Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
File:                     4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft (raw, json)
Hash identifier:          mnzsLmVC17ls8lVqv36Mas8ii8zZzKxphVMmQrNf/Po=
Subject key identifier:   DE:ED:78:88:42:26:6A:B1:81:9C:2E:AA:69:82:F5:61:7D:43:38:E1
Authority key identifier: E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E
Certificate issuer:       /CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
Manifest number:          01D0
Signing time:             Tue 05 Aug 2025 03:15:53 +0000
Manifest this update:     Tue 05 Aug 2025 03:15:53 +0000
Manifest next update:     Tue 12 Aug 2025 03:15:53 +0000
Files and hashes:         1: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl (hash: ig0ZGKu42k4d00jSNdwKPKpIZq2/dFsq2ZQqgq5nVdk=)
                          2: A8C0A13EAB5D11ED88A54424C4F9AE02.roa (hash: n8o3xnaflWVbOqkp6JntoRCYSrJ8NdzSSuqGUsQkMzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl
                          rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 03:15:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142091, serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E
        Validity
            Not Before: Aug  5 03:15:53 2025 GMT
            Not After : Aug 12 03:15:53 2025 GMT
        Subject: CN=68917769-76cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:29:5f:3d:c7:e3:17:42:1a:bb:5a:f5:91:19:
                    bb:28:1a:7e:d1:29:67:76:32:55:69:98:f5:8c:f5:
                    41:1f:6a:7d:13:87:fb:38:18:c3:68:70:e3:41:e0:
                    89:6e:98:bf:cc:1b:52:c4:39:56:d4:c5:a7:bc:a5:
                    1c:43:fc:8f:fb:38:7d:5a:4d:4f:08:7d:79:fe:a6:
                    57:da:fc:c7:ea:a3:b7:b7:c5:bd:23:e9:db:73:ae:
                    b1:80:6d:f6:7f:c9:26:ee:51:77:f2:33:6f:18:79:
                    bd:7e:cf:11:b3:a3:56:52:5b:2b:38:d5:8e:e8:2c:
                    aa:37:a5:38:2a:e7:93:27:10:8e:80:32:77:0a:41:
                    5e:3f:0f:d8:bc:56:50:b6:f8:2e:c0:64:e1:25:b6:
                    a9:f2:b7:5e:68:02:60:11:8a:a4:e4:b6:9b:7f:cc:
                    fa:94:52:d9:ab:81:8f:1c:d5:ba:b0:40:39:6f:03:
                    a9:be:f3:f9:4d:e2:90:c1:42:98:5b:db:81:20:ee:
                    d8:5f:41:79:9c:a0:83:36:30:7a:59:32:6c:82:80:
                    09:08:95:12:cf:fa:ed:30:75:82:d1:c6:04:bf:20:
                    11:4e:e5:fc:87:b5:c8:f0:0b:d9:65:28:be:9d:b2:
                    1b:bc:f3:42:23:54:c2:64:b5:2a:21:e4:29:11:aa:
                    40:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:ED:78:88:42:26:6A:B1:81:9C:2E:AA:69:82:F5:61:7D:43:38:E1
            X509v3 Authority Key Identifier:
                keyid:E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f7:6a:c4:ce:8f:83:0a:68:ac:b4:79:49:76:a5:46:41:8a:
         cc:02:be:af:e5:d2:06:50:fb:bf:73:b3:bc:42:4b:13:60:da:
         76:3e:41:11:0a:13:f5:02:20:85:d5:c4:f1:50:eb:44:ad:f6:
         aa:f4:72:4f:a0:23:9b:ec:cd:2e:af:23:f7:30:60:89:bc:5a:
         d9:0d:6b:2b:6d:58:be:45:73:39:f4:fe:a6:df:ae:ff:00:e2:
         1e:fc:d2:78:e3:7e:94:4a:a3:b8:2b:18:3f:a3:70:77:9a:14:
         51:cf:1e:36:e0:3f:2e:c4:fd:b6:74:ae:36:bd:e4:5f:f9:d1:
         80:60:79:8f:fa:7e:04:62:c3:6c:50:c1:21:e6:06:62:87:c0:
         f2:0d:a7:f5:ad:75:29:48:e4:fb:2d:fb:b4:36:eb:bb:91:79:
         c8:ed:04:d6:85:49:c4:9e:7a:f4:f3:1f:04:7f:5f:df:48:4f:
         c1:39:c0:2d:61:a8:ed:7c:6a:0a:94:6f:bc:ce:33:20:66:17:
         aa:28:55:ea:0f:77:4f:f9:89:66:4e:46:7f:16:11:1d:27:96:
         79:d6:f2:55:c2:5a:94:ce:5d:5e:7d:75:8c:7e:31:d3:73:8b:
         8d:c8:94:ee:10:2f:a5:a4:84:de:46:00:24:d8:c5:29:06:24:
         af:8b:37:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIwOTExMTAvBgNVBAUTKEUwODgxM0JEMTg4Q0RDMkFCRjUwMThERTZGRTM3RjQ0
Mzc0NzIwOEUwHhcNMjUwODA1MDMxNTUzWhcNMjUwODEyMDMxNTUzWjAYMRYwFAYD
VQQDEw02ODkxNzc2OS03NmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArylfPcfjF0Iau1r1kRm7KBp+0SlndjJVaZj1jPVBH2p9E4f7OBjDaHDjQeCJ
bpi/zBtSxDlW1MWnvKUcQ/yP+zh9Wk1PCH15/qZX2vzH6qO3t8W9I+nbc66xgG32
f8km7lF38jNvGHm9fs8Rs6NWUlsrONWO6CyqN6U4KueTJxCOgDJ3CkFePw/YvFZQ
tvguwGThJbap8rdeaAJgEYqk5Labf8z6lFLZq4GPHNW6sEA5bwOpvvP5TeKQwUKY
W9uBIO7YX0F5nKCDNjB6WTJsgoAJCJUSz/rtMHWC0cYEvyARTuX8h7XI8AvZZSi+
nbIbvPNCI1TCZLUqIeQpEapAYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7teIhC
JmqxgZwuqmmC9WF9QzjhMB8GA1UdIwQYMBaAFOCIE70YjNwqv1AY3m/jf0Q3RyCO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjA5MS9BQkM0RDQ0NEFC
NTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTNDcV9VQmplYi1OX1JEZEhJ
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRJZ1R2UmlNM0NxX1VCamViLU5fUkRkSElJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjA5MS9BQkM0RDQ0NEFCNTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTND
cV9VQmplYi1OX1JEZEhJSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBN92rEzo+DCmistHlJdqVGQYrMAr6v5dIGUPu/c7O8QksTYNp2PkER
ChP1AiCF1cTxUOtErfaq9HJPoCOb7M0uryP3MGCJvFrZDWsrbVi+RXM59P6m367/
AOIe/NJ4436USqO4Kxg/o3B3mhRRzx424D8uxP22dK42veRf+dGAYHmP+n4EYsNs
UMEh5gZih8DyDaf1rXUpSOT7Lfu0Nuu7kXnI7QTWhUnEnnr08x8Ef1/fSE/BOcAt
YajtfGoKlG+8zjMgZheqKFXqD3dP+YlmTkZ/FhEdJ5Z51vJVwlqUzl1efXWMfjHT
c4uNyJTuEC+lpITeRgAk2MUpBiSvizfA
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:15:04 2025 by rpki-client