Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
File:                     c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft (raw, json)
Hash identifier:          ecfXXhaJZr46oSXUc/iNAKXQXZE/zrIoveGzfxXcMso=
Subject key identifier:   65:53:0E:A6:AA:EC:1B:E9:4E:2E:16:02:7B:02:F2:6D:8A:01:E6:9B
Authority key identifier: 73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76
Certificate issuer:       /CN=A91316E5/serialNumber=73987ECCE77E44EB36651E098D33750FA864E676
Certificate serial:       016E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
Manifest number:          016B
Signing time:             Tue 05 Aug 2025 04:18:06 +0000
Manifest this update:     Tue 05 Aug 2025 04:18:06 +0000
Manifest next update:     Tue 12 Aug 2025 04:18:06 +0000
Files and hashes:         1: c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl (hash: CtVs71IyEMxM8xtqEOf0Mxz47x7KQQIsim/smBG4/Pw=)
                          2: C1A8182646D011EE8BE5AE80C4F9AE02.roa (hash: gAXQ6XOA3NODkbVV4z4rY8FPGvcx9W1CdIeenZ4k+xI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl
                          rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 04:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91316E5, serialNumber=73987ECCE77E44EB36651E098D33750FA864E676
        Validity
            Not Before: Aug  5 04:18:06 2025 GMT
            Not After : Aug 12 04:18:06 2025 GMT
        Subject: CN=689185fe-ad2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c0:1a:fd:01:56:d5:25:7d:9e:c2:91:4c:6b:
                    d4:ea:6d:45:39:fc:ba:e4:2f:a6:0f:08:81:21:41:
                    23:41:f7:a8:fb:ae:8e:cf:d7:dc:9c:c9:45:3c:18:
                    71:31:3e:b9:16:ab:80:f4:cf:c2:de:4d:d0:91:da:
                    a8:59:fa:3c:51:3d:cb:2f:52:6f:b3:ca:4c:d9:73:
                    35:72:a4:0e:6e:9a:e7:03:7e:33:7e:e4:dd:3f:8a:
                    4f:c6:cd:ea:b6:02:68:80:d7:0d:63:ae:10:35:26:
                    4e:16:84:fe:7d:c6:2e:13:a9:ae:9a:72:70:d2:91:
                    e6:cd:7b:20:23:cb:cf:3a:bb:c5:15:0b:11:18:7d:
                    f0:4c:70:f8:27:11:63:50:61:bd:ee:0c:46:10:ef:
                    a0:0b:bf:dc:a1:a4:a4:b5:ee:84:3d:e2:06:09:7c:
                    f2:6e:1d:de:cb:61:89:e4:01:9a:f3:de:cc:be:1a:
                    17:c4:39:0a:b9:e4:60:79:3d:f9:6e:94:97:a4:76:
                    9f:44:f6:5e:35:53:de:4e:69:b3:23:bf:f7:8f:b5:
                    f9:93:15:23:ea:9f:4d:f3:bd:84:14:90:c3:8b:b3:
                    d3:c4:51:7d:74:8c:b6:e5:f0:de:c6:29:da:db:0d:
                    12:c0:9d:e0:61:59:27:c2:4c:7e:9e:25:f3:d0:47:
                    71:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:53:0E:A6:AA:EC:1B:E9:4E:2E:16:02:7B:02:F2:6D:8A:01:E6:9B
            X509v3 Authority Key Identifier:
