Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
File:                     3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft (raw, json)
Hash identifier:          yCyUkds2JIrepaMKVI9GwAzaDpaj9LTdP8TCcLm8Pa4=
Subject key identifier:   8E:97:E6:05:FC:CE:B0:0D:20:2F:15:71:56:B2:B5:09:35:7C:03:34
Authority key identifier: DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9
Certificate issuer:       /CN=A9127EEB/serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
Certificate serial:       7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
Manifest number:          73
Signing time:             Sat 09 Aug 2025 07:26:44 +0000
Manifest this update:     Sat 09 Aug 2025 07:26:44 +0000
Manifest next update:     Sat 16 Aug 2025 07:26:44 +0000
Files and hashes:         1: 3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl (hash: kbR2DJfZ5QOgOkFs7Koj+FvSPBOUi85Xr+GAyhcHTfc=)
                          2: 5E2D7894562911F0A243A66DC4F9AE02.roa (hash: w0THdO9T6h078pEq3+Lht0f7Z/7SLZrFg+11EWkOMY4=)
                          3: 5EDC5882D3BB11EF80C3AF80C4F9AE02.roa (hash: PJbzNrEkpbuhikAan3mFGxS/ZJai+blTb1hTbzhhLXc=)
                          4: 5BE6333E736411F09E462F7FC4F9AE02.roa (hash: k5DUo0GtA+W5TKOD4gTgzrZyYGUJYVm+Yz6KHtleKcM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl
                          rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127EEB, serialNumber=DEF3317CBD14D7DBAA27BFFE3FE5A7B8A6EDCFB9
        Validity
            Not Before: Aug  9 07:26:44 2025 GMT
            Not After : Aug 16 07:26:44 2025 GMT
        Subject: CN=6896f834-a57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:c5:c3:48:c9:1a:3e:8b:31:0c:90:95:6f:
                    24:9c:c0:66:04:49:9a:9b:8e:ba:0d:e9:04:bb:75:
                    9d:61:6f:1b:01:38:ff:26:fc:54:6a:43:dd:3d:e6:
                    23:22:cf:fa:cc:9c:26:38:9b:0a:d4:0e:99:9d:f4:
                    0b:2d:6a:9e:d4:f8:0c:c9:d8:55:9d:b2:bd:13:cd:
                    6e:0b:34:a4:45:2c:37:5d:77:da:fc:9b:f9:37:45:
                    a6:16:08:93:34:9c:d9:0f:05:00:83:8d:f4:e8:b3:
                    49:aa:bb:5c:d1:f0:cf:2c:5d:7f:1c:a3:11:67:be:
                    f2:87:07:fd:b7:1a:2b:22:7c:18:93:09:e9:df:6e:
                    ca:b0:b9:b4:9b:d2:9b:87:21:9a:8e:10:f0:37:29:
                    58:ca:2c:98:65:9b:c4:ca:af:4a:3e:22:be:16:c9:
                    bf:56:c2:f6:1c:fa:55:5b:6d:30:5c:51:92:53:47:
                    7b:a9:f9:68:8b:9e:d2:6f:eb:f7:63:e6:6e:43:28:
                    df:62:9a:9a:c3:61:1b:41:7e:0d:5d:08:6a:6f:a7:
                    c4:ff:a7:c6:50:41:3a:9c:3f:4a:63:ec:09:82:c9:
                    de:1c:98:89:31:fb:8b:aa:f3:44:0f:be:56:57:be:
                    09:4c:98:3a:67:d4:ea:e0:b4:29:b2:d3:8e:50:a6:
                    de:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:97:E6:05:FC:CE:B0:0D:20:2F:15:71:56:B2:B5:09:35:7C:03:34
