Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
File:                     3VdGDwwSvgVGE6L0KWewfaVoe_A.mft (raw, json)
Hash identifier:          uPVUZiIQcuQlBYQ4GRaoHcASju7EbunYKKW6SGYTEO8=
Subject key identifier:   C5:94:47:24:06:E3:65:21:0F:38:4E:FB:94:F6:1F:6A:CC:BA:A9:C6
Authority key identifier: DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0
Certificate issuer:       /CN=A91566DC/serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
Manifest number:          95
Signing time:             Wed 23 Jul 2025 06:42:45 +0000
Manifest this update:     Wed 23 Jul 2025 06:42:44 +0000
Manifest next update:     Wed 30 Jul 2025 06:42:44 +0000
Files and hashes:         1: 3VdGDwwSvgVGE6L0KWewfaVoe_A.crl (hash: 4aiSmxzeHo8t5LM/AW5UeFF3Ybr1XP4AvAZKn25BqI4=)
                          2: ABF1FAF2860211EF8D8AD011C4F9AE02.roa (hash: FjxvcClLpMvzDMGgYVpt3T25fLDEAyl8BO+4pScMyJU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl
                          rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 06:42:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91566DC, serialNumber=DD57460F0C12BE054613A2F42967B07DA5687BF0
        Validity
            Not Before: Jul 23 06:42:44 2025 GMT
            Not After : Jul 30 06:42:44 2025 GMT
        Subject: CN=68808464-3452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ba:f2:b8:1a:db:f4:15:47:0a:93:6a:e0:9f:
                    c6:6e:be:70:71:e5:60:f1:62:c6:10:82:d9:09:59:
                    9c:7d:16:1d:6b:e0:a3:38:fd:8a:7a:b7:0f:5e:de:
                    c3:8c:c9:00:07:d4:9d:27:fb:68:82:75:9b:47:dd:
                    23:b2:ab:74:de:9a:74:b4:28:3b:ec:fe:16:f6:2c:
                    27:9c:91:cf:2b:40:4d:ec:d2:2c:8b:60:ca:e5:bf:
                    81:13:8b:57:db:b3:ff:51:ad:7c:fd:76:3f:cf:bf:
                    f0:00:6e:90:35:bf:e6:77:5e:04:13:3f:3e:0b:cf:
                    db:86:cc:4d:28:0b:5b:22:5e:e6:f3:5a:a5:1e:ca:
                    37:e7:4e:32:e9:96:97:58:12:11:0b:4a:a1:85:b5:
                    db:80:3c:be:6d:4b:7f:98:a1:f3:b6:e8:be:36:16:
                    4d:cc:5f:fd:f2:40:61:fd:6a:06:2e:ad:a0:2d:3d:
                    d3:fc:1f:ca:80:e8:6e:c7:a6:68:dd:ff:05:95:cd:
                    a6:90:29:ad:94:f9:cc:d8:85:4d:4b:73:2b:81:5d:
                    91:b4:27:12:52:a3:56:0e:5b:71:73:87:5b:95:1f:
                    44:b0:5a:a1:11:62:ba:cc:7f:1a:ef:71:74:10:e3:
                    eb:bb:75:f5:b6:43:47:99:d7:78:6a:5f:59:3a:d3:
                    18:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:94:47:24:06:E3:65:21:0F:38:4E:FB:94:F6:1F:6A:CC:BA:A9:C6
            X509v3 Authority Key Identifier:
                keyid:DD:57:46:0F:0C:12:BE:05:46:13:A2:F4:29:67:B0:7D:A5:68:7B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3VdGDwwSvgVGE6L0KWewfaVoe_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/5A182C7C852311EF9B48FF41C4F9AE02/3VdGDwwSvgVGE6L0KWewfaVoe_A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f6:10:fc:3c:a9:1a:dc:3f:6a:43:54:97:04:51:14:ff:35:
         a1:85:bc:ba:9c:31:45:59:ff:b6:aa:19:83:23:8a:07:29:d1:
         3a:37:eb:c7:93:74:42:ec:eb:2a:36:09:0e:b8:c1:bb:0e:26:
         aa:61:2b:35:25:76:f2:4b:98:e3:84:72:95:27:a3:d0:c9:29:
         c7:4c:0b:fa:ea:e3:6e:78:d4:67:1c:25:de:10:07:40:e1:df:
         1d:62:3b:00:f5:6a:7c:9b:c1:da:70:c9:27:82:fb:59:e6:2c:
         43:a5:27:df:13:30:62:8d:d9:8e:e3:a1:ea:6c:09:e0:e1:2c:
         41:32:bd:ae:63:b2:d4:b2:03:e5:66:7b:92:6b:9c:4a:9d:d3:
         c7:74:9d:ae:b3:8c:78:f2:24:78:e6:d2:2e:67:a6:fe:2c:b3:
         de:a8:d4:0e:ba:2f:fa:01:9c:0b:99:00:be:59:57:7c:48:d1:
         5e:ec:f5:58:80:cc:74:a0:dc:ef:ae:b2:d8:d9:2c:d1:d7:48:
         8a:90:1e:34:cc:f3:12:33:34:b4:83:f4:d0:fa:31:40:8b:43:
         9d:34:15:7b:47:5e:ef:2f:0e:a7:68:d6:02:2b:a3:17:f2:a7:
         c1:71:5e:0b:d9:5a:92:78:34:66:16:be:ea:43:a9:3f:46:61:
         bc:06:98:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY2REMxMTAvBgNVBAUTKERENTc0NjBGMEMxMkJFMDU0NjEzQTJGNDI5NjdCMDdE
QTU2ODdCRjAwHhcNMjUwNzIzMDY0MjQ0WhcNMjUwNzMwMDY0MjQ0WjAYMRYwFAYD
VQQDEw02ODgwODQ2NC0zNDUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtLryuBrb9BVHCpNq4J/Gbr5wceVg8WLGEILZCVmcfRYda+CjOP2KercPXt7D
jMkAB9SdJ/tognWbR90jsqt03pp0tCg77P4W9iwnnJHPK0BN7NIsi2DK5b+BE4tX
27P/Ua18/XY/z7/wAG6QNb/md14EEz8+C8/bhsxNKAtbIl7m81qlHso3504y6ZaX
WBIRC0qhhbXbgDy+bUt/mKHztui+NhZNzF/98kBh/WoGLq2gLT3T/B/KgOhux6Zo
3f8Flc2mkCmtlPnM2IVNS3MrgV2RtCcSUqNWDltxc4dblR9EsFqhEWK6zH8a73F0
EOPru3X1tkNHmdd4al9ZOtMY+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMWURyQG
42UhDzhO+5T2H2rMuqnGMB8GA1UdIwQYMBaAFN1XRg8MEr4FRhOi9ClnsH2laHvw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjZEQy81QTE4MkM3Qzg1
MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3ZnVkdFNkwwS1dld2ZhVm9l
X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzNWZEdEd3dTdmdWR0U2TDBLV2V3ZmFWb2VfQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjZEQy81QTE4MkM3Qzg1MjMxMUVGOUI0OEZGNDFDNEY5QUUwMi8zVmRHRHd3U3Zn
VkdFNkwwS1dld2ZhVm9lX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA/9hD8PKka3D9qQ1SXBFEU/zWhhby6nDFFWf+2qhmDI4oHKdE6N+vH
k3RC7OsqNgkOuMG7DiaqYSs1JXbyS5jjhHKVJ6PQySnHTAv66uNueNRnHCXeEAdA
4d8dYjsA9Wp8m8HacMkngvtZ5ixDpSffEzBijdmO46HqbAng4SxBMr2uY7LUsgPl
ZnuSa5xKndPHdJ2us4x48iR45tIuZ6b+LLPeqNQOui/6AZwLmQC+WVd8SNFe7PVY
gMx0oNzvrrLY2SzR10iKkB40zPMSMzS0g/TQ+jFAi0OdNBV7R17vLw6naNYCK6MX
8qfBcV4L2VqSeDRmFr7qQ6k/RmG8Bpjw
-----END CERTIFICATE-----
Generated at Thu Jul 24 08:31:24 2025 by rpki-client