Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
File:                     jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft (raw, json)
Hash identifier:          Z2IcKw+rYi3/5HvMDXwBhMCrRZWE+vXI8ipc+KxNReE=
Subject key identifier:   BE:00:6E:9D:F9:82:B1:A3:79:87:30:03:7F:AC:59:FE:E1:08:57:F0
Authority key identifier: 8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC
Certificate issuer:       /CN=A918DF0C/serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
Certificate serial:       07B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
Manifest number:          07AB
Signing time:             Tue 16 Sep 2025 21:37:46 +0000
Manifest this update:     Tue 16 Sep 2025 21:37:45 +0000
Manifest next update:     Tue 23 Sep 2025 21:37:45 +0000
Files and hashes:         1: jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl (hash: lCZNJ5yN9yTxziPaPYG4yPdJWImi91nhh7hSfapJxHw=)
                          2: 181D7270184711EBAD14343FC4F9AE02.roa (hash: 5QwGgc3JqdXZSTvBXI4oSH3gmsCO0bHwVogWGbZDobI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl
                          rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Sep 2025 21:37:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1970 (0x7b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DF0C, serialNumber=8E1B718686417848D9D3E62263C6E0D304BD37EC
        Validity
            Not Before: Sep 16 21:37:45 2025 GMT
            Not After : Sep 23 21:37:45 2025 GMT
        Subject: CN=68c9d8aa-81a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:35:98:81:a2:b9:9d:7b:b8:df:64:05:8f:e0:
                    8b:6c:62:4f:c0:2f:72:72:ac:46:16:30:6d:a7:64:
                    ff:9c:d1:7f:40:14:29:0b:b1:8d:79:89:ac:d4:1a:
                    29:4f:ea:09:59:50:76:64:b2:f5:c7:75:94:80:72:
                    0d:e8:36:94:8e:96:9b:41:e4:0f:68:70:69:6e:a5:
                    4a:cc:14:b2:67:c6:90:7e:4b:bc:8c:75:d9:53:c9:
                    e0:42:b7:41:d5:9a:f7:c5:31:db:d0:3a:e3:7f:0c:
                    72:db:13:4d:fc:95:76:08:e3:29:11:7e:ec:ec:62:
                    d2:f2:9f:b8:7c:51:7e:28:57:fa:61:be:ab:60:fa:
                    60:87:32:4f:63:c0:3e:91:63:61:6e:fe:ee:fb:29:
                    47:65:27:fe:f8:ef:ca:e1:2f:e5:ac:ab:46:6e:af:
                    53:03:ef:21:87:b7:69:a0:6c:33:f0:16:10:59:77:
                    e7:fc:4a:9e:89:d2:d4:54:ad:e6:c8:3d:7f:01:8e:
                    02:c1:c9:de:2b:2d:a0:83:71:65:97:ae:6f:19:7c:
                    94:34:d0:90:7f:b5:98:f3:16:5e:2c:f4:f7:78:eb:
                    01:96:0b:eb:55:4f:50:49:48:1a:0c:f1:f5:48:f0:
                    75:34:9a:e9:6a:81:ec:64:93:a6:15:c2:34:9f:0b:
                    c7:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:00:6E:9D:F9:82:B1:A3:79:87:30:03:7F:AC:59:FE:E1:08:57:F0
