Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
File:                     yiPsANw26PNUZ_BZkXTqC-_bQfk.mft (raw, json)
Hash identifier:          8OGubDAzFPKwkF/mMgsklbdTndXn49RBK/BGAkTEW3c=
Subject key identifier:   F4:DF:4D:E8:83:59:0D:ED:A9:29:10:E4:4B:01:9F:0F:CE:09:30:3C
Authority key identifier: CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9
Certificate issuer:       /CN=A9142182/serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9
Certificate serial:       0855
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
Manifest number:          0844
Signing time:             Tue 16 Sep 2025 20:58:11 +0000
Manifest this update:     Tue 16 Sep 2025 20:58:11 +0000
Manifest next update:     Tue 23 Sep 2025 20:58:11 +0000
Files and hashes:         1: yiPsANw26PNUZ_BZkXTqC-_bQfk.crl (hash: dRYN4LPhFeTfwWTcxh1PerE4x2j9UPpDd68pUL44yIs=)
                          2: 584ED0CCDD1A11EA96723D11C4F9AE02.roa (hash: a26G9stfHyp0Gux3jQKbfLSUgjXPlGCMpAEtwizoJbM=)
                          3: 180F88DEDD1611EABA2F7C82C4F9AE02.roa (hash: 6rnru1Tv8+/CdqX1493WbqB7SUJPoKusoDtttnuxJBY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl
                          rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Sep 2025 20:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133 (0x855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142182, serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9
        Validity
            Not Before: Sep 16 20:58:11 2025 GMT
            Not After : Sep 23 20:58:11 2025 GMT
        Subject: CN=68c9cf63-2870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d7:80:ba:2c:a5:e4:4a:20:83:c6:f2:07:c2:
                    71:5a:11:06:c9:28:38:d3:cb:67:3e:92:f5:2c:39:
                    0b:25:c1:12:9a:58:b3:73:33:7b:ab:a5:70:3d:48:
                    77:8e:59:f8:76:02:1e:50:b1:02:a7:48:20:5a:7f:
                    7f:39:d3:67:ea:fd:3d:c4:1f:98:8d:50:42:3e:40:
                    d3:5a:ea:42:98:5c:df:a7:a9:32:bb:97:ad:b8:94:
                    19:76:6e:4a:58:cb:55:42:0e:97:23:c8:97:f6:2e:
                    33:42:a6:4a:cd:74:10:1d:09:bb:39:42:13:cb:4f:
                    9a:27:9c:54:bb:9b:23:ec:4d:cd:41:11:14:bb:c5:
                    58:b5:32:5f:cd:54:07:30:14:80:b7:5e:6d:f5:59:
                    13:05:67:a3:69:4d:47:06:e7:d8:ec:5e:99:20:ab:
                    20:5b:87:32:9f:36:5a:1b:71:74:dd:88:2e:8a:40:
                    48:9d:91:b4:4e:99:de:54:3a:8f:26:45:15:e1:a0:
                    f6:fa:7b:70:ff:31:62:5e:36:c3:05:38:d2:e9:de:
                    be:b7:83:59:f1:13:26:36:32:9f:0e:ac:a7:64:81:
                    ca:7f:df:81:02:55:d7:28:c0:43:c2:eb:6c:38:53:
