Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
File:                     _I1R2lNSEj3a5jdlZPjVaB2ksxw.mft (raw, json)
Hash identifier:          tM66caIw9p7LfR+JWsgCxTX+twLY6yjPIMQBM6hycNQ=
Subject key identifier:   76:CD:E3:7D:1F:35:B4:35:DC:CA:54:D4:8E:C0:82:FC:AB:52:62:DF
Authority key identifier: FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C
Certificate issuer:       /CN=A91FCB3B/serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
Manifest number:          0180
Signing time:             Thu 21 Aug 2025 03:44:38 +0000
Manifest this update:     Thu 21 Aug 2025 03:44:38 +0000
Manifest next update:     Thu 28 Aug 2025 03:44:38 +0000
Files and hashes:         1: _I1R2lNSEj3a5jdlZPjVaB2ksxw.crl (hash: YXQ41Y8vPxqrE4uhrFGTTGPO23Oa4nfcEM+r1gbVHxE=)
                          2: C9763EB431D811EE89285A41C4F9AE02.roa (hash: +03LMs4GrIEKMr4AUS8THT/+aKHBZJZQJL5qDyXGi38=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl
                          rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Aug 2025 03:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCB3B, serialNumber=FC8D51DA5352123DDAE6376564F8D5681DA4B31C
        Validity
            Not Before: Aug 21 03:44:38 2025 GMT
            Not After : Aug 28 03:44:38 2025 GMT
        Subject: CN=68a69626-c02a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:72:98:cf:6f:ed:59:72:85:64:47:0f:14:83:
                    ea:b0:4f:66:7a:9b:8c:f4:11:57:ef:5e:8a:3b:41:
                    c0:b8:9d:a8:f9:cc:5d:ce:e4:c7:3f:7f:a5:09:d9:
                    8b:42:b7:c5:23:40:a6:62:93:f2:95:02:49:6c:d8:
                    31:20:37:72:85:54:78:b0:af:a6:ce:fd:35:35:e0:
                    a7:04:fa:b7:d4:e7:3a:b2:49:d9:b5:67:ee:fe:d7:
                    09:6f:c9:e3:6d:16:bd:bf:c2:54:14:b1:19:bb:89:
                    3d:9a:f3:9c:cb:66:42:c8:de:62:ea:45:06:35:4a:
                    71:3b:dd:88:00:f5:18:ee:c1:85:51:4b:61:d0:ae:
                    71:e7:6a:4d:fb:7d:1a:74:46:9c:fc:da:c9:f8:13:
                    69:e5:65:57:3a:f0:25:c7:4b:ae:fc:eb:92:f1:01:
                    bd:c6:fd:f4:9f:b4:3d:fb:f9:ab:c8:b6:22:05:01:
                    fd:d1:00:3e:d3:67:55:90:d5:e7:07:44:3d:4c:14:
                    e3:ca:3c:c2:81:4d:ab:17:0f:38:5f:32:06:3a:cb:
                    22:20:e1:b4:11:f0:36:d7:37:04:6f:d4:b7:47:f8:
                    a6:79:2b:6a:81:55:52:2e:a4:2e:a6:55:64:74:3b:
                    a8:93:be:b6:38:eb:65:91:b6:12:e1:08:c9:c6:fa:
                    c0:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CD:E3:7D:1F:35:B4:35:DC:CA:54:D4:8E:C0:82:FC:AB:52:62:DF
            X509v3 Authority Key Identifier:
