Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
File:                     eOQpC8zJmRWAsnbcDCyXv7CGINg.mft (raw, json)
Hash identifier:          wjDmptkm/cfgv4yxMcOfNuQI9b9wa1gUZZTd4QoRPrg=
Subject key identifier:   2D:55:47:4E:2E:A6:4D:76:0E:E4:46:BE:88:87:22:9E:61:15:DA:05
Authority key identifier: 78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8
Certificate issuer:       /CN=A914B79F/serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
Certificate serial:       0172
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
Manifest number:          016C
Signing time:             Sat 09 Aug 2025 04:16:16 +0000
Manifest this update:     Sat 09 Aug 2025 04:16:15 +0000
Manifest next update:     Sat 16 Aug 2025 04:16:15 +0000
Files and hashes:         1: eOQpC8zJmRWAsnbcDCyXv7CGINg.crl (hash: clwVPj8ee6taSciOlNgugxvC3h5i0MZkc5eS42xtTIU=)
                          2: 071BCFF849D011EF9F8A8969C4F9AE02.roa (hash: ta+wizYmG5Li1UNdnV+RjnG6RQDSQFnDtjBK6l15sJs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl
                          rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B79F, serialNumber=78E4290BCCC9991580B276DC0C2C97BFB08620D8
        Validity
            Not Before: Aug  9 04:16:15 2025 GMT
            Not After : Aug 16 04:16:15 2025 GMT
        Subject: CN=6896cb90-e389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:55:80:5a:34:87:a0:59:dc:14:07:19:15:d1:
                    ba:d5:c1:00:0d:0b:09:b4:b5:91:cf:47:be:39:10:
                    d8:b0:be:b0:47:f6:75:b8:48:97:ba:2f:a0:1a:e7:
                    f4:60:6b:6d:6c:73:7a:71:d3:6c:b4:a5:80:66:44:
                    25:61:24:38:b4:ec:26:79:f7:92:e4:ac:50:55:8e:
                    2b:84:bc:81:a2:66:2c:ec:93:5d:db:80:58:48:62:
                    7c:aa:14:c8:64:51:60:8e:c2:06:e0:0f:7c:3d:3f:
                    4b:86:be:65:b5:0b:f6:97:0d:a6:a6:35:35:ed:5b:
                    d1:af:3d:fb:ee:3d:6f:8d:c6:eb:ae:6f:06:f5:14:
                    3a:02:2f:c4:56:6d:6a:0c:21:be:ad:d0:3f:c6:d7:
                    06:4d:14:c4:02:68:4d:ca:14:e2:5f:9d:95:e4:6e:
                    d5:45:92:51:10:b8:ab:61:59:8d:ed:a0:e5:ae:c2:
                    66:90:4c:1e:62:8a:f3:65:24:61:25:64:21:91:cd:
                    69:9f:c1:ab:b2:41:a6:9a:bc:5f:a5:fe:4d:b8:70:
                    a5:66:3f:31:52:a8:76:84:c0:2c:a6:89:95:0b:d4:
                    d0:68:35:b8:b7:5d:17:cd:e9:d7:14:36:70:3e:c4:
                    0f:35:eb:42:73:b9:5e:71:26:4a:9e:73:25:58:31:
                    dc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:55:47:4E:2E:A6:4D:76:0E:E4:46:BE:88:87:22:9E:61:15:DA:05
            X509v3 Authority Key Identifier:
