Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
File:                     xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft (raw, json)
Hash identifier:          26mCFuRqTkhpEn39a2xXpP1jl4muB/6fwbaodKr4Q2c=
Subject key identifier:   42:FE:D4:E4:D6:8D:5E:D0:3A:67:56:39:2B:8D:AA:0B:4B:65:F1:C7
Authority key identifier: C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C
Certificate issuer:       /CN=A9127342/serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C
Certificate serial:       2334
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
Manifest number:          231B
Signing time:             Mon 04 Aug 2025 15:57:13 +0000
Manifest this update:     Mon 04 Aug 2025 15:57:12 +0000
Manifest next update:     Mon 11 Aug 2025 15:57:12 +0000
Files and hashes:         1: xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl (hash: aT4/66QEwY8+HervhnUxVZy/H1YZ/EzMLndU6nQvDrk=)
                          2: DA37C95AB14511E5B83D2120C4F9AE02.roa (hash: 6e21k1t3PwcFuMYhxFKByN0N0S9Vi6EW4w95vWK0udo=)
                          3: CBF9AD5449E811E6BAF4525DC4F9AE02.roa (hash: w2d5iGO1DzNwRW9XaGG0C+Ss9EnEjj1pHZpwfJJ5U1I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl
                          rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 15:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9012 (0x2334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127342, serialNumber=C49663D96BC932D743840BC67FD87BF8E015467C
        Validity
            Not Before: Aug  4 15:57:12 2025 GMT
            Not After : Aug 11 15:57:12 2025 GMT
        Subject: CN=6890d859-b026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:36:df:21:8f:21:dc:48:21:e3:01:01:d6:04:
                    cd:8b:cb:b3:22:10:e4:f9:2b:85:cd:b2:59:b6:2c:
                    0e:df:f1:21:16:a7:6d:7f:a8:f9:ff:eb:8a:55:69:
                    d9:59:95:4a:cc:1e:43:e5:7b:03:62:f6:cf:70:a6:
                    dc:c6:c1:5d:99:35:d9:3b:08:90:68:4f:eb:36:10:
                    15:29:83:23:83:a3:f3:b7:ba:67:53:c6:05:a7:24:
                    26:82:8f:0d:10:19:30:ba:76:f1:91:83:2e:15:8c:
                    f5:f0:0d:cd:50:a5:fd:95:95:29:ad:90:e5:df:d1:
                    96:8b:c6:41:86:b8:81:99:33:22:b6:f6:a4:b0:c4:
                    10:12:3e:c9:75:f7:70:71:94:6e:37:29:02:c7:49:
                    f3:e5:04:d6:10:4e:0c:b5:35:df:33:75:7e:96:8e:
                    5f:7a:8e:2c:48:2f:ba:ff:43:a2:5f:97:6b:75:e8:
                    cf:02:91:7e:2e:79:f1:86:9f:3b:3f:b3:61:1b:8c:
                    0d:b7:5e:4f:54:23:be:89:c1:76:e0:7f:37:4b:ae:
                    2f:af:93:ce:ab:0e:5e:24:23:8d:5c:44:59:c4:c0:
                    e8:9b:87:a5:2a:36:92:3b:ac:ca:9f:da:1d:d7:a9:
                    c1:ea:79:54:b1:c6:4d:3d:0a:98:16:6f:c9:7d:4b:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FE:D4:E4:D6:8D:5E:D0:3A:67:56:39:2B:8D:AA:0B:4B:65:F1:C7
            X509v3 Authority Key Identifier:
