE72AC1011ED8592693FC4F9AE02.roa (hash: xgTk5QLU2Vm82iRKTqkbO5V1pNHv+/+0qFa5a4D2Fm4=)
                          4: 665497A2AC1011ED8592693FC4F9AE02.roa (hash: 5cknTz/azpX9sHHI7VxRFMrA+eqmREBfLXzZWKlWnBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl
                          rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 03:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F8E9B, serialNumber=446792439258182A7A1E4DA4B2C06FAD2AAEE4B9
        Validity
            Not Before: Jul 23 03:01:31 2025 GMT
            Not After : Jul 30 03:01:31 2025 GMT
        Subject: CN=6880508b-f103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:ad:0c:9c:b8:59:62:0a:1a:c7:63:b2:83:
                    8d:34:f5:8e:2a:e1:4d:a4:74:f2:12:28:3e:fb:c8:
                    4d:ac:c5:c6:dc:5a:9e:99:65:47:60:46:5d:0a:55:
                    79:1f:95:c3:aa:02:10:a1:c7:4d:ee:e5:46:7b:ba:
                    6d:90:46:94:09:9f:2d:1b:fa:47:f4:ff:0a:c4:6b:
                    76:d7:d2:1a:76:6b:fb:88:10:8d:9e:8c:33:b0:10:
                    7c:b6:c4:48:78:52:d1:0c:36:a1:ed:ad:e0:1b:5f:
                    41:e7:27:ac:43:83:b8:62:ba:e6:fa:4d:ed:61:13:
                    92:2a:90:f8:59:7b:e2:ab:60:28:a7:52:d8:6f:4a:
                    0d:6e:eb:1b:67:2c:c9:95:f7:f8:76:6d:3e:1b:20:
                    b5:eb:8f:2d:6d:50:0e:1a:8b:d5:60:04:d4:64:2a:
                    a7:72:37:60:4f:78:cc:f4:e9:16:3f:e6:63:ca:97:
                    31:38:4c:f1:5d:83:e5:97:4a:0c:80:7d:d1:7c:87:
                    d2:93:3e:20:47:44:6a:7d:a3:93:d9:96:ad:c3:c9:
                    f4:9d:59:89:53:a4:67:1c:92:b3:57:20:39:a3:88:
                    2c:95:7b:ee:7e:2f:c0:3b:3a:57:b6:7f:86:87:f5:
                    7c:ca:d3:d8:69:a5:1f:4f:cf:7f:d6:ef:e9:ce:4b:
                    f7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D2:DC:5F:02:90:0B:97:A7:13:52:07:D7:7E:7D:FE:6F:B3:9F:BB
            X509v3 Authority Key Identifier:
                keyid:44:67:92:43:92:58:18:2A:7A:1E:4D:A4:B2:C0:6F:AD:2A:AE:E4:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8E9B/69EB42C0960E11ED9A4CEA65C4F9AE02/RGeSQ5JYGCp6Hk2kssBvrSqu5Lk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:80:6d:e1:9f:81:bb:54:48:55:fe:5a:74:49:0e:81:10:39:
         f0:ba:7d:38:b1:a6:7c:b7:50:40:7d:d0:4d:30:21:9f:f3:59:
         b4:0b:77:b4:26:ab:7d:40:da:dc:ae:25:63:e5:b2:d8:0e:e3:
         69:31:07:ac:31:72:75:74:54:8d:dc:75:17:4b:f6:ee:6c:7e:
         02:ae:d1:9c:4b:1a:23:2e:c4:1c:6a:70:21:7a:6b:3f:76:95:
         42:14:6a:22:83:1b:e8:6f:1f:af:a6:7f:01:9c:85:b2:2a:e5:
         96:56:36:54:3c:3b:1a:34:df:cb:76:19:3d:c6:7c:70:63:fa:
         a2:59:de:56:db:cb:ee:06:fe:0e:4b:a8:87:eb:c4:5a:81:32:
         fe:4c:e8:d0:41:63:c1:11:31:48:d3:34:6a:6f:73:5a:8c:f8:
         6d:62:f6:d4:cf:be:b2:52:85:f1:32:96:8c:28:32:51:d3:52:
         3b:de:1f:d5:41:b4:7d:8f:31:52:92:27:f9:fc:f9:0a:cd:49:
         e2:64:95:68:3d:29:82:6e:58:1f:9e:65:00:b4:ae:0a:c6:71:
         db:c2:a8:4c:48:25:64:33:f8:11:5d:77:69:20:ef:1b:cd:47:
         64:f2:9d:19:68:42:c5:0c:48:be:d2:aa:9a:7c:1d:0d:d7:9e:
         b4:5d:b2:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjhFOUIxMTAvBgNVBAUTKDQ0Njc5MjQzOTI1ODE4MkE3QTFFNERBNEIyQzA2RkFE
MkFBRUU0QjkwHhcNMjUwNzIzMDMwMTMxWhcNMjUwNzMwMDMwMTMxWjAYMRYwFAYD
VQQDEw02ODgwNTA4Yi1mMTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuCWtDJy4WWIKGsdjsoONNPWOKuFNpHTyEig++8hNrMXG3FqemWVHYEZdClV5
H5XDqgIQocdN7uVGe7ptkEaUCZ8tG/pH9P8KxGt219Iadmv7iBCNnowzsBB8tsRI
eFLRDDah7a3gG19B5yesQ4O4Yrrm+k3tYROSKpD4WXviq2Aop1LYb0oNbusbZyzJ
lff4dm0+GyC1648tbVAOGovVYATUZCqncjdgT3jM9OkWP+ZjypcxOEzxXYPll0oM
gH3RfIfSkz4gR0RqfaOT2Zatw8n0nVmJU6RnHJKzVyA5o4gslXvufi/AOzpXtn+G
h/V8ytPYaaUfT89/1u/pzkv3IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPvS3F8C
kAuXpxNSB9d+ff5vs5+7MB8GA1UdIwQYMBaAFERnkkOSWBgqeh5NpLLAb60qruS5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOEU5Qi82OUVCNDJDMDk2
MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdDcDZIazJrc3NCdnJTcXU1
TGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JHZVNRNUpZR0NwNkhrMmtzc0J2clNxdTVMay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OEU5Qi82OUVCNDJDMDk2MEUxMUVEOUE0Q0VBNjVDNEY5QUUwMi9SR2VTUTVKWUdD
cDZIazJrc3NCdnJTcXU1TGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZgG3hn4G7VEhV/lp0SQ6BEDnwun04saZ8t1BAfdBNMCGf81m0C3e0
Jqt9QNrcriVj5bLYDuNpMQesMXJ1dFSN3HUXS/bubH4CrtGcSxojLsQcanAhems/
dpVCFGoigxvobx+vpn8BnIWyKuWWVjZUPDsaNN/Ldhk9xnxwY/qiWd5W28vuBv4O
S6iH68RagTL+TOjQQWPBETFI0zRqb3NajPhtYvbUz76yUoXxMpaMKDJR01I73h/V
QbR9jzFSkif5/PkKzUniZJVoPSmCblgfnmUAtK4KxnHbwqhMSCVkM/gRXXdpIO8b
zUdk8p0ZaELFDEi+0qqafB0N1560XbJk
-----END CERTIFICATE-----
Generated at Thu Jul 24 12:12:54 2025 by rpki-client