Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
File:                     X-7enTglQ_BRUn-lM9R6kXB35jI.mft (raw, json)
Hash identifier:          10fphgAFpfvhy8q+xqylJl0pV3K+UadtrqnGxP5Z31M=
Subject key identifier:   1E:BF:C9:16:74:0D:45:63:59:E0:C8:F0:E5:42:8D:3D:B4:30:A8:2F
Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32
Certificate issuer:       /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
Certificate serial:       1E5C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
Manifest number:          1DD6
Signing time:             Sat 06 Sep 2025 16:10:52 +0000
Manifest this update:     Sat 06 Sep 2025 16:10:51 +0000
Manifest next update:     Sat 13 Sep 2025 16:10:51 +0000
Files and hashes:         1: X-7enTglQ_BRUn-lM9R6kXB35jI.crl (hash: gcvNcd8Y5MfkHBoE+XC5aV8mDExoStIPTAAz5s6t9Ps=)
                          2: 1A0D44FA3B5411EABAC6EE18C4F9AE02.roa (hash: ErQUIZBQOuclNYifsKsmx5/Jnr/1hpU5xKibhIO600k=)
                          3: B8BA4E603B5211EAA0D53F12C4F9AE02.roa (hash: JDAGe4IksOtjrzlmQZ9zVBIzM1ZKwteeQYN9TBrAsPk=)
                          4: DF730482A32311EFBE77BA2EC4F9AE02.roa (hash: FW9NYXvHGiXVfFykPHyKhdOjK9fS+NAvHhqmtmC3mxY=)
                          5: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (hash: KptRM9OhZOY+IAnuIj6dKpgRtL+UG95HSLHK6SbwluY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl
                          rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 16:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7772 (0x1e5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632
        Validity
            Not Before: Sep  6 16:10:51 2025 GMT
            Not After : Sep 13 16:10:51 2025 GMT
        Subject: CN=68bc5d0b-a70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bf:07:d5:7e:ee:6f:74:19:10:70:6d:96:e1:
                    08:08:d5:21:64:3a:07:88:47:f2:97:64:53:4b:cf:
                    53:be:f2:aa:b2:cf:c3:cb:01:b7:0d:1c:65:32:bd:
                    3f:e7:c1:bc:e4:33:ce:13:04:4b:ec:94:c2:13:5d:
                    75:bc:62:f8:84:1c:10:47:1f:76:71:d4:bc:52:7c:
                    6d:c9:2f:aa:e0:91:d0:d0:67:e2:bd:9b:98:e3:44:
                    21:46:9b:80:3c:6e:43:52:53:c6:49:6d:35:6d:71:
                    6b:a7:1e:51:00:7c:69:59:56:d5:e6:f3:3c:58:99:
                    75:b3:eb:d3:26:14:2d:06:ae:19:dd:a3:00:cc:66:
                    ae:d0:8c:bf:cf:2c:99:fe:5b:8e:22:dc:d0:00:af:
                    39:87:95:03:0c:b8:28:af:83:ac:ba:43:fc:17:0e:
                    70:10:91:ad:2b:80:52:f8:d7:d1:cd:fc:5c:39:0f:
                    be:aa:96:9a:32:ab:a3:f3:38:96:f3:34:9c:56:1e:
                    53:c3:bc:e7:d3:56:2d:f1:15:5c:7b:7e:b0:26:4a:
                    fc:6d:c8:21:e2:54:c8:a0:37:81:32:b9:47:b4:3f:
                    6c:cd:e8:30:31:46:42:0f:9d:2a:d6:02:c1:5f:5f:
                    02:a2:d7:d1:e7:3f:77:9f:d2:75:3c:ef:5a:6f:18:
                    e4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BF:C9:16:74:0D:45:63:59:E0:C8:F0:E5:42:8D:3D:B4:30:A8:2F
            X509v3 Authority Key Identifier:
                keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:6f:96:b4:0a:3a:8f:f9:1a:20:c5:2d:4e:4d:fa:b5:05:c1:
         0f:51:ab:ec:1b:95:9e:83:b8:7c:96:f8:94:ba:ce:d4:c0:e5:
         a4:07:ad:d5:34:ed:bd:16:57:cc:47:12:b5:1b:90:a8:4b:62:
         47:8c:32:cf:e4:c7:1f:f3:d9:f0:45:21:b3:70:fe:5c:0c:64:
         67:c8:92:b7:5d:3c:eb:61:69:c1:02:31:bc:9b:9e:e3:55:10:
         70:dd:84:a5:a0:46:92:21:83:6e:19:b6:fb:8b:7a:29:00:d8:
         67:b8:a7:96:b7:f5:ab:2c:5b:22:65:16:e1:11:20:0e:85:fa:
         e9:ad:39:02:8d:ab:fb:7a:e1:7e:1c:6b:de:9c:31:6e:cc:78:
         c0:80:e1:9e:6d:b3:ce:2e:03:b3:be:be:db:f6:32:9f:c2:73:
         56:eb:0f:7f:bb:21:e4:f0:3d:cb:54:d9:b6:97:98:a9:3d:2f:
         fe:02:40:87:35:f8:5d:b8:d9:24:74:86:c4:39:92:15:ca:53:
         20:10:ad:6e:6e:4a:02:60:27:f4:de:d9:4d:cf:07:9c:01:e3:
         17:6e:1c:18:94:02:07:97:77:3d:af:ec:8a:cb:f8:32:dd:eb:
         fc:70:87:fd:5f:ed:d2:8a:ff:65:92:40:d6:99:ec:1c:71:bd:
         0f:97:ce:e5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx
NzA3N0U2MzIwHhcNMjUwOTA2MTYxMDUxWhcNMjUwOTEzMTYxMDUxWjAYMRYwFAYD
VQQDEw02OGJjNWQwYi1hNzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwL8H1X7ub3QZEHBtluEICNUhZDoHiEfyl2RTS89TvvKqss/DywG3DRxlMr0/
58G85DPOEwRL7JTCE111vGL4hBwQRx92cdS8UnxtyS+q4JHQ0GfivZuY40QhRpuA
PG5DUlPGSW01bXFrpx5RAHxpWVbV5vM8WJl1s+vTJhQtBq4Z3aMAzGau0Iy/zyyZ
/luOItzQAK85h5UDDLgor4OsukP8Fw5wEJGtK4BS+NfRzfxcOQ++qpaaMquj8ziW
8zScVh5Tw7zn01Yt8RVce36wJkr8bcgh4lTIoDeBMrlHtD9szegwMUZCD50q1gLB
X18CotfR5z93n9J1PO9abxjk9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB6/yRZ0
DUVjWeDI8OVCjT20MKgvMB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1
MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QTE5OC9BRDYyOTIyMkI1MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFf
QlJVbi1sTTlSNmtYQjM1akkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwb5a0CjqP+RogxS1OTfq1BcEPUavsG5Weg7h8lviUus7UwOWkB63V
NO29FlfMRxK1G5CoS2JHjDLP5Mcf89nwRSGzcP5cDGRnyJK3XTzrYWnBAjG8m57j
VRBw3YSloEaSIYNuGbb7i3opANhnuKeWt/WrLFsiZRbhESAOhfrprTkCjav7euF+
HGvenDFuzHjAgOGebbPOLgOzvr7b9jKfwnNW6w9/uyHk8D3LVNm2l5ipPS/+AkCH
NfhduNkkdIbEOZIVylMgEK1ubkoCYCf03tlNzwecAeMXbhwYlAIHl3c9r+yKy/gy
3ev8cIf9X+3Siv9lkkDWmewccb0Pl87l
-----END CERTIFICATE-----
Generated at Sat Sep 6 21:10:13 2025 by rpki-client