Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
File:                     fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json)
Hash identifier:          SVroJiU9mxVoWxrEoITF/e4tejDKRWA/YJZltQllhcU=
Subject key identifier:   B9:4A:D8:33:DC:4A:36:13:97:6E:33:78:45:2B:7D:76:6D:04:70:9F
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Certificate issuer:       /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial:       07E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
Manifest number:          07D5
Signing time:             Fri 08 Aug 2025 21:27:51 +0000
Manifest this update:     Fri 08 Aug 2025 21:27:50 +0000
Manifest next update:     Fri 15 Aug 2025 21:27:50 +0000
Files and hashes:         1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: 3ooUtrQlJy68L9DKflmDe6k+kqd8T9u3QU1QBr7e2jE=)
                          2: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: gc5rodY7fMSUXMwplo20/FwcMcQwtcPfnanjg3iRFls=)
                          3: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: y0/7k6ouKuD5b2Rsia/V+SeGipZyoSrwqk1Fd3WmbbM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
                          rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2017 (0x7e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
        Validity
            Not Before: Aug  8 21:27:50 2025 GMT
            Not After : Aug 15 21:27:50 2025 GMT
        Subject: CN=68966bd6-edde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:35:01:2e:bc:da:97:0a:2f:4f:41:03:09:bc:
                    11:40:28:ae:e1:46:07:47:31:e6:da:e2:74:07:dd:
                    a6:4c:34:d5:67:b9:15:b5:67:18:c7:59:14:9a:91:
                    49:2f:d7:76:c9:4c:1c:e1:1b:c6:06:e5:ab:91:71:
                    a9:9a:ae:5a:28:2b:4c:5c:39:7c:c6:b7:66:c3:6e:
                    e1:db:34:ae:54:26:b9:ce:d3:43:c2:fa:50:c1:c3:
                    e5:ff:a6:5b:5d:ef:15:a1:20:5b:da:55:c5:ac:b2:
                    20:76:8b:3d:13:54:a6:4c:71:40:d5:32:fd:10:0f:
                    20:ad:c4:c4:ce:b3:70:14:10:51:76:09:52:1b:5f:
                    1d:08:62:9e:33:0f:46:6c:8c:d9:1d:ca:bb:cd:a7:
                    ff:eb:d3:83:b4:03:b0:82:b5:d8:2a:c8:35:ea:5a:
                    96:d0:d0:e6:fc:e1:21:c1:23:54:09:03:0c:55:ed:
                    47:b3:0e:e2:c4:60:cb:83:2c:3c:ba:3e:ee:5b:04:
                    b6:ad:61:a8:48:30:26:3f:5b:70:1c:e3:19:5b:86:
                    da:d6:3a:51:46:a9:0d:08:f1:51:61:de:be:0f:eb:
                    ee:ef:a3:11:9a:29:d2:cb:65:6d:7f:61:90:89:b4:
                    45:93:63:17:4a:fc:dc:0a:3f:8f:e6:94:93:a9:ca:
                    48:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4A:D8:33:DC:4A:36:13:97:6E:33:78:45:2B:7D:76:6D:04:70:9F
            X509v3 Authority Key Identifier:
                keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:0b:92:a7:f6:df:0d:a4:53:dd:44:f3:86:79:21:0d:ef:5c:
         b9:4c:05:30:96:96:cd:9f:54:a2:a0:f0:ef:fa:01:60:f6:81:
         a1:0f:e4:c8:c4:36:c1:70:78:12:5b:e3:4d:73:9e:07:08:dc:
         85:a3:42:a7:12:55:01:0e:da:8a:91:d6:40:d1:35:61:9a:41:
         f7:0c:43:7f:97:31:a0:61:01:80:ba:52:11:9d:3c:5b:65:95:
         60:ab:95:93:de:7f:f9:02:6a:0e:ab:46:7e:2f:8e:d4:9d:76:
         8b:83:42:e4:28:ba:b4:41:9d:95:9e:ad:1a:99:91:f8:e5:f7:
         a1:66:95:30:ab:b0:54:57:d1:80:a5:26:f2:1e:6a:90:64:23:
         c6:3a:e0:26:9b:fe:e7:b0:87:58:60:65:a5:c7:2b:e2:33:f1:
         3e:d0:13:11:f9:8b:a6:a0:da:3a:2e:14:15:b4:b9:7f:50:b8:
         cd:fa:81:2b:d7:4a:d1:f1:ef:41:40:ba:0d:b3:6b:cd:ab:6b:
         a9:33:2a:c7:cd:a5:2a:f8:92:b1:92:94:1a:be:e5:ef:6b:d0:
         71:1e:8c:35:7c:04:00:8a:c3:77:2a:dc:96:9d:dc:a6:1b:6d:
         b0:57:b9:15:86:82:df:83:75:71:53:42:89:09:8b:b7:9c:88:
         33:48:28:e6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG
MUIzOUJGRDgwHhcNMjUwODA4MjEyNzUwWhcNMjUwODE1MjEyNzUwWjAYMRYwFAYD
VQQDEw02ODk2NmJkNi1lZGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqDUBLrzalwovT0EDCbwRQCiu4UYHRzHm2uJ0B92mTDTVZ7kVtWcYx1kUmpFJ
L9d2yUwc4RvGBuWrkXGpmq5aKCtMXDl8xrdmw27h2zSuVCa5ztNDwvpQwcPl/6Zb
Xe8VoSBb2lXFrLIgdos9E1SmTHFA1TL9EA8grcTEzrNwFBBRdglSG18dCGKeMw9G
bIzZHcq7zaf/69ODtAOwgrXYKsg16lqW0NDm/OEhwSNUCQMMVe1Hsw7ixGDLgyw8
uj7uWwS2rWGoSDAmP1twHOMZW4ba1jpRRqkNCPFRYd6+D+vu76MRminSy2Vtf2GQ
ibRFk2MXSvzcCj+P5pSTqcpI/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLlK2DPc
SjYTl24zeEUrfXZtBHCfMB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF
QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Nzg0RS82QjU0RDlDOEZFQzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0Nu
SGxVaFZYdXdPZ0R4czV2OWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZC5Kn9t8NpFPdRPOGeSEN71y5TAUwlpbNn1SioPDv+gFg9oGhD+TI
xDbBcHgSW+NNc54HCNyFo0KnElUBDtqKkdZA0TVhmkH3DEN/lzGgYQGAulIRnTxb
ZZVgq5WT3n/5AmoOq0Z+L47UnXaLg0LkKLq0QZ2Vnq0amZH45fehZpUwq7BUV9GA
pSbyHmqQZCPGOuAmm/7nsIdYYGWlxyviM/E+0BMR+YumoNo6LhQVtLl/ULjN+oEr
10rR8e9BQLoNs2vNq2upMyrHzaUq+JKxkpQavuXva9BxHow1fAQAisN3KtyWndym
G22wV7kVhoLfg3VxU0KJCYu3nIgzSCjm
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:57:55 2025 by rpki-client