                keyid:78:E4:29:0B:CC:C9:99:15:80:B2:76:DC:0C:2C:97:BF:B0:86:20:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eOQpC8zJmRWAsnbcDCyXv7CGINg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B79F/DA6837F04E2911EE945C394FC4F9AE02/eOQpC8zJmRWAsnbcDCyXv7CGINg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:21:c0:19:55:67:01:1a:31:2c:42:02:15:14:d6:ab:d5:f8:
         65:00:bb:05:88:94:78:04:b5:14:31:e9:26:55:ae:01:58:96:
         1b:46:3c:02:8a:81:9b:f1:cb:f2:30:29:46:44:14:a6:c7:24:
         5b:ac:ea:17:26:e8:b8:a6:e1:ef:6a:00:93:a0:b4:cd:56:a5:
         ed:6f:be:aa:d7:63:58:57:67:bb:57:00:4a:88:ea:7c:87:72:
         d8:2b:e7:ad:7c:10:54:e9:a5:5a:11:90:3b:e0:65:41:81:52:
         61:d3:58:78:d1:ea:9b:3b:3a:78:72:76:1e:95:56:e1:2b:92:
         8e:97:6f:e8:58:62:22:5b:c8:06:0b:f2:28:b6:09:78:ab:e3:
         dd:12:25:82:30:a9:dc:de:4e:16:30:aa:73:56:3c:57:48:3d:
         56:98:4b:91:6f:49:1b:ca:2b:61:16:dd:bb:7d:8c:3a:e5:7f:
         3d:12:3f:5f:68:00:36:f5:6b:26:50:59:17:e2:5f:61:3e:19:
         64:01:3a:54:50:58:e1:21:1b:0e:8d:29:07:b8:34:4e:a1:de:
         07:ba:9c:ad:0f:4a:fa:22:fd:a0:50:85:68:ba:7a:2d:77:9e:
         40:ca:0b:87:be:4f:c3:38:5b:ea:69:25:5b:f9:a3:b7:47:1c:
         96:49:5c:dc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEI3OUYxMTAvBgNVBAUTKDc4RTQyOTBCQ0NDOTk5MTU4MEIyNzZEQzBDMkM5N0JG
QjA4NjIwRDgwHhcNMjUwODA5MDQxNjE1WhcNMjUwODE2MDQxNjE1WjAYMRYwFAYD
VQQDEw02ODk2Y2I5MC1lMzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA31WAWjSHoFncFAcZFdG61cEADQsJtLWRz0e+ORDYsL6wR/Z1uEiXui+gGuf0
YGttbHN6cdNstKWAZkQlYSQ4tOwmefeS5KxQVY4rhLyBomYs7JNd24BYSGJ8qhTI
ZFFgjsIG4A98PT9Lhr5ltQv2lw2mpjU17VvRrz377j1vjcbrrm8G9RQ6Ai/EVm1q
DCG+rdA/xtcGTRTEAmhNyhTiX52V5G7VRZJRELirYVmN7aDlrsJmkEweYorzZSRh
JWQhkc1pn8GrskGmmrxfpf5NuHClZj8xUqh2hMAspomVC9TQaDW4t10XzenXFDZw
PsQPNetCc7lecSZKnnMlWDHczQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1VR04u
pk12DuRGvoiHIp5hFdoFMB8GA1UdIwQYMBaAFHjkKQvMyZkVgLJ23Awsl7+whiDY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Qjc5Ri9EQTY4MzdGMDRF
MjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1SV0FzbmJjREN5WHY3Q0dJ
TmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VPUXBDOHpKbVJXQXNuYmNEQ3lYdjdDR0lOZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Qjc5Ri9EQTY4MzdGMDRFMjkxMUVFOTQ1QzM5NEZDNEY5QUUwMi9lT1FwQzh6Sm1S
V0FzbmJjREN5WHY3Q0dJTmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfIcAZVWcBGjEsQgIVFNar1fhlALsFiJR4BLUUMekmVa4BWJYbRjwC
ioGb8cvyMClGRBSmxyRbrOoXJui4puHvagCToLTNVqXtb76q12NYV2e7VwBKiOp8
h3LYK+etfBBU6aVaEZA74GVBgVJh01h40eqbOzp4cnYelVbhK5KOl2/oWGIiW8gG
C/Iotgl4q+PdEiWCMKnc3k4WMKpzVjxXSD1WmEuRb0kbyithFt27fYw65X89Ej9f
aAA29WsmUFkX4l9hPhlkATpUUFjhIRsOjSkHuDROod4HupytD0r6Iv2gUIVounot
d55AyguHvk/DOFvqaSVb+aO3RxyWSVzc
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:50:02 2025 by rpki-client