Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
File:                     JDIOr_moILjtpZ4D5AVVxfNP78w.mft (raw, json)
Hash identifier:          G4A6/r/XX8WF+y7D+eBm9vtcXN7sCig21E1Co5Isagc=
Subject key identifier:   76:59:B6:A7:D5:52:62:C3:67:F8:7B:86:91:A5:BA:C4:A0:1B:F6:80
Authority key identifier: 24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC
Certificate issuer:       /CN=A9164F45/serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
Certificate serial:       0184
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
Manifest number:          0176
Signing time:             Thu 07 Aug 2025 04:18:22 +0000
Manifest this update:     Thu 07 Aug 2025 04:18:21 +0000
Manifest next update:     Thu 14 Aug 2025 04:18:21 +0000
Files and hashes:         1: JDIOr_moILjtpZ4D5AVVxfNP78w.crl (hash: pewcORfnJKryxH53g0OpAJh2P3Bu4FbcD/RFxHergE4=)
                          2: 7599519C42F811EEBCBA9981C4F9AE02.roa (hash: O1ci8odveyWb16dTISMFL4I0B+THdeEK/wQxVlAXoG4=)
                          3: 32B9FB9C42FD11EEBC3A6810C4F9AE02.roa (hash: yvOv4NBbOpEJJw0XLmATyCqTdZVqT5gv8LENR7a7yr8=)
                          4: AC1FAF84432211EEB1984F73C4F9AE02.roa (hash: amW3fnguTxFthTpVPQH+OMqY24uLNJt0XaaUMVwv2r0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl
                          rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 04:18:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 388 (0x184)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164F45, serialNumber=24320EAFF9A820B8EDA59E03E40555C5F34FEFCC
        Validity
            Not Before: Aug  7 04:18:21 2025 GMT
            Not After : Aug 14 04:18:21 2025 GMT
        Subject: CN=6894290d-4d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:39:f1:87:33:41:80:f2:77:7d:e6:f0:41:f3:
                    ab:da:13:8c:44:ff:68:89:8e:3b:22:55:17:ee:2d:
                    f2:87:e5:12:7c:de:7f:1b:4e:f4:0e:84:b4:b6:21:
                    d4:12:a8:0d:c4:20:29:fb:4a:78:d1:eb:13:b0:ba:
                    6e:23:4f:ee:81:65:48:ff:19:5f:78:c0:a7:00:33:
                    99:99:18:25:45:20:68:fa:6a:37:1b:6a:cb:4d:f5:
                    f5:40:28:75:cd:b0:e1:f9:3f:af:ef:d0:08:8b:ab:
                    cf:a3:d1:9f:37:37:43:9e:2e:9b:2b:c5:46:43:fe:
                    5b:d6:3e:b1:2f:37:e3:8d:97:db:17:62:6c:ae:46:
                    b7:66:cd:3d:87:11:56:a3:b7:90:a4:56:b9:6f:91:
                    63:b9:1d:db:b5:73:0f:d2:d1:8c:75:ed:bf:f4:2f:
                    3c:5c:70:9b:9f:6d:7e:3e:c5:69:6a:a9:8d:d5:b4:
                    21:5a:95:76:ed:f3:4f:06:95:d8:28:fa:34:a8:66:
                    b5:96:a8:f0:0e:86:53:21:06:eb:b1:62:80:d9:a0:
                    a3:10:78:71:8c:19:ab:a3:f2:43:02:35:73:5d:be:
                    99:c1:d8:d1:91:94:be:b8:ca:48:46:8d:1a:8a:3a:
                    79:ca:e6:4f:8a:d7:85:61:3b:85:73:90:1e:2d:2c:
                    78:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:59:B6:A7:D5:52:62:C3:67:F8:7B:86:91:A5:BA:C4:A0:1B:F6:80
