Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
File:                     4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft (raw, json)
Hash identifier:          Pd2aH7PDf38bYgOdmVJchOyujYVUHEAzAREYuzYKlR4=
Subject key identifier:   BA:D1:6E:D2:13:84:A1:46:9C:9B:5A:2B:9A:5D:F7:2E:CC:AC:87:F8
Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB
Certificate issuer:       /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
Manifest number:          1F
Signing time:             Wed 23 Jul 2025 08:15:47 +0000
Manifest this update:     Wed 23 Jul 2025 08:15:46 +0000
Manifest next update:     Wed 30 Jul 2025 08:15:46 +0000
Files and hashes:         1: 4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl (hash: hX8vlGLVJii+8wKq0gm9drgWgZqIpOiUhHRVE3+Z5FA=)
                          2: 7D7F13983B9D11F08338F965C4F9AE02.roa (hash: iR9RmJIaK9kKAtKzjMGd269EeycB0OEwfaUigxvrCq4=)
                          3: F88154843B9D11F091B39D67C4F9AE02.roa (hash: nNxkYkRl2gKLDvZBsXppHYQmBwtDL7vgL/l44dOoypk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl
                          rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Jul 2025 08:15:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB
        Validity
            Not Before: Jul 23 08:15:46 2025 GMT
            Not After : Jul 30 08:15:46 2025 GMT
        Subject: CN=68809a33-75a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c3:ce:8a:ab:b9:42:bc:75:83:b6:eb:31:4e:
                    e6:9d:23:a7:9f:cd:7b:17:30:e9:c7:e2:85:91:36:
                    e9:9a:31:b0:88:90:07:3b:a9:98:74:37:90:19:8a:
                    bb:99:57:87:b7:4c:38:a4:14:62:f4:b8:59:a5:65:
                    5b:75:fd:53:be:01:24:3f:6b:7f:fd:9d:48:1e:6a:
                    01:c6:25:7c:6f:15:ca:44:fa:d8:19:77:d8:aa:a4:
                    f1:10:c3:11:31:30:de:2b:3f:b2:5a:07:50:c3:ed:
                    e6:40:cf:6c:20:34:22:a3:44:a7:ae:48:cf:ba:e8:
                    79:92:17:d5:88:9a:53:64:17:3d:a0:dd:c8:fc:1b:
                    ef:f9:1f:8c:f1:bb:c4:6b:1f:c2:45:6d:a0:75:1c:
                    7e:4f:69:a9:a3:75:4c:55:da:d6:50:e0:2e:ef:fd:
                    d9:c7:e3:d2:1a:eb:4d:08:40:6b:25:60:3f:cf:05:
                    4c:cb:d0:78:d7:de:6c:3a:db:c1:a2:bc:99:af:8b:
                    07:53:44:03:5f:42:aa:31:37:a3:33:4d:be:6f:a0:
                    60:38:ce:29:39:b8:97:b5:12:79:54:e3:04:0d:52:
                    55:70:40:2b:e4:a4:73:37:32:22:8f:bb:12:f5:52:
                    fb:6e:bd:ad:ad:8c:b4:14:a3:2f:66:b7:65:2a:39:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D1:6E:D2:13:84:A1:46:9C:9B:5A:2B:9A:5D:F7:2E:CC:AC:87:F8
