Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
File:                     J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json)
Hash identifier:          BlQAySW0Vo04pCRuBETUWU7+V8T6UyNfLIkTND+lIUo=
Subject key identifier:   27:BF:93:11:D5:9B:23:70:FD:A4:BA:F8:F5:60:34:28:06:5D:FE:DB
Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD
Certificate issuer:       /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
Certificate serial:       0BA8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
Manifest number:          0B9C
Signing time:             Thu 18 Sep 2025 19:10:35 +0000
Manifest this update:     Thu 18 Sep 2025 19:10:35 +0000
Manifest next update:     Thu 25 Sep 2025 19:10:35 +0000
Files and hashes:         1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: mbxX7ggRUxh2OFFehNYM1GXXMuL933u8zOLeeVp8IiI=)
                          2: E1647F18303311EA8796D584C4F9AE02.roa (hash: A+siabWCuB3xIRMkeynsCCrAfo8cD2JRUNWKm9UeiPs=)
                          3: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: DlWNPzEgwL6rY9jLVqQ4BkKSA+pMzEb7rL1OQsFzSd4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl
                          rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 19:10:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2984 (0xba8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
        Validity
            Not Before: Sep 18 19:10:35 2025 GMT
            Not After : Sep 25 19:10:35 2025 GMT
        Subject: CN=68cc592b-e232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:fd:45:65:d6:f2:f0:5c:26:8d:50:10:ee:dc:
                    0c:3b:a1:06:e5:93:c7:4a:94:e1:48:73:9d:53:a3:
                    28:fd:21:5a:5d:c2:0c:f6:79:22:1b:73:be:58:b0:
                    ae:bb:40:dd:07:64:90:d4:e4:32:38:0b:55:3e:46:
                    d2:f9:e9:4e:fb:1c:ab:1e:c0:a4:ea:c0:44:8e:6e:
                    77:6e:ac:07:3b:f8:a1:bf:f4:5f:63:5e:8e:fe:b0:
                    3e:36:86:d2:6e:ad:62:82:33:4d:ab:a0:41:40:5e:
                    a0:41:2d:5d:bd:e5:56:49:86:5b:7c:cc:68:a5:8e:
                    fb:ca:1a:e7:9b:53:f5:96:72:d4:aa:78:af:7d:12:
                    0f:8e:3b:b3:15:72:23:05:57:31:45:33:43:a1:b6:
                    5a:01:45:46:f2:e9:79:56:c5:42:d9:c9:ed:d0:f4:
                    04:ec:af:00:dc:bf:b2:a5:a9:d4:17:59:69:f5:d9:
                    6e:8f:ed:2b:63:51:07:da:ab:f1:77:de:32:77:87:
                    7c:92:3e:5a:01:41:79:2c:40:61:2f:ce:f4:eb:fc:
                    02:a1:15:d5:93:b6:18:ab:9e:93:14:f7:40:7a:90:
                    67:50:7e:9b:55:91:69:6d:74:a6:34:1e:29:ed:5b:
                    2a:7a:5e:4e:54:49:43:47:18:0f:3e:8a:40:e2:b4:
                    75:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:BF:93:11:D5:9B:23:70:FD:A4:BA:F8:F5:60:34:28:06:5D:FE:DB
