Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
File:                     IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft (raw, json)
Hash identifier:          BW4cNNs0kAoFr8752Ra1/auZBMA1CTbMT4qqn3Kp/AE=
Subject key identifier:   41:2B:B8:EA:5C:7E:47:60:0A:36:08:9C:27:AC:84:0D:22:40:B0:00
Authority key identifier: 21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24
Certificate issuer:       /CN=A916A314/serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
Certificate serial:       0706
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
Manifest number:          06F6
Signing time:             Fri 08 Aug 2025 22:21:48 +0000
Manifest this update:     Fri 08 Aug 2025 22:21:48 +0000
Manifest next update:     Fri 15 Aug 2025 22:21:48 +0000
Files and hashes:         1: IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl (hash: +UGVKhsxmygehO6JwI8bV5Bq9Q3HmYuReXlP/qr0PDQ=)
                          2: 0DDC2C14776F11ED8E7B8775C4F9AE02.roa (hash: P4RG3Y6nQyOth1GOf+cUq+m33EkNoZAP7s5DUsSNA08=)
                          3: ED7C5416CD3711EDB6A0F37BC4F9AE02.roa (hash: rMVk1ga9cfh7Qo/jkI958sU0c+kJJEruOUO08Z/4CDQ=)
                          4: 0F206AEA776F11ED8E7B8775C4F9AE02.roa (hash: 0kvZ3EdSky7ksqvtASBmr2Ki7hEXQRI9ENpHrPAoPC8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl
                          rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1798 (0x706)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A314, serialNumber=214A5F22AA501B218B0E6015D1E0FBA1C8E43F24
        Validity
            Not Before: Aug  8 22:21:48 2025 GMT
            Not After : Aug 15 22:21:48 2025 GMT
        Subject: CN=6896787c-3701
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0f:b3:d0:3a:50:8a:6e:78:cd:90:41:0c:9c:
                    a7:60:7e:a9:05:07:43:d0:fd:b5:d6:d5:53:2c:4d:
                    3a:b0:e0:bc:ca:ed:65:89:e9:11:36:25:77:af:43:
                    3f:88:f4:30:bd:91:14:99:f1:0b:4a:bf:b9:83:82:
                    f0:d9:15:d7:d0:28:17:60:98:2a:e0:9c:4a:7f:30:
                    cc:f7:bf:bf:94:e8:1b:7f:10:08:85:b0:bc:7e:63:
                    58:07:4a:d3:0f:3f:f4:68:6a:cf:17:0c:ba:76:50:
                    d1:0a:ca:1b:d1:fa:27:b2:f2:1b:b3:22:50:c8:d0:
                    1e:a7:ca:74:44:8e:ff:e7:9c:f5:46:81:f6:b8:56:
                    0c:67:02:c8:e8:9f:1c:a4:b1:e7:c1:09:d8:58:02:
                    c4:97:7f:c3:7a:bf:9e:82:6d:e8:e7:d1:65:4a:e0:
                    d1:25:fc:3f:b5:2a:a8:c0:ca:20:a8:3b:4b:2c:c6:
                    d5:18:e5:a8:3f:a3:22:ba:9b:64:7a:de:05:e0:8c:
                    ed:a8:ff:c0:7d:1b:dd:e9:12:fc:22:d5:96:64:a8:
                    8b:27:4b:32:29:51:b7:8f:d0:db:a3:b8:95:76:45:
                    70:e7:b5:66:93:46:32:34:e9:c5:a1:01:13:05:0d:
                    9d:6e:57:b5:ce:e7:f4:81:e3:bf:13:79:98:a3:6a:
