Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
File:                     4eaQihbsgT2qC9ZHl66dvesJIlc.mft (raw, json)
Hash identifier:          MG3Peb9fyzuvKzrH5cCeqSgbk9jSe/IMnsDx1HFYP6o=
Subject key identifier:   F9:C0:C2:68:35:BC:A4:66:73:1C:06:0F:49:B7:BA:62:2A:35:F2:1D
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       367F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
Manifest number:          3589
Signing time:             Mon 18 Aug 2025 14:30:19 +0000
Manifest this update:     Mon 18 Aug 2025 14:30:18 +0000
Manifest next update:     Mon 25 Aug 2025 14:30:18 +0000
Files and hashes:         1: 4eaQihbsgT2qC9ZHl66dvesJIlc.crl (hash: sixYDF8yeojoPvsZyIswJp19QKkJdUg7XbEAfWMbm+E=)
                          2: 94472FA8459511EDA982510FC4F9AE02.roa (hash: c+lWVnyi5AvZK74bdKBUde662hULr8JkfhSNLO1Lvpc=)
                          3: A12079269AF411EFA211362FC4F9AE02.roa (hash: +gXqwQfyRlVJIIcI7NB2OWJAf5Edf91tYkWEEnvOm5E=)
                          4: 65037DC0F72B11EE94855861C4F9AE02.roa (hash: ja/KSCzV+He4qClpDCozZTp+VTug8dvH4YMcC9ie7eE=)
                          5: 2286A2E29C7611EF9FB2F666C4F9AE02.roa (hash: /0ENGvuFY619vTTeS7kU7tUdehJkkzcY02gnnGiBCS8=)
                          6: 2C108BFA765311EF9FDB8175C4F9AE02.roa (hash: QPA7RcxiZk0uNPMYbxw3I0lhjK2b1HztmYt+4lBGT7U=)
                          7: 72BAF108B39811EFBBCEC71AC4F9AE02.roa (hash: UAjST7Qpm1aFNDJqEnCGjuYfh+z236K5L8ZjMGZFVAo=)
                          8: 65D8867E28C511F09C2CD74EC4F9AE02.roa (hash: TcTPd4eMMCcLVW+z/Iz5N+6zNNeINdC8gkRR70FihUk=)
                          9: 9237637AE3B411EBB3CB3785C4F9AE02.roa (hash: D2+qn1a1wZL+h7kwp2z2B823UF/6dU6jmlZ/oExUzWg=)
                          10: 84B94D56F83011EE8B26391DC4F9AE02.roa (hash: x+3QJoK+biDu04dZYkE6o8q8VEGJX6JSOS4hkFBwMrc=)
                          11: DCAF30B6E4AC11EF86681673C4F9AE02.roa (hash: RJ8QbeHeO//H3km4CF8dlyUAxuujjhRV0yZE0/kTgK4=)
                          12: F5CB8F0A459D11EDB62F422FC4F9AE02.roa (hash: DEDTu8Mp335AkDMg3gaFXfDzK0w1tPa7JLjvtAutrLM=)
                          13: 766AE05E614611F09CC5B85AC4F9AE02.roa (hash: VxDk7PIGlg4d7UuqFMx0UW7gDN4AF2vfbs5hldjyXwM=)
                          14: DD3BE51AE4AC11EF86681673C4F9AE02.roa (hash: /HNkxLr2GKguKIdLhCHzoCL2O/gBd4HVb/ZePeCAv1M=)
                          15: 99F2F124063811F0979FF734C4F9AE02.roa (hash: J7t22bkIZgaNdh1vYPwsQ0womI0AAnM0qE/XGzkYIsM=)
                          16: 1D1E595CBDF611EFA2777E34C4F9AE02.roa (hash: sG49huEjr4xPL7FiayEtmJCzDdx+1Np8IZn5eqIgraY=)
                          17: F7292614459D11EDB62F422FC4F9AE02.roa (hash: 6c9IiDCB0zpbQ1j7pnqUxxTq/OUIiiE1HzQV68EryhQ=)
                          18: BF177F2A84BF11EEBBE73E40C4F9AE02.roa (hash: XigKpX/uXMk3tgTnzIApDGja+nOFhQHjyXwVymCnRBM=)
                          19: 8FA30C8436FA11F087F24B11C4F9AE02.roa (hash: CIOWM46A7OrehJJzF5o6WcXQACQL/brTWBmCYOJEPrI=)
                          20: 0B28C4E63DA611F0BE531A20C4F9AE02.roa (hash: bCf2+Kf1Gx3ylLxT2UrIXzeFtJkNdW2hW/PFUSCAXGA=)
                          21: D29FCC80A6BD11EEB785E054C4F9AE02.roa (hash: aD49l3BJ2bA6UcWR6EQleCyB5Kz6FRd2Hgp9G6QkpB8=)
                          22: BDA8399C9AF611EF965FEA34C4F9AE02.roa (hash: 0CGWBpSvk9JK0nPDj7r4EUTQEqj0Iy/SjMQMszbWLG8=)
                          23: 89A6BB88E06911EF9C6CF520C4F9AE02.roa (hash: xcq/WEUSR+w06b6Nwt1nxiayT1ulPnzU6uAyB0f2hwE=)
                          24: 6DE12084243F11EDB6C9D62AC4F9AE02.roa (hash: UkhJIUL/Ldl3NbumSVZGfmojr5csuiDydS6HI26IpPE=)
                          25: 315775B015F811ECB52DA912C4F9AE02.roa (hash: 7DylzFTXOXediu8an8qP0Zjhz6YMhkKMfzwe8EjxF2Q=)
