Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
File:                     c0H2TqslF-qZON3k-wqBTly7fnc.mft (raw, json)
Hash identifier:          y1TFcfZveYXBdWOWtIyMd4YF2gRcIRmtokbWANgzkBY=
Subject key identifier:   E8:9E:AE:E2:A1:3C:E4:33:5E:0A:2C:0F:74:4A:19:3D:23:EE:59:05
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Certificate issuer:       /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial:       1E4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
Manifest number:          1E32
Signing time:             Sat 06 Sep 2025 16:08:16 +0000
Manifest this update:     Sat 06 Sep 2025 16:08:16 +0000
Manifest next update:     Sat 13 Sep 2025 16:08:16 +0000
Files and hashes:         1: c0H2TqslF-qZON3k-wqBTly7fnc.crl (hash: P5Muzf7OsiqTVnPyYkoo9Eu+mmqIGCkZLeT5NAajSJ0=)
                          2: 22DC230C299311F0B32D9F82C4F9AE02.roa (hash: KiZSjsjHSWTeGrVHyQ1fRZOy4p6+ElPmGCwKFduLkFA=)
                          3: 8144C55412E611E98A4A6A35C4F9AE02.roa (hash: HcaovZ/E4LVI99vShwEF3DVWudHVhbjCDuMnNSp75nw=)
                          4: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (hash: lziphfAQalP1g1qd41FgsGMuQq4aElhXOf7iBsezcaw=)
                          5: 234A6628299311F0B32D9F82C4F9AE02.roa (hash: D4LXE7yxCKGNNUhuHC7/Q5q8EQPtCwzUchpxHBJ/u58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
                          rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 16:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7756 (0x1e4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
        Validity
            Not Before: Sep  6 16:08:16 2025 GMT
            Not After : Sep 13 16:08:16 2025 GMT
        Subject: CN=68bc5c70-2d7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:2e:7e:f5:2c:bc:6d:b7:61:6d:d8:c0:88:
                    7b:5e:62:03:d2:9b:d0:1f:fe:20:b0:5f:40:f7:7e:
                    c7:a0:6b:c3:2c:26:11:a3:03:5f:8b:97:d7:80:ba:
                    fc:57:d0:ab:b7:6a:7a:38:c7:5e:7e:5d:a0:77:1f:
                    68:62:92:49:73:4f:14:54:3f:45:fb:1c:96:6b:17:
                    55:70:b7:f5:c5:c4:bf:67:a3:db:8e:c1:22:fe:25:
                    08:c2:32:ea:5b:68:19:1d:d9:29:30:1c:62:a6:25:
                    d6:a6:55:f1:dd:3c:23:19:a3:5f:c9:91:cd:b0:73:
                    dc:47:c1:06:97:5c:d4:b8:65:8b:fe:2a:c5:11:e5:
                    9e:32:d3:ca:7d:39:2f:7d:c4:45:df:01:da:f9:27:
                    a7:7e:86:c3:66:8f:94:0f:7b:f1:a7:b2:0d:45:17:
                    af:db:13:1a:67:06:9f:bc:62:61:de:ce:f7:3e:8b:
                    08:5a:7d:dc:c7:76:32:49:60:2e:21:66:54:5a:59:
                    1d:b8:c4:6c:38:c3:6e:fd:63:0c:a1:f9:7c:73:0a:
                    ca:11:cd:88:e7:fc:f3:cd:11:c3:58:78:be:19:17:
                    6d:36:16:4f:d2:c2:ad:0a:12:02:77:af:ed:5d:f9:
