Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
File:                     mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft (raw, json)
Hash identifier:          gctRAY4a1QwyjtL7IXSIc9qYloNusVa/ROZfwSA5SBs=
Subject key identifier:   90:53:82:79:35:93:92:90:DB:AE:94:97:9C:B9:DD:DF:46:A3:75:9A
Authority key identifier: 99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50
Certificate issuer:       /CN=A9130F4B/serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
Certificate serial:       1072
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
Manifest number:          1036
Signing time:             Sat 06 Sep 2025 17:34:49 +0000
Manifest this update:     Sat 06 Sep 2025 17:34:48 +0000
Manifest next update:     Sat 13 Sep 2025 17:34:48 +0000
Files and hashes:         1: mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl (hash: bltphH0ZH9t1VI5o4Kr+E0oTmTzO8vBkAbW0YM9YBp0=)
                          2: 64BBCC50909D11ED9EA9867FC4F9AE02.roa (hash: JcjF+/6kCZJ48Z0DWV35F84UCZas+SRfWJwuoffcQww=)
                          3: EE63EB2A59A611F0959E0C63C4F9AE02.roa (hash: GsLnRLdogxstpaApcoyc6Zg1nnApMAJYYma2C41kKMY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl
                          rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 17:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4210 (0x1072)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130F4B, serialNumber=9930D0FFEB870701B4E8EB4DB3C0866233FC5B50
        Validity
            Not Before: Sep  6 17:34:48 2025 GMT
            Not After : Sep 13 17:34:48 2025 GMT
        Subject: CN=68bc70b8-3929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:b7:3d:a2:39:aa:61:76:9f:38:9b:70:71:
                    5c:41:d7:da:26:54:48:d1:ca:1e:4f:e2:e1:4c:e1:
                    da:26:6b:9d:e0:fb:62:59:d7:19:65:98:ef:b2:78:
                    df:37:32:9b:5c:bd:10:35:22:ee:d1:b1:9c:54:c6:
                    a7:3b:0e:91:a5:db:07:de:94:48:ae:09:57:5c:49:
                    d2:21:4f:35:77:23:28:ed:ea:f2:b0:76:ea:40:9d:
                    1b:87:8a:71:47:c4:c1:da:51:61:9d:5f:2c:3d:c0:
                    ce:e0:cc:39:b0:e2:ee:a4:83:0b:b5:ef:fd:9a:76:
                    63:4e:e9:c6:83:c3:86:69:b7:b8:bd:aa:7c:79:72:
                    07:41:1d:3e:76:62:55:e0:d1:33:57:e2:e9:e1:6a:
                    ff:14:64:f8:86:e8:fb:91:da:4e:4b:fb:83:e8:28:
                    ce:9f:8a:6e:aa:eb:0b:57:56:19:0b:30:c4:0a:f8:
                    8d:ab:82:8b:e1:a2:44:46:88:f0:22:15:36:d7:53:
                    65:c7:1f:2d:26:8b:95:e0:d8:d8:40:73:ba:5d:77:
                    14:87:02:98:3b:9b:e6:61:47:c2:05:ab:bc:ca:db:
                    94:ed:97:98:64:3d:52:59:99:69:99:0b:33:5b:2f:
                    a2:a8:48:68:04:f9:fb:71:5a:d3:44:62:d9:69:e6:
                    a7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:53:82:79:35:93:92:90:DB:AE:94:97:9C:B9:DD:DF:46:A3:75:9A
