Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
File:                     nFh2OitDfLKSxGQXuNSO32tXAc8.mft (raw, json)
Hash identifier:          Kn9pz3osiDs1hiwDIonbBCnzJV6GvUY1xv2oNp6j6Ec=
Subject key identifier:   F9:F1:D3:4C:E7:98:F9:FA:93:A1:2E:93:51:09:AC:81:F1:F5:C6:71
Authority key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
Certificate issuer:       /CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
Certificate serial:       0770
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
Manifest number:          0769
Signing time:             Fri 08 Aug 2025 21:59:51 +0000
Manifest this update:     Fri 08 Aug 2025 21:59:50 +0000
Manifest next update:     Fri 15 Aug 2025 21:59:50 +0000
Files and hashes:         1: nFh2OitDfLKSxGQXuNSO32tXAc8.crl (hash: 5c0jhgt0f/UdWSLMGEDou4MIy0H3gz5VZUElYqi9EFg=)
                          2: EEF3557C75A211EBBCD0587BC4F9AE02.roa (hash: jIN2PY6GWYE7IvHCsXUW4P6OWa+fFCSoJx89CCKLLFQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl
                          rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1904 (0x770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130683, serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
        Validity
            Not Before: Aug  8 21:59:50 2025 GMT
            Not After : Aug 15 21:59:50 2025 GMT
        Subject: CN=68967357-5070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f9:c8:52:7b:0a:29:9e:1b:d0:3e:56:02:86:
                    20:d7:a0:dd:ab:0f:e4:8b:7f:e9:7d:ad:ac:41:d3:
                    5d:e0:fe:3e:6b:a5:8b:37:cb:96:cd:cf:12:6a:87:
                    15:b8:fd:22:79:f8:d5:ca:6c:18:c4:b8:6d:a4:4c:
                    23:3c:59:a6:7f:eb:dc:40:65:d0:6d:c7:e1:a7:55:
                    9b:dc:7c:ea:0b:4e:2e:97:2d:b8:91:26:3b:56:cf:
                    63:dd:c3:d6:9b:fa:59:2a:c3:3c:96:b2:91:44:db:
                    82:74:54:27:42:9a:1f:74:d9:f3:8d:e7:28:0f:ab:
                    46:e6:06:32:e6:43:96:35:36:f0:15:d2:ba:7e:d9:
                    33:f7:ac:23:5f:3d:73:83:cd:b6:59:86:21:b9:29:
                    d6:e5:2b:84:6c:4a:79:0b:51:7b:1f:6f:b8:e0:44:
                    8c:8f:3f:98:db:70:09:97:55:bf:a6:25:de:e3:3f:
                    13:84:93:24:b6:4e:7c:95:0f:11:bd:a5:0b:90:e2:
                    d7:19:66:53:0e:d5:34:c8:f7:30:c4:7c:a4:1a:5e:
                    af:6f:d5:1e:ae:7f:7f:db:de:cb:10:61:8d:5b:f4:
                    95:11:3b:77:0a:2b:fe:d4:4f:8f:5f:26:f7:a4:52:
                    20:20:b2:a8:49:07:31:cc:7c:3c:b0:28:b3:5e:50:
                    47:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F1:D3:4C:E7:98:F9:FA:93:A1:2E:93:51:09:AC:81:F1:F5:C6:71