                keyid:FC:8D:51:DA:53:52:12:3D:DA:E6:37:65:64:F8:D5:68:1D:A4:B3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_I1R2lNSEj3a5jdlZPjVaB2ksxw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCB3B/8629C43231D811EE8BE9C440C4F9AE02/_I1R2lNSEj3a5jdlZPjVaB2ksxw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:03:21:6b:db:d3:63:13:cd:f3:ad:dc:1f:8b:dd:9d:39:25:
         8d:08:48:75:db:80:07:29:f0:3e:fd:66:e9:ea:6c:f6:38:fc:
         73:9a:d3:d9:5b:58:63:43:08:84:5a:a5:c3:65:29:c9:0f:90:
         19:0f:1a:30:68:2b:85:09:75:59:df:80:41:c9:40:bb:2e:3d:
         b5:9c:41:1b:60:66:4f:15:8b:c9:c9:12:b2:bf:b7:9b:4e:9b:
         8b:ba:17:3b:ed:19:07:18:1e:9e:18:b1:12:7d:13:d9:c1:a5:
         83:6d:63:6c:de:1a:98:c8:90:d3:a8:40:21:dd:97:07:10:f9:
         3d:27:87:cc:7a:44:89:7f:6a:26:80:67:ff:42:07:4f:3c:bf:
         ef:c9:15:e6:2e:d5:48:09:27:3f:23:55:10:d8:8b:94:60:be:
         db:3c:0d:27:e2:c1:dc:73:cd:1e:ce:df:b2:38:ce:ea:71:39:
         89:e5:dd:ff:bb:99:9b:29:43:b9:34:82:c1:32:fa:a2:30:91:
         2c:97:30:c3:e4:80:03:1c:97:5d:83:d5:e6:78:13:71:bc:3a:
         85:0a:fc:80:b4:fb:81:04:59:17:d1:57:4d:5e:4e:e2:54:74:
         64:3b:ff:eb:69:24:ae:86:b6:9d:1b:d9:8f:5b:fa:d2:55:76:
         8e:d3:77:26
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkNCM0IxMTAvBgNVBAUTKEZDOEQ1MURBNTM1MjEyM0REQUU2Mzc2NTY0RjhENTY4
MURBNEIzMUMwHhcNMjUwODIxMDM0NDM4WhcNMjUwODI4MDM0NDM4WjAYMRYwFAYD
VQQDEw02OGE2OTYyNi1jMDJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1XKYz2/tWXKFZEcPFIPqsE9mepuM9BFX716KO0HAuJ2o+cxdzuTHP3+lCdmL
QrfFI0CmYpPylQJJbNgxIDdyhVR4sK+mzv01NeCnBPq31Oc6sknZtWfu/tcJb8nj
bRa9v8JUFLEZu4k9mvOcy2ZCyN5i6kUGNUpxO92IAPUY7sGFUUth0K5x52pN+30a
dEac/NrJ+BNp5WVXOvAlx0uu/OuS8QG9xv30n7Q9+/mryLYiBQH90QA+02dVkNXn
B0Q9TBTjyjzCgU2rFw84XzIGOssiIOG0EfA21zcEb9S3R/imeStqgVVSLqQuplVk
dDuok762OOtlkbYS4QjJxvrAKQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHbN430f
NbQ13MpU1I7AgvyrUmLfMB8GA1UdIwQYMBaAFPyNUdpTUhI92uY3ZWT41WgdpLMc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0IzQi84NjI5QzQzMjMx
RDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0VqM2E1amRsWlBqVmFCMmtz
eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19JMVIybE5TRWozYTVqZGxaUGpWYUIya3N4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Q0IzQi84NjI5QzQzMjMxRDgxMUVFOEJFOUM0NDBDNEY5QUUwMi9fSTFSMmxOU0Vq
M2E1amRsWlBqVmFCMmtzeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCHAyFr29NjE83zrdwfi92dOSWNCEh124AHKfA+/Wbp6mz2OPxzmtPZ
W1hjQwiEWqXDZSnJD5AZDxowaCuFCXVZ34BByUC7Lj21nEEbYGZPFYvJyRKyv7eb
TpuLuhc77RkHGB6eGLESfRPZwaWDbWNs3hqYyJDTqEAh3ZcHEPk9J4fMekSJf2om
gGf/QgdPPL/vyRXmLtVICSc/I1UQ2IuUYL7bPA0n4sHcc80ezt+yOM7qcTmJ5d3/
u5mbKUO5NILBMvqiMJEslzDD5IADHJddg9XmeBNxvDqFCvyAtPuBBFkX0VdNXk7i
VHRkO//raSSuhradG9mPW/rSVXaO03cm
-----END CERTIFICATE-----
Generated at Fri Aug 22 16:34:02 2025 by rpki-client