Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
File:                     MMWCtnmSUrqsOzgaukzDN6v5feM.mft (raw, json)
Hash identifier:          QOIc2pXqv5qQD2+EcIHIv4Xgu0nqPNDMQtlOXtGJZnE=
Subject key identifier:   65:1A:7E:01:13:FC:D9:1E:47:01:8B:5F:E1:0C:F6:DC:46:7C:4E:3B
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       03CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
Manifest number:          03B7
Signing time:             Tue 09 Sep 2025 00:52:37 +0000
Manifest this update:     Tue 09 Sep 2025 00:52:37 +0000
Manifest next update:     Tue 16 Sep 2025 00:52:37 +0000
Files and hashes:         1: MMWCtnmSUrqsOzgaukzDN6v5feM.crl (hash: KdOeayO0jE0rM8HxzRwn1xyaZN1gP9ZNXfUfphkfiLE=)
                          2: 3A3E36B6631811F089107C4AC4F9AE02.roa (hash: LItmSY3Ra1Iy4gmT11d9DvsCigq7vdXD6JtTRrSnrY4=)
                          3: 9F88C3542ADF11F0B3006D40C4F9AE02.roa (hash: HfH3bnjSArZqBmb++sIR3SfMhcyn2TdNR3uddhdO4C4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 00:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 974 (0x3ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: Sep  9 00:52:37 2025 GMT
            Not After : Sep 16 00:52:37 2025 GMT
        Subject: CN=68bf7a55-4b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f4:0f:1e:3f:33:4e:ec:3a:65:78:d2:c5:af:
                    2c:87:c1:5c:79:7e:54:66:15:e5:04:28:dc:7c:87:
                    dc:e2:4f:a6:2f:47:56:bd:06:2e:e0:a2:08:a1:b7:
                    99:87:2c:5b:59:80:86:dd:1d:2a:0a:f7:50:8b:50:
                    ab:a6:1e:79:1a:44:60:18:4c:a8:ea:10:ea:aa:5c:
                    30:5e:f9:60:28:5c:89:7e:78:e3:a2:6b:08:84:29:
                    b0:d5:d1:25:39:18:d3:89:4f:2e:95:17:66:04:80:
                    75:b5:29:5f:8c:b6:f4:9d:3f:76:0f:7f:74:35:3c:
                    c6:e0:31:16:67:57:a3:c4:c3:5c:ec:5f:dc:43:fb:
                    e6:f4:77:8c:12:d5:a7:14:81:49:3e:73:18:97:2e:
                    25:63:71:74:bb:65:5f:b3:17:e0:5d:0b:de:28:33:
                    74:7a:9d:b0:f4:75:93:6a:70:ae:8e:be:61:b0:22:
                    80:75:38:6f:72:c1:4c:66:58:ca:c6:d6:40:3c:bf:
                    d4:89:84:66:b0:e5:07:54:1a:b5:15:7b:86:48:b1:
                    b7:b3:0b:b8:2c:83:e4:c5:21:90:43:71:e6:e7:5c:
                    97:3c:a2:13:96:47:00:c3:57:a4:3a:0f:7f:da:b7:
                    fe:1d:b5:57:9d:5e:bf:0f:5e:23:9b:4b:9a:81:54:
                    95:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1A:7E:01:13:FC:D9:1E:47:01:8B:5F:E1:0C:F6:DC:46:7C:4E:3B