            X509v3 Authority Key Identifier:
                keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:43:87:96:18:37:14:7e:c4:1f:26:48:66:e7:63:5e:27:cd:
         da:5c:d9:2b:d5:0e:8a:4b:2b:f1:21:cf:96:f6:dd:c3:8f:54:
         bf:db:7b:37:da:2c:25:1c:9c:a6:f1:87:cc:d8:84:8d:db:5a:
         4c:cf:8a:45:85:d4:7e:de:33:49:cb:a0:0d:24:3d:25:25:ff:
         76:c9:89:4b:87:8e:6f:71:48:62:4e:5d:c0:4f:0e:53:9a:9b:
         21:4c:e8:b9:df:9e:94:75:14:cc:f0:bf:b6:ea:e4:eb:b3:3c:
         9d:c6:f5:58:ee:f8:73:b5:67:f0:fb:cf:aa:f4:aa:d4:8d:b8:
         3f:c0:18:18:90:18:4c:57:e9:6a:e6:4c:61:25:a9:7e:27:ca:
         22:6f:fe:53:76:9b:c3:00:19:4d:4b:00:ee:6d:3f:ef:ad:11:
         91:bc:fd:31:ce:02:ee:d4:c5:ef:34:59:e3:d1:d1:05:41:5b:
         fc:98:56:0a:16:5a:09:b4:90:62:cf:79:69:71:ac:df:ef:e0:
         16:75:52:f9:46:99:53:49:46:8c:16:9f:84:c8:f5:6f:69:1e:
         06:17:0e:0f:df:2a:f9:6d:2a:f1:fb:25:ff:e2:a7:17:ce:ac:
         8c:13:ad:60:ca:07:6a:36:af:83:d2:99:bf:3a:32:91:09:21:
         b8:43:62:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC6gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg0RkIxMTAvBgNVBAUTKDI3NEUwM0I2N0IzMTEzM0RFN0MwQUFFOTlFMjlDMTk5
NTk1MkI1QUQwHhcNMjUwOTE4MTkxMDM1WhcNMjUwOTI1MTkxMDM1WjAYMRYwFAYD
VQQDEw02OGNjNTkyYi1lMjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8f1FZdby8FwmjVAQ7twMO6EG5ZPHSpThSHOdU6Mo/SFaXcIM9nkiG3O+WLCu
u0DdB2SQ1OQyOAtVPkbS+elO+xyrHsCk6sBEjm53bqwHO/ihv/RfY16O/rA+NobS
bq1igjNNq6BBQF6gQS1dveVWSYZbfMxopY77yhrnm1P1lnLUqnivfRIPjjuzFXIj
BVcxRTNDobZaAUVG8ul5VsVC2cnt0PQE7K8A3L+ypanUF1lp9dluj+0rY1EH2qvx
d94yd4d8kj5aAUF5LEBhL8706/wCoRXVk7YYq56TFPdAepBnUH6bVZFpbXSmNB4p
7Vsqel5OVElDRxgPPopA4rR1mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCe/kxHV
myNw/aS6+PVgNCgGXf7bMB8GA1UdIwQYMBaAFCdOA7Z7MRM958Cq6Z4pwZlZUrWt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODRGQi8yREQ5MEYyQzMw
MzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6M253S3JwbmluQm1WbFN0
YTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0owNER0bnN4RXozbndLcnBuaW5CbVZsU3RhMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODRGQi8yREQ5MEYyQzMwMzMxMUVBOEQ2NjJDODRDNEY5QUUwMi9KMDREdG5zeEV6
M253S3JwbmluQm1WbFN0YTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCaQ4eWGDcUfsQfJkhm52NeJ83aXNkr1Q6KSyvxIc+W9t3Dj1S/23s3
2iwlHJym8YfM2ISN21pMz4pFhdR+3jNJy6ANJD0lJf92yYlLh45vcUhiTl3ATw5T
mpshTOi5356UdRTM8L+26uTrszydxvVY7vhztWfw+8+q9KrUjbg/wBgYkBhMV+lq
5kxhJal+J8oib/5TdpvDABlNSwDubT/vrRGRvP0xzgLu1MXvNFnj0dEFQVv8mFYK
FloJtJBiz3lpcazf7+AWdVL5RplTSUaMFp+EyPVvaR4GFw4P3yr5bSrx+yX/4qcX
zqyME61gygdqNq+D0pm/OjKRCSG4Q2Jk
-----END CERTIFICATE-----
Generated at Fri Sep 19 02:15:11 2025 by rpki-client