Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
File:                     lTU3mXduubP_WHJemdAqplT7GgQ.mft (raw, json)
Hash identifier:          LV6la9AsWxdLh79E3XR2azE15caYO1B166zhFKmmNU4=
Subject key identifier:   71:5B:67:88:D7:B6:DD:7D:AD:F0:D1:B6:07:F3:DD:5F:FE:5D:98:DE
Authority key identifier: 95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04
Certificate issuer:       /CN=A9113E15/serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04
Certificate serial:       05DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
Manifest number:          05D7
Signing time:             Fri 08 Aug 2025 23:28:22 +0000
Manifest this update:     Fri 08 Aug 2025 23:28:21 +0000
Manifest next update:     Fri 15 Aug 2025 23:28:21 +0000
Files and hashes:         1: lTU3mXduubP_WHJemdAqplT7GgQ.crl (hash: YM2fqjtHd8urOjsRUv5Y0Vieismy+cPQCWDTQYXFPRw=)
                          2: F9869896C8F411EBB460DB52C4F9AE02.roa (hash: pbtxZL2670Vbm5T4UtC+5fCmSHFSsbOrgHoM6Opfzec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl
                          rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1500 (0x5dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9113E15, serialNumber=95353799776EB9B3FF58725E99D02AA654FB1A04
        Validity
            Not Before: Aug  8 23:28:21 2025 GMT
            Not After : Aug 15 23:28:21 2025 GMT
        Subject: CN=68968816-23ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:f8:60:ea:88:57:f5:a8:68:3d:0f:bc:0a:
                    44:ee:f1:f5:5f:4c:b7:3a:df:95:84:17:d2:0e:06:
                    ad:30:75:ad:20:ec:8d:69:4d:cb:9a:f5:57:4c:e6:
                    2b:c2:97:0a:2d:c8:a6:df:ed:c6:3c:56:58:33:32:
                    39:ba:d7:f7:85:d7:cf:a0:b6:d3:ba:1d:90:4b:71:
                    5f:5a:98:cc:45:af:e7:53:04:3b:37:bf:f4:23:44:
                    77:a5:ff:bf:78:22:98:95:ea:3f:75:96:de:00:9b:
                    84:e4:f4:f7:3c:64:16:ea:4a:f6:21:d4:59:08:c4:
                    2b:56:16:0d:45:3d:ee:e1:a3:fe:e5:53:75:85:22:
                    c2:46:b2:57:89:d4:49:fd:82:54:25:fb:87:1b:c6:
                    cc:09:6a:3c:30:29:80:31:16:12:e1:74:83:39:ac:
                    6d:76:17:fc:aa:65:1d:b7:71:64:59:4e:1f:e0:e9:
                    81:76:de:64:4d:02:9a:b9:44:f1:96:2c:f0:d2:bf:
                    41:90:44:9a:7e:3f:5d:f7:94:a8:78:e6:4b:ce:0f:
                    57:74:89:f0:24:cc:96:2c:cb:d7:34:19:3f:3c:3b:
                    7d:81:1b:e6:d2:06:bc:b9:5d:3d:43:e1:3d:83:dd:
                    e7:35:5b:4a:91:70:47:d3:54:a4:b9:97:38:20:f6:
                    34:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5B:67:88:D7:B6:DD:7D:AD:F0:D1:B6:07:F3:DD:5F:FE:5D:98:DE
            X509v3 Authority Key Identifier:
                keyid:95:35:37:99:77:6E:B9:B3:FF:58:72:5E:99:D0:2A:A6:54:FB:1A:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTU3mXduubP_WHJemdAqplT7GgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9113E15/670C0980C8F211EB8E3FAD50C4F9AE02/lTU3mXduubP_WHJemdAqplT7GgQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:b1:ae:36:d3:20:4e:e8:78:58:72:3e:35:05:2b:31:33:69:
         f2:61:c7:1a:b8:5c:fd:bf:f6:cd:4d:62:37:fa:7f:2f:77:2d:
         a9:79:8e:8e:e4:63:ee:51:fc:ec:7b:56:ec:1d:8d:d1:a0:7e:
         dd:71:19:9d:2d:f8:32:15:81:4e:31:2d:9a:c4:16:32:6a:54:
         24:b1:5a:5f:17:46:78:18:1e:0f:ea:8d:d5:8a:21:59:57:38:
         6b:46:a5:42:14:ba:96:98:af:c5:cb:32:31:13:be:29:fd:fe:
         c5:c7:87:1c:ee:59:37:e9:1d:cf:9f:dd:2a:82:f5:de:10:08:
         a4:aa:8c:4d:97:62:4d:80:0c:4f:8c:57:56:fe:5a:13:c5:0e:
         3e:3c:60:a8:28:09:98:4c:03:b4:e6:c8:c7:f4:e2:03:4a:9d:
         7e:18:44:95:d8:31:7f:d8:58:04:3a:08:66:27:12:2d:d7:fb:
         a4:7b:34:32:01:20:7f:b4:20:ef:23:18:59:d5:1a:2d:61:d3:
         13:bf:03:02:69:1e:e1:ee:e2:0c:a6:3b:8e:da:bf:2e:e5:71:
         63:a2:fa:f6:68:d0:15:2a:4e:60:bc:79:13:f0:0a:f1:fc:df:
         8e:2f:5a:4b:35:ca:20:4b:86:ca:38:91:26:cd:ac:f7:15:c9:
         e3:f3:41:2b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTNFMTUxMTAvBgNVBAUTKDk1MzUzNzk5Nzc2RUI5QjNGRjU4NzI1RTk5RDAyQUE2
NTRGQjFBMDQwHhcNMjUwODA4MjMyODIxWhcNMjUwODE1MjMyODIxWjAYMRYwFAYD
VQQDEw02ODk2ODgxNi0yM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxvX4YOqIV/WoaD0PvApE7vH1X0y3Ot+VhBfSDgatMHWtIOyNaU3LmvVXTOYr
wpcKLcim3+3GPFZYMzI5utf3hdfPoLbTuh2QS3FfWpjMRa/nUwQ7N7/0I0R3pf+/
eCKYleo/dZbeAJuE5PT3PGQW6kr2IdRZCMQrVhYNRT3u4aP+5VN1hSLCRrJXidRJ
/YJUJfuHG8bMCWo8MCmAMRYS4XSDOaxtdhf8qmUdt3FkWU4f4OmBdt5kTQKauUTx
lizw0r9BkESafj9d95SoeOZLzg9XdInwJMyWLMvXNBk/PDt9gRvm0ga8uV09Q+E9
g93nNVtKkXBH01SkuZc4IPY0bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHFbZ4jX
tt19rfDRtgfz3V/+XZjeMB8GA1UdIwQYMBaAFJU1N5l3brmz/1hyXpnQKqZU+xoE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExM0UxNS82NzBDMDk4MEM4
RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXViUF9XSEplbWRBcXBsVDdH
Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xUVTNtWGR1dWJQX1dISmVtZEFxcGxUN0dnUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
M0UxNS82NzBDMDk4MEM4RjIxMUVCOEUzRkFENTBDNEY5QUUwMi9sVFUzbVhkdXVi
UF9XSEplbWRBcXBsVDdHZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCfsa420yBO6HhYcj41BSsxM2nyYccauFz9v/bNTWI3+n8vdy2peY6O
5GPuUfzse1bsHY3RoH7dcRmdLfgyFYFOMS2axBYyalQksVpfF0Z4GB4P6o3ViiFZ
VzhrRqVCFLqWmK/FyzIxE74p/f7Fx4cc7lk36R3Pn90qgvXeEAikqoxNl2JNgAxP
jFdW/loTxQ4+PGCoKAmYTAO05sjH9OIDSp1+GESV2DF/2FgEOghmJxIt1/ukezQy
ASB/tCDvIxhZ1RotYdMTvwMCaR7h7uIMpjuO2r8u5XFjovr2aNAVKk5gvHkT8Arx
/N+OL1pLNcogS4bKOJEmzaz3Fcnj80Er
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:08:08 2025 by rpki-client