                          26: 6559F04828C511F09C2CD74EC4F9AE02.roa (hash: Q6JyBZa9dUAZWEm5WPgliEngDYA8BKCF4lpnNVbjJOk=)
                          27: DBBD442E3A2C11F09C99C60FC4F9AE02.roa (hash: j7V2cLxBPJmgE9BS61lbh9dr46zqgDVKwuwWKKEatjA=)
                          28: 4AE8C5D45B6211F097761A3EC4F9AE02.roa (hash: AXMZPAxxDRwcgBxBo+cJ6EaXUVogXGNqmcItWPjK+ac=)
                          29: DC7EC870132311ED84EFCD51C4F9AE02.roa (hash: 7gyEAftTiDude8qZ+ISH0MbDEa+j6NeYqK16C5bRoow=)
                          30: 747C7164462C11ED90035452C4F9AE02.roa (hash: ysgxI/G91R+a/iojor3l2n28shR0MhG5qk8DtBNdJ8I=)
                          31: 0A84178E9AF411EF9E814F1EC4F9AE02.roa (hash: hOJlqoxrlUtpINT8QJ6ZLskAAoXqjdHTWPwywqudFjk=)
                          32: 6D39ED3C243F11EDB6C9D62AC4F9AE02.roa (hash: H99nVGQbsYPafXQrgJwMtpH4mRDJmpSZLj52j7VXKlo=)
                          33: 6A7CCD6278F111F098F20460C4F9AE02.roa (hash: ZezcbaqgaqgEWZTU1YTp4DsGMcY2Dp73FcoAM6S+LpE=)
                          34: E8FBE58C6E4D11F09E60AF15C4F9AE02.roa (hash: F3Nkvr8Ot+/Vj1pN7iXz4hhR7XsF6oalV5YpZrBcH1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Aug 2025 14:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13951 (0x367f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Aug 18 14:30:18 2025 GMT
            Not After : Aug 25 14:30:18 2025 GMT
        Subject: CN=68a338fb-ea62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c9:b3:b5:cd:8f:2c:b0:b5:f3:72:42:51:f7:
                    9f:ff:7d:00:a8:cf:f7:e1:8a:f4:f9:c7:0d:2a:32:
                    6e:90:3e:e9:fc:0c:fd:36:21:34:9e:42:3c:d4:ef:
                    76:8e:c4:51:25:1d:6c:94:4c:1a:17:bb:be:d6:a2:
                    0d:9d:6a:79:67:fb:34:1b:57:a1:63:bb:fa:a1:36:
                    05:7f:93:24:83:ed:8e:de:f1:2c:7b:23:d5:da:b2:
                    69:3b:38:25:e3:86:64:61:e1:5c:23:02:f2:ad:c8:
                    b6:4a:56:f8:cd:7b:9f:92:c5:b2:70:2c:25:1b:b2:
                    96:79:1f:3a:89:56:38:6a:e2:f5:d8:05:a1:37:4e:
                    da:82:89:b7:f0:4a:62:5d:6f:dd:fd:9a:16:a5:d9:
                    91:98:09:a8:c8:bd:d0:16:5d:b8:02:2b:ad:a7:9d:
                    f2:30:e8:83:71:a8:90:f8:ee:68:b5:72:81:16:88:
                    e1:41:dd:db:57:da:51:f0:e1:43:ab:12:9b:45:8f:
                    47:8b:a9:5b:f8:93:a4:fb:e7:22:70:4d:93:a1:d8:
                    8e:23:ac:23:a4:9b:21:4c:88:03:71:88:f8:a1:e4:
                    3a:4b:f6:11:e8:54:0b:1d:21:ba:31:15:25:a6:43:
                    51:98:6d:55:1d:2c:80:ef:34:b8:68:52:de:28:65:
                    1b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C0:C2:68:35:BC:A4:66:73:1C:06:0F:49:B7:BA:62:2A:35:F2:1D
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:9e:d8:a0:94:6c:56:bd:b5:33:da:89:13:86:1f:05:30:bb:
         92:76:95:79:0e:14:fa:83:f5:bc:95:6b:d0:b2:65:45:b1:fa:
         f8:fc:6d:0b:22:b5:19:21:4b:bf:e3:01:37:8e:2e:cd:1c:4d:
         f8:e4:40:2d:79:05:07:5a:c5:82:0b:4b:c7:dc:56:7d:30:45:
         58:16:e6:b7:9a:f0:fa:85:ca:b3:9e:3a:b9:52:43:d1:82:63:
         1f:d3:98:9d:f5:1f:e1:70:77:52:f8:2c:a4:5e:89:9f:7d:a0:
         0f:3a:3a:b8:f1:23:a7:16:7f:d4:84:90:6e:e9:9e:53:e2:85:
         d5:10:cd:f6:7e:4b:48:b5:25:ae:82:61:88:ff:24:a7:bd:c6:
         2c:94:de:bf:2d:64:0c:c6:bc:83:af:1f:f2:6a:d9:7a:58:14:
         28:f0:b2:c8:cd:a3:c0:0c:21:bb:0b:77:26:f0:4a:14:3d:2a:
         0c:0a:0d:65:25:93:95:cd:95:47:40:c8:1c:0c:e6:bb:93:27:
         23:84:9c:d6:3b:ad:31:1c:22:ef:65:93:cd:09:00:2a:44:57:
         50:7a:7a:54:33:d5:93:45:dc:8b:25:9f:b6:32:a9:b4:5e:42:
         0d:2c:68:90:d3:19:29:0c:19:f8:e0:ee:62:b4:88:18:0e:ed:
         9a:ee:76:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:40:30 2025 by rpki-client