Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
File:                     8ItqFjLJysLoaI3qSIfZMC6VYBA.mft (raw, json)
Hash identifier:          lwo/lnehY0i+EDZ7YIlehKQlsOCllIaJZYO2B4NaNJo=
Subject key identifier:   7C:44:CD:07:EE:63:8E:BA:F8:DF:85:03:C4:E3:73:23:13:C7:5E:4C
Authority key identifier: F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10
Certificate issuer:       /CN=A911FFAB/serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
Certificate serial:       07B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
Manifest number:          07AC
Signing time:             Thu 18 Sep 2025 21:36:21 +0000
Manifest this update:     Thu 18 Sep 2025 21:36:20 +0000
Manifest next update:     Thu 25 Sep 2025 21:36:20 +0000
Files and hashes:         1: 8ItqFjLJysLoaI3qSIfZMC6VYBA.crl (hash: EwAPaoHMU/DSy6TZNlXi6KFqgdp9G6AyHW9vyhSTybI=)
                          2: B5DC8802169411EBBEBD9A23C4F9AE02.roa (hash: 4ZdvboJ8mrbqq75dMjpcRNVXA0/Wmpp30CU0dXWt/yQ=)
                          3: B54C3DBA169411EBBEBD9A23C4F9AE02.roa (hash: nma4xkXXDMJG7QciaymwPc3dJsJxzYlJjEDf7RTo8RE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl
                          rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 21:36:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1976 (0x7b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FFAB, serialNumber=F08B6A1632C9CAC2E8688DEA4887D9302E956010
        Validity
            Not Before: Sep 18 21:36:20 2025 GMT
            Not After : Sep 25 21:36:20 2025 GMT
        Subject: CN=68cc7b55-5bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:aa:19:81:99:1f:64:ca:aa:93:ab:0e:de:0b:
                    34:0e:2c:cc:66:39:67:bf:3c:57:24:09:39:97:a0:
                    68:a1:08:ab:62:b4:75:a4:10:a6:1a:9c:b1:06:4d:
                    9b:9e:aa:42:76:f2:0f:7c:7c:37:3d:f0:f2:86:66:
                    d7:5d:11:90:91:60:8a:4c:15:87:20:6f:16:81:26:
                    28:08:e0:74:c9:8b:e9:d9:e2:3a:68:5e:65:c9:e6:
                    e9:21:fc:79:6c:fa:0f:6f:f8:23:d8:db:65:11:4a:
                    31:f9:1f:c6:2c:de:1c:47:cf:00:bc:f6:c1:2b:e6:
                    4a:d1:5e:0a:b6:40:16:6a:69:c6:bc:a3:11:f7:ba:
                    f8:2f:08:d8:7e:aa:1b:89:72:1d:03:27:59:c9:e4:
                    06:d3:19:dc:6c:ff:13:a5:e5:84:97:99:7e:14:58:
                    92:10:3d:be:80:01:c9:99:47:41:4d:9a:8c:79:0e:
                    cf:b1:39:63:c6:4e:bc:e5:4c:af:47:75:af:22:c0:
                    67:74:31:cd:9a:9d:37:50:28:d2:de:8e:d5:73:33:
                    51:32:83:d4:9a:ee:bf:d6:ac:15:22:4d:7e:0d:c9:
                    6d:14:34:fa:43:36:cf:af:b7:60:5a:cd:32:34:81:
                    f4:1b:2b:c0:dd:8a:33:10:04:05:1a:98:ff:29:58:
                    e1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:44:CD:07:EE:63:8E:BA:F8:DF:85:03:C4:E3:73:23:13:C7:5E:4C
            X509v3 Authority Key Identifier:
