Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
File:                     b-azPqhzkGYLRrER2tV9YG8v7iQ.mft (raw, json)
Hash identifier:          4AltoCF2MBfFrYu+411miX23Bk2YJE0j9OGaNn9EDf0=
Subject key identifier:   9C:65:CF:EB:F7:DB:40:8C:CF:58:6D:DD:8D:BB:02:D4:0E:24:9B:18
Authority key identifier: 6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24
Certificate issuer:       /CN=A9145519/serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
Certificate serial:       1C86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
Manifest number:          1C6B
Signing time:             Fri 18 Jul 2025 16:18:36 +0000
Manifest this update:     Fri 18 Jul 2025 16:18:36 +0000
Manifest next update:     Fri 25 Jul 2025 16:18:36 +0000
Files and hashes:         1: b-azPqhzkGYLRrER2tV9YG8v7iQ.crl (hash: AnWs0HX8o+00hVzSSw2SHwt4Ra2B4df0ZCJlITxWOrQ=)
                          2: 7814B330E45E11E681F82341C4F9AE02.roa (hash: KpfW5v22QQ8knW5hcfiQgbsPMLlFz8zLOAmQh0gN2hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl
                          rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 16:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7302 (0x1c86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145519, serialNumber=6FE6B33EA87390660B46B111DAD57D606F2FEE24
        Validity
            Not Before: Jul 18 16:18:36 2025 GMT
            Not After : Jul 25 16:18:36 2025 GMT
        Subject: CN=687a73dc-3f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:06:b1:3a:b7:5b:cf:b8:93:f2:09:a5:6f:0e:
                    2a:a4:20:19:a0:d6:99:c2:eb:d7:36:73:67:57:a6:
                    86:60:85:82:7e:52:b8:32:0d:55:45:fe:b4:7f:9a:
                    3a:a4:01:ac:08:01:2b:c9:68:06:f6:b3:69:32:90:
                    c0:d3:92:ab:55:c7:32:e0:fd:ee:86:90:06:c2:62:
                    31:bc:86:54:56:80:01:bf:43:1e:49:e4:09:a5:55:
                    62:e1:e0:e0:f4:ac:aa:09:fa:fe:58:11:02:90:6d:
                    53:4f:6c:43:0f:42:df:ea:db:db:26:28:8b:59:61:
                    d0:bf:d1:98:a7:41:a4:26:93:4d:b6:f1:59:d1:9c:
                    22:96:2b:91:da:f0:ef:c1:b0:9a:7f:be:83:f9:76:
                    68:dd:02:16:89:8e:84:b6:a5:e6:3b:10:60:20:17:
                    e6:36:ed:73:b8:e8:75:c8:15:26:7d:1a:ed:32:d4:
                    82:3c:69:f3:96:83:7c:35:8d:cf:7c:3c:04:33:96:
                    f0:6c:83:e8:0c:4c:99:39:60:d9:5d:c8:6b:e2:86:
                    72:00:33:5f:0c:96:29:84:c0:1c:b7:db:08:49:cc:
                    79:90:7f:75:25:85:d2:ce:b3:42:e8:4c:f6:e7:df:
                    81:33:33:9e:68:8f:0d:cb:0c:4e:ff:58:59:40:74:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:65:CF:EB:F7:DB:40:8C:CF:58:6D:DD:8D:BB:02:D4:0E:24:9B:18
            X509v3 Authority Key Identifier:
                keyid:6F:E6:B3:3E:A8:73:90:66:0B:46:B1:11:DA:D5:7D:60:6F:2F:EE:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b-azPqhzkGYLRrER2tV9YG8v7iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145519/A2FC3264E45C11E68CEDFA3EC4F9AE02/b-azPqhzkGYLRrER2tV9YG8v7iQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:69:0d:36:1b:ee:cb:55:f9:d3:9a:87:19:f3:74:7a:6c:81:
         1d:84:fb:57:6b:45:5b:3a:80:a9:ff:37:48:23:0b:1e:d1:c8:
         8a:5d:c5:19:05:dc:d4:c7:03:74:75:f7:1b:c7:df:d2:8b:f2:
         9a:2c:9c:20:12:29:7b:0c:a8:ec:3e:b0:82:ec:7b:95:cd:d5:
         39:a1:0e:64:e6:de:4b:9a:b2:f8:b9:69:9d:96:c4:fc:0c:44:
         35:57:df:d7:c2:60:ea:be:21:41:a1:5d:e2:13:7d:de:65:d0:
         1b:2c:1e:d2:64:07:32:4f:be:d6:1c:d2:00:37:f8:c1:5c:38:
         53:fb:a8:57:51:07:b2:52:21:ac:f6:8e:b8:6f:a7:94:d8:12:
         25:52:16:d0:76:32:c4:f1:80:63:e0:9c:19:2f:02:91:82:2a:
         17:33:6e:70:c0:17:bb:2a:7b:99:69:47:35:b0:69:58:e4:d4:
         40:2b:ce:3c:7d:ae:55:11:a6:7c:ec:88:bd:7b:e9:97:7d:2f:
         fd:d0:1b:91:dc:d0:62:d0:5d:d3:02:03:c6:08:1c:f2:ef:91:
         5c:56:16:fe:50:9e:c6:fe:7c:80:12:5d:30:cd:6b:5d:82:be:
         d7:da:f4:37:f1:09:8a:ce:e2:88:ed:a4:76:c1:e6:f1:9c:11:
         3e:2d:09:0c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDU1MTkxMTAvBgNVBAUTKDZGRTZCMzNFQTg3MzkwNjYwQjQ2QjExMURBRDU3RDYw
NkYyRkVFMjQwHhcNMjUwNzE4MTYxODM2WhcNMjUwNzI1MTYxODM2WjAYMRYwFAYD
VQQDEw02ODdhNzNkYy0zZjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApQaxOrdbz7iT8gmlbw4qpCAZoNaZwuvXNnNnV6aGYIWCflK4Mg1VRf60f5o6
pAGsCAEryWgG9rNpMpDA05KrVccy4P3uhpAGwmIxvIZUVoABv0MeSeQJpVVi4eDg
9KyqCfr+WBECkG1TT2xDD0Lf6tvbJiiLWWHQv9GYp0GkJpNNtvFZ0ZwiliuR2vDv
wbCaf76D+XZo3QIWiY6EtqXmOxBgIBfmNu1zuOh1yBUmfRrtMtSCPGnzloN8NY3P
fDwEM5bwbIPoDEyZOWDZXchr4oZyADNfDJYphMAct9sIScx5kH91JYXSzrNC6Ez2
59+BMzOeaI8NywxO/1hZQHRWTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxlz+v3
20CMz1ht3Y27AtQOJJsYMB8GA1UdIwQYMBaAFG/msz6oc5BmC0axEdrVfWBvL+4k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTUxOS9BMkZDMzI2NEU0
NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtHWUxSckVSMnRWOVlHOHY3
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ItYXpQcWh6a0dZTFJyRVIydFY5WUc4djdpUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTUxOS9BMkZDMzI2NEU0NUMxMUU2OENFREZBM0VDNEY5QUUwMi9iLWF6UHFoemtH
WUxSckVSMnRWOVlHOHY3aVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkaQ02G+7LVfnTmocZ83R6bIEdhPtXa0VbOoCp/zdIIwse0ciKXcUZ
BdzUxwN0dfcbx9/Si/KaLJwgEil7DKjsPrCC7HuVzdU5oQ5k5t5LmrL4uWmdlsT8
DEQ1V9/XwmDqviFBoV3iE33eZdAbLB7SZAcyT77WHNIAN/jBXDhT+6hXUQeyUiGs
9o64b6eU2BIlUhbQdjLE8YBj4JwZLwKRgioXM25wwBe7KnuZaUc1sGlY5NRAK848
fa5VEaZ87Ii9e+mXfS/90BuR3NBi0F3TAgPGCBzy75FcVhb+UJ7G/nyAEl0wzWtd
gr7X2vQ38QmKzuKI7aR2webxnBE+LQkM
-----END CERTIFICATE-----
Generated at Sat Jul 19 20:29:57 2025 by rpki-client