Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
File:                     CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json)
Hash identifier:          BJ4T0IPrUmZrk2gM89UW7qMN58RVO7rkjNuUL0p71kw=
Subject key identifier:   30:7B:32:99:4C:F0:30:DA:93:96:A2:C0:E3:C9:68:7E:C9:51:59:00
Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
Certificate issuer:       /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
Manifest number:          EB
Signing time:             Sat 09 Aug 2025 05:48:25 +0000
Manifest this update:     Sat 09 Aug 2025 05:48:24 +0000
Manifest next update:     Sat 16 Aug 2025 05:48:24 +0000
Files and hashes:         1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: tJlXpjNvOGXFQ8MWDTmjWTNNKr+iuVrF4w0xAlTPjKs=)
                          2: 8C35F65C57F111F0B413224EC4F9AE02.roa (hash: voQWhVz+FM5Oce4JeqUGqkpzwLHV4T3Do9szQnC3FmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
        Validity
            Not Before: Aug  9 05:48:24 2025 GMT
            Not After : Aug 16 05:48:24 2025 GMT
        Subject: CN=6896e128-eb96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:b7:31:77:40:1e:b2:70:d9:4b:2f:21:72:
                    07:16:53:35:8b:8f:bc:e3:65:43:1c:03:fc:39:2b:
                    76:8c:a4:3c:21:f5:14:89:2d:3a:3d:a4:c0:34:2f:
                    ba:10:94:f8:ee:9e:e1:1b:94:68:d9:ec:a5:4f:16:
                    44:e6:a3:b2:03:24:2c:73:fd:06:14:37:ad:60:43:
                    22:7e:37:b8:1b:76:b4:5b:e6:95:82:9c:94:67:05:
                    58:56:a6:1d:7d:bd:ef:ff:6c:94:c0:00:24:16:0b:
                    a7:54:d9:9d:b9:10:ac:a6:23:70:af:64:41:b4:dc:
                    69:4e:94:5d:ea:c9:ea:e0:ec:35:90:e0:d7:e1:16:
                    a0:a8:9e:3b:5d:ee:c5:5a:da:34:9f:af:96:b1:3b:
                    73:8b:59:12:f0:42:7e:c3:ac:ef:5c:76:2a:75:4a:
                    98:91:6d:31:1b:d5:25:64:54:8f:ae:14:36:67:c4:
                    c4:8e:96:fd:41:e0:48:fe:cf:dc:42:5f:55:27:ea:
                    2f:7f:2d:ff:fd:be:aa:6f:c6:0d:9b:3c:ba:66:2a:
                    e9:22:d5:fd:5c:b2:a1:de:8b:7b:5f:02:9d:f9:48:
                    06:34:d5:78:6a:83:a9:98:f1:a2:a3:9f:64:fa:35:
                    c5:85:69:7a:b6:cc:8c:a9:c7:3e:e9:5c:c6:4a:b7:
                    40:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:7B:32:99:4C:F0:30:DA:93:96:A2:C0:E3:C9:68:7E:C9:51:59:00
            X509v3 Authority Key Identifier:
                keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8b:65:a5:a6:9b:46:3a:8a:f9:67:2c:3d:8d:35:be:05:ee:
         48:d4:32:65:27:83:75:9c:80:1d:97:61:81:d8:b1:97:1e:27:
         93:45:89:b7:ca:fc:a4:3c:ed:be:a2:4e:a8:ef:6a:24:6e:1d:
         ed:dc:e9:0a:12:3c:8b:e3:e8:ea:d7:25:08:19:11:35:a7:d7:
         4b:fa:ce:49:23:a0:96:d3:53:4d:ac:57:98:80:b9:b2:31:05:
         ed:89:d5:11:7b:8a:c8:7a:63:46:b7:a2:61:07:d8:bf:08:ef:
         c8:da:f6:6f:b4:1f:fd:06:bb:bc:ec:c5:ad:37:36:5c:37:c9:
         68:38:c2:89:9a:08:47:fe:65:02:01:38:1e:45:8a:45:e1:45:
         97:2f:63:02:bc:4f:e7:11:ae:2e:56:ab:a2:6b:ba:fc:e3:68:
         29:94:53:e9:73:3e:ed:30:ef:71:df:61:6a:54:08:fe:ca:f1:
         52:f5:41:24:92:91:a3:e4:97:74:26:3a:b1:42:03:67:a7:74:
         f9:38:9d:0c:08:6b:e7:ce:d7:8c:d3:f3:a3:a6:89:c5:2f:27:
         c8:81:6e:ee:4a:00:b4:f8:77:1c:f5:54:ac:e8:93:5e:f4:2a:
         26:80:7f:8e:19:f5:c6:ce:22:8e:6e:4c:b9:8f:5a:49:8f:00:
         1c:88:18:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA1RDcxMTAvBgNVBAUTKDBBOEJEMkIwMkZGNjk1MTcxREMwMUU4QzdFNEFBMkQ5
ODhEQTNCOUEwHhcNMjUwODA5MDU0ODI0WhcNMjUwODE2MDU0ODI0WjAYMRYwFAYD
VQQDEw02ODk2ZTEyOC1lYjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAunW3MXdAHrJw2UsvIXIHFlM1i4+842VDHAP8OSt2jKQ8IfUUiS06PaTANC+6
EJT47p7hG5Ro2eylTxZE5qOyAyQsc/0GFDetYEMifje4G3a0W+aVgpyUZwVYVqYd
fb3v/2yUwAAkFgunVNmduRCspiNwr2RBtNxpTpRd6snq4Ow1kODX4RagqJ47Xe7F
Wto0n6+WsTtzi1kS8EJ+w6zvXHYqdUqYkW0xG9UlZFSPrhQ2Z8TEjpb9QeBI/s/c
Ql9VJ+ovfy3//b6qb8YNmzy6ZirpItX9XLKh3ot7XwKd+UgGNNV4aoOpmPGio59k
+jXFhWl6tsyMqcc+6VzGSrdAWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDB7MplM
8DDak5aiwOPJaH7JUVkAMB8GA1UdIwQYMBaAFAqL0rAv9pUXHcAejH5KotmI2jua
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDVENy9BMDgxNkVEMDE2
RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxSY2R3QjZNZmtxaTJZamFP
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NvdlNzQ18ybFJjZHdCNk1ma3FpMllqYU81by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDVENy9BMDgxNkVEMDE2RDgxMUVGQkY5MDFFNUZDNEY5QUUwMi9Db3ZTc0NfMmxS
Y2R3QjZNZmtxaTJZamFPNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBGi2WlpptGOor5Zyw9jTW+Be5I1DJlJ4N1nIAdl2GB2LGXHieTRYm3
yvykPO2+ok6o72okbh3t3OkKEjyL4+jq1yUIGRE1p9dL+s5JI6CW01NNrFeYgLmy
MQXtidURe4rIemNGt6JhB9i/CO/I2vZvtB/9Bru87MWtNzZcN8loOMKJmghH/mUC
ATgeRYpF4UWXL2MCvE/nEa4uVquia7r842gplFPpcz7tMO9x32FqVAj+yvFS9UEk
kpGj5Jd0JjqxQgNnp3T5OJ0MCGvnzteM0/OjponFLyfIgW7uSgC0+Hcc9VSs6JNe
9ComgH+OGfXGziKObky5j1pJjwAciBgP
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:58:40 2025 by rpki-client