Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
File:                     CfwHfzPjrWe_FHdVFno61OrLHnw.mft (raw, json)
Hash identifier:          F/JDo4ePFLsi7llrRjMl1xtJs1X7ZIZ1+i44ToZ6n0o=
Subject key identifier:   67:CA:34:6C:96:27:3E:67:B1:81:52:F8:53:79:F6:2D:50:D1:82:DD
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Certificate issuer:       /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial:       065B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
Manifest number:          05F3
Signing time:             Fri 08 Aug 2025 23:42:28 +0000
Manifest this update:     Fri 08 Aug 2025 23:42:28 +0000
Manifest next update:     Fri 15 Aug 2025 23:42:28 +0000
Files and hashes:         1: CfwHfzPjrWe_FHdVFno61OrLHnw.crl (hash: 0O1nO6W2hAqZntq0dPgomGPkX6ffc6KwOz0acmIf1JY=)
                          2: ACDC465C7AEF11EFA321CE80C4F9AE02.roa (hash: yBRdcVlJbMlBPrrr56nDrfaeaxDRpo8RSVcl7jjMZG8=)
                          3: 794C3D9C5BCC11F0A828900BC4F9AE02.roa (hash: UyWilekYaHLz4TqphBn2KWvDci6mtEvraZS6ky5iZQg=)
                          4: 81618D88E53E11EB9E429C44C4F9AE02.roa (hash: eFJqISAsUQRuhPb6f3Hah2PFjEJHe1r/X4BKPg7b4kE=)
                          5: 30904BA8329711EE8EC1E923C4F9AE02.roa (hash: APJ8LqbdzO0lCKxbThL64TXLQduxBrfKXGZEsGj8Ew8=)
                          6: AEEA30A444C911F0B1847067C4F9AE02.roa (hash: jBj8tUje/J9yoZyIY1hd6S/+kLstKeE/As7y2q686ZY=)
                          7: 639394F4B05611EF95B2931BC4F9AE02.roa (hash: C08kfFB3sbHdAzC9hLJnr0tm+lqFd1yHsi8+zNn8y4s=)
                          8: 8023B518E53E11EB9E429C44C4F9AE02.roa (hash: vSQHxn5/lTR7h5pMBllVKzWJzWkf2IiJr01/df+82mQ=)
                          9: 167A6086BBD211EEABCC0D23C4F9AE02.roa (hash: bZCNjczNhzUji7LuYcuS6Yg9nvK9y01d14oqtpECLrI=)
                          10: 80AD3A9AE53E11EB9E429C44C4F9AE02.roa (hash: 0krzqD999T9B24TBVDnqpUMPP33Jo+TAt8qYmCWzmx0=)
                          11: 7F2A4208E53E11EB9E429C44C4F9AE02.roa (hash: epJMifwD6R2b1WeonhK6+Ptsph58rQyMoEb+/4Q80hY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
                          rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1627 (0x65b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
        Validity
            Not Before: Aug  8 23:42:28 2025 GMT
            Not After : Aug 15 23:42:28 2025 GMT
        Subject: CN=68968b64-67c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:43:8b:15:40:15:bd:f7:f4:aa:8f:84:72:39:
                    d7:e4:78:9d:37:9c:4f:35:6d:e7:97:1f:ee:97:69:
                    df:38:9d:96:4e:4c:a8:22:cd:d5:4f:7e:a6:da:f8:
                    36:02:c5:16:9e:0b:a4:a1:ee:9b:b2:f5:f6:0e:bc:
                    05:ac:51:32:22:43:25:71:a7:f3:2f:0b:1e:db:07:
                    95:f2:3a:8e:78:75:61:60:38:ac:a1:93:d2:06:f1:
                    b9:55:03:b2:ae:f0:a4:de:e0:13:aa:38:55:e9:7b:
                    67:14:8c:81:11:97:90:0a:4f:7d:44:f9:b7:a7:3d:
                    87:12:ec:2a:9b:0b:dc:96:e5:19:f4:ea:6e:bb:8f:
                    28:0e:47:14:e7:4f:31:11:23:90:4a:72:e9:12:76:
                    30:eb:d9:9e:38:3e:3a:9a:a2:73:92:42:b0:29:11:
