Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
File:                     _dkd0w6bH-o7t-Eq73YhZigSmyM.mft (raw, json)
Hash identifier:          6T1JCPeO3rfwUp5MMF8yqwOerjAm0o8uFlhMUZa/vuk=
Subject key identifier:   04:9A:91:51:D2:AA:85:27:E6:47:34:25:25:AA:2C:C5:70:2D:5A:10
Authority key identifier: FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23
Certificate issuer:       /CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
Manifest number:          0135
Signing time:             Thu 21 Aug 2025 04:39:07 +0000
Manifest this update:     Thu 21 Aug 2025 04:39:07 +0000
Manifest next update:     Thu 28 Aug 2025 04:39:07 +0000
Files and hashes:         1: _dkd0w6bH-o7t-Eq73YhZigSmyM.crl (hash: XChEW8Xzg3BvFhAjSe6Fj8nfYjDw+EIVr8RumyLTyRA=)
                          2: DECE1662A87D11EE882D7B6EC4F9AE02.roa (hash: C77jJoshdfxzPcbWVGuVdmC/Yt4X5b0+J8bsZe99ndM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl
                          rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 04:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B86, serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
        Validity
            Not Before: Aug 21 04:39:07 2025 GMT
            Not After : Aug 28 04:39:07 2025 GMT
        Subject: CN=68a6a2eb-e7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:93:1b:61:6f:dc:db:54:4b:1f:bc:00:61:58:
                    75:0c:b3:03:6e:91:f8:da:cc:8f:20:92:5d:9e:36:
                    82:8f:f0:31:e2:61:90:ec:5e:1b:98:1d:12:62:78:
                    7b:c1:ec:37:51:05:72:82:02:30:36:3b:fc:a8:70:
                    9a:34:d6:8e:de:74:26:02:54:a2:61:c0:f1:a6:6e:
                    5a:05:f2:80:f3:1b:a1:c4:2d:22:30:92:5e:33:35:
                    ad:2a:43:38:f0:5e:87:14:7b:f5:ae:fc:52:01:01:
                    d6:b3:25:15:8e:cd:35:3c:e5:9d:89:26:b6:61:0d:
                    ed:45:b8:c0:b4:da:64:ec:33:41:6d:3b:f6:28:8c:
                    d4:59:11:e6:eb:a3:84:ee:eb:48:1f:0d:f6:f7:bb:
                    68:81:1a:79:a8:f8:56:be:e5:d6:da:0e:6b:7f:3f:
                    3f:61:32:39:8e:2d:da:b8:31:d1:a3:37:ea:a0:49:
                    a2:a1:59:07:0c:7c:20:87:40:14:d1:b0:6b:f9:bf:
                    90:5c:ce:43:68:63:b2:6f:40:1d:34:86:10:ba:c0:
                    60:75:06:a8:a0:6a:0a:5a:65:22:a8:46:c5:d5:b0:
                    e5:4e:16:37:a4:91:89:14:bc:57:2d:46:83:42:8b:
                    7d:a0:15:77:5d:f6:37:8f:18:2a:be:34:3c:b2:54:
                    0d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9A:91:51:D2:AA:85:27:E6:47:34:25:25:AA:2C:C5:70:2D:5A:10
