Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
File:                     f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft (raw, json)
Hash identifier:          2gZyCmLdpKem4fdLxMD7tw7CXVIh+G9chDYug9FhRaE=
Subject key identifier:   59:29:C7:13:C9:0B:04:D6:F4:D6:0C:27:8F:6B:D0:C1:56:D1:2C:7F
Authority key identifier: 7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D
Certificate issuer:       /CN=A916DA3F/serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
Certificate serial:       062C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
Manifest number:          061F
Signing time:             Sat 06 Sep 2025 23:07:44 +0000
Manifest this update:     Sat 06 Sep 2025 23:07:44 +0000
Manifest next update:     Sat 13 Sep 2025 23:07:44 +0000
Files and hashes:         1: f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl (hash: ICZo342Z+E4kHDIPPAso7W/HBeHZkkO++0KE4f82xIU=)
                          2: 515B1CD254EB11F0B04DBD37C4F9AE02.roa (hash: yctT4YUUP20tQCvJN7CWg3MrC6O8Tuq96ZLx+s4UkRo=)
                          3: 95B7B784C1E611EF91316938C4F9AE02.roa (hash: ufcIsYDdxZ7JHQere7GH/LJcOYs+a2XI1MSL+ZvwbhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl
                          rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 23:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580 (0x62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DA3F, serialNumber=7FF3EA9AC083251F5D30B01D056BCBCDE1A7EE2D
        Validity
            Not Before: Sep  6 23:07:44 2025 GMT
            Not After : Sep 13 23:07:44 2025 GMT
        Subject: CN=68bcbec0-d3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4d:fc:59:1a:10:8e:78:a8:4c:02:2c:b2:38:
                    79:76:e6:b1:10:a0:17:e2:66:09:47:dd:0d:98:9f:
                    8b:38:c4:ce:1b:fc:00:7e:55:a9:11:1a:9d:0e:25:
                    c7:01:10:0a:d7:6b:86:d7:3e:50:c9:9a:ba:43:a1:
                    19:bd:6d:09:19:20:e3:ed:fc:e8:4a:1b:de:68:93:
                    69:96:d3:89:ac:53:c4:65:28:17:0e:55:60:73:6a:
                    f6:94:2d:43:ac:08:42:96:47:39:a0:99:0b:8d:6e:
                    55:50:2c:2e:e7:74:36:57:a4:b0:dd:52:c8:47:5a:
                    e7:98:80:21:bd:f8:c2:f6:5d:e3:27:33:75:c6:72:
                    49:b5:c8:64:fd:ff:7a:0a:b5:ca:e3:d2:f0:55:5a:
                    4c:2a:35:ff:41:41:dc:ec:ab:20:4b:13:a2:b9:a1:
                    3d:4c:2c:b2:a8:33:ab:b4:4a:60:1b:a6:73:59:13:
                    7f:47:78:60:12:e5:af:45:9d:07:2d:25:dc:98:e3:
                    fa:a5:d7:01:86:67:7a:fe:29:e6:97:98:00:3d:c2:
                    f2:7c:6a:a7:e3:47:95:ac:c1:0b:49:65:2d:cc:80:
                    dd:1b:41:69:dc:6e:be:bf:2a:05:f4:7a:fc:b3:54:
                    ea:d7:cd:7b:c4:f0:fa:3f:ab:3f:a2:aa:3d:58:ba:
                    cb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:29:C7:13:C9:0B:04:D6:F4:D6:0C:27:8F:6B:D0:C1:56:D1:2C:7F
