Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
File:                     FrmIQthhrv6AMEAgDJqqiVYPK8o.mft (raw, json)
Hash identifier:          vAAw7IggACsrRecWs+xvzWLlDERAEcA6RXYpzRdgjPc=
Subject key identifier:   35:EA:03:C7:CA:CF:60:85:E9:71:D8:DF:A5:F6:02:F1:EA:BB:18:87
Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
Certificate issuer:       /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Certificate serial:       06C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
Manifest number:          06B2
Signing time:             Sun 14 Sep 2025 22:25:34 +0000
Manifest this update:     Sun 14 Sep 2025 22:25:34 +0000
Manifest next update:     Sun 21 Sep 2025 22:25:34 +0000
Files and hashes:         1: FrmIQthhrv6AMEAgDJqqiVYPK8o.crl (hash: aNZaKi4OTt5FMbkaTCxVphb4E1Phdp7beuFNp6GN/dw=)
                          2: 5334A8127F7E11F0A875FC3CC4F9AE02.roa (hash: XZ6zeGoXDnSWwr4gCLXa845u9QXlAL13Qr+jc0LaxA4=)
                          3: 0F0EC4A67A8811EB95169F62C4F9AE02.roa (hash: cbGv9Az0WV6nTGgrUjq6cjPrkcXLiewtavxh7ffNibo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
                          rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Sep 2025 22:25:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1729 (0x6c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
        Validity
            Not Before: Sep 14 22:25:34 2025 GMT
            Not After : Sep 21 22:25:34 2025 GMT
        Subject: CN=68c740de-fc39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:c9:ce:67:a1:34:a1:62:91:56:28:58:0a:
                    9a:c5:d5:62:a4:09:1f:ef:6d:d9:f0:eb:b2:d9:dd:
                    28:6a:77:e9:ad:b7:d8:df:91:fb:14:ba:48:6c:f8:
                    96:8c:f8:9d:4b:e7:cc:c7:03:5d:fc:29:3b:f9:4c:
                    ca:74:10:ea:b2:11:ff:81:55:9f:fb:00:69:3a:c4:
                    69:6b:e4:77:9d:16:4d:02:d6:06:45:32:b4:73:61:
                    58:42:97:9a:5a:c7:47:53:69:21:8a:01:93:79:98:
                    86:b5:5e:66:12:dd:07:2f:2a:3b:8f:f3:46:45:f5:
                    c6:4c:b3:b0:d0:d1:88:26:60:c4:b5:ce:62:75:2a:
                    da:21:fa:31:08:a3:0b:11:0b:aa:08:78:91:e0:d3:
                    5a:57:30:19:6e:10:c2:91:d4:67:77:44:20:7c:3a:
                    46:62:f7:b6:00:b3:a3:5f:eb:04:b1:22:e5:69:23:
                    b5:65:76:a5:21:0d:4f:89:70:e5:c9:fb:ee:0a:78:
                    20:b0:73:33:48:79:a7:cd:70:de:2a:39:44:bd:e2:
                    e2:cf:d6:17:69:0d:07:23:cf:9f:6a:f8:0b:ec:5f:
                    56:a9:67:db:4f:65:7b:af:6f:4c:4f:a9:25:2c:96:
                    3f:f5:80:a6:cc:d6:c0:f7:2c:d0:cc:0d:91:cc:83:
                    63:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EA:03:C7:CA:CF:60:85:E9:71:D8:DF:A5:F6:02:F1:EA:BB:18:87
            X509v3 Authority Key Identifier:
                keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f0:2a:48:98:ba:63:8f:76:45:b7:a4:2d:24:ed:9c:1e:7c:
         0a:e9:f6:b6:b6:be:95:c9:e6:b6:c2:a1:d1:65:0e:e1:39:c2:
         b5:12:b8:1a:fa:2b:ba:4b:6d:01:f7:63:3b:f9:dc:94:ff:8e:
         43:a1:aa:e3:3e:4c:32:d0:73:55:87:64:4a:54:65:da:ae:f0:
         97:ba:6c:05:82:ca:a7:53:2c:89:0e:a7:4e:fc:ae:11:f3:34:
         eb:aa:f7:89:5c:f9:00:dc:30:7c:b0:46:5d:b4:b4:75:f3:0a:
         b4:ee:23:53:de:40:61:26:d3:0a:2b:8a:a3:37:3a:42:db:76:
         67:88:03:c3:af:47:c8:c6:4f:40:48:ea:46:c0:21:85:d4:24:
         36:47:b1:95:57:95:88:e0:78:a5:48:58:fa:83:75:20:70:95:
         25:65:28:03:8b:67:e6:e4:d9:80:d9:b5:ff:0b:d4:9a:3a:a0:
         46:ef:c6:47:e6:db:43:36:c8:04:14:63:62:e8:bc:67:17:e7:
         f3:3e:9b:b4:44:75:09:b9:3d:a6:73:aa:8d:30:b8:77:72:f4:
         3b:ae:4e:fc:b1:c4:17:72:9a:09:8e:ef:24:ee:85:e5:17:ff:
         10:87:7c:31:cb:d2:59:1b:30:f2:d9:a7:17:92:dd:42:25:ec:
         82:60:48:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFCQ0IxMTAvBgNVBAUTKDE2Qjk4ODQyRDg2MUFFRkU4MDMwNDAyMDBDOUFBQTg5
NTYwRjJCQ0EwHhcNMjUwOTE0MjIyNTM0WhcNMjUwOTIxMjIyNTM0WjAYMRYwFAYD
VQQDEw02OGM3NDBkZS1mYzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyuLJzmehNKFikVYoWAqaxdVipAkf723Z8Ouy2d0oanfprbfY35H7FLpIbPiW
jPidS+fMxwNd/Ck7+UzKdBDqshH/gVWf+wBpOsRpa+R3nRZNAtYGRTK0c2FYQpea
WsdHU2khigGTeZiGtV5mEt0HLyo7j/NGRfXGTLOw0NGIJmDEtc5idSraIfoxCKML
EQuqCHiR4NNaVzAZbhDCkdRnd0QgfDpGYve2ALOjX+sEsSLlaSO1ZXalIQ1PiXDl
yfvuCnggsHMzSHmnzXDeKjlEveLiz9YXaQ0HI8+favgL7F9WqWfbT2V7r29MT6kl
LJY/9YCmzNbA9yzQzA2RzINj+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXqA8fK
z2CF6XHY36X2AvHquxiHMB8GA1UdIwQYMBaAFBa5iELYYa7+gDBAIAyaqolWDyvK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUJDQi8zNDJGRkYxODdB
ODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2NkFNRUFnREpxcWlWWVBL
OG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZybUlRdGhocnY2QU1FQWdESnFxaVZZUEs4by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUJDQi8zNDJGRkYxODdBODYxMUVCOTdBRTUxNjBDNEY5QUUwMi9Gcm1JUXRoaHJ2
NkFNRUFnREpxcWlWWVBLOG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+8CpImLpjj3ZFt6QtJO2cHnwK6fa2tr6Vyea2wqHRZQ7hOcK1Erga
+iu6S20B92M7+dyU/45DoarjPkwy0HNVh2RKVGXarvCXumwFgsqnUyyJDqdO/K4R
8zTrqveJXPkA3DB8sEZdtLR18wq07iNT3kBhJtMKK4qjNzpC23ZniAPDr0fIxk9A
SOpGwCGF1CQ2R7GVV5WI4HilSFj6g3UgcJUlZSgDi2fm5NmA2bX/C9SaOqBG78ZH
5ttDNsgEFGNi6LxnF+fzPpu0RHUJuT2mc6qNMLh3cvQ7rk78scQXcpoJju8k7oXl
F/8Qh3wxy9JZGzDy2acXkt1CJeyCYEg9
-----END CERTIFICATE-----
Generated at Tue Sep 16 00:20:38 2025 by rpki-client