Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
File:                     B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft (raw, json)
Hash identifier:          /UhoeNbfc9Bc0/y7y1YecRle1Ct+9P5nXI7ogyesRIU=
Subject key identifier:   87:44:6D:95:9D:1A:EB:AB:49:E6:2E:6E:32:07:2C:56:DE:E8:FA:9C
Authority key identifier: 07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C
Certificate issuer:       /CN=A9166C39/serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
Certificate serial:       08CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
Manifest number:          08B4
Signing time:             Thu 12 Jun 2025 20:17:25 +0000
Manifest this update:     Thu 12 Jun 2025 20:17:24 +0000
Manifest next update:     Thu 19 Jun 2025 20:17:24 +0000
Files and hashes:         1: B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl (hash: EhoswwTBuPvLd7lO/fV9kFHYqk0ksxomx+CGGTZ3SGk=)
                          2: E02718B0FB7E11EFA25DF775C4F9AE02.roa (hash: Rbebv7a/3bjYuOYYlHIXr662xadEzX5etaY1VAtT19Q=)
                          3: DF8D07E8FB7E11EFA25DF775C4F9AE02.roa (hash: unM5ewA/QOJvINE5uAU/tFjaV4piAYCJJAvmIWLeMb8=)
                          4: 16079DB83C1D11EBA532C076C4F9AE02.roa (hash: 2TPeWUxi8y2dJKsuFTVthNuMYrZypRCJy1Y/CFzYdHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl
                          rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 20:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2252 (0x8cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166C39, serialNumber=07E051B41ED82E3F53BF59AA84DD9ACA20CFB54C
        Validity
            Not Before: Jun 12 20:17:24 2025 GMT
            Not After : Jun 19 20:17:24 2025 GMT
        Subject: CN=684b35d5-24a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d1:be:9f:ec:66:d8:8e:66:52:3a:4b:a4:3d:
                    09:a7:ca:10:3c:4e:95:48:2f:d1:c5:63:f2:e1:60:
                    82:51:a9:29:1b:4b:6f:ce:7d:ad:b9:32:64:eb:78:
                    0c:33:7b:09:9d:c1:4b:e6:c3:9c:d0:00:7c:ff:4d:
                    6d:b3:d7:bb:08:43:05:d9:31:57:af:1e:39:f1:1d:
                    b5:b6:9a:5b:4c:c3:8f:ea:22:5a:a0:e3:64:d6:69:
                    91:da:0d:95:dc:3f:9e:f0:56:7b:94:20:2f:fe:7f:
                    b8:dd:f9:50:8a:25:d6:e0:16:8a:be:d7:6b:ef:0f:
                    ad:47:f4:b0:a7:96:5a:9e:c0:4e:0f:e2:48:e3:61:
                    14:83:20:72:58:18:d6:5a:ac:85:60:2b:ee:7d:d3:
                    6f:75:07:b9:2d:30:93:cb:b1:0e:06:10:63:47:e4:
                    9f:bf:00:54:d2:c1:bc:35:97:ad:06:6a:4c:4f:e3:
                    26:d7:65:a1:69:9f:0c:21:97:32:e6:8a:5b:56:a0:
                    54:32:77:45:ca:9d:28:51:9f:b5:45:fe:f2:80:4c:
                    ad:ee:e7:2c:bc:1e:97:2d:9a:f9:a5:b7:c9:6a:9a:
                    7f:76:05:1c:bf:be:0e:27:f7:75:19:44:33:e6:2d:
                    17:30:21:39:3e:4f:e9:0f:54:87:c3:c6:40:30:a3:
                    4f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:44:6D:95:9D:1A:EB:AB:49:E6:2E:6E:32:07:2C:56:DE:E8:FA:9C
            X509v3 Authority Key Identifier:
                keyid:07:E0:51:B4:1E:D8:2E:3F:53:BF:59:AA:84:DD:9A:CA:20:CF:B5:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166C39/27EECFD0BB9711EAA1A66C53C4F9AE02/B-BRtB7YLj9Tv1mqhN2ayiDPtUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:22:14:58:94:15:e7:59:96:d7:15:0c:ef:41:28:ae:de:b7:
         f8:6d:be:af:e5:bb:78:d2:fc:34:a7:15:d5:95:d4:fc:7d:2e:
         5a:e4:21:0e:be:d0:20:25:36:93:c6:05:49:c3:fd:71:24:8b:
         24:aa:84:83:2d:5a:6e:a8:b1:13:e8:4a:0e:f4:1d:78:3c:05:
         e9:f2:d0:dc:29:bc:9c:d8:27:8c:ed:27:d9:24:58:61:f6:71:
         b1:b6:9a:d0:0e:39:44:96:c2:6d:5e:6e:ec:c4:97:ef:4e:e5:
         ac:fa:fe:64:1c:38:88:44:36:81:f9:1a:8d:da:5b:1b:bb:06:
         7f:af:f3:e4:5a:51:cb:42:71:f6:c8:5d:0f:49:fe:cb:89:3a:
         27:cd:b1:0a:2f:ce:cd:fb:1f:c3:3b:8c:81:76:63:c7:5d:4c:
         56:c7:02:8e:01:78:f5:4e:05:b2:1f:bf:a8:b4:8e:94:ee:7c:
         37:18:6f:68:ac:5d:e8:e1:c9:27:a3:be:0c:b8:19:9e:55:aa:
         97:e8:e8:e8:89:ea:b4:38:b6:c2:a1:97:91:63:53:9b:de:49:
         e7:0d:37:b1:34:fb:84:1a:73:c2:22:43:ca:8d:d1:81:76:a4:
         14:76:19:57:7f:27:3f:95:4d:b6:a8:9a:93:23:28:9e:20:e2:
         01:e7:0d:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCMwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjZDMzkxMTAvBgNVBAUTKDA3RTA1MUI0MUVEODJFM0Y1M0JGNTlBQTg0REQ5QUNB
MjBDRkI1NEMwHhcNMjUwNjEyMjAxNzI0WhcNMjUwNjE5MjAxNzI0WjAYMRYwFAYD
VQQDEw02ODRiMzVkNS0yNGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1dG+n+xm2I5mUjpLpD0Jp8oQPE6VSC/RxWPy4WCCUakpG0tvzn2tuTJk63gM
M3sJncFL5sOc0AB8/01ts9e7CEMF2TFXrx458R21tppbTMOP6iJaoONk1mmR2g2V
3D+e8FZ7lCAv/n+43flQiiXW4BaKvtdr7w+tR/Swp5ZansBOD+JI42EUgyByWBjW
WqyFYCvufdNvdQe5LTCTy7EOBhBjR+SfvwBU0sG8NZetBmpMT+Mm12WhaZ8MIZcy
5opbVqBUMndFyp0oUZ+1Rf7ygEyt7ucsvB6XLZr5pbfJapp/dgUcv74OJ/d1GUQz
5i0XMCE5Pk/pD1SHw8ZAMKNPhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdEbZWd
GuurSeYubjIHLFbe6PqcMB8GA1UdIwQYMBaAFAfgUbQe2C4/U79ZqoTdmsogz7VM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NkMzOS8yN0VFQ0ZEMEJC
OTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxqOVR2MW1xaE4yYXlpRFB0
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ItQlJ0QjdZTGo5VHYxbXFoTjJheWlEUHRVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NkMzOS8yN0VFQ0ZEMEJCOTcxMUVBQTFBNjZDNTNDNEY5QUUwMi9CLUJSdEI3WUxq
OVR2MW1xaE4yYXlpRFB0VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUIhRYlBXnWZbXFQzvQSiu3rf4bb6v5bt40vw0pxXVldT8fS5a5CEO
vtAgJTaTxgVJw/1xJIskqoSDLVpuqLET6EoO9B14PAXp8tDcKbyc2CeM7SfZJFhh
9nGxtprQDjlElsJtXm7sxJfvTuWs+v5kHDiIRDaB+RqN2lsbuwZ/r/PkWlHLQnH2
yF0PSf7LiTonzbEKL87N+x/DO4yBdmPHXUxWxwKOAXj1TgWyH7+otI6U7nw3GG9o
rF3o4ckno74MuBmeVaqX6Ojoieq0OLbCoZeRY1Ob3knnDTexNPuEGnPCIkPKjdGB
dqQUdhlXfyc/lU22qJqTIyieIOIB5w34
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:23:29 2025 by rpki-client