Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File:                     u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier:          vFfLcePFbz6hvLh16aVMiGSyK04ijN063v3465JoGHU=
Subject key identifier:   BD:34:EE:D2:E4:C6:7C:A0:EF:5A:34:BF:EB:63:C2:2E:63:EC:57:E3
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer:       /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial:       01F7
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number:          01F4
Signing time:             Mon 11 Aug 2025 02:34:23 +0000
Manifest this update:     Mon 11 Aug 2025 02:34:22 +0000
Manifest next update:     Mon 18 Aug 2025 02:34:22 +0000
Files and hashes:         1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: UDGyF46E+s15rKtaAR6OunDNEREejK7PlXdDxj+YIGs=)
                          2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: i1JD8msSihYz7KvKL8WS56vjnbp4Wnh0IyWM047eZr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
                          rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111B00, serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
        Validity
            Not Before: Aug 11 02:34:22 2025 GMT
            Not After : Aug 18 02:34:22 2025 GMT
        Subject: CN=689956ae-59fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:58:d4:42:59:50:fe:a0:8d:94:28:cd:19:03:
                    d5:a0:b3:02:b9:f6:cd:fc:ad:a9:ff:0c:d7:45:37:
                    00:03:0d:23:88:69:88:06:d2:c6:fb:9f:01:fa:3b:
                    cb:6f:4f:e0:51:b6:42:8d:3f:72:fc:c2:38:09:69:
                    16:a7:3e:e7:33:8e:18:0a:b8:44:db:7a:07:4b:54:
                    e2:49:aa:b5:7c:b0:0c:f2:42:1e:33:ab:bf:b6:de:
                    09:6a:34:00:50:67:fa:ba:f6:56:45:fa:da:2b:62:
                    ea:48:65:df:7b:82:d6:44:9a:d5:8c:e5:38:bd:8f:
                    ae:3e:b2:ef:8a:b3:10:2d:a9:ed:70:e5:19:ea:2d:
                    13:98:81:ec:ce:02:3f:3c:71:7e:e7:94:ab:f8:d7:
                    4d:75:ea:9d:6e:8f:c5:47:dc:e6:ad:9f:2c:f6:f3:
                    ae:b1:a8:b9:e7:f9:fb:8e:54:76:2d:da:1f:0d:5e:
                    56:ec:73:5e:b6:9b:1a:51:c4:b0:93:a2:98:5c:d6:
                    3a:64:bc:63:37:cc:9c:d3:68:45:24:da:ea:11:a5:
                    e3:5b:90:ed:7d:77:78:87:71:a8:fd:c1:2d:64:55:
                    f3:f9:33:e1:fd:d3:da:e1:e3:3c:4f:29:52:4f:18:
                    ba:c0:4a:fd:6e:e7:e0:b4:ff:c6:3c:cb:4d:51:dd:
                    88:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:34:EE:D2:E4:C6:7C:A0:EF:5A:34:BF:EB:63:C2:2E:63:EC:57:E3
            X509v3 Authority Key Identifier:
                keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:35:e4:54:51:e1:ea:80:76:41:69:ea:23:e0:eb:9c:10:9a:
         03:c0:37:28:d2:50:d3:ae:5e:07:04:b4:97:3d:41:b1:bb:3e:
         75:11:91:63:10:9f:c4:8c:de:82:e1:15:0d:c9:46:df:b7:ac:
         62:65:29:80:06:39:e4:2d:5d:53:3f:de:70:9d:03:19:e2:20:
         b9:fb:f6:56:b3:37:4a:76:ae:b4:53:c0:60:cd:fa:aa:30:8e:
         1f:32:e7:f2:7d:20:e5:1d:56:a2:df:92:b9:dd:2b:3e:d7:85:
         4b:97:fa:1c:4f:dd:d0:2f:fc:c2:26:c4:0f:8d:52:b7:7c:18:
         cf:04:f3:b5:27:6b:5e:bd:2b:d4:84:b3:2c:ee:f5:e6:30:de:
         ba:f5:ca:08:41:53:d5:0a:de:8c:c1:d4:a4:7c:37:68:f4:3d:
         d2:46:a9:b4:dc:62:f9:ef:b8:04:f5:2e:b1:db:b8:dd:e8:32:
         1a:b3:4f:c4:c9:ec:fc:cf:c9:fc:36:a4:2b:80:97:e4:03:29:
         f0:f9:4b:9d:1b:a4:5d:94:88:09:19:3a:48:f7:c2:58:fc:e9:
         ef:bb:93:d2:e1:b6:9c:45:98:aa:86:07:8e:f6:42:ed:fd:66:
         65:fc:5d:52:92:7c:a0:2d:83:b1:b3:9a:d4:76:1d:48:e5:54:
         31:b5:b0:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFCMDAxMTAvBgNVBAUTKEJCRDJFOUQ5MTNDNjQ1QzhBMDUxOTI0NzRDRkZBODk2
QkI5QTRFQTYwHhcNMjUwODExMDIzNDIyWhcNMjUwODE4MDIzNDIyWjAYMRYwFAYD
VQQDEw02ODk5NTZhZS01OWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxljUQllQ/qCNlCjNGQPVoLMCufbN/K2p/wzXRTcAAw0jiGmIBtLG+58B+jvL
b0/gUbZCjT9y/MI4CWkWpz7nM44YCrhE23oHS1TiSaq1fLAM8kIeM6u/tt4JajQA
UGf6uvZWRfraK2LqSGXfe4LWRJrVjOU4vY+uPrLvirMQLantcOUZ6i0TmIHszgI/
PHF+55Sr+NdNdeqdbo/FR9zmrZ8s9vOusai55/n7jlR2LdofDV5W7HNetpsaUcSw
k6KYXNY6ZLxjN8yc02hFJNrqEaXjW5DtfXd4h3Go/cEtZFXz+TPh/dPa4eM8TylS
Txi6wEr9bufgtP/GPMtNUd2IawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL007tLk
xnyg71o0v+tjwi5j7FfjMB8GA1UdIwQYMBaAFLvS6dkTxkXIoFGSR0z/qJa7mk6m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUIwMC8xM0NBNTE5Mjc1
RDkxMUVEQUI1OUM0NDJDNEY5QUUwMi91OUxwMlJQR1JjaWdVWkpIVFAtb2xydWFU
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3U5THAyUlBHUmNpZ1VaSkhUUC1vbHJ1YVRxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MUIwMC8xM0NBNTE5Mjc1RDkxMUVEQUI1OUM0NDJDNEY5QUUwMi91OUxwMlJQR1Jj
aWdVWkpIVFAtb2xydWFUcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8NeRUUeHqgHZBaeoj4OucEJoDwDco0lDTrl4HBLSXPUGxuz51EZFj
EJ/EjN6C4RUNyUbft6xiZSmABjnkLV1TP95wnQMZ4iC5+/ZWszdKdq60U8Bgzfqq
MI4fMufyfSDlHVai35K53Ss+14VLl/ocT93QL/zCJsQPjVK3fBjPBPO1J2tevSvU
hLMs7vXmMN669coIQVPVCt6MwdSkfDdo9D3SRqm03GL577gE9S6x27jd6DIas0/E
yez8z8n8NqQrgJfkAynw+UudG6RdlIgJGTpI98JY/Onvu5PS4bacRZiqhgeO9kLt
/WZl/F1SknygLYOxs5rUdh1I5VQxtbDB
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:00:41 2025 by rpki-client