Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
File:                     m0G07JA0ytKB1baCVnQwWQMlK94.mft (raw, json)
Hash identifier:          pwKjADyQboE9I/zI2Z78B0keAO6OmnLz847rFRCeYm4=
Subject key identifier:   6E:C3:0B:A5:47:B0:E9:21:BB:00:43:C8:88:75:60:00:8E:3C:35:4C
Authority key identifier: 9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE
Certificate issuer:       /CN=A915E39C/serialNumber=9B41B4EC9034CAD281D5B6825674305903252BDE
Certificate serial:       0647
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
Manifest number:          0642
Signing time:             Wed 20 Aug 2025 22:46:08 +0000
Manifest this update:     Wed 20 Aug 2025 22:46:08 +0000
Manifest next update:     Wed 27 Aug 2025 22:46:08 +0000
Files and hashes:         1: m0G07JA0ytKB1baCVnQwWQMlK94.crl (hash: 1uBaPR9m2NsPag6qfDJQJKxeVs+G51BCOBClQopE0Jw=)
                          2: 7EA34D309EC511EBA85F8276C4F9AE02.roa (hash: yK6C1pWwJA6WJCQDjIzeh8mb+889ajrC1dn+LyzHgJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.crl
                          rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 22:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1607 (0x647)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E39C, serialNumber=9B41B4EC9034CAD281D5B6825674305903252BDE
        Validity
            Not Before: Aug 20 22:46:08 2025 GMT
            Not After : Aug 27 22:46:08 2025 GMT
        Subject: CN=68a65030-99c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5c:9f:ef:fb:c0:e8:36:d4:71:e2:38:5e:35:
                    33:3b:aa:e1:fb:cc:40:5d:80:1f:79:3a:a2:ec:7c:
                    9b:8e:ac:22:c3:01:10:54:86:d5:1e:42:29:e4:39:
                    53:66:f6:2a:d6:80:ce:51:c9:f2:fe:f5:1a:5e:4c:
                    dc:61:3a:d9:ce:0c:e8:b1:aa:a7:bb:eb:fe:8a:e0:
                    8d:a1:8a:d0:a7:9f:bf:29:02:71:65:5b:43:15:a6:
                    53:33:7c:6b:9e:e6:25:30:23:20:fc:c3:fd:a3:5f:
                    43:42:f6:f7:c2:00:92:81:a1:34:3d:b9:7a:e3:56:
                    08:34:24:81:9e:59:d0:69:11:c5:98:e9:e6:15:16:
                    1d:5c:85:82:f5:0f:aa:c2:fa:f4:c0:cf:73:c7:51:
                    3b:13:63:87:de:87:1e:5b:7b:57:b3:b0:1e:57:32:
                    f8:f9:02:c5:19:62:1d:62:03:e9:ac:97:20:14:1b:
                    82:cf:53:3f:f1:25:dc:9f:29:b1:12:66:72:b6:e6:
                    9c:84:40:48:49:5b:b3:47:5d:a5:e2:e9:04:b7:a7:
                    1c:61:78:8d:d0:1f:f2:9b:99:8e:55:78:05:0d:d6:
                    ed:77:9e:11:aa:95:16:14:02:5f:13:b1:30:af:8f:
                    eb:b5:31:e4:ae:f9:ff:66:44:27:41:0c:4b:ad:5d:
                    7a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C3:0B:A5:47:B0:E9:21:BB:00:43:C8:88:75:60:00:8E:3C:35:4C
            X509v3 Authority Key Identifier:
                keyid:9B:41:B4:EC:90:34:CA:D2:81:D5:B6:82:56:74:30:59:03:25:2B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m0G07JA0ytKB1baCVnQwWQMlK94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E39C/6036DF3E9EC411EB9DC55176C4F9AE02/m0G07JA0ytKB1baCVnQwWQMlK94.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:49:f9:9e:ed:8a:1d:c7:95:48:3a:ed:69:e6:13:c2:14:05:
         fa:d8:d3:3a:bd:4b:1f:90:fe:aa:4a:fc:70:00:df:63:09:f0:
         e9:2e:a8:63:89:ab:e7:29:54:6e:bd:24:de:a5:e9:da:fc:58:
         b4:6c:52:0b:3e:59:bf:1f:ef:0c:4a:ad:51:f3:c8:ec:04:3d:
         78:16:ca:02:f4:4e:95:10:33:c3:e0:fb:3f:1d:ee:46:d9:6b:
         e4:f2:b6:8b:c7:cd:cc:cb:2f:70:19:f9:9f:f0:f4:83:4d:9c:
         15:50:f8:5a:45:99:75:7e:2c:37:c6:fb:00:16:45:ad:a1:3a:
         e0:c4:99:b8:d9:c3:15:67:9c:50:3a:ce:12:62:eb:3a:a2:be:
         2c:2a:83:bb:80:ba:d3:a6:3b:29:d7:28:2b:cb:07:f9:5e:3e:
         bd:72:70:00:31:39:3a:e1:3e:47:4e:8b:da:c2:9f:64:05:71:
         bc:a1:38:29:12:13:9f:56:60:61:ba:16:d7:86:b5:b6:af:1b:
         49:c7:fe:df:d5:46:b6:b1:f2:f8:cd:c2:5d:10:fd:b3:79:02:
         8d:e0:2f:6d:39:19:e4:fa:44:34:e8:4e:4a:94:8a:be:f4:6f:
         6e:6d:03:7c:8c:48:81:23:14:40:a5:7a:df:78:cd:dd:d3:f4:
         2e:01:46:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUUzOUMxMTAvBgNVBAUTKDlCNDFCNEVDOTAzNENBRDI4MUQ1QjY4MjU2NzQzMDU5
MDMyNTJCREUwHhcNMjUwODIwMjI0NjA4WhcNMjUwODI3MjI0NjA4WjAYMRYwFAYD
VQQDEw02OGE2NTAzMC05OWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxlyf7/vA6DbUceI4XjUzO6rh+8xAXYAfeTqi7HybjqwiwwEQVIbVHkIp5DlT
ZvYq1oDOUcny/vUaXkzcYTrZzgzosaqnu+v+iuCNoYrQp5+/KQJxZVtDFaZTM3xr
nuYlMCMg/MP9o19DQvb3wgCSgaE0Pbl641YINCSBnlnQaRHFmOnmFRYdXIWC9Q+q
wvr0wM9zx1E7E2OH3oceW3tXs7AeVzL4+QLFGWIdYgPprJcgFBuCz1M/8SXcnymx
EmZytuachEBISVuzR12l4ukEt6ccYXiN0B/ym5mOVXgFDdbtd54RqpUWFAJfE7Ew
r4/rtTHkrvn/ZkQnQQxLrV161QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7DC6VH
sOkhuwBDyIh1YACOPDVMMB8GA1UdIwQYMBaAFJtBtOyQNMrSgdW2glZ0MFkDJSve
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTM5Qy82MDM2REYzRTlF
QzQxMUVCOURDNTUxNzZDNEY5QUUwMi9tMEcwN0pBMHl0S0IxYmFDVm5Rd1dRTWxL
OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL20wRzA3SkEweXRLQjFiYUNWblF3V1FNbEs5NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RTM5Qy82MDM2REYzRTlFQzQxMUVCOURDNTUxNzZDNEY5QUUwMi9tMEcwN0pBMHl0
S0IxYmFDVm5Rd1dRTWxLOTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCNSfme7Yodx5VIOu1p5hPCFAX62NM6vUsfkP6qSvxwAN9jCfDpLqhj
iavnKVRuvSTepena/Fi0bFILPlm/H+8MSq1R88jsBD14FsoC9E6VEDPD4Ps/He5G
2Wvk8raLx83Myy9wGfmf8PSDTZwVUPhaRZl1fiw3xvsAFkWtoTrgxJm42cMVZ5xQ
Os4SYus6or4sKoO7gLrTpjsp1ygrywf5Xj69cnAAMTk64T5HTovawp9kBXG8oTgp
EhOfVmBhuhbXhrW2rxtJx/7f1Ua2sfL4zcJdEP2zeQKN4C9tORnk+kQ06E5KlIq+
9G9ubQN8jEiBIxRApXrfeM3d0/QuAUbu
-----END CERTIFICATE-----
Generated at Fri Aug 22 16:16:45 2025 by rpki-client