                    a0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2B:B8:EA:5C:7E:47:60:0A:36:08:9C:27:AC:84:0D:22:40:B0:00
            X509v3 Authority Key Identifier:
                keyid:21:4A:5F:22:AA:50:1B:21:8B:0E:60:15:D1:E0:FB:A1:C8:E4:3F:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A314/70D3B36A595211EBA6D78048C4F9AE02/IUpfIqpQGyGLDmAV0eD7ocjkPyQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8b:01:61:7a:8b:69:a2:12:b8:da:fc:e2:4d:09:80:ec:8c:
         6b:d8:c7:46:a3:ec:5b:ae:c1:f5:97:d1:45:4e:27:3c:07:6e:
         76:40:df:8b:e4:a9:9f:b7:47:27:29:f8:9c:a8:bc:c3:73:83:
         8b:90:2a:d9:a1:97:d8:6d:0a:20:bd:20:c6:12:53:99:9b:d9:
         35:52:2f:21:74:7e:d6:8d:7f:32:ee:9f:cd:8d:fa:ae:45:28:
         bf:5b:e7:cf:7e:23:ec:da:7c:0b:c2:21:dd:c2:00:d1:a3:0e:
         37:75:76:36:4e:b0:3d:52:aa:c2:7a:13:01:0d:df:4f:f6:30:
         f7:e4:8f:28:15:b1:c3:4b:d8:e9:ca:a7:e2:d2:b2:6e:06:f6:
         72:fd:a3:27:b2:19:8d:6d:63:b6:94:1a:be:eb:b5:ce:82:f3:
         5c:54:7a:c3:58:dc:8b:2c:ce:e3:bb:86:9f:1c:bf:48:5b:cd:
         34:56:dc:f8:8a:95:9f:ce:e5:bd:45:c5:44:81:5c:40:81:1f:
         2a:2f:cc:13:a4:74:b6:fa:2e:b0:8a:41:a6:0b:68:ce:d1:c8:
         99:9d:d8:76:01:63:00:de:61:35:10:0e:7e:c1:f5:52:ec:38:
         07:64:90:8a:30:e4:c9:ac:87:f1:03:05:2c:45:88:99:d7:55:
         41:84:e1:e5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkEzMTQxMTAvBgNVBAUTKDIxNEE1RjIyQUE1MDFCMjE4QjBFNjAxNUQxRTBGQkEx
QzhFNDNGMjQwHhcNMjUwODA4MjIyMTQ4WhcNMjUwODE1MjIyMTQ4WjAYMRYwFAYD
VQQDEw02ODk2Nzg3Yy0zNzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5Q+z0DpQim54zZBBDJynYH6pBQdD0P211tVTLE06sOC8yu1liekRNiV3r0M/
iPQwvZEUmfELSr+5g4Lw2RXX0CgXYJgq4JxKfzDM97+/lOgbfxAIhbC8fmNYB0rT
Dz/0aGrPFwy6dlDRCsob0fonsvIbsyJQyNAep8p0RI7/55z1RoH2uFYMZwLI6J8c
pLHnwQnYWALEl3/Der+egm3o59FlSuDRJfw/tSqowMogqDtLLMbVGOWoP6Miuptk
et4F4IztqP/AfRvd6RL8ItWWZKiLJ0syKVG3j9Dbo7iVdkVw57Vmk0YyNOnFoQET
BQ2dble1zuf0geO/E3mYo2qg1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEEruOpc
fkdgCjYInCeshA0iQLAAMB8GA1UdIwQYMBaAFCFKXyKqUBshiw5gFdHg+6HI5D8k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTMxNC83MEQzQjM2QTU5
NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5R0xEbUFWMGVEN29jamtQ
eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lVcGZJcXBRR3lHTERtQVYwZUQ3b2Nqa1B5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QTMxNC83MEQzQjM2QTU5NTIxMUVCQTZENzgwNDhDNEY5QUUwMi9JVXBmSXFwUUd5
R0xEbUFWMGVEN29jamtQeVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATiwFheotpohK42vziTQmA7Ixr2MdGo+xbrsH1l9FFTic8B252QN+L
5Kmft0cnKficqLzDc4OLkCrZoZfYbQogvSDGElOZm9k1Ui8hdH7WjX8y7p/Njfqu
RSi/W+fPfiPs2nwLwiHdwgDRow43dXY2TrA9UqrCehMBDd9P9jD35I8oFbHDS9jp
yqfi0rJuBvZy/aMnshmNbWO2lBq+67XOgvNcVHrDWNyLLM7ju4afHL9IW800Vtz4
ipWfzuW9RcVEgVxAgR8qL8wTpHS2+i6wikGmC2jO0ciZndh2AWMA3mE1EA5+wfVS
7DgHZJCKMOTJrIfxAwUsRYiZ11VBhOHl
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:26:24 2025 by rpki-client