Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
File:                     pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft (raw, json)
Hash identifier:          /mpQXAjZqIvQj2XvRjIDz+9QR9+KmJonjMoZJkjD3qU=
Subject key identifier:   06:0D:47:F3:2C:F4:C5:68:A3:37:4A:09:D0:DB:3A:DC:A2:A6:B8:7E
Authority key identifier: A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18
Certificate issuer:       /CN=A91C0BDE/serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
Certificate serial:       0952
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
Manifest number:          12E3
Signing time:             Mon 08 Sep 2025 19:58:36 +0000
Manifest this update:     Mon 08 Sep 2025 19:58:35 +0000
Manifest next update:     Mon 15 Sep 2025 19:58:35 +0000
Files and hashes:         1: pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl (hash: sf9pdN79eC9sK8xmNnIHnjVjtfxd/x3/R8+Toi/Gbe8=)
                          2: 32751AAE67B811F0962F0730C4F9AE02.roa (hash: kJ2W8ZtT3EcqQ65yuXA6cG7VqVTYhapLGWIeTZI80LI=)
                          3: 38548A62EDC011EF82A1C85BC4F9AE02.roa (hash: U0zd0ajPJef71s0NXBX+K8FghsVdpyFA7/S7d/R/cG0=)
                          4: 214232EC4FD311EF90027A63C4F9AE02.roa (hash: FTbrrJwavqP08/0mEs3AawfzqRid/QkcdkFOFXsnwUI=)
                          5: 2921D24E067C11ED882FC127C4F9AE02.roa (hash: X9FUZvXw3xYym+gKphnPApVeFORX8RZUTOXm3OpSzcU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl
                          rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 19:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2386 (0x952)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0BDE, serialNumber=A4B50BECD8BBA285587128D5919283DBE1690918
        Validity
            Not Before: Sep  8 19:58:35 2025 GMT
            Not After : Sep 15 19:58:35 2025 GMT
        Subject: CN=68bf356b-52ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:54:28:46:45:12:c6:3e:70:20:84:22:cf:40:
                    5b:e0:30:9f:b4:4c:99:1b:58:15:bc:70:32:9f:83:
                    09:e8:60:0f:a2:b4:a9:e1:bc:00:cd:db:ff:80:a2:
                    ea:8c:4a:58:d1:5e:4e:1f:c5:b6:b5:9f:c5:1a:0f:
                    a6:e3:ff:ee:27:67:7b:67:f4:d1:ee:59:d2:41:c6:
                    14:b7:ec:22:05:aa:61:d8:dd:99:15:7b:88:59:c1:
                    1a:b1:f9:f5:42:37:12:18:1f:a8:84:e8:db:31:d1:
                    56:02:86:10:9d:9b:f6:c0:eb:60:8b:24:62:ac:96:
                    97:21:41:18:af:b0:5f:31:fd:f7:77:c0:2c:b9:c2:
                    ad:a3:38:d0:1e:a2:97:01:3f:a7:ea:41:42:7a:9f:
                    34:2a:84:d8:93:ee:ce:35:e4:66:69:8f:d7:45:52:
                    60:6f:0a:dd:8a:46:b0:67:5b:54:f2:b9:41:e3:e4:
                    93:c0:77:5d:20:c4:de:b1:91:5c:dd:c8:9b:c5:6e:
                    e0:49:36:c5:1d:fd:d1:33:72:f2:1b:4a:4c:b0:fe:
                    86:16:da:7a:87:e3:ab:f2:7d:d9:9d:aa:cd:f1:13:
                    a4:37:1c:40:24:60:9f:49:97:87:67:57:a0:7d:dd:
                    d3:4a:1c:6e:99:b4:68:0d:d0:26:5c:4a:82:1e:51:
                    6c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0D:47:F3:2C:F4:C5:68:A3:37:4A:09:D0:DB:3A:DC:A2:A6:B8:7E
            X509v3 Authority Key Identifier:
                keyid:A4:B5:0B:EC:D8:BB:A2:85:58:71:28:D5:91:92:83:DB:E1:69:09:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0BDE/7E5AC3E0897111EA92402A0AC4F9AE02/pLUL7Ni7ooVYcSjVkZKD2-FpCRg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:f9:d6:07:6d:09:f9:9b:9c:9e:06:7a:bb:37:db:1a:fe:
         74:69:fe:a9:55:4a:35:91:65:cd:32:2e:c2:d7:1e:9b:42:19:
         3f:88:c8:c1:e7:21:1d:2e:fd:11:a6:03:4c:8c:e5:8e:18:50:
         9b:4a:03:b6:40:5d:68:ba:8a:7b:02:85:85:0b:92:25:cb:c3:
         33:d9:07:b0:32:30:07:b5:2d:b0:7b:b9:16:ec:a4:30:b4:a4:
         1a:35:98:bb:a6:24:51:57:9f:34:bd:18:bb:62:50:26:3d:9c:
         16:6d:6e:e4:8b:e4:b2:ff:4c:0b:7b:2d:4c:00:6a:cd:4a:05:
         6a:a1:b9:4e:1e:53:07:a5:35:c9:48:22:ff:86:fc:af:dc:98:
         0b:f3:81:5f:c7:d5:7a:58:c6:0a:0f:73:8b:0f:d7:b0:3e:8f:
         e7:55:7a:00:65:0b:71:74:a8:98:1b:56:d1:88:dd:72:b1:75:
         2b:9a:ed:d8:21:66:74:a6:22:50:8f:a2:e7:fc:fd:1f:4c:30:
         4f:6e:73:64:b0:e0:81:c7:d2:08:24:72:65:f8:da:c6:0d:68:
         81:5e:80:7b:53:c3:70:f8:72:d9:f7:13:2f:e0:95:fe:e4:1c:
         94:89:1c:11:6f:7e:64:94:ad:2b:36:1c:c3:f9:b4:b7:ab:b1:
         04:f3:2a:d7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzBCREUxMTAvBgNVBAUTKEE0QjUwQkVDRDhCQkEyODU1ODcxMjhENTkxOTI4M0RC
RTE2OTA5MTgwHhcNMjUwOTA4MTk1ODM1WhcNMjUwOTE1MTk1ODM1WjAYMRYwFAYD
VQQDEw02OGJmMzU2Yi01MmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1lQoRkUSxj5wIIQiz0Bb4DCftEyZG1gVvHAyn4MJ6GAPorSp4bwAzdv/gKLq
jEpY0V5OH8W2tZ/FGg+m4//uJ2d7Z/TR7lnSQcYUt+wiBaph2N2ZFXuIWcEasfn1
QjcSGB+ohOjbMdFWAoYQnZv2wOtgiyRirJaXIUEYr7BfMf33d8AsucKtozjQHqKX
AT+n6kFCep80KoTYk+7ONeRmaY/XRVJgbwrdikawZ1tU8rlB4+STwHddIMTesZFc
3cibxW7gSTbFHf3RM3LyG0pMsP6GFtp6h+Or8n3ZnarN8ROkNxxAJGCfSZeHZ1eg
fd3TShxumbRoDdAmXEqCHlFsWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYNR/Ms
9MVoozdKCdDbOtyiprh+MB8GA1UdIwQYMBaAFKS1C+zYu6KFWHEo1ZGSg9vhaQkY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEJERS83RTVBQzNFMDg5
NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29vVlljU2pWa1pLRDItRnBD
UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BMVUw3Tmk3b29WWWNTalZrWktEMi1GcENSZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MEJERS83RTVBQzNFMDg5NzExMUVBOTI0MDJBMEFDNEY5QUUwMi9wTFVMN05pN29v
VlljU2pWa1pLRDItRnBDUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAE+fnWB20J+ZucngZ6uzfbGv50af6pVUo1kWXNMi7C1x6bQhk/iMjB
5yEdLv0RpgNMjOWOGFCbSgO2QF1ouop7AoWFC5Ily8Mz2QewMjAHtS2we7kW7KQw
tKQaNZi7piRRV580vRi7YlAmPZwWbW7ki+Sy/0wLey1MAGrNSgVqoblOHlMHpTXJ
SCL/hvyv3JgL84Ffx9V6WMYKD3OLD9ewPo/nVXoAZQtxdKiYG1bRiN1ysXUrmu3Y
IWZ0piJQj6Ln/P0fTDBPbnNksOCBx9IIJHJl+NrGDWiBXoB7U8Nw+HLZ9xMv4JX+
5ByUiRwRb35klK0rNhzD+bS3q7EE8yrX
-----END CERTIFICATE-----
Generated at Tue Sep 9 13:11:15 2025 by rpki-client