Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
File:                     G0PzVWVtEI4w0YQ03rV5PPagGjA.mft (raw, json)
Hash identifier:          10pOK+1NgYcjOMMIwMRw/7xIauGZoUcn85MauDjwJH0=
Subject key identifier:   86:D4:CD:BC:74:72:12:BB:F3:76:A7:D4:0E:28:C2:C5:BC:AF:BC:6F
Authority key identifier: 1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30
Certificate issuer:       /CN=A916B0EA/serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
Certificate serial:       0C60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
Manifest number:          1496
Signing time:             Wed 20 Aug 2025 18:37:56 +0000
Manifest this update:     Wed 20 Aug 2025 18:37:56 +0000
Manifest next update:     Wed 27 Aug 2025 18:37:56 +0000
Files and hashes:         1: G0PzVWVtEI4w0YQ03rV5PPagGjA.crl (hash: VJ/xqVLkz5l5CJ63hHlc05IrWwf/sSw2O1kPUrThl2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl
                          rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Aug 2025 18:37:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3168 (0xc60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B0EA, serialNumber=1B43F355656D108E30D18434DEB5793CF6A01A30
        Validity
            Not Before: Aug 20 18:37:56 2025 GMT
            Not After : Aug 27 18:37:56 2025 GMT
        Subject: CN=68a61604-b2f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3a:fe:a1:b9:41:a6:ef:c1:84:8d:47:c4:aa:
                    2d:35:7b:6d:a7:d9:a5:73:44:c1:a8:43:1e:4d:76:
                    35:eb:5f:e4:48:d7:bc:c2:7c:26:5c:79:c6:a2:ff:
                    2d:63:0c:ae:28:16:50:59:96:4f:2b:1a:9e:4a:96:
                    2f:64:a4:a4:14:0d:3e:70:c3:39:6c:32:98:d4:69:
                    f5:1d:8f:ad:06:b2:a1:14:1a:7c:56:c2:b0:2f:2f:
                    8a:d0:5a:0d:f2:20:13:6d:8e:ec:97:74:5f:7d:ac:
                    95:3b:7e:a9:13:9a:89:0a:54:cd:7d:f2:86:33:19:
                    75:d0:19:27:91:45:05:47:9d:2d:a7:f9:50:ea:fc:
                    3c:ad:8e:28:8c:c9:33:e4:a6:c1:1a:b4:86:40:3f:
                    c4:bb:33:66:da:ec:bc:ff:c1:ff:0e:05:d5:db:f0:
                    01:69:fe:80:3f:58:d1:dd:2b:47:ef:37:15:43:07:
                    e4:cc:28:16:6e:c1:f5:4c:c6:d2:d9:4d:b4:23:11:
                    c2:d1:b4:52:8a:7a:00:78:d8:07:74:18:54:01:a1:
                    3d:a2:74:f1:be:f6:72:c6:90:3e:e5:de:cf:90:38:
                    d8:c5:87:90:d1:81:d9:47:38:df:88:8b:5d:26:d3:
                    8a:c6:5f:3c:f0:8c:1f:d6:a9:fb:d5:44:f2:58:cc:
                    52:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D4:CD:BC:74:72:12:BB:F3:76:A7:D4:0E:28:C2:C5:BC:AF:BC:6F
            X509v3 Authority Key Identifier:
