Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
File:                     jJlooJQA8yL0lZjidRH84bj4i_U.mft (raw, json)
Hash identifier:          TZGr9u6eXZkANhH7eW0ic8nRMlzfKfvpJZ0lDCVpw9M=
Subject key identifier:   BD:A6:51:5E:10:11:49:D5:B2:6E:80:35:CC:8F:09:8E:D6:FD:DD:2F
Authority key identifier: 8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5
Certificate issuer:       /CN=A917C4E2/serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
Certificate serial:       07BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
Manifest number:          07B3
Signing time:             Mon 08 Sep 2025 21:19:42 +0000
Manifest this update:     Mon 08 Sep 2025 21:19:42 +0000
Manifest next update:     Mon 15 Sep 2025 21:19:42 +0000
Files and hashes:         1: jJlooJQA8yL0lZjidRH84bj4i_U.crl (hash: E9Mkzb+fSxGzM697tequX3I3+bRH0ZmN7UWcVfT74ik=)
                          2: A7DE2E7820E311F0993B6882C4F9AE02.roa (hash: no1v0xZMt6mM9ecpNtFecxklCRLhU3BMofUDij88ZQc=)
                          3: AB9A3F46135211EB83A5A869C4F9AE02.roa (hash: yvnjwOTgzgeBoIFWnP+qrRUckU6QqKEjOZnd2PgnU28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl
                          rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 21:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1979 (0x7bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C4E2, serialNumber=8C9968A09400F322F49598E27511FCE1B8F88BF5
        Validity
            Not Before: Sep  8 21:19:42 2025 GMT
            Not After : Sep 15 21:19:42 2025 GMT
        Subject: CN=68bf486e-05e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:31:cf:47:b5:6f:77:8c:c9:01:d9:67:28:
                    70:55:38:b2:40:c5:02:b1:c1:d7:e7:7c:c0:fa:3d:
                    37:39:35:fc:9e:5f:bc:81:46:2f:89:39:e1:24:19:
                    82:6d:b8:86:dd:8d:32:42:58:ce:2a:4b:9b:8b:5d:
                    ca:bb:72:0b:64:65:a2:30:d9:1b:6b:5c:35:d1:11:
                    8c:05:8c:e3:61:f8:8d:3d:34:22:d3:cf:a4:3c:e0:
                    2f:d1:c3:b7:e1:7b:0a:c7:e0:e1:6e:a2:d7:01:b2:
                    2b:38:93:bb:e1:e6:ba:15:0e:18:4f:4e:cd:ce:67:
                    3e:45:2c:08:94:ef:24:c7:e9:36:40:ca:74:fc:d7:
                    07:26:be:23:46:85:0b:34:2f:23:53:6e:46:49:8c:
                    ac:5c:09:71:27:9b:c4:2b:68:56:ce:46:87:f2:76:
                    76:41:c0:90:fa:16:14:cb:2e:57:49:a3:90:97:f5:
                    e9:1d:9a:c2:a4:7f:17:d4:10:10:91:45:6a:1c:9b:
                    ca:bc:3b:a0:54:12:b5:d6:86:94:ac:f5:a4:dc:d8:
                    d6:02:2f:a5:eb:31:50:1d:b4:7f:2d:cb:fc:10:95:
                    e8:ad:0a:da:34:7d:fa:ba:bc:f3:41:18:a5:db:3a:
                    12:b1:42:e7:44:2f:d6:51:68:58:fd:a7:e3:e6:bd:
                    95:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A6:51:5E:10:11:49:D5:B2:6E:80:35:CC:8F:09:8E:D6:FD:DD:2F
