Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
File:                     _1wQCXXjaGJFyt5XnFdDO7_faBk.mft (raw, json)
Hash identifier:          E1KItBccdiJtRPQV97mIXE5EZac8hVr9D7atf3XwDzc=
Subject key identifier:   FB:31:9B:30:96:8B:23:9D:16:3D:6A:E8:17:3F:1A:CC:B3:F5:16:87
Authority key identifier: FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19
Certificate issuer:       /CN=A9144913/serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
Certificate serial:       0154
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
Manifest number:          0150
Signing time:             Fri 19 Sep 2025 04:44:34 +0000
Manifest this update:     Fri 19 Sep 2025 04:44:33 +0000
Manifest next update:     Fri 26 Sep 2025 04:44:33 +0000
Files and hashes:         1: _1wQCXXjaGJFyt5XnFdDO7_faBk.crl (hash: eHIzmROr519a05Y5wbRM2UtERkdvzm2cs59RrPxNyNc=)
                          2: 749936E290D511EE816E5C34C4F9AE02.roa (hash: LprFRa9DDPfl/3Qfhn6O1nEl8KrrEuPylvF2cGWjxe4=)
                          3: 740BB01A90D511EE816E5C34C4F9AE02.roa (hash: n+XeE9XCFt/q45U7WPv35bND6hFpIvrgPLf9ca2BNws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl
                          rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 04:44:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144913, serialNumber=FF5C100975E3686245CADE579C57433BBFDF6819
        Validity
            Not Before: Sep 19 04:44:33 2025 GMT
            Not After : Sep 26 04:44:33 2025 GMT
        Subject: CN=68ccdfb2-35cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1d:b3:a3:b8:3d:6d:c1:f6:ff:14:65:4c:5e:
                    1b:25:3e:74:48:a1:cd:e5:f4:3b:53:29:a4:e5:c4:
                    60:30:01:90:fe:de:a5:94:d2:f3:2e:18:cc:a9:a5:
                    41:5d:ee:99:69:15:b6:24:61:70:be:42:ae:21:6a:
                    53:c8:ad:9b:06:6e:87:36:63:13:1c:34:40:28:9d:
                    3f:f6:2e:94:e1:a8:0c:31:0c:57:8e:96:9e:4b:5d:
                    11:64:5b:c8:ba:fb:6f:42:0b:89:8e:fd:88:51:99:
                    8c:27:2f:b2:47:39:ae:54:9b:9d:38:16:f9:64:8e:
                    83:e2:17:65:ee:5a:ac:c3:81:a8:26:22:d8:da:5f:
                    dd:b8:d2:7c:89:ac:2e:d0:c0:ae:bb:65:0c:c5:8b:
                    0a:2f:8f:b4:01:99:ec:b4:dd:86:54:ed:76:f2:dc:
                    e8:c9:fc:06:2b:62:fd:eb:39:06:80:29:b6:ac:1b:
                    29:e5:4a:01:32:09:78:d8:f6:0f:f7:74:74:01:cb:
                    95:74:fb:87:ab:a7:80:24:aa:74:4c:3b:74:0e:a5:
                    d8:de:ed:7b:a2:db:12:9d:c4:34:36:31:52:c7:61:
                    78:c7:ea:c1:b9:27:49:a1:da:30:68:e5:f4:79:6f:
                    90:4d:f6:07:91:df:65:04:2d:7d:e5:2d:da:5e:1b:
                    82:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:31:9B:30:96:8B:23:9D:16:3D:6A:E8:17:3F:1A:CC:B3:F5:16:87
            X509v3 Authority Key Identifier:
                keyid:FF:5C:10:09:75:E3:68:62:45:CA:DE:57:9C:57:43:3B:BF:DF:68:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_1wQCXXjaGJFyt5XnFdDO7_faBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144913/06F5B5CA90D511EEBD579833C4F9AE02/_1wQCXXjaGJFyt5XnFdDO7_faBk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:05:d0:96:f5:e0:9f:62:86:5e:f4:a8:c1:12:e9:79:b5:e3:
         c0:23:3d:07:a5:58:b8:4d:d4:0a:3f:68:66:0d:f3:a9:14:98:
         1f:6a:7e:9b:b3:ac:fe:64:3e:85:86:ac:cc:c2:ae:8e:ae:0e:
         52:5c:24:74:71:6c:de:26:4e:f9:a5:d6:84:c3:71:6e:b7:cb:
         e7:b8:d9:f9:aa:d2:bb:87:33:55:31:af:e1:8a:44:34:2e:c8:
         12:2e:d7:c2:1b:a8:2e:2a:0f:95:ba:6b:b8:1c:3d:8e:7b:bc:
         55:57:9b:6c:33:d2:11:24:eb:6f:a7:51:5e:b7:06:a7:6c:86:
         a8:6c:f8:35:f7:a1:57:9a:67:dd:2a:6c:b4:5f:04:ff:2f:c4:
         2f:e9:83:07:5e:81:dd:a3:b6:c8:8e:0c:42:89:58:5e:74:ce:
         6f:45:b1:f0:ce:84:77:0f:9d:b1:81:bb:f2:56:8b:e6:c3:39:
         55:aa:30:5f:15:59:b5:9f:77:04:24:2d:a6:4b:1b:14:73:63:
         1c:ce:50:eb:d8:b7:9f:c3:3c:5b:81:62:2b:4e:1e:e5:4c:dd:
         e0:27:40:5b:af:b8:3f:68:73:55:31:f3:10:54:74:72:74:df:
         7f:5e:9e:e9:d0:67:e5:d7:3c:18:ec:b7:01:c2:15:20:89:cf:
         cf:ae:b2:64
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ5MTMxMTAvBgNVBAUTKEZGNUMxMDA5NzVFMzY4NjI0NUNBREU1NzlDNTc0MzNC
QkZERjY4MTkwHhcNMjUwOTE5MDQ0NDMzWhcNMjUwOTI2MDQ0NDMzWjAYMRYwFAYD
VQQDEw02OGNjZGZiMi0zNWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApx2zo7g9bcH2/xRlTF4bJT50SKHN5fQ7Uymk5cRgMAGQ/t6llNLzLhjMqaVB
Xe6ZaRW2JGFwvkKuIWpTyK2bBm6HNmMTHDRAKJ0/9i6U4agMMQxXjpaeS10RZFvI
uvtvQguJjv2IUZmMJy+yRzmuVJudOBb5ZI6D4hdl7lqsw4GoJiLY2l/duNJ8iawu
0MCuu2UMxYsKL4+0AZnstN2GVO128tzoyfwGK2L96zkGgCm2rBsp5UoBMgl42PYP
93R0AcuVdPuHq6eAJKp0TDt0DqXY3u17otsSncQ0NjFSx2F4x+rBuSdJodowaOX0
eW+QTfYHkd9lBC195S3aXhuCqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPsxmzCW
iyOdFj1q6Bc/Gsyz9RaHMB8GA1UdIwQYMBaAFP9cEAl142hiRcreV5xXQzu/32gZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDkxMy8wNkY1QjVDQTkw
RDUxMUVFQkQ1Nzk4MzNDNEY5QUUwMi9fMXdRQ1hYamFHSkZ5dDVYbkZkRE83X2Zh
QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL18xd1FDWFhqYUdKRnl0NVhuRmRETzdfZmFCay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDkxMy8wNkY1QjVDQTkwRDUxMUVFQkQ1Nzk4MzNDNEY5QUUwMi9fMXdRQ1hYamFH
SkZ5dDVYbkZkRE83X2ZhQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBWBdCW9eCfYoZe9KjBEul5tePAIz0HpVi4TdQKP2hmDfOpFJgfan6b
s6z+ZD6FhqzMwq6Org5SXCR0cWzeJk75pdaEw3Fut8vnuNn5qtK7hzNVMa/hikQ0
LsgSLtfCG6guKg+Vumu4HD2Oe7xVV5tsM9IRJOtvp1FetwanbIaobPg196FXmmfd
Kmy0XwT/L8Qv6YMHXoHdo7bIjgxCiVhedM5vRbHwzoR3D52xgbvyVovmwzlVqjBf
FVm1n3cEJC2mSxsUc2MczlDr2LefwzxbgWIrTh7lTN3gJ0Bbr7g/aHNVMfMQVHRy
dN9/Xp7p0Gfl1zwY7LcBwhUgic/PrrJk
-----END CERTIFICATE-----
Generated at Fri Sep 19 10:18:30 2025 by rpki-client