                keyid:1B:43:F3:55:65:6D:10:8E:30:D1:84:34:DE:B5:79:3C:F6:A0:1A:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0PzVWVtEI4w0YQ03rV5PPagGjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B0EA/4D8E49B00B7411EAA584001CC4F9AE02/G0PzVWVtEI4w0YQ03rV5PPagGjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:a6:d9:df:a1:af:68:ef:be:f4:da:31:4c:aa:45:fb:7c:d5:
         fc:97:70:e8:44:04:6f:17:4f:49:18:af:af:19:85:db:2f:71:
         d1:26:cc:e5:81:96:91:ff:41:7b:0a:e2:08:2c:1e:a3:4a:1d:
         7b:c0:57:81:bc:d7:16:df:98:40:2d:a0:30:af:e8:0d:0b:4f:
         19:99:e2:2f:55:7c:d9:d5:23:07:7d:0c:c5:0d:b5:83:7a:0f:
         67:7e:d2:8b:9d:16:d3:03:5b:5d:b8:8f:8b:55:7e:8b:dd:c0:
         97:3c:73:19:a0:cf:22:52:a8:35:27:2e:40:02:22:e6:e9:85:
         59:a8:80:32:80:db:c4:90:d4:2e:37:ce:61:d1:1f:a1:2d:80:
         c2:0f:24:55:65:d7:b2:86:7e:27:48:b2:da:b2:46:83:a0:e5:
         be:9b:a8:87:a8:c9:1d:9a:9c:ce:1e:9a:ec:ef:d1:72:bb:38:
         84:0b:ad:62:de:1b:c2:36:9d:f9:88:76:8d:02:55:35:ef:8c:
         18:e4:97:67:b6:13:45:c1:69:9c:68:55:6b:d2:62:62:3b:df:
         10:1c:c2:23:6d:aa:2f:c9:6e:d9:bd:ca:28:64:6d:91:bb:cf:
         a8:8b:51:05:22:f2:cd:d8:14:85:a8:74:89:44:ef:e8:1b:a8:
         8e:b6:d1:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkIwRUExMTAvBgNVBAUTKDFCNDNGMzU1NjU2RDEwOEUzMEQxODQzNERFQjU3OTND
RjZBMDFBMzAwHhcNMjUwODIwMTgzNzU2WhcNMjUwODI3MTgzNzU2WjAYMRYwFAYD
VQQDEw02OGE2MTYwNC1iMmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmjr+oblBpu/BhI1HxKotNXttp9mlc0TBqEMeTXY161/kSNe8wnwmXHnGov8t
YwyuKBZQWZZPKxqeSpYvZKSkFA0+cMM5bDKY1Gn1HY+tBrKhFBp8VsKwLy+K0FoN
8iATbY7sl3RffayVO36pE5qJClTNffKGMxl10BknkUUFR50tp/lQ6vw8rY4ojMkz
5KbBGrSGQD/EuzNm2uy8/8H/DgXV2/ABaf6AP1jR3StH7zcVQwfkzCgWbsH1TMbS
2U20IxHC0bRSinoAeNgHdBhUAaE9onTxvvZyxpA+5d7PkDjYxYeQ0YHZRzjfiItd
JtOKxl888Iwf1qn71UTyWMxSEwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIbUzbx0
chK783an1A4owsW8r7xvMB8GA1UdIwQYMBaAFBtD81VlbRCOMNGENN61eTz2oBow
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QjBFQS80RDhFNDlCMDBC
NzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJNHcwWVEwM3JWNVBQYWdH
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0cwUHpWV1Z0RUk0dzBZUTAzclY1UFBhZ0dqQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QjBFQS80RDhFNDlCMDBCNzQxMUVBQTU4NDAwMUNDNEY5QUUwMi9HMFB6VldWdEVJ
NHcwWVEwM3JWNVBQYWdHakEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBoptnfoa9o77702jFMqkX7fNX8l3DoRARvF09JGK+vGYXbL3HRJszl
gZaR/0F7CuIILB6jSh17wFeBvNcW35hALaAwr+gNC08ZmeIvVXzZ1SMHfQzFDbWD
eg9nftKLnRbTA1tduI+LVX6L3cCXPHMZoM8iUqg1Jy5AAiLm6YVZqIAygNvEkNQu
N85h0R+hLYDCDyRVZdeyhn4nSLLaskaDoOW+m6iHqMkdmpzOHprs79FyuziEC61i
3hvCNp35iHaNAlU174wY5JdnthNFwWmcaFVr0mJiO98QHMIjbaovyW7ZvcooZG2R
u8+oi1EFIvLN2BSFqHSJRO/oG6iOttGg
-----END CERTIFICATE-----
Generated at Fri Aug 22 16:36:09 2025 by rpki-client