Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
File:                     Ex72LhIbEd5hBCw-Il5xa7lHniw.mft (raw, json)
Hash identifier:          rfJamBHDKY7UsdtHGfH/u7vUOvjur+EzUu9g7+pNz8Q=
Subject key identifier:   12:06:A5:33:97:88:EB:4B:35:1D:FD:45:9A:95:6D:43:52:6C:8B:2E
Authority key identifier: 13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C
Certificate issuer:       /CN=A913D3CE/serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
Certificate serial:       C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
Manifest number:          C1
Signing time:             Fri 01 Aug 2025 07:21:14 +0000
Manifest this update:     Fri 01 Aug 2025 07:21:13 +0000
Manifest next update:     Fri 08 Aug 2025 07:21:13 +0000
Files and hashes:         1: Ex72LhIbEd5hBCw-Il5xa7lHniw.crl (hash: QDCm1FOizr6hSkNpHCRXzhvNeRY9NteYQylTB0zVXho=)
                          2: E160BBDC495E11EF8EE0647AC4F9AE02.roa (hash: zqJNwHFdCb0AxU+IvLXH1ZXde2U8qe3vhEETfh5OWwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl
                          rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 08 Aug 2025 07:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D3CE, serialNumber=131EF62E121B11DE61042C3E225E716BB9479E2C
        Validity
            Not Before: Aug  1 07:21:13 2025 GMT
            Not After : Aug  8 07:21:13 2025 GMT
        Subject: CN=688c6ae9-1d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:52:80:a5:be:8b:88:43:b0:51:20:63:5d:
                    0f:75:e8:9c:93:d3:e5:7b:88:05:20:45:e9:3c:70:
                    13:01:bf:be:ab:2f:c2:aa:47:6b:43:b0:92:d6:8c:
                    2e:6c:ac:7f:f0:f1:3c:7c:78:3e:d7:58:d7:91:07:
                    f4:a8:2e:1a:d1:22:4d:46:90:00:b5:6d:09:a5:43:
                    62:3e:71:8f:54:d3:76:b8:64:67:7d:2b:f5:b2:73:
                    23:8e:9d:e0:39:f2:bc:98:b3:ea:c5:07:88:60:eb:
                    2b:50:03:74:1f:bc:4f:06:a3:e9:23:35:54:fe:12:
                    24:1f:ed:03:95:8e:7d:cb:5d:01:e3:8c:76:65:11:
                    d1:70:27:65:9d:72:ff:1f:9e:f8:8c:3b:65:40:ea:
                    c5:8f:b9:ca:ab:87:aa:5c:4c:fe:c8:28:bb:1c:e1:
                    27:62:1f:8c:90:0d:d6:36:ca:57:5f:2d:b8:73:d5:
                    8f:2c:91:73:c6:03:d9:eb:e8:e7:b3:03:6c:7d:a2:
                    69:42:3b:5c:b7:8e:1b:fe:4d:aa:8b:1d:f3:9e:d6:
                    95:ba:cd:39:62:c1:aa:30:03:89:6b:08:01:15:db:
                    37:95:64:00:cf:68:7a:b2:3d:97:df:6f:04:e9:95:
                    5c:22:fd:e6:16:bb:ca:15:25:8b:e0:c8:00:41:a7:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:06:A5:33:97:88:EB:4B:35:1D:FD:45:9A:95:6D:43:52:6C:8B:2E
            X509v3 Authority Key Identifier:
