Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
File:                     VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft (raw, json)
Hash identifier:          /Ct+Bg0hDOTgBj6LNnEdFt+v4vUAe8ta5x5xHasjWfg=
Subject key identifier:   50:CA:A9:7D:B3:5C:DA:0B:F4:82:44:5A:EC:AA:A7:D4:C9:CC:57:D6
Authority key identifier: 55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE
Certificate issuer:       /CN=A912FBD2/serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
Certificate serial:       0434
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
Manifest number:          0430
Signing time:             Mon 11 Aug 2025 00:28:48 +0000
Manifest this update:     Mon 11 Aug 2025 00:28:47 +0000
Manifest next update:     Mon 18 Aug 2025 00:28:47 +0000
Files and hashes:         1: VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl (hash: xAo2GXGpL/1xLpQmhxiCl7jv1Xz2vkJvZA14tLfYJjw=)
                          2: 8A7E8D5C6F5511ECB5FAA20FC4F9AE02.roa (hash: +VP5NY/+4Z/8NphSit3psl/B3s8Rh2QC3KRRxPvmIp8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl
                          rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1076 (0x434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FBD2, serialNumber=55E485188C5C9D2E24C8345C97BC3462721C98CE
        Validity
            Not Before: Aug 11 00:28:47 2025 GMT
            Not After : Aug 18 00:28:47 2025 GMT
        Subject: CN=6899393f-fb33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ea:63:82:e7:de:f1:ee:78:a9:eb:f4:0c:09:
                    f5:28:ae:af:80:d9:82:7c:98:89:5e:40:ed:cd:63:
                    d4:d0:fe:ac:61:58:9d:4e:83:3d:8e:e1:e1:ec:c4:
                    52:2a:1a:c9:cc:5e:b3:03:d7:40:9c:25:17:2a:fa:
                    69:e9:a0:b6:1f:d0:d5:a2:81:21:26:e9:a8:de:d1:
                    0a:34:ea:f8:90:d0:d3:86:a4:c1:54:a7:2a:69:d9:
                    f4:5f:9f:b4:ca:98:d6:64:fa:ad:f8:d5:40:97:67:
                    1e:62:f8:ea:81:c7:2a:c9:8a:a9:a5:04:2e:5e:0a:
                    34:43:0e:a1:9f:1d:c4:fa:5c:f4:24:2c:9b:4f:2c:
                    01:0d:22:1a:05:48:96:c4:05:17:01:89:49:9e:f6:
                    4c:f4:2c:d2:46:cd:ec:a1:23:67:63:61:f3:fd:60:
                    55:67:74:e3:b0:f3:40:2e:6c:30:11:c3:0c:79:5b:
                    24:20:64:e8:e8:ee:97:42:55:59:1c:75:4b:81:a1:
                    dd:59:2b:ee:da:61:a4:70:ce:2b:1e:68:cf:0b:fb:
                    43:2b:8b:55:8c:af:d4:6c:0d:16:0a:df:6b:08:bd:
                    50:ea:2f:39:1a:25:d8:56:4c:9a:92:31:92:20:de:
                    8d:df:85:6d:03:55:76:17:8b:a1:21:05:8f:97:b6:
                    04:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:CA:A9:7D:B3:5C:DA:0B:F4:82:44:5A:EC:AA:A7:D4:C9:CC:57:D6
            X509v3 Authority Key Identifier:
                keyid:55:E4:85:18:8C:5C:9D:2E:24:C8:34:5C:97:BC:34:62:72:1C:98:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VeSFGIxcnS4kyDRcl7w0YnIcmM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBD2/6D74978C6F5111EC9651DA09C4F9AE02/VeSFGIxcnS4kyDRcl7w0YnIcmM4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:12:cc:71:2d:83:53:43:b7:63:4f:f2:89:d0:2c:c4:ea:4f:
         6b:39:0e:ea:b8:d4:f3:e1:06:6e:61:3c:52:89:b9:d3:58:80:
         d8:eb:75:84:82:cd:ff:37:47:45:61:63:5b:b8:90:b0:39:61:
         7d:e2:07:b9:71:60:5f:5d:de:3a:0e:77:0c:be:7b:4b:4f:7f:
         fe:cf:5f:b1:4c:7e:d6:7d:2d:d2:45:40:78:61:a2:7f:b4:f6:
         50:9e:82:25:26:2c:69:14:aa:9e:f8:5e:1e:36:59:25:5e:0c:
         3a:7a:76:b8:10:92:33:a0:de:74:14:2a:67:b2:ee:6c:b1:86:
         2e:66:b5:00:1a:4c:92:ca:66:db:dc:41:d2:2a:9c:c9:e2:5c:
         84:88:6a:fe:48:47:44:91:01:9e:a0:46:76:68:f9:71:b2:6b:
         d5:a0:d8:a8:ad:5c:0d:9a:d9:d1:17:51:b2:4b:10:e7:1c:db:
         3a:75:20:c7:c9:7d:8a:c9:c4:05:3d:70:03:d4:42:b5:5a:5c:
         e3:fc:1e:39:6e:38:aa:9e:b5:ff:3e:2a:16:02:7c:99:97:5e:
         1d:c6:b4:78:9f:3c:d9:f7:11:8d:03:e8:7b:fa:cc:65:88:b9:
         87:c9:21:e0:a4:5e:1c:b6:63:af:04:1d:d8:20:0f:fb:c6:d3:
         bd:61:cc:fa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBDQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkZCRDIxMTAvBgNVBAUTKDU1RTQ4NTE4OEM1QzlEMkUyNEM4MzQ1Qzk3QkMzNDYy
NzIxQzk4Q0UwHhcNMjUwODExMDAyODQ3WhcNMjUwODE4MDAyODQ3WjAYMRYwFAYD
VQQDEw02ODk5MzkzZi1mYjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmupjgufe8e54qev0DAn1KK6vgNmCfJiJXkDtzWPU0P6sYVidToM9juHh7MRS
KhrJzF6zA9dAnCUXKvpp6aC2H9DVooEhJumo3tEKNOr4kNDThqTBVKcqadn0X5+0
ypjWZPqt+NVAl2ceYvjqgccqyYqppQQuXgo0Qw6hnx3E+lz0JCybTywBDSIaBUiW
xAUXAYlJnvZM9CzSRs3soSNnY2Hz/WBVZ3TjsPNALmwwEcMMeVskIGTo6O6XQlVZ
HHVLgaHdWSvu2mGkcM4rHmjPC/tDK4tVjK/UbA0WCt9rCL1Q6i85GiXYVkyakjGS
IN6N34VtA1V2F4uhIQWPl7YELQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFDKqX2z
XNoL9IJEWuyqp9TJzFfWMB8GA1UdIwQYMBaAFFXkhRiMXJ0uJMg0XJe8NGJyHJjO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRkJEMi82RDc0OTc4QzZG
NTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25TNGt5RFJjbDd3MFluSWNt
TTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZlU0ZHSXhjblM0a3lEUmNsN3cwWW5JY21NNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RkJEMi82RDc0OTc4QzZGNTExMUVDOTY1MURBMDlDNEY5QUUwMi9WZVNGR0l4Y25T
NGt5RFJjbDd3MFluSWNtTTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFEsxxLYNTQ7djT/KJ0CzE6k9rOQ7quNTz4QZuYTxSibnTWIDY63WE
gs3/N0dFYWNbuJCwOWF94ge5cWBfXd46DncMvntLT3/+z1+xTH7WfS3SRUB4YaJ/
tPZQnoIlJixpFKqe+F4eNlklXgw6ena4EJIzoN50FCpnsu5ssYYuZrUAGkySymbb
3EHSKpzJ4lyEiGr+SEdEkQGeoEZ2aPlxsmvVoNiorVwNmtnRF1GySxDnHNs6dSDH
yX2KycQFPXAD1EK1Wlzj/B45bjiqnrX/PioWAnyZl14dxrR4nzzZ9xGNA+h7+sxl
iLmHySHgpF4ctmOvBB3YIA/7xtO9Ycz6
-----END CERTIFICATE-----
Generated at Mon Aug 11 13:53:56 2025 by rpki-client