Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
File:                     E6R11r48LHrEqN03EGaqbAF0-j0.mft (raw, json)
Hash identifier:          Hzs6cY2/aNj0G5tU2K8gjgL+jcgK5WlkbJQNGQsL52E=
Subject key identifier:   0C:33:AA:D8:FD:E7:7E:2B:52:96:56:81:44:AD:60:0C:45:5E:C5:B3
Authority key identifier: 13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D
Certificate issuer:       /CN=A91CA141/serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D
Certificate serial:       0965
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
Manifest number:          095E
Signing time:             Sun 24 Aug 2025 20:10:35 +0000
Manifest this update:     Sun 24 Aug 2025 20:10:35 +0000
Manifest next update:     Sun 31 Aug 2025 20:10:35 +0000
Files and hashes:         1: E6R11r48LHrEqN03EGaqbAF0-j0.crl (hash: OGyikTtg8bWLuxE0GPexooAIojnA+fGweFJOmxiFA94=)
                          2: 6B576C449E5711EABC193842C4F9AE02.roa (hash: rmBjNT0g6o5OQJ7VMnQunSAodjeObi4QujloW5TWZhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl
                          rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Aug 2025 19:03:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405 (0x965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA141, serialNumber=13A475D6BE3C2C7AC4A8DD371066AA6C0174FA3D
        Validity
            Not Before: Aug 24 20:10:35 2025 GMT
            Not After : Aug 31 20:10:35 2025 GMT
        Subject: CN=68ab71bb-b117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7f:50:ca:12:19:e3:20:ce:30:2a:6c:f0:fc:
                    50:01:9c:15:f6:7d:14:13:64:70:be:39:bc:23:4d:
                    20:d9:59:aa:0e:d8:e5:5d:47:3c:04:ca:2b:91:8e:
                    0c:50:64:4a:c6:71:ce:d1:95:af:04:0f:d2:84:18:
                    cd:03:07:1c:26:ea:b0:7e:ad:66:18:76:cd:68:65:
                    2e:52:e7:1c:b0:59:c5:cd:61:10:23:de:cf:b2:ec:
                    37:ba:f6:c1:22:a7:e2:5d:ce:7a:ec:12:b9:4e:41:
                    17:b9:3c:ff:82:fb:79:3d:03:76:42:77:5c:ce:05:
                    6c:74:b2:d0:9e:be:37:a4:34:00:50:1b:89:ca:f1:
                    dc:b6:5a:12:6d:a3:ba:60:c6:1f:f9:94:3b:af:15:
                    7d:b2:a1:50:8e:61:0d:d2:d5:d5:f4:b9:db:a3:e4:
                    26:a9:3c:7e:a4:37:77:a0:67:ce:8b:21:63:94:92:
                    75:94:95:58:1d:5c:71:b9:34:3e:09:b1:dc:19:2f:
                    27:f1:8d:00:c8:a4:94:9e:5a:61:28:07:9f:16:d9:
                    5d:d4:4a:ed:c3:35:52:80:89:ff:b5:b9:b4:ae:a1:
                    62:b0:d8:ec:54:9c:70:ff:28:62:13:c0:a2:1e:fc:
                    7e:0b:7d:e7:e7:e8:30:e7:48:d6:a1:df:e5:e8:89:
                    07:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:33:AA:D8:FD:E7:7E:2B:52:96:56:81:44:AD:60:0C:45:5E:C5:B3
            X509v3 Authority Key Identifier:
                keyid:13:A4:75:D6:BE:3C:2C:7A:C4:A8:DD:37:10:66:AA:6C:01:74:FA:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E6R11r48LHrEqN03EGaqbAF0-j0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA141/AED18DA89E5511EA8DD1903CC4F9AE02/E6R11r48LHrEqN03EGaqbAF0-j0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:17:bd:59:da:c8:9a:53:6f:4e:bc:7d:7c:ac:78:11:d5:8f:
         7f:8a:06:3f:a9:52:d3:5f:20:6f:81:1a:f8:cb:b1:d1:7c:55:
         0b:6f:a3:a9:d7:64:bf:95:2b:04:3f:1e:13:73:0a:fa:e6:d4:
         00:50:f6:60:02:e8:04:54:30:f3:c0:ba:13:48:ea:3d:31:63:
         7a:66:63:97:61:f7:56:e8:dd:bc:ad:02:d0:ba:e5:51:34:54:
         88:0f:03:b8:e0:29:1a:30:81:b3:46:27:a8:45:e0:c4:7e:f4:
         a9:3c:d5:95:b8:98:a1:db:0f:e9:56:9e:7d:ff:65:18:7e:ff:
         f0:d9:3d:25:8e:5b:cf:07:a4:74:62:0f:57:9e:a6:0b:71:43:
         2e:78:43:35:a7:ad:bb:30:a6:01:f4:eb:18:db:e9:6f:2f:a5:
         93:2c:ce:b4:39:5c:36:ab:4c:2b:57:d2:6f:41:50:8e:41:7f:
         6d:a3:c6:38:65:cd:8d:8f:a7:4a:cc:05:12:dd:bc:4c:4b:23:
         82:f7:3f:bc:e0:9e:de:de:b2:c4:51:2c:5a:4c:7b:80:79:94:
         5c:d2:7c:76:c9:ca:35:d9:41:59:b9:ff:da:a5:11:d4:5d:f7:
         04:f9:ba:79:b2:6a:8e:8c:da:a2:85:d7:6a:c1:c0:08:a4:fe:
         14:6b:8d:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ExNDExMTAvBgNVBAUTKDEzQTQ3NUQ2QkUzQzJDN0FDNEE4REQzNzEwNjZBQTZD
MDE3NEZBM0QwHhcNMjUwODI0MjAxMDM1WhcNMjUwODMxMjAxMDM1WjAYMRYwFAYD
VQQDEw02OGFiNzFiYi1iMTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnX9QyhIZ4yDOMCps8PxQAZwV9n0UE2Rwvjm8I00g2VmqDtjlXUc8BMorkY4M
UGRKxnHO0ZWvBA/ShBjNAwccJuqwfq1mGHbNaGUuUuccsFnFzWEQI97Psuw3uvbB
IqfiXc567BK5TkEXuTz/gvt5PQN2QndczgVsdLLQnr43pDQAUBuJyvHctloSbaO6
YMYf+ZQ7rxV9sqFQjmEN0tXV9Lnbo+QmqTx+pDd3oGfOiyFjlJJ1lJVYHVxxuTQ+
CbHcGS8n8Y0AyKSUnlphKAefFtld1ErtwzVSgIn/tbm0rqFisNjsVJxw/yhiE8Ci
Hvx+C33n5+gw50jWod/l6IkHywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwzqtj9
534rUpZWgUStYAxFXsWzMB8GA1UdIwQYMBaAFBOkdda+PCx6xKjdNxBmqmwBdPo9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQTE0MS9BRUQxOERBODlF
NTUxMUVBOEREMTkwM0NDNEY5QUUwMi9FNlIxMXI0OExIckVxTjAzRUdhcWJBRjAt
ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0U2UjExcjQ4TEhyRXFOMDNFR2FxYkFGMC1qMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
QTE0MS9BRUQxOERBODlFNTUxMUVBOEREMTkwM0NDNEY5QUUwMi9FNlIxMXI0OExI
ckVxTjAzRUdhcWJBRjAtajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC9F71Z2siaU29OvH18rHgR1Y9/igY/qVLTXyBvgRr4y7HRfFULb6Op
12S/lSsEPx4Tcwr65tQAUPZgAugEVDDzwLoTSOo9MWN6ZmOXYfdW6N28rQLQuuVR
NFSIDwO44CkaMIGzRieoReDEfvSpPNWVuJih2w/pVp59/2UYfv/w2T0ljlvPB6R0
Yg9XnqYLcUMueEM1p627MKYB9OsY2+lvL6WTLM60OVw2q0wrV9JvQVCOQX9to8Y4
Zc2Nj6dKzAUS3bxMSyOC9z+84J7e3rLEUSxaTHuAeZRc0nx2yco12UFZuf/apRHU
XfcE+bp5smqOjNqihddqwcAIpP4Ua412
-----END CERTIFICATE-----
Generated at Sun Aug 24 22:16:13 2025 by rpki-client