                    08:5f:85:d2:47:a1:92:7f:03:32:a4:e3:23:1c:ee:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DF:4D:E8:83:59:0D:ED:A9:29:10:E4:4B:01:9F:0F:CE:09:30:3C
            X509v3 Authority Key Identifier:
                keyid:CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:4a:a2:58:e8:f2:70:0a:f2:2c:46:74:9c:9b:5c:62:0d:8c:
         bf:f9:4b:89:e9:39:aa:ad:79:e2:71:ee:47:de:f1:1c:39:1f:
         eb:61:ff:f9:19:2d:e3:8f:5a:bf:2e:4c:24:f6:42:aa:2f:1e:
         59:9e:4e:0e:a4:c8:88:a1:ee:1d:dd:3a:a9:dd:0e:4a:65:7c:
         0f:e7:7f:e4:5c:3b:22:1b:b9:ce:92:66:89:29:a8:7d:42:78:
         d0:9b:22:11:8b:d8:53:f7:d6:c7:c7:f4:d7:4c:2e:8b:75:e4:
         8c:97:99:4b:b8:bf:6f:58:e3:86:6b:a2:41:93:86:ae:ad:b4:
         7f:d5:30:8a:d8:26:c3:e4:67:e6:d5:52:c8:2f:bb:65:81:f8:
         32:c9:f0:1e:47:0e:f3:89:1e:ea:3d:4c:30:30:03:1e:ca:b1:
         55:77:ff:e0:3d:bc:94:13:b7:48:09:a4:fc:bd:56:f5:53:87:
         4e:e4:7a:6f:0f:74:bc:df:3d:ab:b3:90:7c:33:43:e3:81:bc:
         25:c8:24:17:1a:6f:da:34:b5:ab:6b:79:4b:2c:13:0c:82:bc:
         40:90:a6:7c:f0:9f:71:1a:5c:58:43:db:c3:7c:33:8d:dc:28:
         ea:7b:6d:84:d9:c2:26:76:20:c7:5e:59:0e:56:db:91:d0:47:
         5a:2d:f7:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCFUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIxODIxMTAvBgNVBAUTKENBMjNFQzAwREMzNkU4RjM1NDY3RjA1OTkxNzRFQTBC
RUZEQjQxRjkwHhcNMjUwOTE2MjA1ODExWhcNMjUwOTIzMjA1ODExWjAYMRYwFAYD
VQQDEw02OGM5Y2Y2My0yODcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2NeAuiyl5Eogg8byB8JxWhEGySg408tnPpL1LDkLJcESmlizczN7q6VwPUh3
jln4dgIeULECp0ggWn9/OdNn6v09xB+YjVBCPkDTWupCmFzfp6kyu5etuJQZdm5K
WMtVQg6XI8iX9i4zQqZKzXQQHQm7OUITy0+aJ5xUu5sj7E3NQREUu8VYtTJfzVQH
MBSAt15t9VkTBWejaU1HBufY7F6ZIKsgW4cynzZaG3F03YguikBInZG0TpneVDqP
JkUV4aD2+ntw/zFiXjbDBTjS6d6+t4NZ8RMmNjKfDqynZIHKf9+BAlXXKMBDwuts
OFMIX4XSR6GSfwMypOMjHO4M0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPTfTeiD
WQ3tqSkQ5EsBnw/OCTA8MB8GA1UdIwQYMBaAFMoj7ADcNujzVGfwWZF06gvv20H5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjE4Mi8xNjJEREQ5MkRE
MTQxMUVBQkZEMkI0N0RDNEY5QUUwMi95aVBzQU53MjZQTlVaX0Jaa1hUcUMtX2JR
ZmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lpUHNBTncyNlBOVVpfQlprWFRxQy1fYlFmay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjE4Mi8xNjJEREQ5MkREMTQxMUVBQkZEMkI0N0RDNEY5QUUwMi95aVBzQU53MjZQ
TlVaX0Jaa1hUcUMtX2JRZmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBDSqJY6PJwCvIsRnScm1xiDYy/+UuJ6TmqrXnice5H3vEcOR/rYf/5
GS3jj1q/Lkwk9kKqLx5Znk4OpMiIoe4d3Tqp3Q5KZXwP53/kXDsiG7nOkmaJKah9
QnjQmyIRi9hT99bHx/TXTC6LdeSMl5lLuL9vWOOGa6JBk4aurbR/1TCK2CbD5Gfm
1VLIL7tlgfgyyfAeRw7ziR7qPUwwMAMeyrFVd//gPbyUE7dICaT8vVb1U4dO5Hpv
D3S83z2rs5B8M0PjgbwlyCQXGm/aNLWra3lLLBMMgrxAkKZ88J9xGlxYQ9vDfDON
3Cjqe22E2cImdiDHXlkOVtuR0EdaLfeM
-----END CERTIFICATE-----
Generated at Thu Sep 18 21:43:10 2025 by rpki-client