                keyid:F0:8B:6A:16:32:C9:CA:C2:E8:68:8D:EA:48:87:D9:30:2E:95:60:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8ItqFjLJysLoaI3qSIfZMC6VYBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FFAB/AA7FA400169211EBB45D891DC4F9AE02/8ItqFjLJysLoaI3qSIfZMC6VYBA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f4:8c:f1:c2:ca:9f:fd:57:c0:4b:b8:a8:76:ff:85:9c:17:
         ab:81:0d:bc:bc:7d:8e:05:2e:b4:e1:01:92:c8:3f:63:3d:ef:
         b3:32:8d:a1:1a:51:c2:5b:29:6a:5a:12:18:ce:9f:48:8d:77:
         b4:ab:7a:66:bc:e6:66:2b:16:11:e1:46:f0:56:2a:4e:7d:20:
         2c:0d:3a:97:ea:44:cc:8f:ad:d9:ac:dd:80:af:2a:82:18:9a:
         ea:80:76:d6:07:86:59:f8:76:a6:9f:7f:ee:c6:73:4e:14:bc:
         e5:7b:27:89:47:4a:e8:0a:a5:bf:4c:3a:b2:48:5b:b7:f6:8d:
         c9:8d:4f:59:0a:98:a9:89:3a:e0:ed:f1:08:e2:37:44:54:3e:
         45:2e:36:84:41:f0:f1:02:5b:19:77:44:da:2d:62:40:1c:f1:
         68:54:06:10:76:d1:36:0d:50:ab:56:66:5f:67:5c:c5:3c:32:
         de:0b:7c:8e:1f:e2:93:1d:a6:7c:37:12:cd:95:22:1c:d1:bb:
         75:6f:b5:d3:6f:37:c9:5c:6b:81:12:27:dd:af:70:15:c7:23:
         d3:ef:76:ff:f2:c0:c4:8e:4a:fe:b5:e8:a4:c8:7c:19:ec:9a:
         f3:81:97:7a:62:25:bd:a7:3e:09:45:19:85:b6:01:9b:af:bb:
         72:e1:f4:81
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB7gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUZGQUIxMTAvBgNVBAUTKEYwOEI2QTE2MzJDOUNBQzJFODY4OERFQTQ4ODdEOTMw
MkU5NTYwMTAwHhcNMjUwOTE4MjEzNjIwWhcNMjUwOTI1MjEzNjIwWjAYMRYwFAYD
VQQDEw02OGNjN2I1NS01YmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmqoZgZkfZMqqk6sO3gs0DizMZjlnvzxXJAk5l6BooQirYrR1pBCmGpyxBk2b
nqpCdvIPfHw3PfDyhmbXXRGQkWCKTBWHIG8WgSYoCOB0yYvp2eI6aF5lyebpIfx5
bPoPb/gj2NtlEUox+R/GLN4cR88AvPbBK+ZK0V4KtkAWamnGvKMR97r4LwjYfqob
iXIdAydZyeQG0xncbP8TpeWEl5l+FFiSED2+gAHJmUdBTZqMeQ7PsTljxk685Uyv
R3WvIsBndDHNmp03UCjS3o7VczNRMoPUmu6/1qwVIk1+DcltFDT6QzbPr7dgWs0y
NIH0GyvA3YozEAQFGpj/KVjhyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHxEzQfu
Y466+N+FA8TjcyMTx15MMB8GA1UdIwQYMBaAFPCLahYyycrC6GiN6kiH2TAulWAQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkZBQi9BQTdGQTQwMDE2
OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlzTG9hSTNxU0lmWk1DNlZZ
QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhJdHFGakxKeXNMb2FJM3FTSWZaTUM2VllCQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RkZBQi9BQTdGQTQwMDE2OTIxMUVCQjQ1RDg5MURDNEY5QUUwMi84SXRxRmpMSnlz
TG9hSTNxU0lmWk1DNlZZQkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBE9Izxwsqf/VfAS7iodv+FnBergQ28vH2OBS604QGSyD9jPe+zMo2h
GlHCWylqWhIYzp9IjXe0q3pmvOZmKxYR4UbwVipOfSAsDTqX6kTMj63ZrN2AryqC
GJrqgHbWB4ZZ+Hamn3/uxnNOFLzleyeJR0roCqW/TDqySFu39o3JjU9ZCpipiTrg
7fEI4jdEVD5FLjaEQfDxAlsZd0TaLWJAHPFoVAYQdtE2DVCrVmZfZ1zFPDLeC3yO
H+KTHaZ8NxLNlSIc0bt1b7XTbzfJXGuBEifdr3AVxyPT73b/8sDEjkr+teikyHwZ
7JrzgZd6YiW9pz4JRRmFtgGbr7ty4fSB
-----END CERTIFICATE-----
Generated at Fri Sep 19 03:56:38 2025 by rpki-client