Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
File:                     pcmHAk0KjqwJZAn9mewy7JBHC6M.mft (raw, json)
Hash identifier:          vM1zobxMS2x4XZuQbYJXiUMIVIE3TC+SzFI/jaeIOCU=
Subject key identifier:   AB:75:16:41:99:44:4E:96:C3:14:8F:46:07:16:B9:DF:0D:B6:08:2A
Authority key identifier: A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3
Certificate issuer:       /CN=A91E4B86/serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
Manifest number:          4A
Signing time:             Sat 19 Jul 2025 07:37:09 +0000
Manifest this update:     Sat 19 Jul 2025 07:37:08 +0000
Manifest next update:     Sat 26 Jul 2025 07:37:08 +0000
Files and hashes:         1: pcmHAk0KjqwJZAn9mewy7JBHC6M.crl (hash: T3t3pwp+JtoqEhmRFw4wy6dMWYNelvzqHZZp33peTg8=)
                          2: 4C51E1D4F7E511EF9A28D363C4F9AE02.roa (hash: EWVCVV5zCZB19LClSuWFTWXQU193NPHqHKJqFm4wMOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl
                          rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 07:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4B86, serialNumber=A5C987024D0A8EAC096409FD99EC32EC90470BA3
        Validity
            Not Before: Jul 19 07:37:08 2025 GMT
            Not After : Jul 26 07:37:08 2025 GMT
        Subject: CN=687b4b25-1ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c2:b3:55:8f:50:f3:2d:93:8f:fe:58:bc:c2:
                    bc:73:de:97:34:51:2c:d2:50:8d:e6:e7:82:eb:94:
                    eb:e8:9a:0f:57:f3:0e:75:4c:6f:e9:0f:8a:e8:5a:
                    24:0a:38:7a:5f:c4:9e:33:1e:9a:e2:65:b1:38:41:
                    28:e6:c7:40:d0:e7:07:d6:33:58:5b:24:e2:c5:f0:
                    c7:92:b3:1c:03:d2:a5:e7:67:bd:1d:d9:dc:71:3c:
                    73:f2:e7:bf:42:f7:df:93:47:21:21:50:b5:1f:53:
                    73:48:93:3a:eb:e1:56:9d:c3:93:d0:3a:10:17:55:
                    8c:60:c1:d1:46:b7:28:43:78:49:fd:8e:89:7a:1c:
                    c7:f3:6e:6b:ef:15:bf:71:87:29:d7:de:a1:c0:bc:
                    b5:0a:33:f9:7c:25:2b:b9:5c:dd:9f:52:6a:b4:ab:
                    64:b0:1a:a4:8a:c9:6e:65:74:17:2a:ea:39:46:1b:
                    b1:df:30:2b:cb:05:1b:66:c3:81:23:72:18:a3:1b:
                    65:ee:6c:5c:ba:1a:c1:c7:b0:90:4a:be:1a:ac:6f:
                    ea:f4:8f:ca:e5:e3:ee:60:97:2c:8c:19:76:fe:6a:
                    66:c1:99:c2:04:ff:3e:7a:e7:85:ed:47:d6:e4:8c:
                    7a:93:22:34:52:83:b1:39:c1:7a:09:7b:58:f0:d6:
                    9f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:75:16:41:99:44:4E:96:C3:14:8F:46:07:16:B9:DF:0D:B6:08:2A
            X509v3 Authority Key Identifier:
                keyid:A5:C9:87:02:4D:0A:8E:AC:09:64:09:FD:99:EC:32:EC:90:47:0B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pcmHAk0KjqwJZAn9mewy7JBHC6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B86/8933148AF7E311EF8ADA8A41C4F9AE02/pcmHAk0KjqwJZAn9mewy7JBHC6M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:05:a2:31:de:0c:67:ea:a2:59:e2:bc:8d:e7:d9:90:e6:a5:
         aa:0c:64:d0:80:16:f9:4f:78:d1:1f:0e:17:20:d7:10:4e:33:
         98:26:c9:1a:06:b0:b5:8e:fc:ec:9e:62:e1:6e:dc:41:d9:60:
         24:d8:36:4e:5b:3d:b9:f5:80:37:7a:68:00:32:ae:47:1d:59:
         19:2c:fa:7d:f1:b0:d4:dd:0f:91:2d:91:c7:bd:2a:12:3f:40:
         0b:47:f6:67:c1:8d:f4:2b:27:2b:a3:bd:72:3d:3d:d4:d1:80:
         6b:a5:08:6f:9b:95:ff:f7:a9:54:43:58:d2:5b:59:f4:a5:98:
         ae:2b:de:f2:c3:a7:32:98:a7:0b:77:55:ae:9b:fb:af:02:5b:
         da:6b:10:76:f1:a3:2d:b7:f0:1b:1b:a2:81:ed:8c:dc:07:a4:
         66:11:01:4f:32:da:28:54:47:10:68:56:ff:ae:13:ea:70:14:
         2c:5e:b8:e7:8d:b2:4b:1b:9d:6d:be:1f:91:9a:48:bc:28:b7:
         a3:90:1f:9a:34:6a:bd:60:86:36:5a:ad:de:98:cb:a4:68:66:
         77:90:fa:db:78:06:8e:5d:63:bb:53:a4:8d:97:bc:30:51:41:
         61:87:79:6c:df:97:2d:34:6b:25:3e:45:24:5c:6a:c9:8e:09:
         81:91:85:c9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
NEI4NjExMC8GA1UEBRMoQTVDOTg3MDI0RDBBOEVBQzA5NjQwOUZEOTlFQzMyRUM5
MDQ3MEJBMzAeFw0yNTA3MTkwNzM3MDhaFw0yNTA3MjYwNzM3MDhaMBgxFjAUBgNV
BAMTDTY4N2I0YjI1LTFlZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCdwrNVj1DzLZOP/li8wrxz3pc0USzSUI3m54LrlOvomg9X8w51TG/pD4roWiQK
OHpfxJ4zHpriZbE4QSjmx0DQ5wfWM1hbJOLF8MeSsxwD0qXnZ70d2dxxPHPy579C
99+TRyEhULUfU3NIkzrr4Vadw5PQOhAXVYxgwdFGtyhDeEn9jol6HMfzbmvvFb9x
hynX3qHAvLUKM/l8JSu5XN2fUmq0q2SwGqSKyW5ldBcq6jlGG7HfMCvLBRtmw4Ej
chijG2XubFy6GsHHsJBKvhqsb+r0j8rl4+5glyyMGXb+ambBmcIE/z5654XtR9bk
jHqTIjRSg7E5wXoJe1jw1p8VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUq3UWQZlE
TpbDFI9GBxa53w22CCowHwYDVR0jBBgwFoAUpcmHAk0KjqwJZAn9mewy7JBHC6Mw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0Qjg2Lzg5MzMxNDhBRjdF
MzExRUY4QURBOEE0MUM0RjlBRTAyL3BjbUhBazBLanF3SlpBbjltZXd5N0pCSEM2
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcGNtSEFrMEtqcXdKWkFuOW1ld3k3SkJIQzZNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0
Qjg2Lzg5MzMxNDhBRjdFMzExRUY4QURBOEE0MUM0RjlBRTAyL3BjbUhBazBLanF3
SlpBbjltZXd5N0pCSEM2TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACgFojHeDGfqolnivI3n2ZDmpaoMZNCAFvlPeNEfDhcg1xBOM5gmyRoG
sLWO/OyeYuFu3EHZYCTYNk5bPbn1gDd6aAAyrkcdWRks+n3xsNTdD5Etkce9KhI/
QAtH9mfBjfQrJyujvXI9PdTRgGulCG+blf/3qVRDWNJbWfSlmK4r3vLDpzKYpwt3
Va6b+68CW9prEHbxoy238BsbooHtjNwHpGYRAU8y2ihURxBoVv+uE+pwFCxeuOeN
sksbnW2+H5GaSLwot6OQH5o0ar1ghjZard6Yy6RoZneQ+tt4Bo5dY7tTpI2XvDBR
QWGHeWzfly00ayU+RSRcasmOCYGRhck=
-----END CERTIFICATE-----
Generated at Sun Jul 20 21:57:22 2025 by rpki-client