            X509v3 Authority Key Identifier:
                keyid:24:32:0E:AF:F9:A8:20:B8:ED:A5:9E:03:E4:05:55:C5:F3:4F:EF:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JDIOr_moILjtpZ4D5AVVxfNP78w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164F45/336119C442F611EEA2524D63C4F9AE02/JDIOr_moILjtpZ4D5AVVxfNP78w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d1:d2:51:3c:27:5f:d7:c6:87:ea:03:39:81:bb:08:ff:07:
         b7:7f:ca:ec:dc:92:51:58:c0:86:7e:81:6a:26:4f:71:c7:3f:
         08:83:21:ad:ca:f6:18:e2:ee:af:7e:df:5b:a3:af:35:77:0c:
         f3:c8:ec:c7:1c:04:05:8d:5b:ab:2c:b5:1e:25:2e:4c:48:19:
         c7:9f:75:7a:ae:df:7d:53:a7:52:45:ba:86:d2:75:c9:d8:0d:
         fd:72:9c:88:e1:57:12:c8:af:74:bd:c1:ea:f2:d6:99:37:5d:
         3b:d7:0b:c6:63:61:46:ad:28:eb:a3:c2:cc:bd:20:32:90:2d:
         e5:64:f9:c2:09:b5:68:ad:da:7e:50:2c:d5:21:79:2e:c2:54:
         06:fe:e7:34:98:3d:c9:c1:53:cc:63:de:34:6c:4b:bd:9c:35:
         57:16:1c:a8:73:6c:26:83:c2:d4:9f:bd:de:29:da:7b:0e:9f:
         77:45:08:05:10:53:f1:d9:ca:2f:09:36:15:e6:63:6a:b0:ae:
         9f:33:ea:e0:ee:18:b8:3a:a5:28:32:04:3d:bb:aa:c6:ca:90:
         ee:d1:be:f6:98:4d:12:e2:59:8f:02:31:b6:6f:17:1c:ee:43:
         f4:94:91:8f:ec:de:6c:98:dc:b7:dd:83:07:db:3a:22:20:48:
         e2:9f:f6:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjRGNDUxMTAvBgNVBAUTKDI0MzIwRUFGRjlBODIwQjhFREE1OUUwM0U0MDU1NUM1
RjM0RkVGQ0MwHhcNMjUwODA3MDQxODIxWhcNMjUwODE0MDQxODIxWjAYMRYwFAYD
VQQDEw02ODk0MjkwZC00ZDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2znxhzNBgPJ3febwQfOr2hOMRP9oiY47IlUX7i3yh+USfN5/G070DoS0tiHU
EqgNxCAp+0p40esTsLpuI0/ugWVI/xlfeMCnADOZmRglRSBo+mo3G2rLTfX1QCh1
zbDh+T+v79AIi6vPo9GfNzdDni6bK8VGQ/5b1j6xLzfjjZfbF2Jsrka3Zs09hxFW
o7eQpFa5b5FjuR3btXMP0tGMde2/9C88XHCbn21+PsVpaqmN1bQhWpV27fNPBpXY
KPo0qGa1lqjwDoZTIQbrsWKA2aCjEHhxjBmro/JDAjVzXb6ZwdjRkZS+uMpIRo0a
ijp5yuZPiteFYTuFc5AeLSx4LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHZZtqfV
UmLDZ/h7hpGlusSgG/aAMB8GA1UdIwQYMBaAFCQyDq/5qCC47aWeA+QFVcXzT+/M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NEY0NS8zMzYxMTlDNDQy
RjYxMUVFQTI1MjRENjNDNEY5QUUwMi9KRElPcl9tb0lManRwWjRENUFWVnhmTlA3
OHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pESU9yX21vSUxqdHBaNEQ1QVZWeGZOUDc4dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NEY0NS8zMzYxMTlDNDQyRjYxMUVFQTI1MjRENjNDNEY5QUUwMi9KRElPcl9tb0lM
anRwWjRENUFWVnhmTlA3OHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCV0dJRPCdf18aH6gM5gbsI/we3f8rs3JJRWMCGfoFqJk9xxz8IgyGt
yvYY4u6vft9bo681dwzzyOzHHAQFjVurLLUeJS5MSBnHn3V6rt99U6dSRbqG0nXJ
2A39cpyI4VcSyK90vcHq8taZN1071wvGY2FGrSjro8LMvSAykC3lZPnCCbVordp+
UCzVIXkuwlQG/uc0mD3JwVPMY940bEu9nDVXFhyoc2wmg8LUn73eKdp7Dp93RQgF
EFPx2covCTYV5mNqsK6fM+rg7hi4OqUoMgQ9u6rGypDu0b72mE0S4lmPAjG2bxcc
7kP0lJGP7N5smNy33YMH2zoiIEjin/by
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:23:28 2025 by rpki-client