            X509v3 Authority Key Identifier:
                keyid:8C:99:68:A0:94:00:F3:22:F4:95:98:E2:75:11:FC:E1:B8:F8:8B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jJlooJQA8yL0lZjidRH84bj4i_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C4E2/9879242612A911EBB0B65F7AC4F9AE02/jJlooJQA8yL0lZjidRH84bj4i_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:86:40:a3:07:a6:b4:fb:13:f5:17:25:1e:45:8b:25:75:d9:
         af:bc:c6:bf:2e:a4:e8:2a:7d:e8:c4:be:31:ca:5f:8c:a7:0c:
         5e:3a:8d:3a:f7:93:d6:d3:f7:00:0d:f5:13:25:dc:f8:fc:06:
         c2:19:b8:ae:72:33:4d:a2:7b:36:73:b9:e9:08:86:35:e9:42:
         a5:8e:7b:70:bf:04:f0:05:84:69:19:bb:d7:09:69:45:9c:76:
         e0:46:ce:f6:d0:13:6c:fb:8a:bd:f9:90:ba:2e:a2:b7:ee:25:
         9b:2c:62:09:1a:02:77:14:eb:c3:2c:d8:73:8c:75:b7:1a:a3:
         41:41:dd:40:4b:ce:b1:24:48:8a:1c:ff:e3:f7:cf:ab:63:c4:
         4d:f6:22:ee:3a:b7:5d:ed:2c:ae:40:0a:71:e6:68:b4:8c:bb:
         89:51:71:4e:a5:c7:6a:e7:38:7e:c8:2e:40:37:81:b0:3c:10:
         f0:1b:71:cb:8a:fe:95:fc:74:13:27:68:36:ff:1f:e4:8b:de:
         71:5b:f8:5b:57:e8:9c:56:13:21:38:30:5b:8e:72:3c:bb:05:
         46:5c:60:b4:a4:1b:da:3e:b4:06:65:66:dd:56:d1:01:64:42:
         b7:2e:6e:97:a7:98:64:1a:84:6f:3a:8d:5f:23:fa:1a:a0:c0:
         d0:c2:07:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M0RTIxMTAvBgNVBAUTKDhDOTk2OEEwOTQwMEYzMjJGNDk1OThFMjc1MTFGQ0Ux
QjhGODhCRjUwHhcNMjUwOTA4MjExOTQyWhcNMjUwOTE1MjExOTQyWjAYMRYwFAYD
VQQDEw02OGJmNDg2ZS0wNWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqCUxz0e1b3eMyQHZZyhwVTiyQMUCscHX53zA+j03OTX8nl+8gUYviTnhJBmC
bbiG3Y0yQljOKkubi13Ku3ILZGWiMNkba1w10RGMBYzjYfiNPTQi08+kPOAv0cO3
4XsKx+DhbqLXAbIrOJO74ea6FQ4YT07Nzmc+RSwIlO8kx+k2QMp0/NcHJr4jRoUL
NC8jU25GSYysXAlxJ5vEK2hWzkaH8nZ2QcCQ+hYUyy5XSaOQl/XpHZrCpH8X1BAQ
kUVqHJvKvDugVBK11oaUrPWk3NjWAi+l6zFQHbR/Lcv8EJXorQraNH36urzzQRil
2zoSsULnRC/WUWhY/afj5r2VAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2mUV4Q
EUnVsm6ANcyPCY7W/d0vMB8GA1UdIwQYMBaAFIyZaKCUAPMi9JWY4nUR/OG4+Iv1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzRFMi85ODc5MjQyNjEy
QTkxMUVCQjBCNjVGN0FDNEY5QUUwMi9qSmxvb0pRQTh5TDBsWmppZFJIODRiajRp
X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pKbG9vSlFBOHlMMGxaamlkUkg4NGJqNGlfVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzRFMi85ODc5MjQyNjEyQTkxMUVCQjBCNjVGN0FDNEY5QUUwMi9qSmxvb0pRQTh5
TDBsWmppZFJIODRiajRpX1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC1hkCjB6a0+xP1FyUeRYslddmvvMa/LqToKn3oxL4xyl+MpwxeOo06
95PW0/cADfUTJdz4/AbCGbiucjNNons2c7npCIY16UKljntwvwTwBYRpGbvXCWlF
nHbgRs720BNs+4q9+ZC6LqK37iWbLGIJGgJ3FOvDLNhzjHW3GqNBQd1AS86xJEiK
HP/j98+rY8RN9iLuOrdd7SyuQApx5mi0jLuJUXFOpcdq5zh+yC5AN4GwPBDwG3HL
iv6V/HQTJ2g2/x/ki95xW/hbV+icVhMhODBbjnI8uwVGXGC0pBvaPrQGZWbdVtEB
ZEK3Lm6Xp5hkGoRvOo1fI/oaoMDQwgd2
-----END CERTIFICATE-----
Generated at Wed Sep 10 10:42:03 2025 by rpki-client