Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
File:                     L927RfNPJhkzrCt9Z6xz05Op0WQ.mft (raw, json)
Hash identifier:          fsK1BRM8kGCZXfNtWimdAbHvFV66Y1GFfDybWi5Jaww=
Subject key identifier:   E2:EC:21:9D:D8:76:B1:59:3D:BD:25:22:8C:38:89:96:12:6F:77:58
Authority key identifier: 2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64
Certificate issuer:       /CN=A917ECB0/serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
Certificate serial:       0385
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
Manifest number:          0381
Signing time:             Sun 07 Sep 2025 01:14:40 +0000
Manifest this update:     Sun 07 Sep 2025 01:14:39 +0000
Manifest next update:     Sun 14 Sep 2025 01:14:39 +0000
Files and hashes:         1: L927RfNPJhkzrCt9Z6xz05Op0WQ.crl (hash: IvP6CnhofrOc0gl/bm/tGFF7mB5f/4emcHQbc9PGrFQ=)
                          2: 2C7BB8BAB92411EC8E787A55C4F9AE02.roa (hash: +dFNC6bX5H+V6njzLbV2Ca6KkTrT3TtAm0EkKfPs5f0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl
                          rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 01:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901 (0x385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ECB0, serialNumber=2FDDBB45F34F261933AC2B7D67AC73D393A9D164
        Validity
            Not Before: Sep  7 01:14:39 2025 GMT
            Not After : Sep 14 01:14:39 2025 GMT
        Subject: CN=68bcdc7f-3664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:d3:8f:20:56:f2:54:1b:72:82:7c:2a:cc:
                    0d:ee:17:9f:9b:94:5d:98:c5:c3:4d:c5:2a:b6:33:
                    34:06:d1:f8:67:bd:58:20:fd:e7:55:32:ab:ad:18:
                    ec:c9:84:0b:dc:0f:5f:f2:8f:4c:dc:30:22:b5:b0:
                    5b:42:39:02:2c:e6:49:39:34:f0:72:d8:5e:f2:ea:
                    02:d7:e4:28:51:44:70:36:7a:bf:26:e9:37:25:ea:
                    70:9e:23:92:a7:ba:a7:0f:00:db:89:23:06:13:cd:
                    33:ba:4a:67:73:72:be:47:04:a2:cc:4c:ee:d1:9f:
                    9f:73:1a:78:ed:5a:48:3f:bf:6a:86:2c:b3:7c:11:
                    55:50:36:42:8a:d0:b3:94:5e:a4:92:ef:ba:7b:8f:
                    97:1a:f3:6c:fc:e8:f4:9a:e4:2a:59:b2:3e:8f:5d:
                    cb:22:7a:52:7c:22:fd:1e:b9:7c:c5:60:2f:76:bc:
                    9e:4a:43:84:8e:31:62:40:94:32:6b:ae:14:d1:bb:
                    90:45:e6:c1:4b:48:fe:70:ef:07:24:9d:c5:55:01:
                    c4:5a:67:a7:a2:19:d1:dd:8a:06:b0:82:3c:a9:4f:
                    df:e5:6f:4b:54:f3:f1:86:cb:b7:0c:13:dd:d9:98:
                    25:a5:f7:4a:1e:22:44:15:b8:3e:86:01:ee:02:4b:
                    d0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:EC:21:9D:D8:76:B1:59:3D:BD:25:22:8C:38:89:96:12:6F:77:58
            X509v3 Authority Key Identifier:
