Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
File:                     9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json)
Hash identifier:          j7cvKgk6dehzg1+MNcvlghUuS4rjs/AkcrIJ2N/LNeA=
Subject key identifier:   D3:5E:40:1F:C3:D5:BF:03:A3:95:CF:11:07:D7:2E:41:F6:DD:8E:E6
Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E
Certificate issuer:       /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
Certificate serial:       0C2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
Manifest number:          0C27
Signing time:             Sun 10 Aug 2025 18:39:44 +0000
Manifest this update:     Sun 10 Aug 2025 18:39:44 +0000
Manifest next update:     Sun 17 Aug 2025 18:39:44 +0000
Files and hashes:         1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: NlKPo2Y7TjX3I64Au90jCKyb8mKrusD8AnlN0YuR2cg=)
                          2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: OeGbR9lPmFx9F+KOx3DCweLM+ujmkz1n3pufF3R5HIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl
                          rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3119 (0xc2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EBBB, serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
        Validity
            Not Before: Aug 10 18:39:44 2025 GMT
            Not After : Aug 17 18:39:44 2025 GMT
        Subject: CN=6898e770-698b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:de:e8:41:bf:3b:42:74:e1:8c:3c:df:08:2a:
                    92:fb:70:1a:b0:1a:c3:cd:09:5c:a4:6a:28:63:b3:
                    f1:fb:b0:0e:0e:39:ac:42:aa:70:99:ac:2f:e8:d6:
                    da:00:64:27:02:f6:47:20:88:88:09:e0:77:99:28:
                    14:0d:ec:72:f6:bd:4c:b0:1d:95:be:b1:a3:ad:01:
                    31:c2:3b:81:ff:c0:0e:52:e5:0c:9e:f4:64:c5:41:
                    df:ca:68:da:d9:9b:05:37:89:3d:de:f1:2f:68:f5:
                    13:d4:07:b8:2e:76:6b:e2:77:38:57:f6:7f:70:e0:
                    1b:e5:27:39:13:33:3b:1f:17:aa:f5:8e:9b:36:e6:
                    55:04:b1:41:39:8f:af:56:09:50:66:06:8f:ae:50:
                    de:e7:42:99:f1:ff:e6:9f:05:32:5e:56:95:1b:a7:
                    59:6f:34:99:be:a2:ce:62:70:85:6b:ab:4a:c7:82:
                    55:c7:07:d7:6b:a2:99:9e:bc:50:5c:28:86:25:5a:
                    3e:99:5c:03:7d:90:93:1f:42:0b:1e:d8:56:7a:4f:
                    f2:d3:a0:c8:fc:03:31:10:0f:e4:d6:d8:83:30:db:
                    6f:95:38:f3:6e:59:89:4b:6b:bb:62:e7:3e:59:10:
                    ff:39:8e:e0:a6:51:21:6b:73:f7:26:13:71:43:c1:
                    5b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5E:40:1F:C3:D5:BF:03:A3:95:CF:11:07:D7:2E:41:F6:DD:8E:E6
            X509v3 Authority Key Identifier:
                keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e9:d6:32:5a:74:7f:3c:64:27:49:bf:39:52:3c:05:aa:e2:
         f1:5a:f4:85:f2:9d:bd:ca:73:fd:ca:a7:8a:14:de:37:d1:50:
         76:29:c8:61:30:1f:15:2f:36:2b:83:cb:7b:e6:2c:3a:7a:c1:
         4c:a3:db:c5:65:bd:e0:a1:c6:2e:5c:3b:c8:2c:24:01:20:ee:
         9f:c5:a4:f3:63:20:b9:c8:e2:c1:9d:f6:19:41:76:f3:62:89:
         83:75:be:49:68:d5:18:e8:a0:bc:82:b3:e5:e6:e0:d7:8f:e9:
         65:20:e7:7c:5a:d9:46:87:bf:02:96:0f:b5:7a:6a:2c:d0:a1:
         19:b1:8b:9f:fe:fc:3e:40:22:c3:61:2a:fb:4d:1f:56:55:2c:
         1a:c5:cc:29:41:c7:2c:08:82:10:9c:6d:89:7b:1c:37:b1:27:
         65:2b:ad:0f:0a:eb:22:34:a9:48:06:de:3e:5f:bc:ed:8e:4d:
         a4:9f:3a:fe:95:f3:39:06:a7:ad:09:76:b5:a7:a5:bb:c8:8d:
         26:cd:13:43:4b:6b:a6:b1:0c:79:47:d2:7b:b3:f9:45:cd:fb:
         f0:c4:6a:9e:a3:07:10:66:d8:b9:d1:e3:96:3d:5b:c4:07:16:
         99:d3:71:2d:e4:b9:af:61:63:1a:d2:61:67:b6:45:77:6a:c2:
         a1:51:0d:45
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDC8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVCQkIxMTAvBgNVBAUTKEY2NTRFMjQxQzE0NDYxOEFCQTMxOURBQkFDQkRFQTQ4
QzRGM0M3NEUwHhcNMjUwODEwMTgzOTQ0WhcNMjUwODE3MTgzOTQ0WjAYMRYwFAYD
VQQDEw02ODk4ZTc3MC02OThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwt7oQb87QnThjDzfCCqS+3AasBrDzQlcpGooY7Px+7AODjmsQqpwmawv6Nba
AGQnAvZHIIiICeB3mSgUDexy9r1MsB2VvrGjrQExwjuB/8AOUuUMnvRkxUHfymja
2ZsFN4k93vEvaPUT1Ae4LnZr4nc4V/Z/cOAb5Sc5EzM7Hxeq9Y6bNuZVBLFBOY+v
VglQZgaPrlDe50KZ8f/mnwUyXlaVG6dZbzSZvqLOYnCFa6tKx4JVxwfXa6KZnrxQ
XCiGJVo+mVwDfZCTH0ILHthWek/y06DI/AMxEA/k1tiDMNtvlTjzblmJS2u7Yuc+
WRD/OY7gplEha3P3JhNxQ8FbWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNeQB/D
1b8Do5XPEQfXLkH23Y7mMB8GA1UdIwQYMBaAFPZU4kHBRGGKujGdq6y96kjE88dO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUJCQi85MzQ4MjcxRTEx
NDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZcTZNWjJyckwzcVNNVHp4
MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlsVGlRY0ZFWVlxNk1aMnJyTDNxU01UengwNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUJCQi85MzQ4MjcxRTExNDExMUVBODNBNDkyODJDNEY5QUUwMi85bFRpUWNGRVlZ
cTZNWjJyckwzcVNNVHp4MDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQ6dYyWnR/PGQnSb85UjwFquLxWvSF8p29ynP9yqeKFN430VB2Kchh
MB8VLzYrg8t75iw6esFMo9vFZb3gocYuXDvILCQBIO6fxaTzYyC5yOLBnfYZQXbz
YomDdb5JaNUY6KC8grPl5uDXj+llIOd8WtlGh78Clg+1emos0KEZsYuf/vw+QCLD
YSr7TR9WVSwaxcwpQccsCIIQnG2Jexw3sSdlK60PCusiNKlIBt4+X7ztjk2knzr+
lfM5BqetCXa1p6W7yI0mzRNDS2umsQx5R9J7s/lFzfvwxGqeowcQZti50eOWPVvE
BxaZ03Et5LmvYWMa0mFntkV3asKhUQ1F
-----END CERTIFICATE-----
Generated at Sun Aug 10 20:03:29 2025 by rpki-client