Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
File:                     sae05J_PFfDFALickX8mZHJQ8K4.mft (raw, json)
Hash identifier:          VkGjtCtC7khS97RYgYupejTGYB31nkjA5Q+Kj/DFnf0=
Subject key identifier:   F5:F4:75:95:A5:F7:DC:F2:BE:6D:CD:B1:D0:A4:7E:07:B5:77:2D:6B
Authority key identifier: B1:A7:B4:E4:9F:CF:15:F0:C5:00:B8:9C:91:7F:26:64:72:50:F0:AE
Certificate issuer:       /CN=A914B462/serialNumber=B1A7B4E49FCF15F0C500B89C917F26647250F0AE
Certificate serial:       2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
Manifest number:          2A
Signing time:             Tue 05 Aug 2025 08:23:29 +0000
Manifest this update:     Tue 05 Aug 2025 08:23:28 +0000
Manifest next update:     Tue 12 Aug 2025 08:23:28 +0000
Files and hashes:         1: sae05J_PFfDFALickX8mZHJQ8K4.crl (hash: agTBi4uoEqchi4eX8uOGXll123yP3L/QrR1RefxjVls=)
                          2: BA4C0E94330911F08D233546C4F9AE02.roa (hash: dP93uYFjOQGVmzTzM0xXMIjOeOKOZofW9HJX5/7YBks=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.crl
                          rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 08:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B462, serialNumber=B1A7B4E49FCF15F0C500B89C917F26647250F0AE
        Validity
            Not Before: Aug  5 08:23:28 2025 GMT
            Not After : Aug 12 08:23:28 2025 GMT
        Subject: CN=6891bf80-5aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7e:8e:d4:16:f9:82:eb:07:45:5e:ef:dc:2f:
                    b6:ef:16:74:9b:70:3e:88:a3:af:e2:b9:be:14:7c:
                    74:28:d0:17:4e:6a:e1:7e:9a:dd:a4:52:d7:11:7c:
                    bf:f7:f4:e4:fa:a5:e9:27:dc:12:de:b2:67:76:1c:
                    1e:05:9a:9b:f6:bc:cc:3f:7c:d5:52:44:e2:f7:93:
                    fa:95:0c:48:9e:fc:6c:b0:3e:86:8e:ff:88:08:f1:
                    3b:fa:47:b0:d1:82:63:ae:37:0c:7d:2e:55:0b:84:
                    39:04:cd:f1:bb:be:f4:e2:9a:22:b4:db:7d:25:ab:
                    21:41:27:23:06:43:ba:1a:0f:45:c3:7f:58:2d:15:
                    6e:88:04:cc:9b:79:80:fe:25:a0:13:a9:66:3f:57:
                    2e:4b:ea:a2:ec:5e:b7:43:06:fb:54:f9:18:18:73:
                    42:69:84:99:60:02:17:cf:e1:27:13:f7:3a:50:f7:
                    e0:10:21:c3:90:2f:8b:11:29:da:5e:ff:7e:a6:50:
                    33:f2:09:53:c7:af:28:96:b1:e2:3a:cc:62:f8:2f:
                    18:81:31:91:de:32:32:0a:78:b8:78:46:55:88:6e:
                    27:22:3f:2e:70:f7:77:23:ec:64:73:04:7f:47:b3:
                    30:2c:0a:03:9d:8c:a3:df:e2:83:d9:bf:d7:2f:f5:
                    37:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F4:75:95:A5:F7:DC:F2:BE:6D:CD:B1:D0:A4:7E:07:B5:77:2D:6B