            X509v3 Authority Key Identifier:
                keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:dd:3f:b4:b9:bf:c2:1e:38:f3:fb:31:e0:4a:51:ec:5b:85:
         fa:16:ff:6e:a5:36:3c:b5:0c:7c:a3:80:12:b7:93:3a:e9:dc:
         e6:a0:cf:ed:7c:15:29:30:6c:2b:5a:25:aa:e4:9f:c5:51:94:
         25:e5:97:22:7f:2c:05:a1:a5:0f:0e:70:2c:88:10:d0:0e:74:
         23:50:64:cb:06:f9:f9:ba:49:70:94:fe:66:86:b8:75:88:31:
         f9:61:67:24:41:5f:b9:c4:d3:e7:57:3a:54:1a:39:38:40:91:
         98:98:8b:f1:83:56:8e:4a:31:6a:19:5e:6e:68:ec:7f:37:68:
         12:b8:34:9a:3a:f8:d9:cc:21:95:78:26:3d:71:d7:6e:76:a9:
         8c:8e:10:7b:f2:a4:12:3f:d4:0e:79:46:15:bd:bf:25:69:c5:
         8c:53:bf:60:fe:e9:46:3d:44:5c:87:67:91:96:9f:0b:12:24:
         f3:51:f1:cf:f7:2b:cb:3d:e5:b4:95:1c:e7:75:fe:2a:13:7d:
         09:59:c6:4c:51:56:c4:01:02:fb:9f:1e:f4:74:2b:4b:9b:a5:
         0c:1b:d6:bc:ce:5b:02:4f:de:e7:52:1a:8c:83:20:4e:64:c0:
         7a:2d:c7:04:f7:ea:c2:47:59:f8:2a:9b:21:97:b7:17:f8:59:
         b8:83:3d:d6
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBITANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
NkMxMDExMC8GA1UEBRMoRTJCMERGQTY5MEQyQzdFQUM0MzYzNjc1NkU0MzdCN0My
NjI2RjRCQjAeFw0yNTA3MjMwODE1NDZaFw0yNTA3MzAwODE1NDZaMBgxFjAUBgNV
BAMTDTY4ODA5YTMzLTc1YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCow86Kq7lCvHWDtusxTuadI6efzXsXMOnH4oWRNumaMbCIkAc7qZh0N5AZiruZ
V4e3TDikFGL0uFmlZVt1/VO+ASQ/a3/9nUgeagHGJXxvFcpE+tgZd9iqpPEQwxEx
MN4rP7JaB1DD7eZAz2wgNCKjRKeuSM+66HmSF9WImlNkFz2g3cj8G+/5H4zxu8Rr
H8JFbaB1HH5PaamjdUxV2tZQ4C7v/dnH49Ia600IQGslYD/PBUzL0HjX3mw628Gi
vJmviwdTRANfQqoxN6MzTb5voGA4zik5uJe1EnlU4wQNUlVwQCvkpHM3MiKPuxL1
Uvtuva2tjLQUoy9mt2UqOYYVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUutFu0hOE
oUacm1orml33Lsysh/gwHwYDVR0jBBgwFoAU4rDfppDSx+rENjZ1bkN7fCYm9Lsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2QzEwLzBFOTQwNUJBM0I5
RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlM
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvNHJEZnBwRFN4LXJFTmpaMWJrTjdmQ1ltOUxzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY2
QzEwLzBFOTQwNUJBM0I5RDExRjA5MDFDQjI2MkM0RjlBRTAyLzRyRGZwcERTeC1y
RU5qWjFia043ZkNZbTlMcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACfdP7S5v8IeOPP7MeBKUexbhfoW/26lNjy1DHyjgBK3kzrp3Oagz+18
FSkwbCtaJarkn8VRlCXllyJ/LAWhpQ8OcCyIENAOdCNQZMsG+fm6SXCU/maGuHWI
MflhZyRBX7nE0+dXOlQaOThAkZiYi/GDVo5KMWoZXm5o7H83aBK4NJo6+NnMIZV4
Jj1x1252qYyOEHvypBI/1A55RhW9vyVpxYxTv2D+6UY9RFyHZ5GWnwsSJPNR8c/3
K8s95bSVHOd1/ioTfQlZxkxRVsQBAvufHvR0K0ubpQwb1rzOWwJP3udSGoyDIE5k
wHotxwT36sJHWfgqmyGXtxf4WbiDPdY=
-----END CERTIFICATE-----
Generated at Thu Jul 24 04:58:42 2025 by rpki-client