Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
File:                     83GJVwUMS84UpOw46qzunHQkTE8.mft (raw, json)
Hash identifier:          qEU9JrEJp95/KE5GdbX/9Lt1q3PnKOTXZotMC+mxOSw=
Subject key identifier:   E5:6A:8F:48:CA:65:62:BB:DF:C6:90:76:92:7F:80:41:73:FA:99:3A
Authority key identifier: F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F
Certificate issuer:       /CN=A91426E8/serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
Manifest number:          27
Signing time:             Mon 11 Aug 2025 08:05:24 +0000
Manifest this update:     Mon 11 Aug 2025 08:05:23 +0000
Manifest next update:     Mon 18 Aug 2025 08:05:23 +0000
Files and hashes:         1: 83GJVwUMS84UpOw46qzunHQkTE8.crl (hash: LyyIOM2x8ckQ0mQrgUPKxGIlaHg4IT6ur3akJL4+XxM=)
                          2: F34C44FC3F7511F0A963EE11C4F9AE02.roa (hash: 0lT1AyOiOXe+BKO1a/7QwW0Ghznoxt7Inz7Ksh5dWQc=)
                          3: B240CFC23F8A11F0B3F03A67C4F9AE02.roa (hash: sM8LsbsoEf9GFMasQUHdxFdj0W4Z3+oN5Sb3It4tBgc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl
                          rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 08:05:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91426E8, serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
        Validity
            Not Before: Aug 11 08:05:23 2025 GMT
            Not After : Aug 18 08:05:23 2025 GMT
        Subject: CN=6899a444-d6b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b7:47:11:cc:a7:2e:70:d0:86:3f:38:34:cf:
                    96:2d:65:6f:53:3b:0e:f9:e8:0d:6d:79:c8:d5:15:
                    2c:4f:64:fd:ab:2d:2d:ba:4a:a8:0c:f0:83:8a:41:
                    7b:02:c9:8c:87:39:a4:1a:e4:96:99:79:a5:e1:fb:
                    1d:f3:f7:b5:f6:0d:a9:07:a4:fc:c8:34:48:b3:b1:
                    7d:dc:ea:88:d6:9e:c9:ab:34:a9:d2:4b:23:3e:59:
                    7c:d4:23:fb:a3:78:b9:94:38:ba:07:38:01:22:f7:
                    ef:95:6e:23:49:66:38:b8:48:28:d3:62:69:58:23:
                    a5:1e:0b:8a:71:67:f8:e5:73:7e:e8:f4:11:5e:f6:
                    d0:ba:fc:8a:db:48:9c:af:54:37:90:0e:7d:ef:44:
                    5e:60:b9:4b:70:ab:01:6c:64:8b:f2:c8:b7:5a:42:
                    d6:75:79:43:44:d5:f0:dc:e8:8a:db:78:ad:da:59:
                    ed:cb:10:10:c4:2a:bd:24:14:cf:1a:6e:8d:34:3f:
                    19:e9:f9:9b:69:e2:01:58:0b:3c:a4:cf:1a:d5:ad:
                    e3:ea:68:d8:64:fb:df:88:1a:07:6d:d1:03:f8:66:
                    de:c9:d4:6e:e0:e0:87:eb:71:fe:05:b6:63:70:cd:
                    e4:49:44:85:74:ba:20:cc:c4:c1:7f:5d:77:05:53:
                    65:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6A:8F:48:CA:65:62:BB:DF:C6:90:76:92:7F:80:41:73:FA:99:3A
