Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
File:                     _JzDgDXfD9iyRV42dn4TAif06Hs.mft (raw, json)
Hash identifier:          5pZbS4VLXI+H8jXa5gclrAiQ6QlLjsbFcOavhv9z3gE=
Subject key identifier:   30:CB:DB:EA:F7:15:78:0B:F9:76:56:5C:04:CC:BD:5B:1B:FF:10:22
Authority key identifier: FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B
Certificate issuer:       /CN=A9117E49/serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
Certificate serial:       179F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
Manifest number:          178F
Signing time:             Wed 06 Aug 2025 16:41:17 +0000
Manifest this update:     Wed 06 Aug 2025 16:41:17 +0000
Manifest next update:     Wed 13 Aug 2025 16:41:17 +0000
Files and hashes:         1: _JzDgDXfD9iyRV42dn4TAif06Hs.crl (hash: vhK/2YDApFqhOlMPO0q5WBSrxm1NhoI3+aE080Ve0U0=)
                          2: 1DA0BF7C7C5911EDB5D8DA67C4F9AE02.roa (hash: AFv3+8G4+14cWKdLCa3SvwGQd6CuiEszUkutLoyR7bA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl
                          rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 16:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6047 (0x179f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117E49, serialNumber=FC9CC38035DF0FD8B2455E36767E130227F4E87B
        Validity
            Not Before: Aug  6 16:41:17 2025 GMT
            Not After : Aug 13 16:41:17 2025 GMT
        Subject: CN=689385ad-dd71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d1:68:d2:ca:5b:ff:25:e0:1d:03:a5:39:aa:
                    fc:73:5f:1b:86:f0:2d:14:08:03:99:76:dd:fc:35:
                    ee:3a:6e:df:57:52:b6:f6:74:49:10:d6:3e:f2:3e:
                    e2:fe:a3:f7:d8:13:f4:10:e5:b1:3a:90:7a:be:88:
                    bf:c7:ef:0c:39:85:1a:1d:9a:1b:80:2f:30:3e:45:
                    34:d5:e7:f8:f8:4a:69:76:2d:cf:88:44:84:f0:51:
                    b7:c6:07:90:a0:ee:53:e2:d3:6a:60:dc:82:55:d3:
                    60:23:b7:84:aa:d5:ab:05:74:2d:86:60:34:fd:49:
                    d9:23:f5:58:ea:b7:24:c6:16:1e:76:f2:17:92:41:
                    0a:d6:df:30:d6:e5:49:74:5c:2b:09:26:b8:54:bc:
                    cb:b4:cf:7f:c0:37:24:8c:f3:98:34:40:97:dd:f2:
                    9d:7d:6e:7e:1d:a9:b8:88:9a:5d:b2:55:4d:d7:37:
                    22:0e:72:22:31:12:6b:cc:11:5c:c7:b6:60:23:55:
                    3c:2b:13:00:ef:66:b3:d6:4f:aa:e9:75:7c:3d:a1:
                    56:0d:83:27:c8:f9:d2:7a:84:cf:1f:58:9c:00:15:
                    1e:16:c4:cb:f5:ed:8a:91:1f:2b:85:4c:dc:5a:22:
                    7d:cd:d8:51:38:68:86:c3:b6:47:f5:29:f1:52:0f:
                    9d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CB:DB:EA:F7:15:78:0B:F9:76:56:5C:04:CC:BD:5B:1B:FF:10:22
            X509v3 Authority Key Identifier:
                keyid:FC:9C:C3:80:35:DF:0F:D8:B2:45:5E:36:76:7E:13:02:27:F4:E8:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_JzDgDXfD9iyRV42dn4TAif06Hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117E49/CBEEAE48D5D511E797CBC37DC4F9AE02/_JzDgDXfD9iyRV42dn4TAif06Hs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:7d:1c:ca:57:96:b1:dd:af:1f:a8:22:68:89:81:ce:65:e6:
         49:44:f7:18:83:d0:6a:68:1b:72:59:4f:5b:18:6a:19:bf:35:
         8e:a2:c5:45:c4:cb:f5:df:f7:41:99:cf:37:8c:74:3d:cd:1c:
         21:74:9f:31:55:3d:25:7a:b7:8a:d8:5e:b4:55:b2:b2:56:a1:
         28:9f:58:5e:e6:c4:aa:51:50:d9:0c:cd:d6:0e:a2:76:81:c8:
         ac:ab:90:96:40:40:62:21:7c:1a:f7:95:3f:f3:aa:91:37:c3:
         b7:3e:ab:ed:e6:4f:c8:7c:90:2b:d0:59:9d:e3:40:1a:9d:36:
         8c:3f:a8:9c:f4:ff:b5:9b:45:10:50:5e:9f:92:e2:28:1e:8c:
         c0:0a:13:b6:d4:17:15:a0:99:05:36:84:c8:c7:28:bc:5d:9c:
         4e:3f:7a:3b:a0:da:84:35:2f:99:3a:b6:bf:be:f2:69:75:b6:
         51:56:ad:8e:42:60:ff:00:0a:b7:9f:f7:50:64:77:3c:98:16:
         28:14:e7:93:16:0d:18:bb:df:6c:c6:6c:fb:3b:23:b7:d5:9c:
         98:50:26:a2:8e:2a:4d:4f:48:b4:0d:84:30:e1:29:d0:b9:de:
         e6:73:81:01:6e:ab:3c:e5:fc:6b:7e:e2:76:0d:f2:63:15:64:
         fe:21:86:d7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICF58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTdFNDkxMTAvBgNVBAUTKEZDOUNDMzgwMzVERjBGRDhCMjQ1NUUzNjc2N0UxMzAy
MjdGNEU4N0IwHhcNMjUwODA2MTY0MTE3WhcNMjUwODEzMTY0MTE3WjAYMRYwFAYD
VQQDEw02ODkzODVhZC1kZDcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6NFo0spb/yXgHQOlOar8c18bhvAtFAgDmXbd/DXuOm7fV1K29nRJENY+8j7i
/qP32BP0EOWxOpB6voi/x+8MOYUaHZobgC8wPkU01ef4+Eppdi3PiESE8FG3xgeQ
oO5T4tNqYNyCVdNgI7eEqtWrBXQthmA0/UnZI/VY6rckxhYedvIXkkEK1t8w1uVJ
dFwrCSa4VLzLtM9/wDckjPOYNECX3fKdfW5+Ham4iJpdslVN1zciDnIiMRJrzBFc
x7ZgI1U8KxMA72az1k+q6XV8PaFWDYMnyPnSeoTPH1icABUeFsTL9e2KkR8rhUzc
WiJ9zdhROGiGw7ZH9SnxUg+dLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDL2+r3
FXgL+XZWXATMvVsb/xAiMB8GA1UdIwQYMBaAFPycw4A13w/YskVeNnZ+EwIn9Oh7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0U0OS9DQkVFQUU0OEQ1
RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5aXlSVjQyZG40VEFpZjA2
SHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19KekRnRFhmRDlpeVJWNDJkbjRUQWlmMDZIcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
N0U0OS9DQkVFQUU0OEQ1RDUxMUU3OTdDQkMzN0RDNEY5QUUwMi9fSnpEZ0RYZkQ5
aXlSVjQyZG40VEFpZjA2SHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCKfRzKV5ax3a8fqCJoiYHOZeZJRPcYg9BqaBtyWU9bGGoZvzWOosVF
xMv13/dBmc83jHQ9zRwhdJ8xVT0lereK2F60VbKyVqEon1he5sSqUVDZDM3WDqJ2
gcisq5CWQEBiIXwa95U/86qRN8O3Pqvt5k/IfJAr0Fmd40AanTaMP6ic9P+1m0UQ
UF6fkuIoHozAChO21BcVoJkFNoTIxyi8XZxOP3o7oNqENS+ZOra/vvJpdbZRVq2O
QmD/AAq3n/dQZHc8mBYoFOeTFg0Yu99sxmz7OyO31ZyYUCaijipNT0i0DYQw4SnQ
ud7mc4EBbqs85fxrfuJ2DfJjFWT+IYbX
-----END CERTIFICATE-----
Generated at Fri Aug 8 12:51:49 2025 by rpki-client