                    42:26:36:a7:93:ca:2d:66:28:7e:f3:28:f1:fd:fb:
                    1d:e1:f3:84:f8:b5:64:9c:b7:c1:cc:60:35:5a:e0:
                    18:2d:e1:cd:01:00:56:53:ad:ca:65:40:1c:a0:69:
                    78:97:1b:e1:47:a8:30:1f:d8:66:74:63:79:70:5a:
                    af:7e:cc:2a:51:a5:56:8a:d5:4a:da:1e:a0:f1:4e:
                    12:29:eb:ca:9a:3f:6e:e3:18:c5:58:fc:05:ed:d0:
                    5d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CA:34:6C:96:27:3E:67:B1:81:52:F8:53:79:F6:2D:50:D1:82:DD
            X509v3 Authority Key Identifier:
                keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:21:2d:01:44:e7:da:ff:75:56:7d:ad:38:6a:b6:69:ec:fb:
         7a:49:cc:28:d2:6d:de:63:50:ef:10:5d:0a:0b:de:22:de:98:
         95:8b:27:14:1a:e7:ae:aa:56:a2:b8:e5:88:12:59:b3:a3:52:
         cb:18:ca:b9:cd:a6:24:aa:a4:04:08:48:ca:ff:96:e8:7a:db:
         b9:c2:06:6a:21:a1:4a:8b:88:b9:6d:6a:49:6b:fe:03:fb:d6:
         f1:36:06:49:d6:33:e7:00:c4:de:e4:ea:cd:17:13:1b:82:8c:
         61:66:a3:5b:4c:18:cc:54:a0:7e:2d:70:0f:32:9b:52:c4:fc:
         71:5f:44:17:24:f1:c5:3e:48:69:37:b6:ea:81:79:db:98:0d:
         b9:5c:5e:b6:26:76:04:2d:55:9b:ab:64:8e:14:7d:df:43:b5:
         53:08:23:a7:60:e4:31:7c:17:33:0b:11:85:83:af:ec:d7:76:
         82:5d:7e:0d:b4:43:86:e1:b7:9b:b0:13:02:b6:0a:24:25:e2:
         79:f5:09:03:1d:21:4a:1b:6d:2d:6d:e0:9e:34:48:a3:16:43:
         8b:6a:c1:8c:14:02:70:88:06:01:0e:2b:48:46:38:9a:4f:98:
         39:ce:7a:63:9c:15:f8:96:99:ed:78:4a:f4:4c:c9:9a:af:09:
         e7:59:b8:0a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjE2MTMxMTAvBgNVBAUTKDA5RkMwNzdGMzNFM0FENjdCRjE0Nzc1NTE2N0EzQUQ0
RUFDQjFFN0MwHhcNMjUwODA4MjM0MjI4WhcNMjUwODE1MjM0MjI4WjAYMRYwFAYD
VQQDEw02ODk2OGI2NC02N2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv0OLFUAVvff0qo+EcjnX5HidN5xPNW3nlx/ul2nfOJ2WTkyoIs3VT36m2vg2
AsUWngukoe6bsvX2DrwFrFEyIkMlcafzLwse2weV8jqOeHVhYDisoZPSBvG5VQOy
rvCk3uATqjhV6XtnFIyBEZeQCk99RPm3pz2HEuwqmwvcluUZ9Opuu48oDkcU508x
ESOQSnLpEnYw69meOD46mqJzkkKwKRFCJjank8otZih+8yjx/fsd4fOE+LVknLfB
zGA1WuAYLeHNAQBWU63KZUAcoGl4lxvhR6gwH9hmdGN5cFqvfswqUaVWitVK2h6g
8U4SKevKmj9u4xjFWPwF7dBdOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGfKNGyW
Jz5nsYFS+FN59i1Q0YLdMB8GA1UdIwQYMBaAFAn8B38z461nvxR3VRZ6OtTqyx58
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTYxMy8zMDk5MjY2OEU1
MzkxMUVCOEE1QjkyNzFDNEY5QUUwMi9DZndIZnpQanJXZV9GSGRWRm5vNjFPckxI
bncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Nmd0hmelBqcldlX0ZIZFZGbm82MU9yTEhudy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTYxMy8zMDk5MjY2OEU1MzkxMUVCOEE1QjkyNzFDNEY5QUUwMi9DZndIZnpQanJX
ZV9GSGRWRm5vNjFPckxIbncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBfIS0BROfa/3VWfa04arZp7Pt6Scwo0m3eY1DvEF0KC94i3piViycU
GueuqlaiuOWIElmzo1LLGMq5zaYkqqQECEjK/5boetu5wgZqIaFKi4i5bWpJa/4D
+9bxNgZJ1jPnAMTe5OrNFxMbgoxhZqNbTBjMVKB+LXAPMptSxPxxX0QXJPHFPkhp
N7bqgXnbmA25XF62JnYELVWbq2SOFH3fQ7VTCCOnYOQxfBczCxGFg6/s13aCXX4N
tEOG4bebsBMCtgokJeJ59QkDHSFKG20tbeCeNEijFkOLasGMFAJwiAYBDitIRjia
T5g5znpjnBX4lpnteEr0TMmarwnnWbgK
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:48:13 2025 by rpki-client