Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft
File:                     v1I81vFmSFOJGRVeX58meDD28B4.mft (raw, json)
Hash identifier:          odaIqfAkwqgsZzRKyNSXXNxG77rjrJnJPIp6Jj2DOBI=
Subject key identifier:   6D:5E:3B:3E:19:EC:57:42:6D:AF:5A:F7:20:0B:09:E2:64:E8:ED:1A
Authority key identifier: BF:52:3C:D6:F1:66:48:53:89:19:15:5E:5F:9F:26:78:30:F6:F0:1E
Certificate issuer:       /CN=A9169A3F/serialNumber=BF523CD6F16648538919155E5F9F267830F6F01E
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft
Manifest number:          8B
Signing time:             Sat 09 Aug 2025 07:00:53 +0000
Manifest this update:     Sat 09 Aug 2025 07:00:53 +0000
Manifest next update:     Sat 16 Aug 2025 07:00:52 +0000
Files and hashes:         1: v1I81vFmSFOJGRVeX58meDD28B4.crl (hash: xdxcePuo9mgFy9Cv+y0iGyhIo/lTGQyWiCWF8DxbOpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.crl
                          rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169A3F, serialNumber=BF523CD6F16648538919155E5F9F267830F6F01E
        Validity
            Not Before: Aug  9 07:00:53 2025 GMT
            Not After : Aug 16 07:00:52 2025 GMT
        Subject: CN=6896f225-d126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f1:8a:cb:69:5d:8d:1b:d6:d8:4c:c1:2b:8f:
                    e7:e8:cf:6a:e9:36:d3:c6:6e:20:2b:36:f1:e5:21:
                    4c:79:7f:5f:72:27:24:a7:3d:d2:e3:63:46:23:74:
                    6c:80:84:a4:bf:1c:73:d8:08:85:28:42:dd:c9:ca:
                    3a:b1:46:4a:9d:c1:5a:1c:4a:8d:c0:6e:0d:70:5e:
                    3e:42:7c:af:53:01:67:70:b2:0f:d9:9b:19:5c:55:
                    2e:01:25:17:44:1e:31:11:5e:34:06:f4:4f:ed:29:
                    32:26:9f:38:10:fe:5f:05:61:6d:c8:e8:fc:ab:71:
                    d2:dc:dd:b7:08:de:24:c3:59:5b:4f:30:a2:f7:0a:
                    af:31:1c:87:b6:97:28:7e:3e:58:01:a1:4a:3a:49:
                    20:44:2d:71:c7:7c:bb:0a:07:1a:56:0e:52:45:d7:
                    b5:dc:59:f9:23:d0:a6:53:83:5f:d8:49:70:60:da:
                    8d:99:a6:01:27:68:7c:5e:95:7f:60:04:94:ac:e7:
                    b4:76:49:24:a8:1a:24:fd:86:96:4a:c5:d5:75:e8:
                    20:dd:83:17:7c:5c:fa:8a:d8:04:a3:ce:f9:5d:b8:
                    6a:52:2e:68:81:12:c2:a6:70:11:13:66:66:f6:f2:
                    11:6b:bb:a7:84:44:3f:fd:e7:90:49:94:1a:93:fe:
                    05:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5E:3B:3E:19:EC:57:42:6D:AF:5A:F7:20:0B:09:E2:64:E8:ED:1A
            X509v3 Authority Key Identifier:
                keyid:BF:52:3C:D6:F1:66:48:53:89:19:15:5E:5F:9F:26:78:30:F6:F0:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1I81vFmSFOJGRVeX58meDD28B4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169A3F/A371F684A24F11EFB6B0FF49C4F9AE02/v1I81vFmSFOJGRVeX58meDD28B4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:75:3a:fe:3f:a5:05:2e:1f:fc:95:12:ff:c7:10:d2:31:1d:
         5c:4c:5c:be:27:9b:5c:6b:6a:34:1f:e5:50:6b:29:e1:ec:dd:
         0d:4d:3f:fc:81:de:fc:7e:06:f7:96:70:5f:b0:a6:05:5a:ba:
         ef:37:99:e5:af:31:58:ab:0c:4b:ad:37:7f:ad:19:3d:30:a8:
         f6:4e:e2:f4:ed:9f:b2:77:f7:94:39:fe:de:14:0f:06:47:10:
         bb:fc:21:71:a3:39:48:c5:de:16:e1:7b:09:dd:50:1c:da:eb:
         d3:d1:60:2e:db:01:74:28:e8:ae:40:1e:92:3d:52:77:e4:12:
         85:9e:41:48:d0:c4:aa:67:ff:2b:be:01:18:4a:eb:47:a5:4c:
         09:d8:8a:4a:e2:47:e3:be:8d:d9:b8:72:07:21:6e:aa:5c:98:
         02:04:9c:7a:cf:bc:7c:a4:20:86:a9:00:de:24:6c:0b:a9:1e:
         da:fb:14:84:08:2b:bb:9e:6c:4e:46:8c:d5:32:5c:bd:e0:a0:
         71:2d:27:dd:30:37:85:ee:19:31:9b:f5:26:de:48:9c:50:5b:
         2b:96:e2:ab:fa:12:3c:dd:0f:bc:01:c3:2f:24:cc:19:97:49:
         a1:89:e3:60:67:6b:9c:b8:c4:d9:f3:eb:31:82:80:4d:26:fd:
         6a:88:70:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlBM0YxMTAvBgNVBAUTKEJGNTIzQ0Q2RjE2NjQ4NTM4OTE5MTU1RTVGOUYyNjc4
MzBGNkYwMUUwHhcNMjUwODA5MDcwMDUzWhcNMjUwODE2MDcwMDUyWjAYMRYwFAYD
VQQDEw02ODk2ZjIyNS1kMTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuPGKy2ldjRvW2EzBK4/n6M9q6TbTxm4gKzbx5SFMeX9fcickpz3S42NGI3Rs
gISkvxxz2AiFKELdyco6sUZKncFaHEqNwG4NcF4+QnyvUwFncLIP2ZsZXFUuASUX
RB4xEV40BvRP7SkyJp84EP5fBWFtyOj8q3HS3N23CN4kw1lbTzCi9wqvMRyHtpco
fj5YAaFKOkkgRC1xx3y7CgcaVg5SRde13Fn5I9CmU4Nf2ElwYNqNmaYBJ2h8XpV/
YASUrOe0dkkkqBok/YaWSsXVdegg3YMXfFz6itgEo875XbhqUi5ogRLCpnARE2Zm
9vIRa7unhEQ//eeQSZQak/4F3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG1eOz4Z
7FdCba9a9yALCeJk6O0aMB8GA1UdIwQYMBaAFL9SPNbxZkhTiRkVXl+fJngw9vAe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUEzRi9BMzcxRjY4NEEy
NEYxMUVGQjZCMEZGNDlDNEY5QUUwMi92MUk4MXZGbVNGT0pHUlZlWDU4bWVERDI4
QjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3YxSTgxdkZtU0ZPSkdSVmVYNThtZUREMjhCNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUEzRi9BMzcxRjY4NEEyNEYxMUVGQjZCMEZGNDlDNEY5QUUwMi92MUk4MXZGbVNG
T0pHUlZlWDU4bWVERDI4QjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwdTr+P6UFLh/8lRL/xxDSMR1cTFy+J5tca2o0H+VQaynh7N0NTT/8
gd78fgb3lnBfsKYFWrrvN5nlrzFYqwxLrTd/rRk9MKj2TuL07Z+yd/eUOf7eFA8G
RxC7/CFxozlIxd4W4XsJ3VAc2uvT0WAu2wF0KOiuQB6SPVJ35BKFnkFI0MSqZ/8r
vgEYSutHpUwJ2IpK4kfjvo3ZuHIHIW6qXJgCBJx6z7x8pCCGqQDeJGwLqR7a+xSE
CCu7nmxORozVMly94KBxLSfdMDeF7hkxm/Um3kicUFsrluKr+hI83Q+8AcMvJMwZ
l0mhieNgZ2ucuMTZ8+sxgoBNJv1qiHAy
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:16:11 2025 by rpki-client