            X509v3 Authority Key Identifier:
                keyid:99:30:D0:FF:EB:87:07:01:B4:E8:EB:4D:B3:C0:86:62:33:FC:5B:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mTDQ_-uHBwG06OtNs8CGYjP8W1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130F4B/5772AA3054E411E98536F659C4F9AE02/mTDQ_-uHBwG06OtNs8CGYjP8W1A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:40:df:7e:ef:b0:6d:ed:c6:f1:6d:5c:80:b3:b9:cf:0e:22:
         c1:49:cd:2b:14:6a:22:73:4d:70:a9:4e:8f:d5:e4:45:1f:bd:
         d3:01:e7:75:dc:52:46:82:39:f1:d7:d5:74:0a:1a:d6:21:77:
         27:b7:48:59:c3:7f:93:90:30:9c:5a:a3:a1:13:c7:0d:55:04:
         9f:9b:57:77:a4:b3:a5:35:c6:66:9e:c1:9a:03:a9:17:5c:ad:
         1d:aa:ac:c4:74:58:a3:ce:69:24:c3:4e:57:63:49:94:62:f1:
         40:d9:e0:24:12:61:d8:d1:16:ec:f7:94:d6:79:d4:01:53:f2:
         3f:66:23:47:65:cd:f6:a2:cf:ab:0c:37:6b:6f:48:62:5e:b8:
         7e:46:3c:20:0a:8e:1f:66:d0:d6:72:76:8b:f1:78:81:78:82:
         58:37:f5:07:c3:b0:ad:66:1f:ae:e5:8c:31:01:ea:e0:09:c7:
         47:3b:8f:eb:3f:56:8d:dd:40:ac:47:27:16:fd:6e:d4:de:52:
         4c:bd:97:20:ab:fc:9d:ec:d8:0f:9d:ca:b5:ef:be:df:e9:dc:
         2e:73:3b:ac:ef:6c:59:0e:33:3c:7b:c8:9f:3e:31:87:a9:55:
         50:a5:a4:f6:21:f7:a4:4a:b5:ad:cc:43:44:a3:33:3c:a6:28:
         b9:89:3e:ab
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEHIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzBGNEIxMTAvBgNVBAUTKDk5MzBEMEZGRUI4NzA3MDFCNEU4RUI0REIzQzA4NjYy
MzNGQzVCNTAwHhcNMjUwOTA2MTczNDQ4WhcNMjUwOTEzMTczNDQ4WjAYMRYwFAYD
VQQDEw02OGJjNzBiOC0zOTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwpq3PaI5qmF2nzibcHFcQdfaJlRI0coeT+LhTOHaJmud4PtiWdcZZZjvsnjf
NzKbXL0QNSLu0bGcVManOw6RpdsH3pRIrglXXEnSIU81dyMo7erysHbqQJ0bh4px
R8TB2lFhnV8sPcDO4Mw5sOLupIMLte/9mnZjTunGg8OGabe4vap8eXIHQR0+dmJV
4NEzV+Lp4Wr/FGT4huj7kdpOS/uD6CjOn4puqusLV1YZCzDECviNq4KL4aJERojw
IhU211Nlxx8tJouV4NjYQHO6XXcUhwKYO5vmYUfCBau8ytuU7ZeYZD1SWZlpmQsz
Wy+iqEhoBPn7cVrTRGLZaeanSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJBTgnk1
k5KQ266Ul5y53d9Go3WaMB8GA1UdIwQYMBaAFJkw0P/rhwcBtOjrTbPAhmIz/FtQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMEY0Qi81NzcyQUEzMDU0
RTQxMUU5ODUzNkY2NTlDNEY5QUUwMi9tVERRXy11SEJ3RzA2T3ROczhDR1lqUDhX
MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21URFFfLXVIQndHMDZPdE5zOENHWWpQOFcxQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MEY0Qi81NzcyQUEzMDU0RTQxMUU5ODUzNkY2NTlDNEY5QUUwMi9tVERRXy11SEJ3
RzA2T3ROczhDR1lqUDhXMUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQARQN9+77Bt7cbxbVyAs7nPDiLBSc0rFGoic01wqU6P1eRFH73TAed1
3FJGgjnx19V0ChrWIXcnt0hZw3+TkDCcWqOhE8cNVQSfm1d3pLOlNcZmnsGaA6kX
XK0dqqzEdFijzmkkw05XY0mUYvFA2eAkEmHY0Rbs95TWedQBU/I/ZiNHZc32os+r
DDdrb0hiXrh+RjwgCo4fZtDWcnaL8XiBeIJYN/UHw7CtZh+u5YwxAergCcdHO4/r
P1aN3UCsRycW/W7U3lJMvZcgq/yd7NgPncq1777f6dwuczus72xZDjM8e8ifPjGH
qVVQpaT2IfekSrWtzENEozM8pii5iT6r
-----END CERTIFICATE-----
Generated at Mon Sep 8 14:46:52 2025 by rpki-client