Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
File:                     _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json)
Hash identifier:          U+pCPRg812CNhO7IIFc2snYffyZoZYu0vkPIaqoBeUk=
Subject key identifier:   BC:C3:15:5C:58:DC:FE:BF:22:3F:CD:39:B1:E4:16:CE:60:40:D4:7F
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Certificate issuer:       /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial:       1D1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
Manifest number:          1CD8
Signing time:             Fri 08 Aug 2025 16:18:53 +0000
Manifest this update:     Fri 08 Aug 2025 16:18:52 +0000
Manifest next update:     Fri 15 Aug 2025 16:18:52 +0000
Files and hashes:         1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: bgLH3CKeQJtoCDalf/RRYwoSK7GtRZdZk/OMbj+gOoE=)
                          2: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: lfXXFKA1BewBY10R96banzWyiiHGZ5/wupAGz1DuT5w=)
                          3: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: qeTmmubtmqrY2/e8m/Tsiuz4+UZv7NeRmzZbrXj/lVI=)
                          4: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: RFFbNib+EOfTMtyfuUsNL0crZ/n9uw59zoxUUo7ALbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
                          rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7455 (0x1d1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
        Validity
            Not Before: Aug  8 16:18:52 2025 GMT
            Not After : Aug 15 16:18:52 2025 GMT
        Subject: CN=6896236c-2557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:72:2d:60:09:3e:38:31:b5:9b:2f:01:6d:45:
                    10:f6:c6:2f:a7:67:af:3c:78:0e:52:a0:a3:8c:ff:
                    15:29:4e:fe:83:b0:49:c4:38:33:ed:6c:99:1a:8f:
                    02:0e:aa:eb:2d:07:a7:37:08:f2:d8:1f:d2:a1:a8:
                    a8:ae:ac:d4:9a:a9:90:8a:f7:1e:49:b4:02:da:56:
                    0b:0a:e9:06:8c:01:80:23:40:af:8b:d7:58:db:db:
                    1f:68:bb:6c:79:4e:e7:f1:ac:c3:99:04:17:e2:38:
                    a6:94:a2:38:dc:2f:7b:58:93:36:da:88:d6:e2:52:
                    7b:5d:d4:6d:8e:16:30:02:c6:80:4b:4a:42:5b:33:
                    c7:83:11:d9:b6:ba:4a:10:1b:7c:5c:78:6f:92:f6:
                    cc:08:1c:24:18:ba:76:c7:cd:ff:98:d1:ff:57:70:
                    14:11:27:c1:d5:6c:72:b5:9e:69:1a:ad:ec:34:41:
                    f0:50:02:66:00:78:3d:ac:98:50:a8:23:20:f5:cf:
                    08:c0:fd:6f:0c:85:2e:d4:41:ea:52:6a:30:0c:64:
                    1c:cd:b6:36:f3:90:44:0f:7e:4f:dc:97:77:01:e4:
                    3e:b0:42:34:b0:e7:b7:2a:ba:20:59:bf:b8:13:29:
                    b9:d4:07:04:c5:a7:f5:3e:d6:88:30:8a:b6:33:d1:
                    4d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C3:15:5C:58:DC:FE:BF:22:3F:CD:39:B1:E4:16:CE:60:40:D4:7F
            X509v3 Authority Key Identifier:
                keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:68:28:27:c5:8f:47:a3:e6:bf:82:45:0f:2a:72:ed:32:07:
         ac:f0:f1:af:6c:16:9c:87:f6:08:86:d7:f1:48:c0:5e:ae:cf:
         6a:a8:55:e7:c7:a4:34:20:17:4f:02:48:62:2c:1f:8f:2f:b2:
         8c:97:e3:2f:3a:7b:d0:e6:d8:45:9c:ce:48:1e:f2:81:d1:02:
         93:15:e1:4a:f9:81:85:c3:0d:26:8d:8e:76:ee:e1:40:01:64:
         d1:e8:31:10:1b:b6:47:84:bc:35:53:29:e8:de:9c:54:4c:47:
         ce:e1:be:0e:b5:ad:91:45:e4:dc:03:95:87:78:62:16:17:95:
         b2:16:46:6f:0c:bf:79:70:25:b6:9f:7a:6c:36:06:d2:26:92:
         4f:ac:b9:b8:c4:f6:37:8d:ce:59:e1:97:a4:97:44:25:44:ea:
         60:90:7d:36:c1:93:a0:3f:a2:40:97:28:da:c2:ff:8a:d9:0c:
         86:50:1b:75:57:c2:23:3f:07:de:00:74:de:7d:a5:a5:25:00:
         61:3d:9b:ea:91:3b:4e:d6:53:7d:54:b1:4c:2f:55:fd:ff:b2:
         e4:39:96:ff:ef:ea:3a:ea:1f:d5:41:b0:d3:58:a4:e6:28:bc:
         c9:31:93:00:0b:e8:b1:21:d3:9f:c7:a0:3d:97:cb:27:80:d5:
         7f:f0:80:56
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTBEMjcxMTAvBgNVBAUTKEZGQ0QyMERDQTY4REU0MzJGMjE5MUI3QjYzMzI4NkJD
OTg3RTQyRUMwHhcNMjUwODA4MTYxODUyWhcNMjUwODE1MTYxODUyWjAYMRYwFAYD
VQQDEw02ODk2MjM2Yy0yNTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArnItYAk+ODG1my8BbUUQ9sYvp2evPHgOUqCjjP8VKU7+g7BJxDgz7WyZGo8C
DqrrLQenNwjy2B/SoaiorqzUmqmQivceSbQC2lYLCukGjAGAI0Cvi9dY29sfaLts
eU7n8azDmQQX4jimlKI43C97WJM22ojW4lJ7XdRtjhYwAsaAS0pCWzPHgxHZtrpK
EBt8XHhvkvbMCBwkGLp2x83/mNH/V3AUESfB1WxytZ5pGq3sNEHwUAJmAHg9rJhQ
qCMg9c8IwP1vDIUu1EHqUmowDGQczbY285BED35P3Jd3AeQ+sEI0sOe3KrogWb+4
Eym51AcExaf1PtaIMIq2M9FN2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLzDFVxY
3P6/Ij/NObHkFs5gQNR/MB8GA1UdIwQYMBaAFP/NINymjeQy8hkbe2MyhryYfkLs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MEQyNy8yQTYxQ0E4QUQz
NTkxMUU2QjU1QUZBNzBDNEY5QUUwMi9fODBnM0thTjVETHlHUnQ3WXpLR3ZKaC1R
dXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL184MGczS2FONURMeUdSdDdZektHdkpoLVF1dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MEQyNy8yQTYxQ0E4QUQzNTkxMUU2QjU1QUZBNzBDNEY5QUUwMi9fODBnM0thTjVE
THlHUnQ3WXpLR3ZKaC1RdXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAgaCgnxY9Ho+a/gkUPKnLtMges8PGvbBach/YIhtfxSMBers9qqFXn
x6Q0IBdPAkhiLB+PL7KMl+MvOnvQ5thFnM5IHvKB0QKTFeFK+YGFww0mjY527uFA
AWTR6DEQG7ZHhLw1Uyno3pxUTEfO4b4Ota2RReTcA5WHeGIWF5WyFkZvDL95cCW2
n3psNgbSJpJPrLm4xPY3jc5Z4Zekl0QlROpgkH02wZOgP6JAlyjawv+K2QyGUBt1
V8IjPwfeAHTefaWlJQBhPZvqkTtO1lN9VLFML1X9/7LkOZb/7+o66h/VQbDTWKTm
KLzJMZMAC+ixIdOfx6A9l8sngNV/8IBW
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:55:11 2025 by rpki-client