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:70:de:1d:da:87:03:81:42:70:76:d8:3d:5d:bf:56:7d:81:
         3f:57:92:75:bd:a8:f1:1d:d1:35:ad:28:8b:b9:ce:2f:9d:58:
         ba:ab:81:f5:4a:86:bd:26:aa:f2:bb:2b:eb:89:35:4d:c7:db:
         01:e4:fd:67:7a:77:56:68:2f:a1:71:fd:c9:67:a8:53:63:90:
         8a:3f:85:47:93:4b:18:4d:68:78:09:5c:32:aa:c6:d9:6b:1f:
         47:b0:31:80:c5:82:b9:1f:91:c6:58:45:09:0f:31:ce:5a:78:
         5e:b9:e6:31:93:cf:f6:ba:5a:0b:c1:99:cc:b7:9e:89:2f:13:
         53:4f:20:01:9b:2c:49:ff:ba:aa:cc:88:b0:a9:2e:ee:a4:02:
         41:53:c2:37:98:5e:c2:18:22:c2:09:e0:6d:87:01:0a:35:7c:
         67:96:a5:fa:52:78:c5:0b:21:74:6a:e7:a2:b3:15:bc:ac:6a:
         55:4f:d7:03:1d:1f:87:c2:27:ae:e4:23:3e:9e:ab:12:27:ba:
         89:6d:df:33:67:92:80:12:5a:10:f3:52:47:c5:4a:d3:85:7e:
         66:82:9e:2b:51:06:46:61:fa:b6:7f:5f:3b:bc:50:24:5b:f0:
         f8:15:91:25:01:b2:0c:73:eb:f7:82:b4:c2:0e:10:d0:c7:64:
         21:ec:2a:0e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA84wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc3NzExMTAvBgNVBAUTKDMwQzU4MkI2Nzk5MjUyQkFBQzNCMzgxQUJBNENDMzM3
QUJGOTdERTMwHhcNMjUwOTA5MDA1MjM3WhcNMjUwOTE2MDA1MjM3WjAYMRYwFAYD
VQQDEw02OGJmN2E1NS00YjkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2/QPHj8zTuw6ZXjSxa8sh8FceX5UZhXlBCjcfIfc4k+mL0dWvQYu4KIIobeZ
hyxbWYCG3R0qCvdQi1Crph55GkRgGEyo6hDqqlwwXvlgKFyJfnjjomsIhCmw1dEl
ORjTiU8ulRdmBIB1tSlfjLb0nT92D390NTzG4DEWZ1ejxMNc7F/cQ/vm9HeMEtWn
FIFJPnMYly4lY3F0u2VfsxfgXQveKDN0ep2w9HWTanCujr5hsCKAdThvcsFMZljK
xtZAPL/UiYRmsOUHVBq1FXuGSLG3swu4LIPkxSGQQ3Hm51yXPKITlkcAw1ekOg9/
2rf+HbVXnV6/D14jm0uagVSVtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGUafgET
/NkeRwGLX+EM9txGfE47MB8GA1UdIwQYMBaAFDDFgrZ5klK6rDs4GrpMwzer+X3j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzc3MS81NUYyRjBGRUIx
N0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1VycXNPemdhdWt6RE42djVm
ZU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01NV0N0bm1TVXJxc096Z2F1a3pETjZ2NWZlTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
Nzc3MS81NUYyRjBGRUIxN0QxMUVDQjk3MzYyNDFDNEY5QUUwMi9NTVdDdG5tU1Vy
cXNPemdhdWt6RE42djVmZU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATcN4d2ocDgUJwdtg9Xb9WfYE/V5J1vajxHdE1rSiLuc4vnVi6q4H1
Soa9JqryuyvriTVNx9sB5P1nendWaC+hcf3JZ6hTY5CKP4VHk0sYTWh4CVwyqsbZ
ax9HsDGAxYK5H5HGWEUJDzHOWnheueYxk8/2uloLwZnMt56JLxNTTyABmyxJ/7qq
zIiwqS7upAJBU8I3mF7CGCLCCeBthwEKNXxnlqX6UnjFCyF0aueisxW8rGpVT9cD
HR+Hwieu5CM+nqsSJ7qJbd8zZ5KAEloQ81JHxUrThX5mgp4rUQZGYfq2f187vFAk
W/D4FZElAbIMc+v3grTCDhDQx2Qh7CoO
-----END CERTIFICATE-----
Generated at Tue Sep 9 06:41:49 2025 by rpki-client