            X509v3 Authority Key Identifier:
                keyid:8E:1B:71:86:86:41:78:48:D9:D3:E6:22:63:C6:E0:D3:04:BD:37:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DF0C/5B190E30184311EBB3AA713AC4F9AE02/jhtxhoZBeEjZ0-YiY8bg0wS9N-w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:ca:48:01:d4:9f:20:39:bd:17:3f:5a:a1:90:bd:cf:bf:18:
         00:c4:66:64:b6:9a:c9:7b:a7:d0:2d:60:97:37:40:4d:4f:09:
         d8:98:57:8a:18:06:9e:4f:be:38:8d:2a:68:88:60:eb:03:74:
         f2:cf:51:be:9e:a4:6b:82:f6:f9:9a:32:c6:95:68:29:11:cc:
         e9:f9:04:71:7d:3f:df:64:2f:83:16:1b:51:fd:22:1a:5d:f3:
         f5:20:7d:c2:4e:7d:fe:63:30:0a:48:b7:7f:c0:c6:4f:9a:60:
         a4:2f:b1:72:43:cb:2c:5e:e5:f2:f2:9e:b0:56:d3:5f:a1:83:
         6a:b8:91:54:d8:e8:a5:18:e9:d4:f5:60:31:e2:9e:dd:76:dd:
         57:36:81:af:6a:0e:94:16:73:e8:a7:e9:e7:04:6b:2a:80:13:
         58:d5:63:78:ff:c4:de:c5:01:5a:18:0d:da:eb:e9:0b:2f:19:
         a7:88:a9:b8:3c:ac:66:f3:79:4a:be:a5:10:3e:2e:54:82:4b:
         66:50:59:60:82:49:67:19:06:0d:ad:2c:91:ad:74:fa:59:b7:
         c1:74:6d:1d:5e:87:ab:fc:78:1e:f3:71:ae:30:d9:0d:56:31:
         9d:d8:e0:cb:a8:6d:ee:d9:5d:78:da:de:05:8b:61:1c:b2:d7:
         cb:0e:a2:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OERGMEMxMTAvBgNVBAUTKDhFMUI3MTg2ODY0MTc4NDhEOUQzRTYyMjYzQzZFMEQz
MDRCRDM3RUMwHhcNMjUwOTE2MjEzNzQ1WhcNMjUwOTIzMjEzNzQ1WjAYMRYwFAYD
VQQDEw02OGM5ZDhhYS04MWEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvjWYgaK5nXu432QFj+CLbGJPwC9ycqxGFjBtp2T/nNF/QBQpC7GNeYms1Bop
T+oJWVB2ZLL1x3WUgHIN6DaUjpabQeQPaHBpbqVKzBSyZ8aQfku8jHXZU8ngQrdB
1Zr3xTHb0Drjfwxy2xNN/JV2COMpEX7s7GLS8p+4fFF+KFf6Yb6rYPpghzJPY8A+
kWNhbv7u+ylHZSf++O/K4S/lrKtGbq9TA+8hh7dpoGwz8BYQWXfn/EqeidLUVK3m
yD1/AY4CwcneKy2gg3Fll65vGXyUNNCQf7WY8xZeLPT3eOsBlgvrVU9QSUgaDPH1
SPB1NJrpaoHsZJOmFcI0nwvHgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL4Abp35
grGjeYcwA3+sWf7hCFfwMB8GA1UdIwQYMBaAFI4bcYaGQXhI2dPmImPG4NMEvTfs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REYwQy81QjE5MEUzMDE4
NDMxMUVCQjNBQTcxM0FDNEY5QUUwMi9qaHR4aG9aQmVFalowLVlpWThiZzB3UzlO
LXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2podHhob1pCZUVqWjAtWWlZOGJnMHdTOU4tdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
REYwQy81QjE5MEUzMDE4NDMxMUVCQjNBQTcxM0FDNEY5QUUwMi9qaHR4aG9aQmVF
alowLVlpWThiZzB3UzlOLXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA5ykgB1J8gOb0XP1qhkL3PvxgAxGZktprJe6fQLWCXN0BNTwnYmFeK
GAaeT744jSpoiGDrA3Tyz1G+nqRrgvb5mjLGlWgpEczp+QRxfT/fZC+DFhtR/SIa
XfP1IH3CTn3+YzAKSLd/wMZPmmCkL7FyQ8ssXuXy8p6wVtNfoYNquJFU2OilGOnU
9WAx4p7ddt1XNoGvag6UFnPop+nnBGsqgBNY1WN4/8TexQFaGA3a6+kLLxmniKm4
PKxm83lKvqUQPi5UgktmUFlggklnGQYNrSyRrXT6WbfBdG0dXoer/Hge83GuMNkN
VjGd2ODLqG3u2V142t4Fi2EcstfLDqIb
-----END CERTIFICATE-----
Generated at Thu Sep 18 22:35:55 2025 by rpki-client