                keyid:13:1E:F6:2E:12:1B:11:DE:61:04:2C:3E:22:5E:71:6B:B9:47:9E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ex72LhIbEd5hBCw-Il5xa7lHniw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D3CE/1C137C20495E11EFBE8F2079C4F9AE02/Ex72LhIbEd5hBCw-Il5xa7lHniw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:2c:4a:5b:6f:70:02:4c:82:70:6a:ef:5c:2c:85:47:56:95:
         16:02:2f:28:5b:8f:3c:52:0a:f6:26:85:55:80:c7:95:9d:26:
         82:9c:05:41:8a:5e:31:92:07:1a:16:65:b1:1e:87:3e:e2:ca:
         de:c1:59:c0:04:8e:90:ec:93:a7:92:6f:6d:07:33:59:65:4d:
         81:ba:d2:52:18:aa:59:a4:81:68:7d:80:65:01:8d:63:18:84:
         5f:34:dd:b2:2d:5f:03:bc:4e:14:e5:70:a8:62:12:03:f9:3d:
         4b:e9:00:f9:d4:00:27:f4:ce:60:d4:e1:a6:80:e4:d2:49:75:
         bd:d8:25:ad:58:de:3f:7f:ed:16:16:67:51:31:af:80:2b:b8:
         d7:60:f4:bc:bd:e4:68:9b:02:8a:ac:d4:4f:2f:5e:88:01:7e:
         ee:56:93:36:6f:61:cc:f8:2b:5e:1b:16:ee:92:74:f8:64:8b:
         04:de:34:34:fe:6d:f7:60:de:ba:22:99:6f:81:ed:0c:0a:04:
         a7:02:99:15:3f:4a:61:35:bd:25:2e:48:cf:3b:71:b9:57:ff:
         fd:37:8f:6b:28:49:6e:4f:e6:aa:aa:65:d3:3a:c6:59:e7:67:
         a7:da:53:53:fc:b8:19:1d:34:14:1a:8a:dd:9d:68:cb:82:d4:
         fe:00:d5:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QzQ0UxMTAvBgNVBAUTKDEzMUVGNjJFMTIxQjExREU2MTA0MkMzRTIyNUU3MTZC
Qjk0NzlFMkMwHhcNMjUwODAxMDcyMTEzWhcNMjUwODA4MDcyMTEzWjAYMRYwFAYD
VQQDEw02ODhjNmFlOS0xZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvFZSgKW+i4hDsFEgY10Pdeick9Ple4gFIEXpPHATAb++qy/CqkdrQ7CS1owu
bKx/8PE8fHg+11jXkQf0qC4a0SJNRpAAtW0JpUNiPnGPVNN2uGRnfSv1snMjjp3g
OfK8mLPqxQeIYOsrUAN0H7xPBqPpIzVU/hIkH+0DlY59y10B44x2ZRHRcCdlnXL/
H574jDtlQOrFj7nKq4eqXEz+yCi7HOEnYh+MkA3WNspXXy24c9WPLJFzxgPZ6+jn
swNsfaJpQjtct44b/k2qix3zntaVus05YsGqMAOJawgBFds3lWQAz2h6sj2X328E
6ZVcIv3mFrvKFSWL4MgAQaeOqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIGpTOX
iOtLNR39RZqVbUNSbIsuMB8GA1UdIwQYMBaAFBMe9i4SGxHeYQQsPiJecWu5R54s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDNDRS8xQzEzN0MyMDQ5
NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVkNWhCQ3ctSWw1eGE3bEhu
aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V4NzJMaEliRWQ1aEJDdy1JbDV4YTdsSG5pdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDNDRS8xQzEzN0MyMDQ5NUUxMUVGQkU4RjIwNzlDNEY5QUUwMi9FeDcyTGhJYkVk
NWhCQ3ctSWw1eGE3bEhuaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATLEpbb3ACTIJwau9cLIVHVpUWAi8oW488Ugr2JoVVgMeVnSaCnAVB
il4xkgcaFmWxHoc+4srewVnABI6Q7JOnkm9tBzNZZU2ButJSGKpZpIFofYBlAY1j
GIRfNN2yLV8DvE4U5XCoYhID+T1L6QD51AAn9M5g1OGmgOTSSXW92CWtWN4/f+0W
FmdRMa+AK7jXYPS8veRomwKKrNRPL16IAX7uVpM2b2HM+CteGxbuknT4ZIsE3jQ0
/m33YN66Iplvge0MCgSnApkVP0phNb0lLkjPO3G5V//9N49rKEluT+aqqmXTOsZZ
52en2lNT/LgZHTQUGordnWjLgtT+ANUv
-----END CERTIFICATE-----
Generated at Sat Aug 2 14:14:42 2025 by rpki-client