            X509v3 Authority Key Identifier:
                keyid:FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e6:b3:3c:88:23:00:11:b3:a9:7f:3a:f0:cf:2b:30:49:2f:
         b4:57:ca:c0:2a:a9:d7:52:cd:6c:78:7b:43:c8:ef:91:31:1f:
         8e:da:32:21:bc:12:d1:79:17:64:99:34:36:47:a0:24:cb:2c:
         aa:18:29:0b:0d:40:b6:cd:af:fe:9c:31:ff:2a:27:d3:50:ff:
         b2:e0:7d:f8:61:1b:d4:5d:2b:14:66:7b:ca:c7:07:8d:62:8b:
         21:64:29:a9:be:5a:c1:b2:3e:3d:e9:fd:68:a2:88:2f:dd:e3:
         55:dc:8c:ae:72:58:54:9d:31:62:15:3f:6b:02:5d:c9:69:e2:
         ea:80:35:e3:53:44:b2:f6:2e:13:74:a5:c9:15:8e:14:97:bc:
         69:d2:ca:ef:d5:11:94:51:0e:b3:ac:ed:4b:ca:6b:e7:d3:96:
         7c:18:31:5f:4c:6d:59:a6:ac:87:8c:13:76:66:2a:24:b2:3c:
         97:98:50:ae:15:77:a5:e1:e3:a5:8d:b6:d1:fe:0c:77:5d:51:
         0c:41:d2:28:bd:ad:46:4f:8c:c7:6d:3a:12:e9:f6:db:28:7e:
         44:7e:48:0d:17:a9:86:86:20:59:bc:64:67:2b:c1:dd:5c:28:
         a3:e6:c9:76:94:3e:18:2a:60:c6:60:2c:0f:b5:27:d5:a8:c9:
         52:9a:4f:54
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJCODYxMTAvBgNVBAUTKEZERDkxREQzMEU5QjFGRUEzQkI3RTEyQUVGNzYyMTY2
MjgxMjlCMjMwHhcNMjUwODIxMDQzOTA3WhcNMjUwODI4MDQzOTA3WjAYMRYwFAYD
VQQDEw02OGE2YTJlYi1lN2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnpMbYW/c21RLH7wAYVh1DLMDbpH42syPIJJdnjaCj/Ax4mGQ7F4bmB0SYnh7
wew3UQVyggIwNjv8qHCaNNaO3nQmAlSiYcDxpm5aBfKA8xuhxC0iMJJeMzWtKkM4
8F6HFHv1rvxSAQHWsyUVjs01POWdiSa2YQ3tRbjAtNpk7DNBbTv2KIzUWRHm66OE
7utIHw3297togRp5qPhWvuXW2g5rfz8/YTI5ji3auDHRozfqoEmioVkHDHwgh0AU
0bBr+b+QXM5DaGOyb0AdNIYQusBgdQaooGoKWmUiqEbF1bDlThY3pJGJFLxXLUaD
Qot9oBV3XfY3jxgqvjQ8slQNdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFASakVHS
qoUn5kc0JSWqLMVwLVoQMB8GA1UdIwQYMBaAFP3ZHdMOmx/qO7fhKu92IWYoEpsj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkI4Ni84NkU5NzdDQUE4
N0QxMUVFOUZBNTVBNkRDNEY5QUUwMi9fZGtkMHc2Ykgtbzd0LUVxNzNZaFppZ1Nt
eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19ka2QwdzZiSC1vN3QtRXE3M1loWmlnU215TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkI4Ni84NkU5NzdDQUE4N0QxMUVFOUZBNTVBNkRDNEY5QUUwMi9fZGtkMHc2Ykgt
bzd0LUVxNzNZaFppZ1NteU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCb5rM8iCMAEbOpfzrwzyswSS+0V8rAKqnXUs1seHtDyO+RMR+O2jIh
vBLReRdkmTQ2R6AkyyyqGCkLDUC2za/+nDH/KifTUP+y4H34YRvUXSsUZnvKxweN
YoshZCmpvlrBsj496f1ooogv3eNV3IyuclhUnTFiFT9rAl3JaeLqgDXjU0Sy9i4T
dKXJFY4Ul7xp0srv1RGUUQ6zrO1Lymvn05Z8GDFfTG1ZpqyHjBN2ZioksjyXmFCu
FXel4eOljbbR/gx3XVEMQdIova1GT4zHbToS6fbbKH5EfkgNF6mGhiBZvGRnK8Hd
XCij5sl2lD4YKmDGYCwPtSfVqMlSmk9U
-----END CERTIFICATE-----
Generated at Fri Aug 22 16:19:03 2025 by rpki-client