            X509v3 Authority Key Identifier:
                keyid:7F:F3:EA:9A:C0:83:25:1F:5D:30:B0:1D:05:6B:CB:CD:E1:A7:EE:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_PqmsCDJR9dMLAdBWvLzeGn7i0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DA3F/04FF89D8B6CD11EB8E108026C4F9AE02/f_PqmsCDJR9dMLAdBWvLzeGn7i0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:d8:80:0a:e5:d1:a9:49:c6:a3:25:1f:12:73:54:af:dc:d6:
         24:52:d3:6b:6a:11:fc:d4:43:ca:a0:c0:61:a6:eb:f9:48:70:
         b9:9e:3d:e5:01:ac:32:fa:5f:c7:09:ca:2c:48:16:02:ea:7f:
         6f:ac:e1:8f:04:78:da:ab:00:ba:04:e4:85:8f:22:1d:2e:02:
         a9:c3:07:ba:9b:fb:97:da:01:12:6e:e6:86:c9:a1:da:86:93:
         39:5d:b0:57:53:0b:81:0b:a2:e7:35:fa:47:8b:d9:b0:aa:31:
         4b:bc:94:1f:b0:08:ab:47:1b:0b:36:a3:d7:0e:90:c6:e8:dd:
         95:d8:9c:4c:61:86:3c:d6:c7:f9:23:98:dd:28:e2:93:1f:a9:
         58:05:83:5a:e8:20:6b:8e:d2:2a:ec:e9:d0:bd:b3:85:dc:7d:
         81:a9:8b:0a:8d:80:c5:5a:92:bc:b6:e8:a4:f5:cc:0d:c2:06:
         a9:9b:72:30:67:e1:93:47:5d:19:ec:04:1e:67:6e:2c:e1:3e:
         fb:c2:3a:6f:b3:39:b6:9d:5c:74:1e:d9:7f:90:db:49:6b:85:
         5a:12:aa:90:c9:32:c4:f9:a4:bc:94:9f:b9:81:b0:67:59:fa:
         36:fd:5e:e2:b4:64:fd:fe:76:c0:c7:a4:04:b5:bc:50:91:47:
         35:38:6b:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkRBM0YxMTAvBgNVBAUTKDdGRjNFQTlBQzA4MzI1MUY1RDMwQjAxRDA1NkJDQkNE
RTFBN0VFMkQwHhcNMjUwOTA2MjMwNzQ0WhcNMjUwOTEzMjMwNzQ0WjAYMRYwFAYD
VQQDEw02OGJjYmVjMC1kM2EwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzE38WRoQjnioTAIssjh5duaxEKAX4mYJR90NmJ+LOMTOG/wAflWpERqdDiXH
ARAK12uG1z5QyZq6Q6EZvW0JGSDj7fzoShveaJNpltOJrFPEZSgXDlVgc2r2lC1D
rAhClkc5oJkLjW5VUCwu53Q2V6Sw3VLIR1rnmIAhvfjC9l3jJzN1xnJJtchk/f96
CrXK49LwVVpMKjX/QUHc7KsgSxOiuaE9TCyyqDOrtEpgG6ZzWRN/R3hgEuWvRZ0H
LSXcmOP6pdcBhmd6/inml5gAPcLyfGqn40eVrMELSWUtzIDdG0Fp3G6+vyoF9Hr8
s1Tq1817xPD6P6s/oqo9WLrLQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFkpxxPJ
CwTW9NYMJ49r0MFW0Sx/MB8GA1UdIwQYMBaAFH/z6prAgyUfXTCwHQVry83hp+4t
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2REEzRi8wNEZGODlEOEI2
Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpSOWRNTEFkQld2THplR243
aTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZfUHFtc0NESlI5ZE1MQWRCV3ZMemVHbjdpMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
REEzRi8wNEZGODlEOEI2Q0QxMUVCOEUxMDgwMjZDNEY5QUUwMi9mX1BxbXNDREpS
OWRNTEFkQld2THplR243aTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBL2IAK5dGpScajJR8Sc1Sv3NYkUtNrahH81EPKoMBhpuv5SHC5nj3l
Aawy+l/HCcosSBYC6n9vrOGPBHjaqwC6BOSFjyIdLgKpwwe6m/uX2gESbuaGyaHa
hpM5XbBXUwuBC6LnNfpHi9mwqjFLvJQfsAirRxsLNqPXDpDG6N2V2JxMYYY81sf5
I5jdKOKTH6lYBYNa6CBrjtIq7OnQvbOF3H2BqYsKjYDFWpK8tuik9cwNwgapm3Iw
Z+GTR10Z7AQeZ24s4T77wjpvszm2nVx0Htl/kNtJa4VaEqqQyTLE+aS8lJ+5gbBn
Wfo2/V7itGT9/nbAx6QEtbxQkUc1OGtW
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:38:04 2025 by rpki-client