                    20:0b:ea:cf:7c:07:1d:31:50:e8:a5:ee:69:22:42:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:9E:AE:E2:A1:3C:E4:33:5E:0A:2C:0F:74:4A:19:3D:23:EE:59:05
            X509v3 Authority Key Identifier:
                keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:85:3b:6b:65:a3:01:34:37:02:b6:29:f1:fb:9e:0e:8f:22:
         f1:43:9c:cc:ce:1f:30:48:f0:f6:cd:c9:d0:3b:03:0c:b0:78:
         3c:92:4f:fb:ba:0e:3c:9f:62:fb:b4:67:0f:d4:48:ba:24:de:
         9a:8e:fe:ab:9d:51:d8:b1:54:29:c9:a0:79:b7:e6:9d:63:a1:
         f2:59:d1:6f:99:97:c0:58:4f:2e:ef:82:5b:01:95:c4:3a:00:
         c1:01:ae:e9:57:b5:05:24:67:a5:0f:fe:de:3f:fe:80:5c:95:
         5e:4d:a6:4a:71:e9:05:bc:bd:6b:cf:d6:5d:36:a1:4e:13:11:
         0e:76:fd:79:1e:b1:fb:5f:97:ea:5b:90:bf:ce:02:7f:d6:85:
         f8:7e:6a:f8:93:12:4d:e2:e1:2d:0e:27:3b:ff:21:63:45:85:
         13:b6:e2:c3:df:61:1a:b2:d2:05:96:53:33:1f:16:37:5f:3a:
         be:06:ab:b4:11:61:69:c1:76:39:6b:37:1e:eb:af:99:49:84:
         0a:4a:9b:54:1a:1b:18:e9:1f:ee:61:3f:db:4c:f6:6f:5a:a4:
         f4:42:a8:a4:54:7b:47:60:13:11:23:77:42:13:f0:16:a4:0f:
         64:e6:e5:3f:c0:19:9d:4c:5d:e1:3b:7b:e6:1b:9e:e5:30:53:
         f4:0c:45:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE4NEIxMTAvBgNVBAUTKDczNDFGNjRFQUIyNTE3RUE5OTM4RERFNEZCMEE4MTRF
NUNCQjdFNzcwHhcNMjUwOTA2MTYwODE2WhcNMjUwOTEzMTYwODE2WjAYMRYwFAYD
VQQDEw02OGJjNWM3MC0yZDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtbYufvUsvG23YW3YwIh7XmID0pvQH/4gsF9A937HoGvDLCYRowNfi5fXgLr8
V9Crt2p6OMdefl2gdx9oYpJJc08UVD9F+xyWaxdVcLf1xcS/Z6PbjsEi/iUIwjLq
W2gZHdkpMBxipiXWplXx3TwjGaNfyZHNsHPcR8EGl1zUuGWL/irFEeWeMtPKfTkv
fcRF3wHa+SenfobDZo+UD3vxp7INRRev2xMaZwafvGJh3s73PosIWn3cx3YySWAu
IWZUWlkduMRsOMNu/WMMofl8cwrKEc2I5/zzzRHDWHi+GRdtNhZP0sKtChICd6/t
XfkgC+rPfAcdMVDope5pIkLXSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOieruKh
POQzXgosD3RKGT0j7lkFMB8GA1UdIwQYMBaAFHNB9k6rJRfqmTjd5PsKgU5cu353
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg0Qi8xMzY0ODdGQThD
OEMxMUU2QjBCN0M1MjhDNEY5QUUwMi9jMEgyVHFzbEYtcVpPTjNrLXdxQlRseTdm
bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2MwSDJUcXNsRi1xWk9OM2std3FCVGx5N2ZuYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTg0Qi8xMzY0ODdGQThDOEMxMUU2QjBCN0M1MjhDNEY5QUUwMi9jMEgyVHFzbEYt
cVpPTjNrLXdxQlRseTdmbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIhTtrZaMBNDcCtinx+54OjyLxQ5zMzh8wSPD2zcnQOwMMsHg8kk/7
ug48n2L7tGcP1Ei6JN6ajv6rnVHYsVQpyaB5t+adY6HyWdFvmZfAWE8u74JbAZXE
OgDBAa7pV7UFJGelD/7eP/6AXJVeTaZKcekFvL1rz9ZdNqFOExEOdv15HrH7X5fq
W5C/zgJ/1oX4fmr4kxJN4uEtDic7/yFjRYUTtuLD32EastIFllMzHxY3Xzq+Bqu0
EWFpwXY5azce66+ZSYQKSptUGhsY6R/uYT/bTPZvWqT0QqikVHtHYBMRI3dCE/AW
pA9k5uU/wBmdTF3hO3vmG57lMFP0DEVc
-----END CERTIFICATE-----
Generated at Mon Sep 8 03:32:11 2025 by rpki-client