                keyid:2F:DD:BB:45:F3:4F:26:19:33:AC:2B:7D:67:AC:73:D3:93:A9:D1:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L927RfNPJhkzrCt9Z6xz05Op0WQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ECB0/6186732CB92111ECBDFFF653C4F9AE02/L927RfNPJhkzrCt9Z6xz05Op0WQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cb:6c:1f:e4:c4:7e:e0:0f:dd:00:10:f8:9f:d9:96:24:9f:a7:
         01:59:77:b6:57:62:7f:63:69:cd:67:3a:b9:a0:8c:13:fc:dc:
         94:d3:a6:17:fa:48:16:b4:01:be:16:5c:02:c7:fc:99:3b:b9:
         96:60:98:59:f5:3c:61:2d:73:86:27:bb:fa:dc:cf:7e:65:67:
         eb:a1:1c:7a:e8:f6:b2:63:fe:65:0a:e1:43:05:6c:bf:52:ee:
         19:fd:57:98:18:8d:42:20:63:ca:09:ca:f7:3f:c3:ab:76:35:
         8c:1c:0a:46:12:0e:1b:c2:61:0c:da:7b:11:9f:34:81:8e:cb:
         8e:cd:15:71:81:07:e5:ea:1c:31:67:72:56:5f:09:28:f8:a2:
         7e:c1:7c:1d:af:15:be:fd:07:9d:6e:c4:bf:00:a8:20:50:53:
         c3:8a:8c:64:64:00:7a:60:f1:48:9a:e0:7e:ad:53:7c:d4:85:
         3c:88:fd:d0:6a:c3:5e:85:5a:f6:fb:2b:72:f0:18:27:64:72:
         59:fb:29:85:67:24:2b:60:79:31:8f:66:ca:95:8e:e8:0c:e3:
         7f:02:1a:76:5f:e3:50:cb:3e:bd:94:48:c8:0f:2c:d2:85:c1:
         ce:de:2a:ba:99:8f:51:8b:d9:0e:25:db:97:e8:39:17:45:f4:
         44:04:09:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VDQjAxMTAvBgNVBAUTKDJGRERCQjQ1RjM0RjI2MTkzM0FDMkI3RDY3QUM3M0Qz
OTNBOUQxNjQwHhcNMjUwOTA3MDExNDM5WhcNMjUwOTE0MDExNDM5WjAYMRYwFAYD
VQQDEw02OGJjZGM3Zi0zNjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtdrTjyBW8lQbcoJ8KswN7hefm5RdmMXDTcUqtjM0BtH4Z71YIP3nVTKrrRjs
yYQL3A9f8o9M3DAitbBbQjkCLOZJOTTwcthe8uoC1+QoUURwNnq/Juk3JepwniOS
p7qnDwDbiSMGE80zukpnc3K+RwSizEzu0Z+fcxp47VpIP79qhiyzfBFVUDZCitCz
lF6kku+6e4+XGvNs/Oj0muQqWbI+j13LInpSfCL9Hrl8xWAvdryeSkOEjjFiQJQy
a64U0buQRebBS0j+cO8HJJ3FVQHEWmenohnR3YoGsII8qU/f5W9LVPPxhsu3DBPd
2ZglpfdKHiJEFbg+hgHuAkvQjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOLsIZ3Y
drFZPb0lIow4iZYSb3dYMB8GA1UdIwQYMBaAFC/du0XzTyYZM6wrfWesc9OTqdFk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUNCMC82MTg2NzMyQ0I5
MjExMUVDQkRGRkY2NTNDNEY5QUUwMi9MOTI3UmZOUEpoa3pyQ3Q5WjZ4ejA1T3Aw
V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0w5MjdSZk5QSmhrenJDdDlaNnh6MDVPcDBXUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RUNCMC82MTg2NzMyQ0I5MjExMUVDQkRGRkY2NTNDNEY5QUUwMi9MOTI3UmZOUEpo
a3pyQ3Q5WjZ4ejA1T3AwV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDLbB/kxH7gD90AEPif2ZYkn6cBWXe2V2J/Y2nNZzq5oIwT/NyU06YX
+kgWtAG+FlwCx/yZO7mWYJhZ9TxhLXOGJ7v63M9+ZWfroRx66PayY/5lCuFDBWy/
Uu4Z/VeYGI1CIGPKCcr3P8OrdjWMHApGEg4bwmEM2nsRnzSBjsuOzRVxgQfl6hwx
Z3JWXwko+KJ+wXwdrxW+/QedbsS/AKggUFPDioxkZAB6YPFImuB+rVN81IU8iP3Q
asNehVr2+yty8BgnZHJZ+ymFZyQrYHkxj2bKlY7oDON/Ahp2X+NQyz69lEjIDyzS
hcHO3iq6mY9Ri9kOJduX6DkXRfREBAkI
-----END CERTIFICATE-----
Generated at Mon Sep 8 08:49:40 2025 by rpki-client