Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
File:                     D6nlM-haGDwUUwAIqLliP4VtXes.mft (raw, json)
Hash identifier:          YJa+TgGaYUYQ8GhvBZGUgBiJqGwhbY0pQl1MWaST5Uw=
Subject key identifier:   FC:19:2F:2C:A7:61:42:DE:08:AD:E1:FE:8D:3E:49:8A:24:AE:08:39
Authority key identifier: 0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB
Certificate issuer:       /CN=A9160455/serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
Certificate serial:       0C4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
Manifest number:          0C36
Signing time:             Sun 10 Aug 2025 18:40:46 +0000
Manifest this update:     Sun 10 Aug 2025 18:40:45 +0000
Manifest next update:     Sun 17 Aug 2025 18:40:45 +0000
Files and hashes:         1: D6nlM-haGDwUUwAIqLliP4VtXes.crl (hash: X4JO+WHhEHgX4amUA3oja2Y8Qen++TfXPpjjhF2gnKA=)
                          2: 49E515C2C0F211EEA14E0122C4F9AE02.roa (hash: hANV6ERnDblIoU8kPVg1/VC/XygDNvVoYUOvd3sESZc=)
                          3: AADE9E9C5B9511EEA8190143C4F9AE02.roa (hash: FO7phPYzfDla6aPOyvXALwSuyaWj8a9hgRlX/QWvNY4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl
                          rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3149 (0xc4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160455, serialNumber=0FA9E533E85A183C14530008A8B9623F856D5DEB
        Validity
            Not Before: Aug 10 18:40:45 2025 GMT
            Not After : Aug 17 18:40:45 2025 GMT
        Subject: CN=6898e7ae-c25d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a5:aa:35:24:b8:1e:32:b8:4c:70:e4:53:02:
                    e7:58:6e:17:d7:b0:65:19:c9:3b:37:62:a5:9b:e3:
                    aa:ce:26:dd:27:0c:04:6a:ef:66:41:04:65:ad:12:
                    45:9e:34:d1:2f:08:c2:0a:2b:a1:98:89:b4:82:80:
                    c5:a9:a3:14:99:4c:5f:b7:17:e1:28:f8:e8:e8:e9:
                    87:f3:fa:5b:90:79:79:31:b8:5c:17:7e:87:b8:d0:
                    94:9b:b5:d7:2a:76:ef:25:23:7b:1d:de:36:89:7b:
                    94:db:0b:25:47:9e:f4:a4:27:20:3a:84:d6:c4:f1:
                    04:d1:e3:5c:5e:53:c6:e2:46:90:2c:d4:01:82:86:
                    95:42:c7:c5:7e:c0:15:fd:06:1f:e1:65:c0:f1:38:
                    49:6b:c7:7d:fb:58:e1:c8:98:ca:96:24:5f:dd:31:
                    9e:a9:2b:e2:cf:ef:17:55:c6:a1:90:ec:ce:df:8b:
                    79:1e:46:ea:d8:92:61:cc:b3:a3:09:dd:df:fd:81:
                    94:62:9f:51:92:de:8b:5c:4d:fc:91:9c:11:06:ca:
                    5f:ea:2d:06:1f:f1:d4:f7:c6:6f:9d:a0:bd:a7:cd:
                    b2:9f:98:da:b6:41:db:a3:07:d9:44:1f:4f:04:5f:
                    c2:60:1e:9a:c4:06:58:48:e4:f1:b0:74:01:4c:1a:
                    b6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:19:2F:2C:A7:61:42:DE:08:AD:E1:FE:8D:3E:49:8A:24:AE:08:39
            X509v3 Authority Key Identifier:
                keyid:0F:A9:E5:33:E8:5A:18:3C:14:53:00:08:A8:B9:62:3F:85:6D:5D:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D6nlM-haGDwUUwAIqLliP4VtXes.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160455/A55E4F9611F511EABAB82028C4F9AE02/D6nlM-haGDwUUwAIqLliP4VtXes.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e1:8b:eb:46:01:05:71:f3:f7:49:8a:19:06:b7:85:eb:83:
         34:7c:39:34:5a:19:5f:bb:a4:ff:af:cc:1a:ef:04:d9:cd:c2:
         bc:20:07:a2:96:c2:38:e8:ed:cc:67:1a:a9:a9:5b:9f:43:70:
         91:14:21:f1:f2:4e:20:c8:78:a4:5a:60:bb:6a:d9:26:96:cf:
         c8:f4:2b:c0:7b:32:b9:63:ba:4d:62:3e:63:fd:b4:3d:66:f1:
         2b:b5:27:94:20:1a:2d:33:40:78:49:f6:ad:e2:91:4b:bb:13:
         b5:27:4e:c5:f6:31:36:40:c1:aa:24:c0:88:c9:b2:3b:bf:51:
         90:7f:e5:a3:7b:7b:4a:09:88:a1:0a:3a:1d:b4:32:f9:a3:9e:
         e4:df:12:2f:59:a5:18:1d:ad:0e:dd:6c:94:b4:e4:51:33:98:
         e0:c1:19:9e:cd:ba:62:ab:4d:c8:b2:b2:b6:49:77:80:6b:06:
         0e:2a:f2:7c:72:ed:90:e8:ff:ff:2c:7e:a8:81:2d:4a:ab:0a:
         e3:8b:01:ea:e0:90:41:d9:66:f7:0d:98:85:30:31:00:b4:99:
         78:2f:52:20:44:15:c1:7a:99:33:44:2d:03:5f:25:d1:7e:6c:
         d4:83:6d:ff:63:a1:1e:c5:33:80:27:97:3b:98:85:80:33:2c:
         b7:a5:a1:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDE0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjA0NTUxMTAvBgNVBAUTKDBGQTlFNTMzRTg1QTE4M0MxNDUzMDAwOEE4Qjk2MjNG
ODU2RDVERUIwHhcNMjUwODEwMTg0MDQ1WhcNMjUwODE3MTg0MDQ1WjAYMRYwFAYD
VQQDEw02ODk4ZTdhZS1jMjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzaWqNSS4HjK4THDkUwLnWG4X17BlGck7N2Klm+OqzibdJwwEau9mQQRlrRJF
njTRLwjCCiuhmIm0goDFqaMUmUxftxfhKPjo6OmH8/pbkHl5MbhcF36HuNCUm7XX
KnbvJSN7Hd42iXuU2wslR570pCcgOoTWxPEE0eNcXlPG4kaQLNQBgoaVQsfFfsAV
/QYf4WXA8ThJa8d9+1jhyJjKliRf3TGeqSviz+8XVcahkOzO34t5Hkbq2JJhzLOj
Cd3f/YGUYp9Rkt6LXE38kZwRBspf6i0GH/HU98ZvnaC9p82yn5jatkHbowfZRB9P
BF/CYB6axAZYSOTxsHQBTBq2iwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPwZLyyn
YULeCK3h/o0+SYokrgg5MB8GA1UdIwQYMBaAFA+p5TPoWhg8FFMACKi5Yj+FbV3r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDQ1NS9BNTVFNEY5NjEx
RjUxMUVBQkFCODIwMjhDNEY5QUUwMi9ENm5sTS1oYUdEd1VVd0FJcUxsaVA0VnRY
ZXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q2bmxNLWhhR0R3VVV3QUlxTGxpUDRWdFhlcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MDQ1NS9BNTVFNEY5NjExRjUxMUVBQkFCODIwMjhDNEY5QUUwMi9ENm5sTS1oYUdE
d1VVd0FJcUxsaVA0VnRYZXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBF4YvrRgEFcfP3SYoZBreF64M0fDk0Whlfu6T/r8wa7wTZzcK8IAei
lsI46O3MZxqpqVufQ3CRFCHx8k4gyHikWmC7atkmls/I9CvAezK5Y7pNYj5j/bQ9
ZvErtSeUIBotM0B4Sfat4pFLuxO1J07F9jE2QMGqJMCIybI7v1GQf+Wje3tKCYih
CjodtDL5o57k3xIvWaUYHa0O3WyUtORRM5jgwRmezbpiq03IsrK2SXeAawYOKvJ8
cu2Q6P//LH6ogS1KqwrjiwHq4JBB2Wb3DZiFMDEAtJl4L1IgRBXBepkzRC0DXyXR
fmzUg23/Y6EexTOAJ5c7mIWAMyy3paGC
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:28:02 2025 by rpki-client