Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
File:                     iigtHI-Qww1lnm2MC5vkIhwlMZw.mft (raw, json)
Hash identifier:          ZYOP18+1Tuhef5cuGOTXpbFGYy4kkuPnELU7WTq4moo=
Subject key identifier:   25:D4:12:9D:A4:B7:EC:40:66:60:6C:C0:94:16:55:94:5E:E9:34:97
Authority key identifier: 8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C
Certificate issuer:       /CN=A915FDA7/serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
Certificate serial:       0108
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
Manifest number:          0105
Signing time:             Fri 05 Sep 2025 05:26:40 +0000
Manifest this update:     Fri 05 Sep 2025 05:26:40 +0000
Manifest next update:     Fri 12 Sep 2025 05:26:40 +0000
Files and hashes:         1: iigtHI-Qww1lnm2MC5vkIhwlMZw.crl (hash: RBR4wvZatgFWEHMcceuVIZFL/P+OdBszhct9gjup0Nw=)
                          2: 0EF12B4805E611EF9685F580C4F9AE02.roa (hash: 0tr4K36tCLfkZ4nhSjqeW9dVetaArPPfGAxuclpW9yc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl
                          rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 05:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDA7, serialNumber=8A282D1C8F90C30D659E6D8C0B9BE4221C25319C
        Validity
            Not Before: Sep  5 05:26:40 2025 GMT
            Not After : Sep 12 05:26:40 2025 GMT
        Subject: CN=68ba7490-07e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:5f:d5:88:6a:a2:f7:8c:57:4f:80:f4:29:
                    4f:75:fd:cd:49:09:24:98:93:cc:9a:0f:01:5a:da:
                    e8:a9:19:c6:ec:5c:6d:53:55:91:a9:9c:e9:68:bb:
                    2d:b5:7c:50:4b:87:f0:36:3b:b6:20:9f:af:b1:27:
                    d8:68:90:66:22:50:8f:6f:96:09:ea:83:e3:da:00:
                    c4:7a:8e:4b:a5:55:55:33:53:3d:36:b8:f0:1f:2b:
                    36:63:8d:ed:a5:db:43:a2:5a:4a:a1:d3:49:e8:d1:
                    c1:91:26:b1:d4:4a:70:32:34:a5:71:c0:12:37:21:
                    79:01:62:3b:6c:2b:bc:d0:9d:a7:ef:96:f6:8c:46:
                    9d:fa:6a:24:1a:d2:a9:88:40:d4:e6:05:0a:63:37:
                    c9:29:3a:03:ab:75:f0:3b:a1:50:f8:f2:3a:28:17:
                    47:7d:24:59:0c:a5:65:b1:0c:3b:1c:19:84:8e:7f:
                    ac:0c:bb:8f:b6:ea:47:f6:25:42:68:bd:af:e2:df:
                    90:2e:6a:b2:b9:06:da:b6:4a:a1:b1:33:ed:62:dc:
                    8f:57:57:5d:c4:3c:1d:c3:4f:ec:1d:99:e9:87:5f:
                    ae:c9:a4:9b:d7:2e:77:6a:a3:c4:42:65:9d:7b:96:
                    eb:b2:ed:3d:da:2a:64:81:2a:19:df:fd:83:64:73:
                    bb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D4:12:9D:A4:B7:EC:40:66:60:6C:C0:94:16:55:94:5E:E9:34:97
            X509v3 Authority Key Identifier:
                keyid:8A:28:2D:1C:8F:90:C3:0D:65:9E:6D:8C:0B:9B:E4:22:1C:25:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iigtHI-Qww1lnm2MC5vkIhwlMZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDA7/45BCFC30FD2911EEA629AE62C4F9AE02/iigtHI-Qww1lnm2MC5vkIhwlMZw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:45:9b:e0:2f:31:f7:15:75:fb:ea:12:f5:1c:6d:f7:f3:30:
         38:46:42:b1:c8:06:8e:7c:67:61:16:27:79:e9:03:a2:44:e3:
         34:12:f1:6d:be:d3:85:22:02:6c:c9:90:5c:d8:f7:d3:29:23:
         11:58:78:83:b4:8e:40:d8:d3:08:e5:ec:8e:db:9c:3a:8b:c7:
         6f:f4:bb:32:8f:57:c2:b9:c6:0d:e8:08:fb:71:fb:f1:9e:7b:
         00:e4:e2:12:6a:95:91:af:3a:78:79:d7:42:14:d6:fe:4f:42:
         cc:08:af:46:50:c8:ba:2b:67:51:5e:fa:0e:a9:df:e4:53:01:
         b3:b5:d8:b0:69:72:2a:a7:c2:72:7b:81:44:39:ed:ab:6d:4a:
         3a:83:e1:ff:47:d1:ad:3f:61:81:96:42:e2:d8:ec:32:c5:26:
         ab:6b:f4:ba:96:dd:dd:65:72:a4:46:b4:e5:fc:b5:89:d1:64:
         18:e8:4a:3a:e2:35:c6:d1:18:e7:39:e1:29:64:de:8d:55:01:
         5a:fa:34:eb:4c:d9:59:de:14:c4:71:ad:a8:63:0b:5f:1f:f8:
         fe:43:ac:08:0a:9f:86:01:45:00:79:f0:f3:8f:ca:a3:cc:3c:
         0d:2f:29:95:a2:67:6f:14:60:f0:89:2a:be:66:d5:47:49:b1:
         0d:91:37:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUZEQTcxMTAvBgNVBAUTKDhBMjgyRDFDOEY5MEMzMEQ2NTlFNkQ4QzBCOUJFNDIy
MUMyNTMxOUMwHhcNMjUwOTA1MDUyNjQwWhcNMjUwOTEyMDUyNjQwWjAYMRYwFAYD
VQQDEw02OGJhNzQ5MC0wN2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtpBf1YhqoveMV0+A9ClPdf3NSQkkmJPMmg8BWtroqRnG7FxtU1WRqZzpaLst
tXxQS4fwNju2IJ+vsSfYaJBmIlCPb5YJ6oPj2gDEeo5LpVVVM1M9NrjwHys2Y43t
pdtDolpKodNJ6NHBkSax1EpwMjSlccASNyF5AWI7bCu80J2n75b2jEad+mokGtKp
iEDU5gUKYzfJKToDq3XwO6FQ+PI6KBdHfSRZDKVlsQw7HBmEjn+sDLuPtupH9iVC
aL2v4t+QLmqyuQbatkqhsTPtYtyPV1ddxDwdw0/sHZnph1+uyaSb1y53aqPEQmWd
e5brsu092ipkgSoZ3/2DZHO7ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCXUEp2k
t+xAZmBswJQWVZRe6TSXMB8GA1UdIwQYMBaAFIooLRyPkMMNZZ5tjAub5CIcJTGc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RkRBNy80NUJDRkMzMEZE
MjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3MWxubTJNQzV2a0lod2xN
WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lpZ3RISS1Rd3cxbG5tMk1DNXZrSWh3bE1ady5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RkRBNy80NUJDRkMzMEZEMjkxMUVFQTYyOUFFNjJDNEY5QUUwMi9paWd0SEktUXd3
MWxubTJNQzV2a0lod2xNWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAdRZvgLzH3FXX76hL1HG338zA4RkKxyAaOfGdhFid56QOiROM0EvFt
vtOFIgJsyZBc2PfTKSMRWHiDtI5A2NMI5eyO25w6i8dv9Lsyj1fCucYN6Aj7cfvx
nnsA5OISapWRrzp4eddCFNb+T0LMCK9GUMi6K2dRXvoOqd/kUwGztdiwaXIqp8Jy
e4FEOe2rbUo6g+H/R9GtP2GBlkLi2OwyxSara/S6lt3dZXKkRrTl/LWJ0WQY6Eo6
4jXG0RjnOeEpZN6NVQFa+jTrTNlZ3hTEca2oYwtfH/j+Q6wICp+GAUUAefDzj8qj
zDwNLymVomdvFGDwiSq+ZtVHSbENkTc7
-----END CERTIFICATE-----
Generated at Sat Sep 6 21:10:56 2025 by rpki-client