            X509v3 Authority Key Identifier:
                keyid:9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:6d:ea:98:d6:37:38:58:59:14:c1:f5:ac:9a:8c:53:c4:b3:
         5b:9b:35:04:76:57:3c:e6:fc:c3:33:87:73:b2:3f:35:e2:3b:
         2a:a5:26:bb:09:b2:b4:ca:87:fb:b2:5f:a0:f1:fb:84:78:6b:
         33:f4:dc:39:64:9f:c2:08:0f:8b:2b:12:b2:a7:c4:21:1c:b8:
         cc:f6:62:84:fc:ce:a8:bb:80:a0:bd:cd:3b:34:eb:97:ad:b1:
         15:85:f5:56:0e:52:0a:86:cc:f7:17:b3:80:ee:2f:6d:82:80:
         0d:c0:b3:ad:c4:4f:fd:2c:d4:a9:31:03:87:40:48:bc:eb:96:
         9d:25:49:80:35:38:3b:a9:3f:ee:a0:86:5c:76:6f:e9:b3:9e:
         cb:bd:bb:09:5d:79:0d:f5:10:31:b3:99:62:a9:cd:74:92:72:
         80:17:63:20:c3:c3:c9:e3:61:63:2a:7d:95:aa:aa:58:bf:c8:
         05:af:c8:f7:1c:3b:8e:dd:04:8c:8a:f0:c4:90:c0:4e:a1:b9:
         e7:b6:84:d4:98:fd:2a:1a:89:a2:ee:f1:46:e9:b0:24:2b:15:
         0b:88:d1:44:8a:31:86:5a:0a:ca:38:93:55:34:e6:67:eb:7e:
         38:a9:ad:d4:ba:ac:53:cc:b1:90:a4:db:f3:41:98:68:fd:66:
         1c:a6:fa:77
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA2ODMxMTAvBgNVBAUTKDlDNTg3NjNBMkI0MzdDQjI5MkM0NjQxN0I4RDQ4RURG
NkI1NzAxQ0YwHhcNMjUwODA4MjE1OTUwWhcNMjUwODE1MjE1OTUwWjAYMRYwFAYD
VQQDEw02ODk2NzM1Ny01MDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwPnIUnsKKZ4b0D5WAoYg16Ddqw/ki3/pfa2sQdNd4P4+a6WLN8uWzc8SaocV
uP0iefjVymwYxLhtpEwjPFmmf+vcQGXQbcfhp1Wb3HzqC04uly24kSY7Vs9j3cPW
m/pZKsM8lrKRRNuCdFQnQpofdNnzjecoD6tG5gYy5kOWNTbwFdK6ftkz96wjXz1z
g822WYYhuSnW5SuEbEp5C1F7H2+44ESMjz+Y23AJl1W/piXe4z8ThJMktk58lQ8R
vaULkOLXGWZTDtU0yPcwxHykGl6vb9Uern9/297LEGGNW/SVETt3Civ+1E+PXyb3
pFIgILKoSQcxzHw8sCizXlBHFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPnx00zn
mPn6k6Euk1EJrIHx9cZxMB8GA1UdIwQYMBaAFJxYdjorQ3yyksRkF7jUjt9rVwHP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDY4My81M0Q3NTRGRTJB
NDIxMUVCOUM0NkNENENDNEY5QUUwMi9uRmgyT2l0RGZMS1N4R1FYdU5TTzMydFhB
YzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25GaDJPaXREZkxLU3hHUVh1TlNPMzJ0WEFjOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MDY4My81M0Q3NTRGRTJBNDIxMUVCOUM0NkNENENDNEY5QUUwMi9uRmgyT2l0RGZM
S1N4R1FYdU5TTzMydFhBYzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCSbeqY1jc4WFkUwfWsmoxTxLNbmzUEdlc85vzDM4dzsj814jsqpSa7
CbK0yof7sl+g8fuEeGsz9Nw5ZJ/CCA+LKxKyp8QhHLjM9mKE/M6ou4Cgvc07NOuX
rbEVhfVWDlIKhsz3F7OA7i9tgoANwLOtxE/9LNSpMQOHQEi865adJUmANTg7qT/u
oIZcdm/ps57LvbsJXXkN9RAxs5liqc10knKAF2Mgw8PJ42FjKn2VqqpYv8gFr8j3
HDuO3QSMivDEkMBOobnntoTUmP0qGomi7vFG6bAkKxULiNFEijGGWgrKOJNVNOZn
6344qa3UuqxTzLGQpNvzQZho/WYcpvp3
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:19:01 2025 by rpki-client