                keyid:73:98:7E:CC:E7:7E:44:EB:36:65:1E:09:8D:33:75:0F:A8:64:E6:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316E5/51F9835C46D011EE81F2073FC4F9AE02/c5h-zOd-ROs2ZR4JjTN1D6hk5nY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:23:7f:93:5d:ef:f3:0e:37:36:ce:56:1d:27:a4:ab:52:ef:
         51:9d:20:3e:f5:21:ba:f9:b2:9b:d8:2a:ba:91:5e:ee:23:d9:
         c9:7f:91:b6:47:ec:3e:8d:71:4b:ef:67:5f:3a:a2:12:e4:f5:
         65:53:c1:f0:c6:f2:ce:d2:bf:73:50:18:99:c4:65:f7:d2:0d:
         b3:cc:9d:46:fd:1b:41:0e:d9:14:dd:a8:49:3c:d0:f4:1b:11:
         59:31:01:d6:21:d7:66:d9:68:ac:aa:f1:ff:f6:fa:61:4c:ac:
         39:b3:46:94:59:44:bd:11:1b:2f:99:cc:79:ae:70:79:60:cb:
         d8:62:d8:ca:04:3e:99:dd:0c:7e:79:ec:c1:1e:11:c9:55:53:
         01:61:00:8b:fd:d0:a6:37:e5:a0:54:e6:92:55:6a:38:83:ef:
         f1:41:b2:e9:28:06:07:6c:a8:af:d1:80:59:55:7e:ad:4c:1d:
         75:12:c8:54:5b:6b:4c:72:d4:ca:31:57:54:91:43:32:45:a9:
         ab:46:99:20:0e:dc:99:4f:41:66:e8:b6:ce:fb:52:b1:8f:17:
         24:64:3b:6f:5d:4c:dc:05:c4:1b:35:6e:81:05:4d:40:e6:ce:
         43:6c:63:22:46:66:12:c2:98:d3:bb:b7:cb:de:ce:7f:45:86:
         a0:74:61:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAW4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE2RTUxMTAvBgNVBAUTKDczOTg3RUNDRTc3RTQ0RUIzNjY1MUUwOThEMzM3NTBG
QTg2NEU2NzYwHhcNMjUwODA1MDQxODA2WhcNMjUwODEyMDQxODA2WjAYMRYwFAYD
VQQDEw02ODkxODVmZS1hZDJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA08Aa/QFW1SV9nsKRTGvU6m1FOfy65C+mDwiBIUEjQfeo+66Oz9fcnMlFPBhx
MT65FquA9M/C3k3QkdqoWfo8UT3LL1Jvs8pM2XM1cqQObprnA34zfuTdP4pPxs3q
tgJogNcNY64QNSZOFoT+fcYuE6mumnJw0pHmzXsgI8vPOrvFFQsRGH3wTHD4JxFj
UGG97gxGEO+gC7/coaSkte6EPeIGCXzybh3ey2GJ5AGa897MvhoXxDkKueRgeT35
bpSXpHafRPZeNVPeTmmzI7/3j7X5kxUj6p9N872EFJDDi7PTxFF9dIy25fDexina
2w0SwJ3gYVknwkx+niXz0EdxGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVTDqaq
7BvpTi4WAnsC8m2KAeabMB8GA1UdIwQYMBaAFHOYfsznfkTrNmUeCY0zdQ+oZOZ2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZFNS81MUY5ODM1QzQ2
RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJPczJaUjRKalROMUQ2aGs1
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M1aC16T2QtUk9zMlpSNEpqVE4xRDZoazVuWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTZFNS81MUY5ODM1QzQ2RDAxMUVFODFGMjA3M0ZDNEY5QUUwMi9jNWgtek9kLVJP
czJaUjRKalROMUQ2aGs1blkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBuI3+TXe/zDjc2zlYdJ6SrUu9RnSA+9SG6+bKb2Cq6kV7uI9nJf5G2
R+w+jXFL72dfOqIS5PVlU8HwxvLO0r9zUBiZxGX30g2zzJ1G/RtBDtkU3ahJPND0
GxFZMQHWIddm2WisqvH/9vphTKw5s0aUWUS9ERsvmcx5rnB5YMvYYtjKBD6Z3Qx+
eezBHhHJVVMBYQCL/dCmN+WgVOaSVWo4g+/xQbLpKAYHbKiv0YBZVX6tTB11EshU
W2tMctTKMVdUkUMyRamrRpkgDtyZT0Fm6LbO+1KxjxckZDtvXUzcBcQbNW6BBU1A
5s5DbGMiRmYSwpjTu7fL3s5/RYagdGEx
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:02:27 2025 by rpki-client