                keyid:C4:96:63:D9:6B:C9:32:D7:43:84:0B:C6:7F:D8:7B:F8:E0:15:46:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xJZj2WvJMtdDhAvGf9h7-OAVRnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127342/6DDBC7FC932711E5A81F303EC4F9AE02/xJZj2WvJMtdDhAvGf9h7-OAVRnw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:09:62:5f:c8:53:c2:ca:23:7c:3b:c3:99:c9:f7:49:0a:f1:
         2b:30:54:f2:39:26:67:22:ba:9b:b4:09:5d:ee:a6:e5:f7:76:
         46:20:09:85:0c:dc:38:73:ee:28:f9:07:50:12:e5:51:0a:d4:
         8f:56:ae:a6:00:48:d7:0d:c5:e9:f9:a7:94:34:b5:da:62:aa:
         24:71:fe:46:f6:b4:0c:88:13:53:b9:33:0f:97:d2:ed:27:66:
         94:aa:b1:57:f5:76:4f:f3:b7:53:08:77:f6:b8:c3:83:c2:6a:
         ec:11:99:ba:0e:37:63:dc:a1:d3:09:5d:aa:2f:ce:0e:cf:06:
         1c:ba:6c:e2:b6:ff:6d:86:31:40:9b:06:be:b1:ba:9d:46:ca:
         bb:b2:dc:22:14:67:39:76:d7:5b:9f:44:b6:ad:e1:39:9d:ec:
         ed:8a:bc:b8:c9:24:59:93:f2:fd:e7:77:30:aa:17:1b:f4:64:
         73:f4:8c:17:29:14:01:25:4c:2c:28:97:b2:f0:4b:bf:90:d2:
         98:0f:52:2c:38:ed:b0:40:5f:05:47:35:0a:39:c2:77:7b:ba:
         d7:5e:49:93:10:36:73:ff:6a:40:0d:4e:67:42:db:79:66:f5:
         a9:db:1b:2c:e5:a3:42:6e:2e:f7:f8:ff:54:ca:6c:01:3f:87:
         74:12:97:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICIzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjczNDIxMTAvBgNVBAUTKEM0OTY2M0Q5NkJDOTMyRDc0Mzg0MEJDNjdGRDg3QkY4
RTAxNTQ2N0MwHhcNMjUwODA0MTU1NzEyWhcNMjUwODExMTU1NzEyWjAYMRYwFAYD
VQQDEw02ODkwZDg1OS1iMDI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuTbfIY8h3Egh4wEB1gTNi8uzIhDk+SuFzbJZtiwO3/EhFqdtf6j5/+uKVWnZ
WZVKzB5D5XsDYvbPcKbcxsFdmTXZOwiQaE/rNhAVKYMjg6Pzt7pnU8YFpyQmgo8N
EBkwunbxkYMuFYz18A3NUKX9lZUprZDl39GWi8ZBhriBmTMitvaksMQQEj7Jdfdw
cZRuNykCx0nz5QTWEE4MtTXfM3V+lo5feo4sSC+6/0OiX5drdejPApF+Lnnxhp87
P7NhG4wNt15PVCO+icF24H83S64vr5POqw5eJCONXERZxMDom4elKjaSO6zKn9od
16nB6nlUscZNPQqYFm/JfUs8mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEL+1OTW
jV7QOmdWOSuNqgtLZfHHMB8GA1UdIwQYMBaAFMSWY9lryTLXQ4QLxn/Ye/jgFUZ8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzM0Mi82RERCQzdGQzkz
MjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10ZERoQXZHZjloNy1PQVZS
bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hKWmoyV3ZKTXRkRGhBdkdmOWg3LU9BVlJudy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzM0Mi82RERCQzdGQzkzMjcxMUU1QTgxRjMwM0VDNEY5QUUwMi94SlpqMld2Sk10
ZERoQXZHZjloNy1PQVZSbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDECWJfyFPCyiN8O8OZyfdJCvErMFTyOSZnIrqbtAld7qbl93ZGIAmF
DNw4c+4o+QdQEuVRCtSPVq6mAEjXDcXp+aeUNLXaYqokcf5G9rQMiBNTuTMPl9Lt
J2aUqrFX9XZP87dTCHf2uMODwmrsEZm6Djdj3KHTCV2qL84OzwYcumzitv9thjFA
mwa+sbqdRsq7stwiFGc5dtdbn0S2reE5neztiry4ySRZk/L953cwqhcb9GRz9IwX
KRQBJUwsKJey8Eu/kNKYD1IsOO2wQF8FRzUKOcJ3e7rXXkmTEDZz/2pADU5nQtt5
ZvWp2xss5aNCbi73+P9UymwBP4d0EpdW
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:16:33 2025 by rpki-client