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B4:E4:9F:CF:15:F0:C5:00:B8:9C:91:7F:26:64:72:50:F0:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sae05J_PFfDFALickX8mZHJQ8K4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B462/AABE6F6232FF11F0859B5A2DC4F9AE02/sae05J_PFfDFALickX8mZHJQ8K4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:23:46:b6:55:00:a6:20:7f:fd:e8:3d:06:88:3e:ba:06:60:
         cb:e9:1e:15:2f:4d:29:b2:c2:dd:a6:f7:d2:4b:06:0f:f8:a4:
         e9:dd:e5:3b:fe:1a:91:cc:d9:ad:34:c3:72:8c:f6:90:e8:dc:
         2b:e3:31:4d:61:1e:ce:7b:7a:e9:84:be:19:24:3e:31:0d:cd:
         23:d8:d9:fe:f7:b6:66:8a:0b:5c:64:24:3e:1f:87:24:d2:3b:
         c5:4f:e4:9f:89:f7:2d:a3:07:90:df:9b:ed:c7:a8:5b:58:37:
         fe:58:b1:84:27:14:0b:d6:52:0b:10:9f:35:35:75:52:48:09:
         f0:0b:e4:31:fd:28:c0:a6:63:c8:0c:47:fc:e0:68:17:f6:db:
         1c:2c:53:29:1e:92:47:8d:5c:b6:fb:a5:fc:1f:a1:6f:ca:56:
         cd:69:53:0e:75:8d:fb:4c:ea:1f:33:6a:79:63:5a:ae:0c:5d:
         ca:dd:d4:b6:9b:99:ae:70:3e:33:02:b3:b1:ec:8c:b8:b0:66:
         e2:45:20:ef:4c:40:48:8a:bb:03:14:ac:e5:51:cc:ad:1f:b5:
         af:d3:60:0f:0c:78:6e:5a:ce:a9:b2:18:bf:4a:d8:32:69:27:
         83:4a:0f:bb:77:e9:32:10:f2:72:79:cc:c7:e0:af:ac:b2:e0:
         7e:58:0d:76
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
QjQ2MjExMC8GA1UEBRMoQjFBN0I0RTQ5RkNGMTVGMEM1MDBCODlDOTE3RjI2NjQ3
MjUwRjBBRTAeFw0yNTA4MDUwODIzMjhaFw0yNTA4MTIwODIzMjhaMBgxFjAUBgNV
BAMTDTY4OTFiZjgwLTVhYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3fo7UFvmC6wdFXu/cL7bvFnSbcD6Io6/iub4UfHQo0BdOauF+mt2kUtcRfL/3
9OT6pekn3BLesmd2HB4Fmpv2vMw/fNVSROL3k/qVDEie/GywPoaO/4gI8Tv6R7DR
gmOuNwx9LlULhDkEzfG7vvTimiK0230lqyFBJyMGQ7oaD0XDf1gtFW6IBMybeYD+
JaATqWY/Vy5L6qLsXrdDBvtU+RgYc0JphJlgAhfP4ScT9zpQ9+AQIcOQL4sRKdpe
/36mUDPyCVPHryiWseI6zGL4LxiBMZHeMjIKeLh4RlWIbiciPy5w93cj7GRzBH9H
szAsCgOdjKPf4oPZv9cv9TfpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9fR1laX3
3PK+bc2x0KR+B7V3LWswHwYDVR0jBBgwFoAUsae05J/PFfDFALickX8mZHJQ8K4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCNDYyL0FBQkU2RjYyMzJG
RjExRjA4NTlCNUEyREM0RjlBRTAyL3NhZTA1Sl9QRmZERkFMaWNrWDhtWkhKUThL
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvc2FlMDVKX1BGZkRGQUxpY2tYOG1aSEpROEs0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC
NDYyL0FBQkU2RjYyMzJGRjExRjA4NTlCNUEyREM0RjlBRTAyL3NhZTA1Sl9QRmZE
RkFMaWNrWDhtWkhKUThLNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABwjRrZVAKYgf/3oPQaIProGYMvpHhUvTSmywt2m99JLBg/4pOnd5Tv+
GpHM2a00w3KM9pDo3CvjMU1hHs57eumEvhkkPjENzSPY2f73tmaKC1xkJD4fhyTS
O8VP5J+J9y2jB5Dfm+3HqFtYN/5YsYQnFAvWUgsQnzU1dVJICfAL5DH9KMCmY8gM
R/zgaBf22xwsUykekkeNXLb7pfwfoW/KVs1pUw51jftM6h8zanljWq4MXcrd1Lab
ma5wPjMCs7HsjLiwZuJFIO9MQEiKuwMUrOVRzK0fta/TYA8MeG5azqmyGL9K2DJp
J4NKD7t36TIQ8nJ5zMfgr6yy4H5YDXY=
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:35:32 2025 by rpki-client