Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
File:                     a7IptQZEL6BIpPedPLRPoOAEeUE.mft (raw, json)
Hash identifier:          l1ScMv4ezni+ZWOgr2GZTg1rLfVUrKRjE1nY68dzio0=
Subject key identifier:   32:4A:46:8B:CA:CB:DB:C0:56:50:5B:D3:CA:25:A8:CF:C5:53:2F:23
Authority key identifier: 6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41
Certificate issuer:       /CN=A913C928/serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941
Certificate serial:       076C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
Manifest number:          0766
Signing time:             Fri 08 Aug 2025 21:59:58 +0000
Manifest this update:     Fri 08 Aug 2025 21:59:58 +0000
Manifest next update:     Fri 15 Aug 2025 21:59:58 +0000
Files and hashes:         1: a7IptQZEL6BIpPedPLRPoOAEeUE.crl (hash: FTet8hSkpetLtphKrLeOBOUtd1kiMNnA2S3s/Sk16h8=)
                          2: 08D6D5122A4511EBA2903755C4F9AE02.roa (hash: /eGyMyfZrwg+tW0iicICs4kHkYiGhwJp9BCaRgreCno=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl
                          rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1900 (0x76c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C928, serialNumber=6BB229B506442FA048A4F79D3CB44FA0E0047941
        Validity
            Not Before: Aug  8 21:59:58 2025 GMT
            Not After : Aug 15 21:59:58 2025 GMT
        Subject: CN=6896735e-a22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:15:2b:99:74:e8:69:92:99:7b:3a:59:4f:e3:
                    38:d8:68:dc:89:c9:18:8b:92:7c:a6:c7:b0:68:65:
                    c1:b5:ff:d3:7d:1a:da:0b:79:5d:b1:9f:cf:7e:59:
                    8a:10:6e:86:fb:f2:7b:7b:bf:f9:30:0a:69:4e:23:
                    8c:27:49:85:34:09:89:79:34:cf:e4:cf:0f:5e:a7:
                    bd:54:e1:9b:49:d8:ef:53:04:85:29:fd:5e:fb:7a:
                    15:6e:45:6d:48:c5:ba:d3:66:a1:06:d4:8c:63:03:
                    a9:e1:d1:5a:df:38:d4:f6:d7:fb:5f:54:67:e4:b6:
                    00:05:76:88:07:cf:85:da:51:78:6a:5b:28:35:43:
                    4f:c8:b0:94:e6:7f:6f:4b:74:e1:67:a9:a8:50:ce:
                    38:84:16:66:42:13:12:82:5d:27:38:0a:27:07:c7:
                    6c:d9:39:19:0b:21:45:c3:7b:c8:4a:81:0b:5b:45:
                    f1:6a:a1:5c:3a:cb:a6:62:95:d0:d1:1b:66:d1:2a:
                    37:e6:6a:85:1d:0b:56:bb:36:8a:05:7f:78:83:41:
                    8e:ba:d9:6a:93:91:78:37:a7:7b:9c:c4:c9:f5:fa:
                    e5:a2:08:90:a7:a6:27:7a:41:4a:d7:c2:ba:2c:80:
                    2b:37:9b:50:f2:4b:45:ec:4a:40:e6:ca:42:4d:0f:
                    da:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4A:46:8B:CA:CB:DB:C0:56:50:5B:D3:CA:25:A8:CF:C5:53:2F:23
            X509v3 Authority Key Identifier:
                keyid:6B:B2:29:B5:06:44:2F:A0:48:A4:F7:9D:3C:B4:4F:A0:E0:04:79:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a7IptQZEL6BIpPedPLRPoOAEeUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C928/77F546EC2A4311EB89923753C4F9AE02/a7IptQZEL6BIpPedPLRPoOAEeUE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:37:ed:ca:31:05:5d:cc:3e:3c:ea:dd:15:a8:8c:b7:ca:38:
         79:22:86:ea:8b:ce:4d:fe:4d:e6:a8:ef:09:02:74:56:bd:c9:
         a6:d8:4a:cb:2e:6b:8b:04:3c:a3:9e:f9:bb:d5:a7:29:43:4f:
         1b:70:8c:cb:d4:1d:2d:40:e5:cd:2a:11:d8:9f:ba:2f:e7:f6:
         21:7a:41:4e:c6:f2:3d:54:cd:2c:23:a8:89:e9:36:3e:6d:ab:
         0d:a7:fa:2f:e2:b2:31:ec:f0:62:79:99:21:72:48:22:70:60:
         41:63:a7:b6:7c:97:7e:bf:e4:57:2f:11:db:b7:0b:b9:10:b1:
         49:db:bd:d9:c5:ac:52:21:0b:35:b8:69:a1:dc:fb:4d:48:c1:
         dd:fc:32:77:31:74:7f:55:20:36:82:f1:98:d0:75:12:d3:ff:
         f7:83:0b:20:18:be:44:74:b9:3b:43:3d:62:de:c2:0a:79:a6:
         77:2d:7e:9e:56:e8:5a:aa:ac:f7:64:52:0c:f3:16:3d:9e:bf:
         da:69:e4:43:bb:2e:10:f1:7a:64:ed:fa:c0:78:de:c7:df:52:
         24:73:33:29:53:99:71:b1:1b:34:ad:48:b5:df:7f:cb:7d:45:
         53:73:0c:e2:5b:1b:a8:97:00:5d:17:bd:11:68:3c:0c:0f:9b:
         4a:c5:cd:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M5MjgxMTAvBgNVBAUTKDZCQjIyOUI1MDY0NDJGQTA0OEE0Rjc5RDNDQjQ0RkEw
RTAwNDc5NDEwHhcNMjUwODA4MjE1OTU4WhcNMjUwODE1MjE1OTU4WjAYMRYwFAYD
VQQDEw02ODk2NzM1ZS1hMjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzBUrmXToaZKZezpZT+M42GjcickYi5J8psewaGXBtf/TfRraC3ldsZ/PflmK
EG6G+/J7e7/5MAppTiOMJ0mFNAmJeTTP5M8PXqe9VOGbSdjvUwSFKf1e+3oVbkVt
SMW602ahBtSMYwOp4dFa3zjU9tf7X1Rn5LYABXaIB8+F2lF4alsoNUNPyLCU5n9v
S3ThZ6moUM44hBZmQhMSgl0nOAonB8ds2TkZCyFFw3vISoELW0XxaqFcOsumYpXQ
0Rtm0So35mqFHQtWuzaKBX94g0GOutlqk5F4N6d7nMTJ9frlogiQp6YnekFK18K6
LIArN5tQ8ktF7EpA5spCTQ/aMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDJKRovK
y9vAVlBb08olqM/FUy8jMB8GA1UdIwQYMBaAFGuyKbUGRC+gSKT3nTy0T6DgBHlB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzkyOC83N0Y1NDZFQzJB
NDMxMUVCODk5MjM3NTNDNEY5QUUwMi9hN0lwdFFaRUw2QklwUGVkUExSUG9PQUVl
VUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E3SXB0UVpFTDZCSXBQZWRQTFJQb09BRWVVRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzkyOC83N0Y1NDZFQzJBNDMxMUVCODk5MjM3NTNDNEY5QUUwMi9hN0lwdFFaRUw2
QklwUGVkUExSUG9PQUVlVUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCoN+3KMQVdzD486t0VqIy3yjh5Iobqi85N/k3mqO8JAnRWvcmm2ErL
LmuLBDyjnvm71acpQ08bcIzL1B0tQOXNKhHYn7ov5/YhekFOxvI9VM0sI6iJ6TY+
basNp/ov4rIx7PBieZkhckgicGBBY6e2fJd+v+RXLxHbtwu5ELFJ273ZxaxSIQs1
uGmh3PtNSMHd/DJ3MXR/VSA2gvGY0HUS0//3gwsgGL5EdLk7Qz1i3sIKeaZ3LX6e
Vuhaqqz3ZFIM8xY9nr/aaeRDuy4Q8Xpk7frAeN7H31IkczMpU5lxsRs0rUi133/L
fUVTcwziWxuolwBdF70RaDwMD5tKxc2d
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:46:16 2025 by rpki-client