            X509v3 Authority Key Identifier:
                keyid:F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e5:22:a9:c6:3b:6c:a9:4c:b2:a5:be:34:93:04:3f:f4:58:
         68:08:33:28:2e:ed:21:79:0d:a4:56:7f:76:b2:e8:58:db:43:
         31:f0:ab:59:71:72:78:f4:5e:3e:03:8a:4e:8a:97:ea:c7:39:
         62:0c:b3:1d:7d:f6:ee:66:c9:7f:7f:56:9c:5a:2d:04:c2:b5:
         3a:16:69:bf:e5:98:b9:fc:d3:c6:49:34:09:57:68:32:d0:2b:
         d7:27:55:78:3b:c8:d8:59:f8:5f:c6:6e:4b:09:8d:a8:af:1c:
         eb:f7:f8:4a:3a:26:84:5f:cb:6e:c0:7d:a9:c1:f0:73:60:f0:
         6d:49:50:a9:03:86:b9:62:63:a2:05:13:2e:62:cd:82:4a:e0:
         ab:dd:96:c9:97:31:55:3b:7e:c0:da:8f:06:e7:21:9d:03:df:
         01:79:42:81:f2:62:91:57:44:f3:ca:f0:62:ab:62:a0:d1:5a:
         0e:98:49:27:ad:12:11:4d:62:ef:1f:32:6f:2a:47:1e:87:9f:
         7c:b8:18:b4:54:ef:2a:71:94:76:d1:f1:a6:9c:0a:32:19:01:
         48:b9:bc:a4:d0:24:4d:9c:fe:66:d0:c9:77:2c:05:9a:f6:9f:
         23:88:31:44:c2:04:60:a5:01:b8:2f:02:10:72:d6:db:62:41:
         98:20:2a:47
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MjZFODExMC8GA1UEBRMoRjM3MTg5NTcwNTBDNEJDRTE0QTRFQzM4RUFBQ0VFOUM3
NDI0NEM0RjAeFw0yNTA4MTEwODA1MjNaFw0yNTA4MTgwODA1MjNaMBgxFjAUBgNV
BAMTDTY4OTlhNDQ0LWQ2YjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDet0cRzKcucNCGPzg0z5YtZW9TOw756A1tecjVFSxPZP2rLS26SqgM8IOKQXsC
yYyHOaQa5JaZeaXh+x3z97X2DakHpPzINEizsX3c6ojWnsmrNKnSSyM+WXzUI/uj
eLmUOLoHOAEi9++VbiNJZji4SCjTYmlYI6UeC4pxZ/jlc37o9BFe9tC6/IrbSJyv
VDeQDn3vRF5guUtwqwFsZIvyyLdaQtZ1eUNE1fDc6IrbeK3aWe3LEBDEKr0kFM8a
bo00Pxnp+Ztp4gFYCzykzxrVrePqaNhk+9+IGgdt0QP4Zt7J1G7g4Ifrcf4FtmNw
zeRJRIV0uiDMxMF/XXcFU2U9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5WqPSMpl
YrvfxpB2kn+AQXP6mTowHwYDVR0jBBgwFoAU83GJVwUMS84UpOw46qzunHQkTE8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNkU4LzhENUFBMTdBM0Y3
NTExRjA5NjIzMkExMUM0RjlBRTAyLzgzR0pWd1VNUzg0VXBPdzQ2cXp1bkhRa1RF
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvODNHSlZ3VU1TODRVcE93NDZxenVuSFFrVEU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy
NkU4LzhENUFBMTdBM0Y3NTExRjA5NjIzMkExMUM0RjlBRTAyLzgzR0pWd1VNUzg0
VXBPdzQ2cXp1bkhRa1RFOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADflIqnGO2ypTLKlvjSTBD/0WGgIMygu7SF5DaRWf3ay6FjbQzHwq1lx
cnj0Xj4Dik6Kl+rHOWIMsx199u5myX9/VpxaLQTCtToWab/lmLn808ZJNAlXaDLQ
K9cnVXg7yNhZ+F/GbksJjaivHOv3+Eo6JoRfy27AfanB8HNg8G1JUKkDhrliY6IF
Ey5izYJK4KvdlsmXMVU7fsDajwbnIZ0D3wF5QoHyYpFXRPPK8GKrYqDRWg6YSSet
EhFNYu8fMm8qRx6Hn3y4GLRU7ypxlHbR8aacCjIZAUi5vKTQJE2c/mbQyXcsBZr2
nyOIMUTCBGClAbgvAhBy1ttiQZggKkc=
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:36:01 2025 by rpki-client