Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
File:                     4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft (raw, json)
Hash identifier:          xKgCYuBCF+1vtLhH/GRCANwE2E/6NN0EuHdgW38bodY=
Subject key identifier:   1E:D9:82:17:4D:69:01:41:3D:53:E1:E5:01:1B:3F:B7:E2:A7:56:E7
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Certificate issuer:       /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial:       0AF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
Manifest number:          0AD6
Signing time:             Fri 08 Aug 2025 19:46:19 +0000
Manifest this update:     Fri 08 Aug 2025 19:46:18 +0000
Manifest next update:     Fri 15 Aug 2025 19:46:18 +0000
Files and hashes:         1: 4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl (hash: ApmH5KrXjvPLQaqngdolXGZVi1L4Qb6yn208oiala+M=)
                          2: 19D0C9444D6A11EFB5578F3AC4F9AE02.roa (hash: 3+4YIvZgcCdVrPM39eq8U0b37BVdz2kxEm0TdnodkbE=)
                          3: 2BACE2284D6B11EF9595843FC4F9AE02.roa (hash: z2Amob3XsDPHZrT5Wf5AplgGB0ayushklt2PBfRRMGk=)
                          4: 76D38708D64611EE98C44371C4F9AE02.roa (hash: b8sKlJgxC+LgU3RKdElF+rtjQy5KxRCgzXpaFbzf9q0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
                          rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2802 (0xaf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
        Validity
            Not Before: Aug  8 19:46:18 2025 GMT
            Not After : Aug 15 19:46:18 2025 GMT
        Subject: CN=6896540b-d5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:13:4c:7b:b6:45:ba:b9:5d:0b:bf:04:18:00:
                    75:54:a9:b5:8c:f2:00:11:3b:35:42:2b:d7:e9:86:
                    0e:72:cf:61:3b:03:43:3b:67:4b:23:72:7e:b3:22:
                    1d:02:4b:4c:4f:5d:c7:fd:96:ae:3b:81:cb:06:97:
                    cf:09:8e:20:97:a4:3b:3a:b3:ae:a1:e9:e2:16:1d:
                    8b:f9:c2:c3:47:6d:51:37:a5:30:aa:cc:d1:ee:af:
                    5a:93:42:31:72:5f:14:69:02:51:33:17:56:b0:f1:
                    5b:ab:4b:d8:43:9d:56:9e:b9:3c:0b:ee:90:52:ea:
                    9f:1f:e3:42:3f:56:bb:ef:44:0f:cf:de:8b:58:7b:
                    d5:74:b1:e5:1e:da:0a:ad:e2:66:a8:ed:62:1c:ec:
                    b1:55:bc:29:cb:82:7d:51:72:a3:d8:d6:cc:d3:c6:
                    f8:42:dc:6b:bb:e8:b0:91:31:5b:ea:58:99:31:da:
                    00:e3:95:26:7e:e4:b4:62:9a:89:c5:35:b7:f0:61:
                    24:87:94:a9:b2:e8:e6:ac:e3:a1:ed:30:a7:87:dd:
                    87:08:72:4e:ac:bf:a9:59:67:da:ea:2e:40:39:95:
                    c1:c3:d3:4d:a5:c7:d5:99:ae:f9:97:48:a7:76:81:
                    4d:a4:b4:13:3d:b6:39:e0:4f:49:56:56:07:99:a8:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:D9:82:17:4D:69:01:41:3D:53:E1:E5:01:1B:3F:B7:E2:A7:56:E7
            X509v3 Authority Key Identifier:
                keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:6c:50:0c:55:5e:44:b6:98:ec:03:ea:0a:1b:b8:64:f3:dd:
         ba:3b:21:8e:2e:b1:39:21:c8:f2:a0:df:3b:c5:47:44:35:21:
         a0:77:26:57:4a:9c:ae:9d:aa:57:d3:a5:96:df:07:27:cd:ca:
         df:cb:67:a2:4c:42:15:c1:69:67:8c:4f:c1:c2:46:55:70:99:
         28:0d:47:8b:b4:42:32:ab:97:48:f9:44:c0:a8:8a:01:32:5a:
         20:12:79:88:48:e6:9f:c5:0e:1e:f6:e5:a5:60:37:a1:19:31:
         29:cb:a9:c9:9c:8b:51:8d:b9:25:6f:b0:b7:1c:8f:6c:1d:f3:
         a1:45:fd:e5:25:46:fa:2d:19:f9:d4:c9:16:79:a8:22:fa:2b:
         ec:95:48:8c:ed:39:4c:bc:8c:42:96:73:fe:90:d0:d8:a7:40:
         56:7b:77:43:64:e0:15:7c:5a:29:2b:0a:70:e8:c0:fe:1b:81:
         23:f4:ef:ea:9b:42:9b:8e:2f:8a:a7:f9:87:85:26:d6:99:c3:
         24:4e:8e:9a:b6:fa:f9:f5:72:17:ae:47:ec:13:46:7a:fa:2e:
         7a:c8:67:e0:59:48:77:c8:05:5d:2e:24:76:00:f0:66:cb:18:
         54:f4:2e:2a:4d:8f:3a:84:00:3a:c8:f4:f4:31:e8:53:1b:50:
         2c:c8:fd:d1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc4RDUxMTAvBgNVBAUTKEUwMTBBRjJFMTE0QTRBOUZENTA4NUJFNDQ2NjA1MjEz
OTBGQjEzMzEwHhcNMjUwODA4MTk0NjE4WhcNMjUwODE1MTk0NjE4WjAYMRYwFAYD
VQQDEw02ODk2NTQwYi1kNWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1hNMe7ZFurldC78EGAB1VKm1jPIAETs1QivX6YYOcs9hOwNDO2dLI3J+syId
AktMT13H/ZauO4HLBpfPCY4gl6Q7OrOuoeniFh2L+cLDR21RN6UwqszR7q9ak0Ix
cl8UaQJRMxdWsPFbq0vYQ51Wnrk8C+6QUuqfH+NCP1a770QPz96LWHvVdLHlHtoK
reJmqO1iHOyxVbwpy4J9UXKj2NbM08b4Qtxru+iwkTFb6liZMdoA45UmfuS0YpqJ
xTW38GEkh5SpsujmrOOh7TCnh92HCHJOrL+pWWfa6i5AOZXBw9NNpcfVma75l0in
doFNpLQTPbY54E9JVlYHmag2FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB7ZghdN
aQFBPVPh5QEbP7fip1bnMB8GA1UdIwQYMBaAFOAQry4RSkqf1Qhb5EZgUhOQ+xMx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzhENS82MDEzMjE2MDU2
QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1NwX1ZDRnZrUm1CU0U1RDdF
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRCQ3ZMaEZLU3BfVkNGdmtSbUJTRTVEN0V6RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzhENS82MDEzMjE2MDU2QzgxMUVBQjY2NTdBNDBDNEY5QUUwMi80QkN2TGhGS1Nw
X1ZDRnZrUm1CU0U1RDdFekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUbFAMVV5EtpjsA+oKG7hk8926OyGOLrE5IcjyoN87xUdENSGgdyZX
SpyunapX06WW3wcnzcrfy2eiTEIVwWlnjE/BwkZVcJkoDUeLtEIyq5dI+UTAqIoB
MlogEnmISOafxQ4e9uWlYDehGTEpy6nJnItRjbklb7C3HI9sHfOhRf3lJUb6LRn5
1MkWeagi+ivslUiM7TlMvIxClnP+kNDYp0BWe3dDZOAVfFopKwpw6MD+G4Ej9O/q
m0Kbji+Kp/mHhSbWmcMkTo6atvr59XIXrkfsE0Z6+i56yGfgWUh3yAVdLiR2APBm
yxhU9C4qTY86hAA6yPT0MehTG1AsyP3R
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:08:47 2025 by rpki-client