Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
File:                     _K1GEVffaBwFC9O-7qLqzfttUks.mft (raw, json)
Hash identifier:          H/LkAdBHAp6T7IR0QKmrRdFYkQYG5yFpjGRWQITTz7s=
Subject key identifier:   59:74:6D:A3:CA:A1:D0:3D:7F:6C:26:2A:07:27:09:CF:E9:7D:1C:A3
Authority key identifier: FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B
Certificate issuer:       /CN=A91CE3C4/serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
Certificate serial:       06D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
Manifest number:          06B7
Signing time:             Sat 06 Sep 2025 22:31:46 +0000
Manifest this update:     Sat 06 Sep 2025 22:31:46 +0000
Manifest next update:     Sat 13 Sep 2025 22:31:46 +0000
Files and hashes:         1: _K1GEVffaBwFC9O-7qLqzfttUks.crl (hash: OS3zQjBz5p50zpQ3JD33RG2W6yDTdjDvVRC6DnCkIVE=)
                          2: D55D5DE2F07011EDAD0F5D62C4F9AE02.roa (hash: /1MqSHd9nBk2qp9htlm8FxJMAo4wrus2nnyIHoN3C0s=)
                          3: BC582AA44FEA11EFBFC72970C4F9AE02.roa (hash: LDQwB/Aaa/EPGkedxIat/R/y9ZuThpBdxq2PBP79Mgo=)
                          4: 26F87D4A272711EC88E40644C4F9AE02.roa (hash: hPYxf/s2MeHBMdE9aQ/4MQvo1zAB47EkXGZaUhlKPWs=)
                          5: 50D705A87FA911EBA8C11D63C4F9AE02.roa (hash: XPZflDMOHrz8WA93u6KTrDyNAlgfVwGC6hkcyOuXo4w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl
                          rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 22:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1753 (0x6d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE3C4, serialNumber=FCAD461157DF681C050BD3BEEEA2EACDFB6D524B
        Validity
            Not Before: Sep  6 22:31:46 2025 GMT
            Not After : Sep 13 22:31:46 2025 GMT
        Subject: CN=68bcb652-4872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:44:ec:a8:0f:6a:50:19:9a:2c:78:ab:30:c9:
                    a3:3a:ee:14:6d:e0:51:92:67:95:3d:e1:b1:03:46:
                    be:aa:03:6a:5b:fd:21:6b:e6:11:ac:de:85:10:49:
                    ba:af:4a:9e:ea:2c:1f:45:cc:f7:90:94:70:d9:fc:
                    40:c9:8e:e6:95:f4:db:42:ce:7a:3c:8e:b7:1e:e7:
                    4d:71:42:ae:4f:d6:d9:d5:24:f0:14:fb:e3:30:3e:
                    0b:28:6c:a4:fe:eb:3a:68:52:b2:ec:20:06:cf:f0:
                    54:9b:e5:06:fa:8a:72:4c:5c:3b:2c:3d:f6:4b:cb:
                    73:56:1f:f9:33:a3:0c:3e:15:e7:7f:18:2f:6a:30:
                    7b:e2:f9:61:7b:5e:6c:58:ef:de:1a:cc:05:14:6f:
                    5c:8e:03:c2:83:d0:88:ac:e0:55:08:f3:09:44:34:
                    87:7f:fa:a9:98:83:92:ef:de:e7:ed:6e:5f:92:38:
                    77:4e:e9:e4:40:f4:18:7a:fe:9d:48:9b:bc:ff:b8:
                    7a:c6:f0:65:4b:e7:1b:1f:d4:40:91:a6:70:89:e4:
                    11:7a:f1:7e:66:e9:e5:74:ab:69:b5:62:b7:ae:01:
                    9c:47:8a:62:f8:75:76:59:58:f1:c4:71:a7:76:61:
                    e6:ec:b2:03:88:84:bf:10:51:d8:e2:eb:d7:cc:c0:
                    3a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:74:6D:A3:CA:A1:D0:3D:7F:6C:26:2A:07:27:09:CF:E9:7D:1C:A3
            X509v3 Authority Key Identifier:
                keyid:FC:AD:46:11:57:DF:68:1C:05:0B:D3:BE:EE:A2:EA:CD:FB:6D:52:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_K1GEVffaBwFC9O-7qLqzfttUks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3C4/7692278A7F9711EBADDC5F15C4F9AE02/_K1GEVffaBwFC9O-7qLqzfttUks.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:90:40:d0:5d:07:17:54:08:a4:a8:c7:7d:5d:b9:b7:e7:d0:
         b4:c7:95:6e:73:34:30:1f:e3:76:70:bd:d2:4c:db:82:f2:1b:
         86:2d:bc:90:b1:c5:d1:5c:4a:41:b4:d4:a9:7a:2b:9d:87:d0:
         12:fb:11:59:b9:6d:3b:1c:2a:18:61:7f:f1:c7:b9:a3:5b:4a:
         b9:21:a0:9e:9c:03:7c:29:42:ea:91:61:53:53:e1:1e:b1:d9:
         e2:08:ff:86:29:4c:6e:e8:e4:38:77:83:b8:c7:20:d3:4e:e8:
         4b:ac:07:09:8e:36:85:f3:79:ef:cd:d3:eb:7b:d4:96:e2:15:
         b6:00:65:b9:cd:a4:27:ec:4f:51:e1:aa:ca:b8:2a:fa:e9:df:
         38:b1:3a:fa:84:98:6b:5a:6a:0e:47:7d:9f:11:f5:01:1e:d5:
         79:af:55:a5:3f:56:c7:d5:96:b0:2a:6d:40:b4:d5:3e:0e:e5:
         52:f8:d9:40:fe:2c:13:56:63:3b:e5:82:e1:c5:1d:3c:45:76:
         75:f4:d1:3d:7d:47:5e:ab:87:02:37:43:fd:37:7e:b9:33:41:
         16:1a:7e:24:f5:2b:1c:da:02:d1:43:43:95:b8:1f:c3:61:54:
         bf:b5:64:43:a4:a6:4b:60:ac:5d:d0:ba:9f:c1:b9:8c:23:b0:
         ec:01:62:ef
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UzQzQxMTAvBgNVBAUTKEZDQUQ0NjExNTdERjY4MUMwNTBCRDNCRUVFQTJFQUNE
RkI2RDUyNEIwHhcNMjUwOTA2MjIzMTQ2WhcNMjUwOTEzMjIzMTQ2WjAYMRYwFAYD
VQQDEw02OGJjYjY1Mi00ODcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwETsqA9qUBmaLHirMMmjOu4UbeBRkmeVPeGxA0a+qgNqW/0ha+YRrN6FEEm6
r0qe6iwfRcz3kJRw2fxAyY7mlfTbQs56PI63HudNcUKuT9bZ1STwFPvjMD4LKGyk
/us6aFKy7CAGz/BUm+UG+opyTFw7LD32S8tzVh/5M6MMPhXnfxgvajB74vlhe15s
WO/eGswFFG9cjgPCg9CIrOBVCPMJRDSHf/qpmIOS797n7W5fkjh3TunkQPQYev6d
SJu8/7h6xvBlS+cbH9RAkaZwieQRevF+ZunldKtptWK3rgGcR4pi+HV2WVjxxHGn
dmHm7LIDiIS/EFHY4uvXzMA6nwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFl0baPK
odA9f2wmKgcnCc/pfRyjMB8GA1UdIwQYMBaAFPytRhFX32gcBQvTvu6i6s37bVJL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNDNC83NjkyMjc4QTdG
OTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFCd0ZDOU8tN3FMcXpmdHRV
a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19LMUdFVmZmYUJ3RkM5Ty03cUxxemZ0dFVrcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTNDNC83NjkyMjc4QTdGOTcxMUVCQUREQzVGMTVDNEY5QUUwMi9fSzFHRVZmZmFC
d0ZDOU8tN3FMcXpmdHRVa3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrkEDQXQcXVAikqMd9Xbm359C0x5VuczQwH+N2cL3STNuC8huGLbyQ
scXRXEpBtNSpeiudh9AS+xFZuW07HCoYYX/xx7mjW0q5IaCenAN8KULqkWFTU+Ee
sdniCP+GKUxu6OQ4d4O4xyDTTuhLrAcJjjaF83nvzdPre9SW4hW2AGW5zaQn7E9R
4arKuCr66d84sTr6hJhrWmoOR32fEfUBHtV5r1WlP1bH1ZawKm1AtNU+DuVS+NlA
/iwTVmM75YLhxR08RXZ19NE9fUdeq4cCN0P9N365M0EWGn4k9Ssc2gLRQ0OVuB/D
YVS/tWRDpKZLYKxd0LqfwbmMI7DsAWLv
-----END CERTIFICATE-----
Generated at Mon Sep 8 10:25:50 2025 by rpki-client