Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
File:                     kap3g_sCeBmDjEqRyRxg1B-z7qs.mft (raw, json)
Hash identifier:          KS4ig5svKOz6wh6YLGlxo4VCFVgiPbiiTmD6mCj/QLE=
Subject key identifier:   E0:67:47:99:53:5B:1A:96:B4:3E:2F:3F:92:CE:A6:2A:62:2E:84:AE
Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB
Certificate issuer:       /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
Certificate serial:       D5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
Manifest number:          C7
Signing time:             Sat 09 Aug 2025 06:24:57 +0000
Manifest this update:     Sat 09 Aug 2025 06:24:57 +0000
Manifest next update:     Sat 16 Aug 2025 06:24:56 +0000
Files and hashes:         1: kap3g_sCeBmDjEqRyRxg1B-z7qs.crl (hash: 398mp9kD28gZ9e3wuMwFhAp/7FrjsaeX/kbHwMvzWvE=)
                          2: AC7759D2135511F092D0090CC4F9AE02.roa (hash: onYsR/Z0zfQbFj+mcD8abagulwJaECFH59WKOVFKUeE=)
                          3: 8B92BEBE5F6411EFA6B37A52C4F9AE02.roa (hash: gsmwp4OHnwC8hYSd2METX/aBne78nHhg+4ChJNmzP2M=)
                          4: 71685FB25F6411EFB16D4552C4F9AE02.roa (hash: swi4PXSK/F+KN97GlDzhN7O3Kmz0645WUAiVa8gtnyQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB
        Validity
            Not Before: Aug  9 06:24:57 2025 GMT
            Not After : Aug 16 06:24:56 2025 GMT
        Subject: CN=6896e9b9-4c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:82:88:85:7d:01:6e:5f:47:6f:1c:b9:06:
                    69:f5:8d:6c:44:b2:b5:c4:15:11:50:54:d5:bd:39:
                    c5:46:bb:cd:95:e5:57:dd:2a:2d:bd:7b:03:30:56:
                    57:ee:04:39:e8:38:8b:2e:8f:ad:5d:28:53:8a:50:
                    c4:5f:3e:d2:b2:e8:e8:56:92:d6:04:e9:83:07:67:
                    e2:87:70:18:92:d6:d9:b9:1e:bd:6e:1d:0a:89:cc:
                    c1:c6:89:7f:d4:69:d0:0e:60:01:56:e4:0d:2a:a5:
                    7d:4c:1b:a7:88:93:70:f2:c3:e2:5d:30:6b:9a:14:
                    11:b2:39:57:98:0d:d2:0b:43:b5:6c:82:4f:f2:85:
                    3c:ae:d8:be:92:3b:f5:ce:0c:85:fa:be:b1:72:80:
                    53:aa:5c:7b:54:90:da:8e:5c:99:a5:d0:6f:4d:1e:
                    f1:16:e0:f6:cf:d4:3f:1b:a0:54:cf:25:4e:a0:a6:
                    a8:00:5b:a9:91:48:a0:90:63:e4:47:2c:43:1a:f4:
                    80:3b:5f:92:9e:97:9d:52:69:4d:8b:c5:6e:71:eb:
                    06:50:82:dc:71:23:b1:c5:4f:2f:d4:cc:12:84:f8:
                    8c:f5:54:6e:78:04:d3:a2:17:19:c6:35:5f:d1:45:
                    60:90:87:a6:33:24:41:bf:80:d4:c6:14:08:41:c1:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:67:47:99:53:5B:1A:96:B4:3E:2F:3F:92:CE:A6:2A:62:2E:84:AE
