Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
File:                     47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft (raw, json)
Hash identifier:          px7owwAlCVQ/0WANrwgtbbryMRfBMtfA2T2+1qhlmNc=
Subject key identifier:   E0:3A:9C:8D:F8:B5:7B:C6:66:2F:E3:64:B0:08:6A:0E:CE:78:A8:89
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Certificate issuer:       /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial:       07DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
Manifest number:          07C2
Signing time:             Fri 08 Aug 2025 21:37:02 +0000
Manifest this update:     Fri 08 Aug 2025 21:37:01 +0000
Manifest next update:     Fri 15 Aug 2025 21:37:01 +0000
Files and hashes:         1: 47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl (hash: 8b44flNHk3emTPvmGLZjum3xvRbNxv6Bgf01otlhvSw=)
                          2: 11446DBE5B2711F099D02552C4F9AE02.roa (hash: RU8kIBK1Vw0uGfLmOnL1T+Qo1FjWkAA2fxz13lNIa7Q=)
                          3: E75B22220B5D11EBADED9667C4F9AE02.roa (hash: XG/yWG4WDbh/MIdJR6dBMm/WynV56cePJGSqotWER4c=)
                          4: 2452F9B65B2711F094EC6052C4F9AE02.roa (hash: jD0mFkmOYCkukP/EJhq7Kcd8z9h7khIQ7bnXQB3n7yM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
                          rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2010 (0x7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
        Validity
            Not Before: Aug  8 21:37:01 2025 GMT
            Not After : Aug 15 21:37:01 2025 GMT
        Subject: CN=68966dfd-ea95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d8:c4:b2:47:99:cb:37:84:1f:8b:e1:8f:83:
                    a7:ba:09:b4:91:a2:68:f9:45:51:d9:a0:62:49:25:
                    d0:b4:5a:9f:06:f3:b1:0e:a5:0a:ef:89:24:43:3d:
                    61:8e:2c:75:bc:f2:eb:d8:d9:b3:ae:28:ff:13:70:
                    b2:d2:6e:66:70:ae:f5:e3:f2:c1:8e:67:71:9f:cb:
                    93:fe:e6:9f:6e:e9:fc:d1:af:d9:76:5c:c5:18:db:
                    70:7b:ed:f4:2c:c5:10:93:ed:a2:c9:7a:10:d7:4a:
                    99:db:48:b7:86:b2:c2:f3:0e:b2:b5:c7:3a:6e:2c:
                    59:58:97:f4:5c:37:94:b3:13:dd:05:e4:75:70:e3:
                    fb:39:b6:37:30:23:85:db:3b:72:04:e8:49:e0:9e:
                    5d:e8:8a:46:c9:6c:a5:b0:44:d8:82:d5:13:d1:74:
                    8e:8d:3d:b0:60:de:2c:db:7a:9a:bf:8e:90:fc:72:
                    ce:af:01:05:ef:04:e5:5a:e3:b3:ca:e0:bd:36:a4:
                    f3:56:5d:df:00:9b:30:5a:30:03:33:ee:15:af:11:
                    fc:74:40:21:90:73:d3:1b:31:8e:eb:67:c2:76:2b:
                    d0:13:3a:5c:7c:74:54:88:29:88:ca:03:a0:41:c5:
                    87:be:ea:d2:ec:69:58:f3:48:4a:67:5c:c8:23:04:
                    90:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3A:9C:8D:F8:B5:7B:C6:66:2F:E3:64:B0:08:6A:0E:CE:78:A8:89
            X509v3 Authority Key Identifier:
                keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1c:f0:35:f0:e1:0b:a9:e1:73:60:f9:15:f5:b3:38:f0:6c:
         60:07:27:0a:8d:56:bf:33:50:d8:0c:f9:d6:6f:f0:35:6a:6a:
         50:c5:11:6e:cd:a3:d9:3f:70:ac:fb:10:61:68:76:bb:d7:f5:
         e9:12:34:e5:4e:ae:51:df:d3:5a:09:3a:ef:5e:86:27:e2:27:
         7c:42:79:74:54:dc:d9:5c:f7:10:b5:30:85:8a:f4:0f:52:5a:
         5e:c2:f5:c4:e5:82:63:fe:e3:31:40:98:a5:61:49:1c:15:ed:
         c9:ae:8b:7e:98:a5:99:9a:c8:b5:f1:76:c5:a5:fe:dc:21:cb:
         9d:1d:5a:6a:e2:1b:c8:43:ab:c0:10:fc:4d:5b:f8:fb:1c:f8:
         06:9d:2f:08:4c:61:5c:d4:08:4a:db:f4:33:8f:f8:a2:da:22:
         91:68:d5:8e:a8:16:95:bb:ca:9f:e0:16:5e:6a:39:af:0d:c8:
         02:5c:d0:ea:c2:f4:db:f9:f7:5f:ed:c8:e5:30:a1:ff:5e:8b:
         3c:bc:a8:be:06:c6:b5:5c:bb:5f:b6:1f:2b:d1:40:fe:eb:d6:
         f0:75:da:fc:ec:01:c5:cd:06:94:ec:d4:da:4c:bb:12:f9:27:
         a3:fb:55:d6:38:38:a9:ed:38:b4:36:f2:be:30:f5:ef:56:3d:
         49:f3:c6:e4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMwNzIxMTAvBgNVBAUTKEUzQkNCQTg4QkVEQzJBNzY4QTk4NjVGNDE2RDY4QTdD
MzAzM0Y0NjkwHhcNMjUwODA4MjEzNzAxWhcNMjUwODE1MjEzNzAxWjAYMRYwFAYD
VQQDEw02ODk2NmRmZC1lYTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxdjEskeZyzeEH4vhj4Onugm0kaJo+UVR2aBiSSXQtFqfBvOxDqUK74kkQz1h
jix1vPLr2Nmzrij/E3Cy0m5mcK714/LBjmdxn8uT/uafbun80a/ZdlzFGNtwe+30
LMUQk+2iyXoQ10qZ20i3hrLC8w6ytcc6bixZWJf0XDeUsxPdBeR1cOP7ObY3MCOF
2ztyBOhJ4J5d6IpGyWylsETYgtUT0XSOjT2wYN4s23qav46Q/HLOrwEF7wTlWuOz
yuC9NqTzVl3fAJswWjADM+4VrxH8dEAhkHPTGzGO62fCdivQEzpcfHRUiCmIygOg
QcWHvurS7GlY80hKZ1zIIwSQewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOA6nI34
tXvGZi/jZLAIag7OeKiJMB8GA1UdIwQYMBaAFOO8uoi+3Cp2iphl9BbWinwwM/Rp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wQ0VBNDk1QzBC
NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tuYUttR1gwRnRhS2ZEQXo5
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ3eTZpTDdjS25hS21HWDBGdGFLZkRBejlHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MzA3Mi8wQ0VBNDk1QzBCNUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tu
YUttR1gwRnRhS2ZEQXo5R2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKHPA18OELqeFzYPkV9bM48GxgBycKjVa/M1DYDPnWb/A1ampQxRFu
zaPZP3Cs+xBhaHa71/XpEjTlTq5R39NaCTrvXoYn4id8Qnl0VNzZXPcQtTCFivQP
UlpewvXE5YJj/uMxQJilYUkcFe3Jrot+mKWZmsi18XbFpf7cIcudHVpq4hvIQ6vA
EPxNW/j7HPgGnS8ITGFc1AhK2/Qzj/ii2iKRaNWOqBaVu8qf4BZeajmvDcgCXNDq
wvTb+fdf7cjlMKH/Xos8vKi+Bsa1XLtfth8r0UD+69bwddr87AHFzQaU7NTaTLsS
+Sej+1XWODip7Ti0NvK+MPXvVj1J88bk
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:51:40 2025 by rpki-client