Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File:                     quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier:          6/2hi3FSZOdRyriL4x82FfQfsN5732Kx/xcmONm0464=
Subject key identifier:   7E:DF:F3:10:01:25:89:27:C0:D5:05:F9:5E:B8:A2:53:B7:F8:9D:2C
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer:       /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial:       B8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number:          B2
Signing time:             Fri 19 Sep 2025 06:49:17 +0000
Manifest this update:     Fri 19 Sep 2025 06:49:16 +0000
Manifest next update:     Fri 26 Sep 2025 06:49:16 +0000
Files and hashes:         1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: 0UuuCMdg0qx1lSugmXc8W6cY70U08AjHd7YbZiuNmlM=)
                          2: 7CEBE3D254CC11F0A18D9383C4F9AE02.roa (hash: MhC1AUnnrCM4ujHXiGVbZ9ds9R03Dh/i7EuqXSdVjoQ=)
                          3: 0A6CBB6E54CD11F0A3E48084C4F9AE02.roa (hash: zutu0HkO4ucOHeH/2JeJGru547OHviuXA/RDD+leiEs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 06:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
        Validity
            Not Before: Sep 19 06:49:16 2025 GMT
            Not After : Sep 26 06:49:16 2025 GMT
        Subject: CN=68ccfcec-f6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:da:0e:3e:a7:09:97:91:43:8d:74:6e:45:
                    c1:e3:90:b7:36:c8:6f:cd:e4:10:18:7e:86:4f:8c:
                    d8:c8:fb:38:ab:c5:7f:66:54:e9:18:cd:1b:65:91:
                    69:77:7e:be:76:54:06:b1:5e:6d:55:fd:3c:fb:92:
                    98:9a:ef:ce:85:e4:30:65:b7:2c:2e:7c:a2:da:ce:
                    ed:bb:5c:14:ef:10:e3:76:ab:cd:f1:76:4d:8a:13:
                    0b:0c:2f:33:21:22:36:bc:c4:92:d7:1e:41:74:14:
                    ce:6f:b3:19:67:de:5a:60:89:5c:8b:ac:b8:8c:99:
                    84:8f:01:d7:35:0e:39:09:4d:e4:55:5a:3f:08:6f:
                    4c:b8:92:a8:b9:77:ce:26:c7:28:ee:ba:4c:d0:c5:
                    4f:76:8a:e0:5e:bc:56:38:ba:21:30:09:2c:4b:09:
                    94:ec:86:9e:45:f8:00:48:a0:0a:8d:ec:9a:e9:23:
                    f4:62:1b:fc:ff:bd:f6:49:1c:f4:ff:d2:5f:e8:9b:
                    e5:8d:66:45:ba:6e:87:49:66:76:6a:e9:48:49:7f:
                    28:24:1a:59:c6:79:af:17:16:5c:f2:45:35:04:5d:
                    71:0b:b8:24:24:40:c2:f9:70:62:c8:76:e0:1a:12:
                    49:fe:de:4a:7f:21:87:cc:69:c9:3d:30:9d:9f:dd:
                    b0:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DF:F3:10:01:25:89:27:C0:D5:05:F9:5E:B8:A2:53:B7:F8:9D:2C
            X509v3 Authority Key Identifier:
                keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:32:a3:7a:6f:87:f6:7e:c7:8b:47:82:5d:26:72:38:eb:9d:
         dc:d6:05:9d:d3:ae:6c:5a:d7:43:4f:ef:25:ea:65:fd:13:5d:
         1a:8b:0b:63:fc:09:f9:37:a3:85:7a:3a:10:28:f1:d5:ab:41:
         36:d7:f9:04:bd:58:75:17:9a:47:28:9c:a7:6a:e5:06:b4:66:
         92:c2:89:c2:00:ca:c4:c0:18:f0:eb:63:f3:b8:a5:0e:87:98:
         9d:65:7a:05:28:6f:4f:4f:7d:4a:bd:90:df:e8:8d:96:05:11:
         73:a3:5e:49:21:a6:69:e3:46:bb:90:7a:77:e0:7c:8c:1f:63:
         ec:9d:5a:0f:95:4b:b5:41:27:b1:21:71:bc:a9:e3:dd:4d:e3:
         fc:5a:6a:2e:9a:21:2c:99:98:cf:3c:50:d7:dd:a2:e2:c8:5f:
         4b:d0:2b:61:c1:84:34:da:55:a3:22:b1:49:b0:67:c8:ce:c8:
         5c:b1:3b:de:a1:cb:f8:14:e6:7a:55:af:d0:2e:a0:9c:68:97:
         c6:12:03:a6:13:63:b5:b1:a6:3b:a1:9c:02:9f:5b:10:3a:7c:
         16:96:4d:ef:e2:6f:78:12:9b:95:18:c2:b9:29:96:e1:2c:a0:
         ab:e8:a4:5f:83:e9:5b:2e:59:82:b3:76:c1:3b:60:39:cf:3c:
         70:18:17:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzYwQTUxMTAvBgNVBAUTKEFBRUM0ODg3NzFEN0I5NDE4NUM4QTkwRkUzNkQyOTdE
RTc2Qzg0QkMwHhcNMjUwOTE5MDY0OTE2WhcNMjUwOTI2MDY0OTE2WjAYMRYwFAYD
VQQDEw02OGNjZmNlYy1mNmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqXDaDj6nCZeRQ410bkXB45C3NshvzeQQGH6GT4zYyPs4q8V/ZlTpGM0bZZFp
d36+dlQGsV5tVf08+5KYmu/OheQwZbcsLnyi2s7tu1wU7xDjdqvN8XZNihMLDC8z
ISI2vMSS1x5BdBTOb7MZZ95aYIlci6y4jJmEjwHXNQ45CU3kVVo/CG9MuJKouXfO
Jsco7rpM0MVPdorgXrxWOLohMAksSwmU7IaeRfgASKAKjeya6SP0Yhv8/732SRz0
/9Jf6JvljWZFum6HSWZ2aulISX8oJBpZxnmvFxZc8kU1BF1xC7gkJEDC+XBiyHbg
GhJJ/t5KfyGHzGnJPTCdn92wGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7f8xAB
JYknwNUF+V64olO3+J0sMB8GA1UdIwQYMBaAFKrsSIdx17lBhcipD+NtKX3nbIS8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjBBNS85OTdCMzY2RTkx
RjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVVR0Z5S2tQNDIwcGZlZHNo
THcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3F1eEloM0hYdVVHRnlLa1A0MjBwZmVkc2hMdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjBBNS85OTdCMzY2RTkxRjAxMUVGQjY5NjVDMjRDNEY5QUUwMi9xdXhJaDNIWHVV
R0Z5S2tQNDIwcGZlZHNoTHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMMqN6b4f2fseLR4JdJnI4653c1gWd065sWtdDT+8l6mX9E10aiwtj
/An5N6OFejoQKPHVq0E21/kEvVh1F5pHKJynauUGtGaSwonCAMrEwBjw62PzuKUO
h5idZXoFKG9PT31KvZDf6I2WBRFzo15JIaZp40a7kHp34HyMH2PsnVoPlUu1QSex
IXG8qePdTeP8WmoumiEsmZjPPFDX3aLiyF9L0CthwYQ02lWjIrFJsGfIzshcsTve
ocv4FOZ6Va/QLqCcaJfGEgOmE2O1saY7oZwCn1sQOnwWlk3v4m94EpuVGMK5KZbh
LKCr6KRfg+lbLlmCs3bBO2A5zzxwGBem
-----END CERTIFICATE-----
Generated at Fri Sep 19 19:46:46 2025 by rpki-client