Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
File:                     JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json)
Hash identifier:          nozh6kFzaTldjJrcyG2TcyxlPV+bY3BVMl7ge0xoUhk=
Subject key identifier:   E5:16:2F:DB:9B:4A:C0:1E:4F:59:AE:20:75:40:8C:38:47:81:1A:07
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Certificate issuer:       /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
Manifest number:          017A
Signing time:             Tue 09 Sep 2025 03:48:29 +0000
Manifest this update:     Tue 09 Sep 2025 03:48:29 +0000
Manifest next update:     Tue 16 Sep 2025 03:48:29 +0000
Files and hashes:         1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: iwD6Bua8KuSA7XU0OZdqdC6aZPRwf0wWTlgPoH60uzE=)
                          2: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: WRw8P09emg+/M1eyLZMSGNOMq1lxAOjq4wSwuxKAgdk=)
                          3: C2604920CFE011EE83247F7CC4F9AE02.roa (hash: RlOQ1D2JU0zzfIovINRFiFEm6uvLmquY7AElz0gTShU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 03:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
        Validity
            Not Before: Sep  9 03:48:29 2025 GMT
            Not After : Sep 16 03:48:29 2025 GMT
        Subject: CN=68bfa38d-7c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:cb:7f:13:47:e5:42:0b:97:8d:da:f4:ba:6f:
                    44:32:aa:73:14:63:bb:b3:ff:09:fa:91:6e:97:a8:
                    a1:3f:01:4f:cf:9e:2f:2d:aa:26:8e:25:01:dc:4b:
                    ac:00:c2:b7:f0:2c:ca:d2:b0:7c:e0:17:5f:c8:1e:
                    54:70:99:68:59:fb:a3:43:f7:bd:fa:42:af:ac:c0:
                    dd:c4:ba:31:f2:c7:f1:b3:3e:3d:b2:6e:8c:fa:ec:
                    d8:56:02:bd:af:a3:d8:ef:2a:73:53:8e:b1:1f:a0:
                    b0:63:fa:b9:33:e3:0b:75:ad:8b:05:fa:6f:39:c0:
                    66:09:fa:70:5b:e6:6a:31:5f:d6:0e:72:d1:63:9a:
                    41:a2:c0:3d:3f:7a:f4:cd:d4:40:31:3c:de:cc:c5:
                    e2:de:22:72:aa:ae:6b:fc:d3:fb:7d:7f:71:25:b5:
                    3a:f2:f5:74:97:29:96:50:5d:e8:9d:ce:2d:4d:29:
                    54:48:92:9b:b9:59:78:d1:c9:22:70:fe:2a:bb:69:
                    3c:ce:da:97:ac:96:ca:ee:68:b9:7d:26:88:68:b8:
                    20:68:23:15:a1:31:51:e9:4b:00:47:c7:26:9b:39:
                    a3:36:67:6a:a5:98:76:e9:35:12:75:21:36:b6:37:
                    09:f9:ac:22:b1:4c:b2:62:e9:06:2d:da:a7:10:a6:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:16:2F:DB:9B:4A:C0:1E:4F:59:AE:20:75:40:8C:38:47:81:1A:07
            X509v3 Authority Key Identifier:
                keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ba:7e:c2:e3:0d:bf:84:41:0f:d9:04:70:42:c9:29:19:54:
         56:c0:90:13:4f:12:ce:fb:47:a1:78:c0:63:96:6e:85:3c:2c:
         f8:cb:c5:61:f5:aa:33:5b:ba:3e:27:6f:e5:d4:7f:3b:8e:83:
         52:9e:2d:98:07:2a:3f:a1:04:d4:78:8e:bf:86:b4:ae:5f:65:
         c5:ba:48:c1:12:0f:55:a6:41:14:c0:6e:4e:02:71:54:0d:0d:
         36:93:a2:95:c4:69:e6:9a:3f:d0:53:d9:13:e1:ee:3e:31:98:
         89:73:1a:5d:55:35:0b:50:88:17:2a:d0:79:86:8d:4c:16:5b:
         21:0f:0a:54:ab:19:2e:20:1b:27:42:02:9e:a4:68:6a:a8:46:
         af:b2:8e:46:25:59:c3:71:54:85:04:b2:49:71:c0:c2:06:4d:
         2f:63:e4:0f:8a:36:c8:b2:1b:5c:0b:25:4e:2c:f9:13:37:2b:
         9f:5f:7d:47:2c:1a:5f:39:c1:42:cb:be:0c:db:51:8b:bf:94:
         c2:b7:80:20:60:a7:8c:87:00:90:3a:24:24:90:dd:7a:0e:9c:
         9a:ee:06:63:e9:6f:60:ba:a5:44:6c:1d:be:42:02:96:0e:43:
         5c:62:2c:fb:38:0c:de:eb:da:a9:83:a2:c2:72:5a:3a:04:2f:
         7c:12:67:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCRDYxMTAvBgNVBAUTKDI0ODQ4OUI3ODE4QjAwRTcwMDQwNUJBQkMxQUEzNTZD
MEExOEYzOTQwHhcNMjUwOTA5MDM0ODI5WhcNMjUwOTE2MDM0ODI5WjAYMRYwFAYD
VQQDEw02OGJmYTM4ZC03YzYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9Mt/E0flQguXjdr0um9EMqpzFGO7s/8J+pFul6ihPwFPz54vLaomjiUB3Eus
AMK38CzK0rB84BdfyB5UcJloWfujQ/e9+kKvrMDdxLox8sfxsz49sm6M+uzYVgK9
r6PY7ypzU46xH6CwY/q5M+MLda2LBfpvOcBmCfpwW+ZqMV/WDnLRY5pBosA9P3r0
zdRAMTzezMXi3iJyqq5r/NP7fX9xJbU68vV0lymWUF3onc4tTSlUSJKbuVl40cki
cP4qu2k8ztqXrJbK7mi5fSaIaLggaCMVoTFR6UsAR8cmmzmjNmdqpZh26TUSdSE2
tjcJ+awisUyyYukGLdqnEKYL9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUWL9ub
SsAeT1muIHVAjDhHgRoHMB8GA1UdIwQYMBaAFCSEibeBiwDnAEBbq8GqNWwKGPOU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEJENi9BQkY4NzMwMjUw
REMxMUVFQTNGM0QzNEVDNEY5QUUwMi9KSVNKdDRHTEFPY0FRRnVyd2FvMWJBb1k4
NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pJU0p0NEdMQU9jQVFGdXJ3YW8xYkFvWTg1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEJENi9BQkY4NzMwMjUwREMxMUVFQTNGM0QzNEVDNEY5QUUwMi9KSVNKdDRHTEFP
Y0FRRnVyd2FvMWJBb1k4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAHun7C4w2/hEEP2QRwQskpGVRWwJATTxLO+0eheMBjlm6FPCz4y8Vh
9aozW7o+J2/l1H87joNSni2YByo/oQTUeI6/hrSuX2XFukjBEg9VpkEUwG5OAnFU
DQ02k6KVxGnmmj/QU9kT4e4+MZiJcxpdVTULUIgXKtB5ho1MFlshDwpUqxkuIBsn
QgKepGhqqEavso5GJVnDcVSFBLJJccDCBk0vY+QPijbIshtcCyVOLPkTNyufX31H
LBpfOcFCy74M21GLv5TCt4AgYKeMhwCQOiQkkN16Dpya7gZj6W9guqVEbB2+QgKW
DkNcYiz7OAze69qpg6LCclo6BC98Emeq
-----END CERTIFICATE-----
Generated at Tue Sep 9 10:41:29 2025 by rpki-client