            X509v3 Authority Key Identifier:
                keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:e2:a0:e0:d0:13:1a:4f:7b:9d:a4:3d:ea:5b:df:8f:ab:15:
         39:de:f3:b6:07:a4:4a:5f:d3:d0:f8:08:21:ed:70:a0:6c:65:
         fe:e1:a8:b2:74:4b:73:d2:34:ec:3a:6a:44:1a:63:47:e8:de:
         58:c8:8c:4e:76:ad:e4:4a:ae:f9:df:6f:31:29:87:54:29:82:
         c8:a5:db:84:bb:78:4c:81:94:b8:83:6b:4f:20:31:84:59:c6:
         14:de:31:04:82:b8:be:c7:f8:39:71:5a:70:9a:7b:ff:17:ef:
         93:44:e4:a9:7f:e5:80:95:8f:f8:5c:c7:3f:02:08:83:f4:0f:
         af:21:0e:81:1e:3e:66:fa:5d:a5:12:81:5c:ed:31:6c:5a:87:
         51:e6:83:1f:df:8f:30:00:4b:ae:0e:58:6b:7c:3a:f7:b5:18:
         ec:fd:60:95:3a:fe:51:a9:26:0b:24:6b:ec:ab:4b:5c:d5:d6:
         57:fa:53:ff:b2:ad:84:e8:54:e8:94:8c:8d:1e:36:b9:62:be:
         a9:e1:1b:bb:7d:f3:fe:3b:1f:71:c8:5e:dc:44:72:4c:20:88:
         9f:35:20:1d:d3:da:e5:d8:b2:a9:32:f0:4d:71:e6:30:e5:64:
         93:0b:89:35:cb:23:3c:b0:93:51:06:9e:a6:d4:03:5d:49:37:
         ec:a1:95:07
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Nzk2NzIxMTAvBgNVBAUTKDkxQUE3NzgzRkIwMjc4MTk4MzhDNEE5MUM5MUM2MEQ0
MUZCM0VFQUIwHhcNMjUwODA5MDYyNDU3WhcNMjUwODE2MDYyNDU2WjAYMRYwFAYD
VQQDEw02ODk2ZTliOS00YzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqKuCiIV9AW5fR28cuQZp9Y1sRLK1xBURUFTVvTnFRrvNleVX3SotvXsDMFZX
7gQ56DiLLo+tXShTilDEXz7SsujoVpLWBOmDB2fih3AYktbZuR69bh0KiczBxol/
1GnQDmABVuQNKqV9TBuniJNw8sPiXTBrmhQRsjlXmA3SC0O1bIJP8oU8rti+kjv1
zgyF+r6xcoBTqlx7VJDajlyZpdBvTR7xFuD2z9Q/G6BUzyVOoKaoAFupkUigkGPk
RyxDGvSAO1+SnpedUmlNi8VucesGUILccSOxxU8v1MwShPiM9VRueATTohcZxjVf
0UVgkIemMyRBv4DUxhQIQcET7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBnR5lT
WxqWtD4vP5LOpipiLoSuMB8GA1UdIwQYMBaAFJGqd4P7AngZg4xKkckcYNQfs+6r
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTY3Mi9FNUY0NUFEMDVG
NTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VCbURqRXFSeVJ4ZzFCLXo3
cXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2thcDNnX3NDZUJtRGpFcVJ5UnhnMUItejdxcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
OTY3Mi9FNUY0NUFEMDVGNTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VC
bURqRXFSeVJ4ZzFCLXo3cXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBE4qDg0BMaT3udpD3qW9+PqxU53vO2B6RKX9PQ+Agh7XCgbGX+4aiy
dEtz0jTsOmpEGmNH6N5YyIxOdq3kSq75328xKYdUKYLIpduEu3hMgZS4g2tPIDGE
WcYU3jEEgri+x/g5cVpwmnv/F++TROSpf+WAlY/4XMc/AgiD9A+vIQ6BHj5m+l2l
EoFc7TFsWodR5oMf348wAEuuDlhrfDr3tRjs/WCVOv5RqSYLJGvsq0tc1dZX+lP/
sq2E6FTolIyNHja5Yr6p4Ru7ffP+Ox9xyF7cRHJMIIifNSAd09rl2LKpMvBNceYw
5WSTC4k1yyM8sJNRBp6m1ANdSTfsoZUH
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:52:28 2025 by rpki-client