Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
File:                     Iln4cJbkCts8hBgOKLVsPogi9lE.mft (raw, json)
Hash identifier:          B7bTSDfreivoDchmsXW34npdOeqs09nRuZe2aLMo68Q=
Subject key identifier:   DE:F3:43:0F:0B:BC:59:96:DE:49:57:6B:60:D4:86:18:1F:97:7C:20
Authority key identifier: 22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51
Certificate issuer:       /CN=A91E9B89/serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651
Certificate serial:       A8
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
Manifest number:          A6
Signing time:             Wed 23 Jul 2025 06:32:41 +0000
Manifest this update:     Wed 23 Jul 2025 06:32:41 +0000
Manifest next update:     Wed 30 Jul 2025 06:32:41 +0000
Files and hashes:         1: Iln4cJbkCts8hBgOKLVsPogi9lE.crl (hash: HMa13QsNEgkkPNuodqA2yvBF2uzGspbg2rUg2m7Zd4Q=)
                          2: CCFF219C6C1811EFA5619D0FC4F9AE02.roa (hash: 3XxXrUl7XjjQy54chnpbCmHALQO6VY0UNh1QIEO4utw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl
                          rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 06:32:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9B89, serialNumber=2259F87096E40ADB3C84180E28B56C3E8822F651
        Validity
            Not Before: Jul 23 06:32:41 2025 GMT
            Not After : Jul 30 06:32:41 2025 GMT
        Subject: CN=68808209-1e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f7:42:56:22:f8:b0:a1:89:10:94:8b:21:1f:
                    36:2a:ba:0f:59:38:c0:5e:0b:72:3e:de:03:60:26:
                    7f:e7:fb:28:81:83:d2:f8:4b:a0:5c:69:46:5b:f9:
                    94:d0:a7:6e:e0:7e:7a:91:43:9d:06:19:86:f0:7b:
                    8e:ae:ec:fa:aa:32:ad:51:4a:c5:8d:d1:40:6e:5c:
                    e8:ba:67:ed:33:7c:0d:35:31:40:7a:a1:01:db:d9:
                    42:49:a5:93:10:ab:b4:c0:32:7b:90:01:f6:7c:ae:
                    ac:76:8e:8d:61:9f:6e:1b:e8:e7:7f:e1:40:96:dc:
                    2f:7f:f5:46:61:57:4d:aa:a9:d0:00:b2:e8:a7:1a:
                    14:4e:6c:a9:80:a5:c2:7a:1c:bd:05:46:7b:28:5b:
                    64:0f:79:4d:af:ee:ab:2c:9b:87:43:81:b1:9e:7a:
                    d1:1f:fb:70:48:9a:59:fd:5a:78:d4:a9:3a:48:7a:
                    a2:15:ad:8c:b6:c8:7f:82:6d:02:cb:cc:13:25:27:
                    7a:75:d8:43:15:85:43:f6:ee:42:5d:9e:00:4d:a1:
                    4f:aa:ed:4f:9c:a6:5e:ef:12:33:a1:28:b3:ec:c2:
                    f5:b1:b0:c9:b1:c0:c9:ef:dd:64:e2:50:65:b6:2f:
                    0e:e6:31:83:9f:02:72:81:a6:05:44:c9:32:3b:0b:
                    26:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F3:43:0F:0B:BC:59:96:DE:49:57:6B:60:D4:86:18:1F:97:7C:20
            X509v3 Authority Key Identifier:
                keyid:22:59:F8:70:96:E4:0A:DB:3C:84:18:0E:28:B5:6C:3E:88:22:F6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Iln4cJbkCts8hBgOKLVsPogi9lE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B89/3A9C8A566C1811EFAB6B690CC4F9AE02/Iln4cJbkCts8hBgOKLVsPogi9lE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:4a:9b:04:ce:e5:a4:94:c8:7b:91:5c:6f:12:12:de:89:96:
         a5:f9:29:cc:62:22:4a:cc:c8:fc:29:dd:a8:85:87:d0:67:ad:
         fc:7e:d8:6d:fe:75:b7:70:5f:99:e9:b5:be:d0:f6:65:c2:30:
         22:4e:99:da:2b:38:24:cc:5a:22:54:72:75:1a:c4:54:4a:f3:
         bb:50:bb:60:15:12:07:22:47:4e:1a:db:1f:14:ca:cd:d0:7b:
         98:b4:9b:7d:81:65:7c:b0:d0:45:2d:48:0e:cf:63:d7:da:dd:
         04:00:7e:54:ea:c0:2a:20:53:8b:73:52:49:a6:b7:f9:e5:1e:
         9e:b6:f6:f6:a3:ac:6b:7c:ce:fa:99:43:e2:36:07:00:69:cd:
         74:ff:8e:aa:c3:ec:77:fc:60:94:a5:bb:b9:50:e4:fe:a7:d1:
         9e:f2:b3:0f:f1:34:55:df:c2:ef:9d:fe:8e:59:25:03:dc:3f:
         a8:fb:ec:1a:00:62:43:b5:4d:39:ab:02:af:c9:ff:d8:95:54:
         63:82:d6:dc:b1:53:6e:93:4f:43:96:00:d8:76:e8:56:85:8d:
         ea:1f:85:49:60:0c:f4:d1:d9:3f:67:ba:a0:34:81:74:7b:70:
         22:49:3d:e2:f5:64:f6:36:d2:fd:82:83:7d:84:f4:32:d5:0b:
         97:e3:61:da
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTlCODkxMTAvBgNVBAUTKDIyNTlGODcwOTZFNDBBREIzQzg0MTgwRTI4QjU2QzNF
ODgyMkY2NTEwHhcNMjUwNzIzMDYzMjQxWhcNMjUwNzMwMDYzMjQxWjAYMRYwFAYD
VQQDEw02ODgwODIwOS0xZTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2/dCViL4sKGJEJSLIR82KroPWTjAXgtyPt4DYCZ/5/sogYPS+EugXGlGW/mU
0Kdu4H56kUOdBhmG8HuOruz6qjKtUUrFjdFAblzoumftM3wNNTFAeqEB29lCSaWT
EKu0wDJ7kAH2fK6sdo6NYZ9uG+jnf+FAltwvf/VGYVdNqqnQALLopxoUTmypgKXC
ehy9BUZ7KFtkD3lNr+6rLJuHQ4GxnnrRH/twSJpZ/Vp41Kk6SHqiFa2Mtsh/gm0C
y8wTJSd6ddhDFYVD9u5CXZ4ATaFPqu1PnKZe7xIzoSiz7ML1sbDJscDJ791k4lBl
ti8O5jGDnwJygaYFRMkyOwsmHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7zQw8L
vFmW3klXa2DUhhgfl3wgMB8GA1UdIwQYMBaAFCJZ+HCW5ArbPIQYDii1bD6IIvZR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOUI4OS8zQTlDOEE1NjZD
MTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0czhoQmdPS0xWc1BvZ2k5
bEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0lsbjRjSmJrQ3RzOGhCZ09LTFZzUG9naTlsRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OUI4OS8zQTlDOEE1NjZDMTgxMUVGQUI2QjY5MENDNEY5QUUwMi9JbG40Y0pia0N0
czhoQmdPS0xWc1BvZ2k5bEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAuSpsEzuWklMh7kVxvEhLeiZal+SnMYiJKzMj8Kd2ohYfQZ638ftht
/nW3cF+Z6bW+0PZlwjAiTpnaKzgkzFoiVHJ1GsRUSvO7ULtgFRIHIkdOGtsfFMrN
0HuYtJt9gWV8sNBFLUgOz2PX2t0EAH5U6sAqIFOLc1JJprf55R6etvb2o6xrfM76
mUPiNgcAac10/46qw+x3/GCUpbu5UOT+p9Ge8rMP8TRV38Lvnf6OWSUD3D+o++wa
AGJDtU05qwKvyf/YlVRjgtbcsVNuk09DlgDYduhWhY3qH4VJYAz00dk/Z7qgNIF0
e3AiST3i9WT2NtL9goN9hPQy1QuX42Ha
-----END CERTIFICATE-----
Generated at Thu Jul 24 08:28:05 2025 by rpki-client