Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
File:                     Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft (raw, json)
Hash identifier:          vWINwF7frVh6z5J4WY9gV99v5Tq+ZcW4jG8YkTcdQN8=
Subject key identifier:   FD:43:08:F3:A5:EB:DD:F5:79:99:56:FE:2E:AC:83:EF:D2:60:62:D7
Authority key identifier: 49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81
Certificate issuer:       /CN=A91FDE13/serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
Manifest number:          49
Signing time:             Fri 05 Sep 2025 07:57:58 +0000
Manifest this update:     Fri 05 Sep 2025 07:57:57 +0000
Manifest next update:     Fri 12 Sep 2025 07:57:57 +0000
Files and hashes:         1: Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl (hash: soGoy1NDx6WjQtP9vnbd5qP2n+vpjlpn5DUuGUgxAt4=)
                          2: 189D8FCE565D11F0B381417EC4F9AE02.roa (hash: cj52P7EVA7EzNB+cRXY75TfIttWbZ7w7qirjXKEDn/Y=)
                          3: 5B45D97C2A5611F0B7C8BB20C4F9AE02.roa (hash: UkjJv6j01kk67tAR7WvPOWkiQImQuY607Dwbp++ebI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl
                          rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 07:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDE13, serialNumber=49FD33D6F51AD6A49884469FA39FEF0432336F81
        Validity
            Not Before: Sep  5 07:57:57 2025 GMT
            Not After : Sep 12 07:57:57 2025 GMT
        Subject: CN=68ba9806-ba77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7b:9b:dc:68:d0:59:78:16:27:76:a0:4a:0d:
                    1b:c4:04:2c:1f:00:9f:80:0e:1b:c4:05:65:89:23:
                    4d:b5:0a:35:53:c8:3d:00:7c:0c:67:f0:4f:a2:21:
                    a9:8b:7a:e3:5b:de:3a:54:04:23:59:48:34:4e:fb:
                    2a:a6:57:d5:a2:67:45:25:23:66:63:31:94:57:40:
                    05:83:f0:21:8c:3e:84:f5:27:2c:3e:ca:6f:8c:bd:
                    3d:f7:b7:9a:c8:2c:5d:dd:3e:96:6d:2e:78:96:e6:
                    37:76:d7:f4:9b:8e:06:52:08:27:5d:15:2c:b8:f6:
                    6c:78:93:b1:c5:49:de:8e:ae:72:b6:d3:e3:bf:be:
                    2e:f4:d0:50:98:bb:ca:6c:95:72:83:72:2a:b5:25:
                    ce:cb:ea:9e:c7:cf:38:ad:21:df:2d:2a:f5:2d:4a:
                    0e:21:39:10:d3:ab:f2:1a:de:33:e9:4d:86:78:09:
                    ac:6e:71:36:42:e8:a7:cb:0a:d0:87:2d:85:40:e8:
                    8d:60:0c:00:a1:e3:c2:9e:1e:c6:3a:56:36:18:41:
                    d9:f5:62:75:b8:e3:45:0d:8f:a5:24:a8:cf:54:0a:
                    7c:28:35:44:59:de:56:45:6c:13:3e:4f:51:60:b3:
                    93:34:39:fc:5f:0e:f4:26:b5:f4:c2:1e:5b:11:63:
                    47:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:43:08:F3:A5:EB:DD:F5:79:99:56:FE:2E:AC:83:EF:D2:60:62:D7
            X509v3 Authority Key Identifier:
                keyid:49:FD:33:D6:F5:1A:D6:A4:98:84:46:9F:A3:9F:EF:04:32:33:6F:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sf0z1vUa1qSYhEafo5_vBDIzb4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDE13/151FE47E2A5611F0B84F5220C4F9AE02/Sf0z1vUa1qSYhEafo5_vBDIzb4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:2e:e3:25:28:88:32:f7:ba:4f:6e:8c:eb:f7:ea:da:9f:40:
         a4:e8:49:3a:9e:4e:7c:7e:d4:df:2b:d9:68:9f:33:c9:c1:67:
         96:75:04:5d:62:66:95:3c:fe:22:69:2b:5f:35:ab:1c:43:41:
         1e:80:f4:26:18:c6:eb:1f:9f:a3:ce:09:89:f6:2d:27:7a:c8:
         22:c4:4e:16:63:84:f2:11:ef:2a:73:05:2f:4c:7b:77:4e:93:
         0d:4b:af:cf:fc:f3:02:2b:9f:e1:18:8c:c7:dd:2c:a8:3a:27:
         f2:3b:50:8b:fa:30:06:f5:0b:d1:5b:48:32:f2:6e:ee:99:14:
         76:99:63:91:a8:7f:86:f6:99:96:df:11:16:85:63:9d:23:1a:
         a3:d6:ee:0b:74:ef:11:53:c5:74:7d:6d:be:0f:e9:73:06:7a:
         42:0a:04:47:90:a5:26:d6:e8:a8:62:61:03:b5:d0:1c:ba:14:
         0b:9e:46:58:c6:cc:0d:c4:e2:cc:65:0d:88:3f:1a:76:5a:28:
         e6:82:63:b3:90:81:38:3b:f7:5a:9b:df:2e:03:e3:da:63:24:
         cd:d2:1d:e2:0a:d9:28:bf:ec:4a:53:49:38:48:a1:3f:34:93:
         75:09:00:e0:f3:81:2d:4c:7f:77:07:85:b0:7a:33:da:6d:5c:
         5b:56:ae:d9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
REUxMzExMC8GA1UEBRMoNDlGRDMzRDZGNTFBRDZBNDk4ODQ0NjlGQTM5RkVGMDQz
MjMzNkY4MTAeFw0yNTA5MDUwNzU3NTdaFw0yNTA5MTIwNzU3NTdaMBgxFjAUBgNV
BAMTDTY4YmE5ODA2LWJhNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCe5vcaNBZeBYndqBKDRvEBCwfAJ+ADhvEBWWJI021CjVTyD0AfAxn8E+iIamL
euNb3jpUBCNZSDRO+yqmV9WiZ0UlI2ZjMZRXQAWD8CGMPoT1Jyw+ym+MvT33t5rI
LF3dPpZtLniW5jd21/SbjgZSCCddFSy49mx4k7HFSd6OrnK20+O/vi700FCYu8ps
lXKDciq1Jc7L6p7HzzitId8tKvUtSg4hORDTq/Ia3jPpTYZ4CaxucTZC6KfLCtCH
LYVA6I1gDACh48KeHsY6VjYYQdn1YnW440UNj6UkqM9UCnwoNURZ3lZFbBM+T1Fg
s5M0OfxfDvQmtfTCHlsRY0cLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/UMI86Xr
3fV5mVb+LqyD79JgYtcwHwYDVR0jBBgwFoAUSf0z1vUa1qSYhEafo5/vBDIzb4Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZERTEzLzE1MUZFNDdFMkE1
NjExRjBCODRGNTIyMEM0RjlBRTAyL1NmMHoxdlVhMXFTWWhFYWZvNV92QkRJemI0
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvU2YwejF2VWExcVNZaEVhZm81X3ZCREl6YjRFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE
RTEzLzE1MUZFNDdFMkE1NjExRjBCODRGNTIyMEM0RjlBRTAyL1NmMHoxdlVhMXFT
WWhFYWZvNV92QkRJemI0RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHcu4yUoiDL3uk9ujOv36tqfQKToSTqeTnx+1N8r2WifM8nBZ5Z1BF1i
ZpU8/iJpK181qxxDQR6A9CYYxusfn6POCYn2LSd6yCLEThZjhPIR7ypzBS9Me3dO
kw1Lr8/88wIrn+EYjMfdLKg6J/I7UIv6MAb1C9FbSDLybu6ZFHaZY5Gof4b2mZbf
ERaFY50jGqPW7gt07xFTxXR9bb4P6XMGekIKBEeQpSbW6KhiYQO10By6FAueRljG
zA3E4sxlDYg/GnZaKOaCY7OQgTg791qb3y4D49pjJM3SHeIK2Si/7EpTSThIoT80
k3UJAODzgS1Mf3cHhbB6M9ptXFtWrtk=
-----END CERTIFICATE-----
Generated at Sat Sep 6 16:04:57 2025 by rpki-client