Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
File:                     F2vOFchi1HunYKH2ZTj4HVxJO4E.mft (raw, json)
Hash identifier:          mrZ0xoxKmNCocAXMROTWoTB46hmWRt4UfpBGrU8R+K4=
Subject key identifier:   78:97:BD:75:BA:72:B6:2D:D1:F0:84:A8:09:34:E9:AC:07:78:0A:2E
Authority key identifier: 17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81
Certificate issuer:       /CN=A91706E4/serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81
Certificate serial:       86
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
Manifest number:          85
Signing time:             Tue 05 Aug 2025 07:11:22 +0000
Manifest this update:     Tue 05 Aug 2025 07:11:22 +0000
Manifest next update:     Tue 12 Aug 2025 07:11:22 +0000
Files and hashes:         1: F2vOFchi1HunYKH2ZTj4HVxJO4E.crl (hash: 6uNiITTqKECTsutFssIkYcSANuql/vac5uX+Zi7vJTM=)
                          2: 2CE10886A68511EFB0CF9981C4F9AE02.roa (hash: veK+ihHT7rgGehPtR5m7GK/hbNWI81sjRNiKcGQwWGg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl
                          rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 07:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91706E4, serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81
        Validity
            Not Before: Aug  5 07:11:22 2025 GMT
            Not After : Aug 12 07:11:22 2025 GMT
        Subject: CN=6891ae9a-7d89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:5c:98:40:ef:f4:17:2e:0b:82:97:d1:f8:
                    1d:60:8d:19:e9:a0:0d:c0:77:53:fb:01:82:e8:5b:
                    ac:0c:21:a0:08:93:8e:31:86:51:89:7a:9f:b2:f4:
                    e7:c4:87:4a:4b:6e:c9:51:6a:39:dd:3f:7b:59:45:
                    7c:a1:8f:22:09:3c:49:87:01:e5:a1:92:6c:47:ad:
                    c1:a9:8f:25:55:37:74:ae:fb:fa:ee:96:0a:d8:df:
                    b7:0a:47:19:90:9e:d3:ea:db:ca:c9:b0:af:bb:3a:
                    74:fc:cb:f7:50:7e:34:19:30:bf:db:a7:f3:b7:ea:
                    01:57:2f:9b:c2:b9:e6:92:8d:30:16:ac:81:7a:64:
                    64:cf:22:a7:bc:2d:56:ec:9d:89:46:ea:8d:47:91:
                    da:c6:f4:de:3a:a5:fc:83:60:29:68:d0:16:a0:c3:
                    f5:76:db:6a:94:b8:7c:c5:f5:74:cc:eb:9c:82:20:
                    7d:59:0a:6f:e9:99:f4:9f:c9:f9:d3:af:d2:00:62:
                    9a:ae:bb:cc:35:a8:cf:21:5c:4f:d6:81:17:66:75:
                    8c:53:c6:2a:64:5f:f8:2f:42:cf:1b:8e:15:3e:fa:
                    aa:c9:83:04:7f:89:5b:e1:f0:ee:ec:aa:fb:05:51:
                    ef:c8:2c:33:f5:35:dc:bd:47:b6:30:c8:3e:c2:21:
                    d0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:97:BD:75:BA:72:B6:2D:D1:F0:84:A8:09:34:E9:AC:07:78:0A:2E
            X509v3 Authority Key Identifier:
                keyid:17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:9d:4b:2d:84:95:77:13:fe:ad:d0:18:ac:da:b7:18:c7:02:
         ef:a6:25:2c:39:e7:7c:77:ce:f5:d4:b2:0d:a5:52:3e:7a:5d:
         2a:d7:a8:d1:0b:06:ea:e0:f3:75:11:84:43:ec:18:af:76:33:
         20:0d:83:73:d7:4d:4d:58:f0:2a:9b:14:03:3e:f2:96:14:d7:
         1c:b5:55:c8:3c:7a:d5:5f:33:46:18:c1:86:32:c4:47:ee:42:
         47:1c:56:13:86:ff:76:40:46:4c:79:06:24:1c:fc:8b:63:5c:
         ac:a2:cd:17:59:e3:07:ac:7d:60:42:53:37:ed:69:01:23:a2:
         a4:37:47:9f:36:96:68:64:97:88:03:48:b4:b4:12:22:10:15:
         95:49:e9:34:e0:23:e7:45:e8:9b:cb:89:df:ea:d1:f6:c7:4c:
         af:31:56:eb:c1:73:0f:55:38:7e:11:b1:ad:2e:e7:c8:cf:c5:
         a0:86:e6:81:2c:a5:ba:c5:33:a9:24:b7:c7:b5:b5:18:09:a0:
         5c:1c:87:da:fc:81:01:6d:22:d8:44:3d:ec:19:0b:ba:5c:0f:
         0d:f1:17:bd:3d:aa:bf:a9:ba:11:28:fc:7e:dc:0a:30:fe:c1:
         9d:7f:de:3c:fb:ba:97:3c:44:3a:cc:a2:af:66:9a:a9:a3:b4:
         2d:95:b6:fa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA2RTQxMTAvBgNVBAUTKDE3NkJDRTE1Qzg2MkQ0N0JBNzYwQTFGNjY1MzhGODFE
NUM0OTNCODEwHhcNMjUwODA1MDcxMTIyWhcNMjUwODEyMDcxMTIyWjAYMRYwFAYD
VQQDEw02ODkxYWU5YS03ZDg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvllcmEDv9BcuC4KX0fgdYI0Z6aANwHdT+wGC6FusDCGgCJOOMYZRiXqfsvTn
xIdKS27JUWo53T97WUV8oY8iCTxJhwHloZJsR63BqY8lVTd0rvv67pYK2N+3CkcZ
kJ7T6tvKybCvuzp0/Mv3UH40GTC/26fzt+oBVy+bwrnmko0wFqyBemRkzyKnvC1W
7J2JRuqNR5HaxvTeOqX8g2ApaNAWoMP1dttqlLh8xfV0zOucgiB9WQpv6Zn0n8n5
06/SAGKarrvMNajPIVxP1oEXZnWMU8YqZF/4L0LPG44VPvqqyYMEf4lb4fDu7Kr7
BVHvyCwz9TXcvUe2MMg+wiHQQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiXvXW6
crYt0fCEqAk06awHeAouMB8GA1UdIwQYMBaAFBdrzhXIYtR7p2Ch9mU4+B1cSTuB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZFNC8zMkU5OTNDMEE2
ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9GMnZPRmNoaTFIdW5ZS0gyWlRqNEhWeEpP
NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0Yydk9GY2hpMUh1bllLSDJaVGo0SFZ4Sk80RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDZFNC8zMkU5OTNDMEE2ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9GMnZPRmNoaTFI
dW5ZS0gyWlRqNEhWeEpPNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC7nUsthJV3E/6t0Bis2rcYxwLvpiUsOed8d8711LINpVI+el0q16jR
Cwbq4PN1EYRD7BivdjMgDYNz101NWPAqmxQDPvKWFNcctVXIPHrVXzNGGMGGMsRH
7kJHHFYThv92QEZMeQYkHPyLY1ysos0XWeMHrH1gQlM37WkBI6KkN0efNpZoZJeI
A0i0tBIiEBWVSek04CPnReiby4nf6tH2x0yvMVbrwXMPVTh+EbGtLufIz8WghuaB
LKW6xTOpJLfHtbUYCaBcHIfa/IEBbSLYRD3sGQu6XA8N8Re9Paq/qboRKPx+3Aow
/sGdf948+7qXPEQ6zKKvZpqpo7Qtlbb6
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:48 2025 by rpki-client