Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
File:                     3glSX1epVbpvLTKtIoMwQhUYLkU.mft (raw, json)
Hash identifier:          OoukBkwS4FVWzUscP22GXsU1s8qs1PTKmBr5z8Yy040=
Subject key identifier:   95:6D:76:54:44:A8:FA:CA:FE:DC:43:19:A9:29:F5:DF:41:BC:9D:2A
Authority key identifier: DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45
Certificate issuer:       /CN=A9119C32/serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
Certificate serial:       0171
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
Manifest number:          016E
Signing time:             Sat 09 Aug 2025 04:12:54 +0000
Manifest this update:     Sat 09 Aug 2025 04:12:53 +0000
Manifest next update:     Sat 16 Aug 2025 04:12:53 +0000
Files and hashes:         1: 3glSX1epVbpvLTKtIoMwQhUYLkU.crl (hash: xUqUfF3AuGga8/lktaTRnlcgZX1FbCeseLyfV0Dj5fo=)
                          2: 5D79BDF8486C11EEB3C19A71C4F9AE02.roa (hash: 0Dz92F7ct8bVXTADuiwvMmdgfbqvyjCznAHcDYM7e2M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl
                          rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119C32, serialNumber=DE09525F57A955BA6F2D32AD2283304215182E45
        Validity
            Not Before: Aug  9 04:12:53 2025 GMT
            Not After : Aug 16 04:12:53 2025 GMT
        Subject: CN=6896cac6-b9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:0e:13:48:2e:45:c9:f4:a4:d0:40:55:85:
                    af:03:06:96:89:ad:cd:b8:a3:25:1e:f9:08:ab:6d:
                    3d:41:17:6f:b4:ab:7b:d1:64:5f:d4:83:71:61:28:
                    6e:8c:67:bd:a6:97:19:1b:0c:1c:78:4a:e2:7f:03:
                    4b:3d:f7:bc:6d:81:59:23:4d:3a:14:0b:b9:8e:97:
                    fd:11:ff:64:67:9c:96:54:5c:16:82:ae:a4:81:32:
                    8c:d9:56:8a:da:21:07:3a:af:cd:8d:5f:fa:5e:d8:
                    c7:89:96:41:50:4b:49:38:e3:95:d2:91:5e:9a:aa:
                    1b:70:b6:85:fb:1f:e9:1a:b2:7e:9b:24:b3:cf:a1:
                    81:a8:22:56:37:9d:09:99:58:e1:c5:46:62:08:a0:
                    ea:a3:04:8e:7e:56:ed:fc:0a:c4:9e:f8:76:fa:74:
                    22:66:e2:6a:93:db:ec:bb:84:3d:da:8e:f4:d7:ea:
                    e1:4f:97:a8:67:12:61:da:2b:64:7c:68:6f:b6:a6:
                    a6:61:3c:b8:f1:bd:2e:9a:91:c2:0d:77:5b:d4:af:
                    a1:dc:e4:97:66:3b:39:b9:c4:16:fa:c8:64:c5:6a:
                    be:4f:7a:3c:aa:5b:f9:5c:ce:bd:ba:a6:36:32:15:
                    35:34:95:aa:17:dc:b3:7a:38:6e:18:7d:7a:f7:1f:
                    4b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6D:76:54:44:A8:FA:CA:FE:DC:43:19:A9:29:F5:DF:41:BC:9D:2A
            X509v3 Authority Key Identifier:
                keyid:DE:09:52:5F:57:A9:55:BA:6F:2D:32:AD:22:83:30:42:15:18:2E:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3glSX1epVbpvLTKtIoMwQhUYLkU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119C32/C4EA1B9E46E211EEA2372F41C4F9AE02/3glSX1epVbpvLTKtIoMwQhUYLkU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:24:cb:91:15:60:83:2c:b8:2e:14:8d:23:5e:57:c3:57:a1:
         e5:38:06:f9:9f:44:55:c8:7e:e7:dd:25:3a:42:ce:94:b0:a8:
         fc:a2:57:79:ef:cb:32:a4:dd:ab:6b:29:f4:2a:97:6a:2a:8b:
         26:b3:81:8e:03:05:fd:c5:b2:bc:45:88:e2:46:93:e6:89:99:
         d5:7a:cf:3f:be:8b:12:3b:21:3c:ea:63:c5:b3:96:a0:06:ea:
         e7:1c:55:9c:f1:18:2f:66:57:47:0a:90:87:79:50:c1:97:1e:
         95:85:08:9a:4c:c7:5a:cc:f4:66:f3:2f:61:9e:4a:27:e7:dd:
         6b:89:49:bf:c3:c7:50:2a:a1:25:05:f9:ac:81:d0:92:58:2f:
         c3:e5:43:84:46:70:9f:1b:28:84:2b:4b:ae:32:0d:a3:6c:f4:
         66:39:02:c4:8d:ba:cf:91:d1:4c:35:b4:9b:3f:55:05:f4:d8:
         10:70:6b:17:32:bb:0d:75:91:56:b6:f5:b9:51:44:06:58:7e:
         96:88:37:42:c5:1d:2f:ee:58:32:b1:52:9b:65:40:49:b3:70:
         0d:be:f4:65:82:aa:bd:e3:d4:56:68:f1:7e:b3:ff:1b:a0:7f:
         bc:f7:ad:50:57:b2:78:9c:be:7d:2d:e6:95:ab:5e:e2:b7:8e:
         dd:dd:a4:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTlDMzIxMTAvBgNVBAUTKERFMDk1MjVGNTdBOTU1QkE2RjJEMzJBRDIyODMzMDQy
MTUxODJFNDUwHhcNMjUwODA5MDQxMjUzWhcNMjUwODE2MDQxMjUzWjAYMRYwFAYD
VQQDEw02ODk2Y2FjNi1iOWM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsFEOE0guRcn0pNBAVYWvAwaWia3NuKMlHvkIq209QRdvtKt70WRf1INxYShu
jGe9ppcZGwwceErifwNLPfe8bYFZI006FAu5jpf9Ef9kZ5yWVFwWgq6kgTKM2VaK
2iEHOq/NjV/6XtjHiZZBUEtJOOOV0pFemqobcLaF+x/pGrJ+mySzz6GBqCJWN50J
mVjhxUZiCKDqowSOflbt/ArEnvh2+nQiZuJqk9vsu4Q92o701+rhT5eoZxJh2itk
fGhvtqamYTy48b0umpHCDXdb1K+h3OSXZjs5ucQW+shkxWq+T3o8qlv5XM69uqY2
MhU1NJWqF9yzejhuGH169x9LvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJVtdlRE
qPrK/txDGakp9d9BvJ0qMB8GA1UdIwQYMBaAFN4JUl9XqVW6by0yrSKDMEIVGC5F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOUMzMi9DNEVBMUI5RTQ2
RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZicHZMVEt0SW9Nd1FoVVlM
a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNnbFNYMWVwVmJwdkxUS3RJb013UWhVWUxrVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OUMzMi9DNEVBMUI5RTQ2RTIxMUVFQTIzNzJGNDFDNEY5QUUwMi8zZ2xTWDFlcFZi
cHZMVEt0SW9Nd1FoVVlMa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC2JMuRFWCDLLguFI0jXlfDV6HlOAb5n0RVyH7n3SU6Qs6UsKj8old5
78sypN2rayn0KpdqKosms4GOAwX9xbK8RYjiRpPmiZnVes8/vosSOyE86mPFs5ag
BurnHFWc8RgvZldHCpCHeVDBlx6VhQiaTMdazPRm8y9hnkon591riUm/w8dQKqEl
BfmsgdCSWC/D5UOERnCfGyiEK0uuMg2jbPRmOQLEjbrPkdFMNbSbP1UF9NgQcGsX
MrsNdZFWtvW5UUQGWH6WiDdCxR0v7lgysVKbZUBJs3ANvvRlgqq949RWaPF+s/8b
oH+8961QV7J4nL59LeaVq17it47d3aSz
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:03:38 2025 by rpki-client