            X509v3 Authority Key Identifier:
                keyid:DE:F3:31:7C:BD:14:D7:DB:AA:27:BF:FE:3F:E5:A7:B8:A6:ED:CF:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vMxfL0U19uqJ7_-P-WnuKbtz7k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127EEB/F57C94B0D3BA11EF947B0580C4F9AE02/3vMxfL0U19uqJ7_-P-WnuKbtz7k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:9b:9e:ee:4a:19:46:ee:40:3a:aa:f9:6a:52:0a:81:44:2d:
         ce:e6:e7:54:9e:fb:99:18:63:25:da:83:21:38:fe:40:1a:e2:
         a3:14:ce:42:39:c3:a7:bf:1b:b4:6e:45:0b:df:af:86:70:6e:
         60:a9:e9:ac:85:f8:79:11:21:53:4f:fc:38:55:62:46:39:ed:
         be:a2:c7:d4:fc:b6:09:c4:11:0b:81:67:7d:fb:a7:3f:65:56:
         6e:de:3b:c3:f1:8b:fe:f3:b7:0d:e6:f0:c6:d9:5d:fa:9b:eb:
         22:8b:54:c5:4e:f7:b6:e3:27:6e:8d:62:65:3f:dc:fc:20:c0:
         78:e1:bf:00:47:2f:65:ea:88:b6:a5:dc:3d:6c:54:e9:54:3b:
         82:74:66:db:ee:55:63:d1:60:b3:04:d5:85:cf:03:25:93:10:
         16:fd:45:8a:ca:00:03:f5:5c:73:95:99:53:ea:d3:73:2d:0a:
         e1:0b:b3:04:49:85:df:45:81:b5:7f:e6:02:70:08:b0:36:5b:
         78:b8:3f:26:01:79:25:28:11:1b:75:8d:2e:c9:02:35:ee:47:
         b8:60:c6:d7:e3:97:93:38:fa:74:da:dc:b1:59:4a:aa:23:5b:
         e4:38:e0:8e:af:64:9f:ac:13:b3:a3:0c:5c:77:c2:69:e3:57:
         a8:7a:15:ab
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBfDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
N0VFQjExMC8GA1UEBRMoREVGMzMxN0NCRDE0RDdEQkFBMjdCRkZFM0ZFNUE3QjhB
NkVEQ0ZCOTAeFw0yNTA4MDkwNzI2NDRaFw0yNTA4MTYwNzI2NDRaMBgxFjAUBgNV
BAMTDTY4OTZmODM0LWE1N2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCxbMXDSMkaPosxDJCVbyScwGYESZqbjroN6QS7dZ1hbxsBOP8m/FRqQ9095iMi
z/rMnCY4mwrUDpmd9Astap7U+AzJ2FWdsr0TzW4LNKRFLDddd9r8m/k3RaYWCJM0
nNkPBQCDjfTos0mqu1zR8M8sXX8coxFnvvKHB/23GisifBiTCenfbsqwubSb0puH
IZqOEPA3KVjKLJhlm8TKr0o+Ir4Wyb9WwvYc+lVbbTBcUZJTR3up+WiLntJv6/dj
5m5DKN9imprDYRtBfg1dCGpvp8T/p8ZQQTqcP0pj7AmCyd4cmIkx+4uq80QPvlZX
vglMmDpn1OrgtCmy045Qpt4pAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjpfmBfzO
sA0gLxVxVrK1CTV8AzQwHwYDVR0jBBgwFoAU3vMxfL0U19uqJ7/+P+WnuKbtz7kw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3RUVCL0Y1N0M5NEIwRDNC
QTExRUY5NDdCMDU4MEM0RjlBRTAyLzN2TXhmTDBVMTl1cUo3Xy1QLVdudUtidHo3
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM3ZNeGZMMFUxOXVxSjdfLVAtV251S2J0ejdrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI3
RUVCL0Y1N0M5NEIwRDNCQTExRUY5NDdCMDU4MEM0RjlBRTAyLzN2TXhmTDBVMTl1
cUo3Xy1QLVdudUtidHo3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMebnu5KGUbuQDqq+WpSCoFELc7m51Se+5kYYyXagyE4/kAa4qMUzkI5
w6e/G7RuRQvfr4ZwbmCp6ayF+HkRIVNP/DhVYkY57b6ix9T8tgnEEQuBZ337pz9l
Vm7eO8Pxi/7ztw3m8MbZXfqb6yKLVMVO97bjJ26NYmU/3PwgwHjhvwBHL2XqiLal
3D1sVOlUO4J0ZtvuVWPRYLME1YXPAyWTEBb9RYrKAAP1XHOVmVPq03MtCuELswRJ
hd9FgbV/5gJwCLA2W3i4PyYBeSUoERt1jS7JAjXuR7hgxtfjl5M4+nTa3LFZSqoj
W+Q44I6vZJ+sE7OjDFx3wmnjV6h6Fas=
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:06:45 2025 by rpki-client