Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
File:                     h_lY2vSYZZqe7g_xRCJrFxBIneA.mft (raw, json)
Hash identifier:          2GjWrXyryjXwkEizjdTeB+wwrgk01QySFDsrPyw2Fag=
Subject key identifier:   A0:79:C5:76:08:3D:C2:B9:CD:04:C1:25:90:AE:3A:F8:64:3A:BF:2C
Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0
Certificate issuer:       /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
Certificate serial:       03C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
Manifest number:          03BB
Signing time:             Sun 07 Sep 2025 01:07:19 +0000
Manifest this update:     Sun 07 Sep 2025 01:07:19 +0000
Manifest next update:     Sun 14 Sep 2025 01:07:19 +0000
Files and hashes:         1: h_lY2vSYZZqe7g_xRCJrFxBIneA.crl (hash: qW2lhNcQPNNq2QV5DkNtQu706HxYTRoyZPIFoCh/xDU=)
                          2: 8DB35F6A766511EF8820F844C4F9AE02.roa (hash: DUjlMecJ3MCBuCiDf6r0BnVvRVnuDf5vmODbFKyvDAA=)
                          3: 8C5D4FF4766511EF8820F844C4F9AE02.roa (hash: a/GUffZHyYeIWzCyqNA7Fc/IgTrpVgmYYpvH+uBkGnA=)
                          4: FFF8A36A34E311EE877E760DC4F9AE02.roa (hash: Td4Qw51TSr10UgTmfhROy8qSBPdrA5ySYZaY11oYN0U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl
                          rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 01:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 969 (0x3c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91354AE, serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0
        Validity
            Not Before: Sep  7 01:07:19 2025 GMT
            Not After : Sep 14 01:07:19 2025 GMT
        Subject: CN=68bcdac7-92da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:8b:3b:04:53:8d:6a:3a:1f:52:13:4a:7e:
                    64:be:b4:5b:76:87:5b:2c:d6:5c:24:bb:09:d3:ad:
                    8c:80:27:9d:49:ef:a8:c5:0a:20:4d:62:af:70:c6:
                    c7:34:34:32:c3:b1:40:ee:a3:0b:e5:9b:42:06:2e:
                    54:35:5c:59:cb:4e:8b:58:c6:15:d7:1b:5c:6e:fd:
                    d4:71:6d:6e:46:6d:9d:2c:94:3e:9f:6d:8c:02:41:
                    24:42:80:af:e0:92:90:29:29:a3:80:ed:d0:a9:fc:
                    cb:a5:24:06:44:9c:70:c7:5d:5e:61:e5:5d:ef:57:
                    5d:44:0e:c5:a6:6a:e8:ea:61:6c:14:56:6b:6b:f8:
                    82:10:fe:5d:c1:6b:6a:56:6e:a2:b9:63:ec:84:88:
                    04:d6:44:ac:41:fa:f3:f1:5b:7d:32:00:27:5c:f7:
                    aa:75:01:6f:6b:dd:78:f5:2e:d9:a0:47:39:b2:65:
                    bb:92:8a:9a:d0:ae:3a:66:4e:94:90:32:73:d5:9f:
                    09:b5:f4:88:0f:2d:af:a7:08:1a:4f:14:22:b6:ae:
                    d2:ee:51:69:33:6c:ef:a8:30:29:18:c6:d3:23:d7:
                    21:4d:6f:ff:8d:56:a1:31:63:c7:c1:8d:dc:69:8c:
                    37:e6:4b:b2:aa:3e:3a:18:42:ac:2f:e7:62:de:85:
                    78:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:79:C5:76:08:3D:C2:B9:CD:04:C1:25:90:AE:3A:F8:64:3A:BF:2C
            X509v3 Authority Key Identifier:
                keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3f:6f:04:dd:9a:3d:13:af:88:50:08:c6:aa:6c:30:05:cf:
         24:55:ee:a8:7e:14:f3:89:0c:23:f2:75:51:91:66:df:9d:ee:
         01:91:8f:ab:da:3c:aa:c0:33:5e:66:49:13:00:07:fb:d1:a5:
         55:08:97:6a:03:b5:bc:46:64:28:b8:b2:e1:60:31:ff:b4:2b:
         7a:22:f5:9c:8b:a2:3c:4e:e6:02:f5:10:6f:8e:64:62:39:29:
         61:f7:0f:a4:98:b1:65:01:d1:ab:b6:d2:7d:37:b0:09:69:47:
         c6:dc:d8:7f:5e:39:fb:c9:f8:9e:d7:0a:38:23:15:e5:1c:33:
         cb:71:1e:81:45:7c:74:5b:5c:91:9f:ca:9c:52:30:3c:b0:64:
         79:2d:8b:e9:7f:0a:d2:71:5f:8b:83:a7:f0:34:ad:e6:99:26:
         3d:60:cd:e2:ec:ad:48:d1:50:3d:16:9f:77:92:b4:1b:2c:2a:
         3f:07:21:0d:74:35:0c:e9:fc:27:df:23:3d:c4:9f:3a:95:41:
         15:16:e7:d1:ac:e0:b5:3f:2b:20:c1:01:67:a3:84:63:d7:1f:
         36:3c:22:30:6c:0a:bd:17:34:93:37:67:0c:44:a4:32:a7:4a:
         0e:32:e1:82:e1:01:11:db:72:f3:ef:09:2d:23:14:d2:37:65:
         5c:32:b7:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA8kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3
MTA0ODlERTAwHhcNMjUwOTA3MDEwNzE5WhcNMjUwOTE0MDEwNzE5WjAYMRYwFAYD
VQQDEw02OGJjZGFjNy05MmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAngyLOwRTjWo6H1ITSn5kvrRbdodbLNZcJLsJ062MgCedSe+oxQogTWKvcMbH
NDQyw7FA7qML5ZtCBi5UNVxZy06LWMYV1xtcbv3UcW1uRm2dLJQ+n22MAkEkQoCv
4JKQKSmjgO3QqfzLpSQGRJxwx11eYeVd71ddRA7Fpmro6mFsFFZra/iCEP5dwWtq
Vm6iuWPshIgE1kSsQfrz8Vt9MgAnXPeqdQFva9149S7ZoEc5smW7koqa0K46Zk6U
kDJz1Z8JtfSIDy2vpwgaTxQitq7S7lFpM2zvqDApGMbTI9chTW//jVahMWPHwY3c
aYw35kuyqj46GEKsL+di3oV4qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKB5xXYI
PcK5zQTBJZCuOvhkOr8sMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1
MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu
ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NTRBRS82QzlGMkRGQUE1MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpa
cWU3Z194UkNKckZ4QkluZUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCTP28E3Zo9E6+IUAjGqmwwBc8kVe6ofhTziQwj8nVRkWbfne4BkY+r
2jyqwDNeZkkTAAf70aVVCJdqA7W8RmQouLLhYDH/tCt6IvWci6I8TuYC9RBvjmRi
OSlh9w+kmLFlAdGrttJ9N7AJaUfG3Nh/Xjn7yfie1wo4IxXlHDPLcR6BRXx0W1yR
n8qcUjA8sGR5LYvpfwrScV+Lg6fwNK3mmSY9YM3i7K1I0VA9Fp93krQbLCo/ByEN
dDUM6fwn3yM9xJ86lUEVFufRrOC1PysgwQFno4Rj1x82PCIwbAq9FzSTN2cMRKQy
p0oOMuGC4QER23Lz7wktIxTSN2VcMref
-----END CERTIFICATE-----
Generated at Mon Sep 8 04:17:29 2025 by rpki-client