Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
File:                     R2wrlqUY81f22XaCqHHD5Iu54SM.mft (raw, json)
Hash identifier:          jRK1HO/SYAt932rJfKfuPgncKEkzMmL1m0jkvCielK4=
Subject key identifier:   51:F6:3C:30:D2:2E:63:81:71:88:28:E9:53:C7:FB:5E:CE:CB:9B:33
Authority key identifier: 47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23
Certificate issuer:       /CN=A917A442/serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
Certificate serial:       01D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
Manifest number:          01CB
Signing time:             Mon 11 Aug 2025 03:05:16 +0000
Manifest this update:     Mon 11 Aug 2025 03:05:16 +0000
Manifest next update:     Mon 18 Aug 2025 03:05:16 +0000
Files and hashes:         1: R2wrlqUY81f22XaCqHHD5Iu54SM.crl (hash: dRUhOiTAghRVuMKxavVp4PuhbWpADmvVB8MFHH+vMtE=)
                          2: 65E02670C83E11ED9FAAFA22C4F9AE02.roa (hash: QqBINDd+m6GAidQPZDLnjXwqI13nDti3MNbtgoHfQfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl
                          rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 03:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A442, serialNumber=476C2B96A518F357F6D97682A871C3E48BB9E123
        Validity
            Not Before: Aug 11 03:05:16 2025 GMT
            Not After : Aug 18 03:05:16 2025 GMT
        Subject: CN=68995dec-80eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:08:45:f8:c6:93:9a:78:96:0d:b7:62:91:
                    eb:c2:36:0f:a0:a5:35:4e:8a:d4:69:53:53:80:d5:
                    38:7b:70:93:98:48:fb:7f:51:42:99:c4:99:f4:60:
                    bd:39:00:6f:cc:38:21:2c:ab:0a:a9:d4:0b:2d:a9:
                    f6:a4:cc:bb:e2:15:95:0d:ce:a0:2d:a6:ff:e1:18:
                    9c:70:57:28:76:6a:80:d5:fd:1b:5b:dd:28:cf:5e:
                    c4:66:16:19:26:ff:3a:67:9c:9c:c8:e3:ef:19:fb:
                    a2:33:cc:be:83:9a:b6:91:46:1a:33:a5:87:ba:ab:
                    4c:dd:b1:dd:d9:65:91:5d:f4:28:a6:96:af:b4:e1:
                    da:c3:8e:04:df:58:3c:84:32:41:6b:b2:31:63:ff:
                    8d:ab:9e:76:28:2b:cd:55:55:f5:4d:7c:11:41:b1:
                    c2:37:ca:13:32:0f:73:3a:0a:70:84:6f:b5:7e:74:
                    f7:d1:6b:03:16:2c:bb:a2:82:f1:84:26:1d:57:27:
                    90:77:ce:a8:6e:ea:ce:70:fb:b6:db:e6:84:4b:10:
                    b6:09:a0:4e:62:4a:74:65:13:18:59:9b:d1:38:e9:
                    15:2b:53:c0:0a:27:8f:69:18:23:20:52:29:78:20:
                    b6:38:0a:3c:1f:23:13:0f:9b:b2:3b:5e:06:e7:ef:
                    90:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F6:3C:30:D2:2E:63:81:71:88:28:E9:53:C7:FB:5E:CE:CB:9B:33
            X509v3 Authority Key Identifier:
                keyid:47:6C:2B:96:A5:18:F3:57:F6:D9:76:82:A8:71:C3:E4:8B:B9:E1:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R2wrlqUY81f22XaCqHHD5Iu54SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A442/E0E7DB56C83911EDAC72B11CC4F9AE02/R2wrlqUY81f22XaCqHHD5Iu54SM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:68:c5:e4:a1:67:b6:54:86:07:d8:80:e3:a0:42:ad:34:56:
         1b:19:ac:35:0a:b5:24:9a:9c:17:f7:da:55:bb:67:8e:a0:b5:
         b0:46:e1:da:8a:0a:66:7f:64:44:48:a1:46:c5:06:04:63:63:
         0f:3d:57:5b:38:e7:be:bd:81:03:3c:a2:f6:e5:25:d3:af:64:
         f7:e3:0f:0c:7d:59:d3:c1:58:f6:e7:e7:de:21:8e:14:7b:25:
         7b:85:42:9b:b4:14:bd:66:6e:73:15:c6:77:ec:97:13:3a:4d:
         3b:bf:5a:4f:12:af:31:85:b3:5a:d6:ac:3a:b8:c5:73:92:ae:
         27:62:91:82:a0:a1:e4:b6:9f:1f:65:58:46:4d:c3:b2:e8:16:
         ec:68:9e:91:f0:d1:0a:3c:5c:82:34:cb:ae:3a:59:1e:34:10:
         d6:e4:70:8c:11:d0:43:2c:b5:67:b8:06:e8:8b:b7:2a:fb:30:
         08:84:da:8d:3c:cb:14:16:6d:f3:d9:6f:a1:2f:9a:0b:cf:e3:
         f5:96:54:35:4f:d6:06:24:25:63:79:68:91:0b:93:23:48:ec:
         ff:4a:73:8b:ec:32:c7:6e:4d:ff:b2:2c:0b:f5:24:1f:ee:30:
         87:6a:0c:20:63:45:65:06:67:34:a9:2e:e0:b6:1d:6d:d4:13:
         4e:f8:b7:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0E0NDIxMTAvBgNVBAUTKDQ3NkMyQjk2QTUxOEYzNTdGNkQ5NzY4MkE4NzFDM0U0
OEJCOUUxMjMwHhcNMjUwODExMDMwNTE2WhcNMjUwODE4MDMwNTE2WjAYMRYwFAYD
VQQDEw02ODk5NWRlYy04MGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsAUIRfjGk5p4lg23YpHrwjYPoKU1TorUaVNTgNU4e3CTmEj7f1FCmcSZ9GC9
OQBvzDghLKsKqdQLLan2pMy74hWVDc6gLab/4RiccFcodmqA1f0bW90oz17EZhYZ
Jv86Z5ycyOPvGfuiM8y+g5q2kUYaM6WHuqtM3bHd2WWRXfQoppavtOHaw44E31g8
hDJBa7IxY/+Nq552KCvNVVX1TXwRQbHCN8oTMg9zOgpwhG+1fnT30WsDFiy7ooLx
hCYdVyeQd86oburOcPu22+aESxC2CaBOYkp0ZRMYWZvROOkVK1PACiePaRgjIFIp
eCC2OAo8HyMTD5uyO14G5++QhQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFH2PDDS
LmOBcYgo6VPH+17Oy5szMB8GA1UdIwQYMBaAFEdsK5alGPNX9tl2gqhxw+SLueEj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTQ0Mi9FMEU3REI1NkM4
MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgxZjIyWGFDcUhIRDVJdTU0
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Iyd3JscVVZODFmMjJYYUNxSEhENUl1NTRTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QTQ0Mi9FMEU3REI1NkM4MzkxMUVEQUM3MkIxMUNDNEY5QUUwMi9SMndybHFVWTgx
ZjIyWGFDcUhIRDVJdTU0U00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2aMXkoWe2VIYH2IDjoEKtNFYbGaw1CrUkmpwX99pVu2eOoLWwRuHa
igpmf2RESKFGxQYEY2MPPVdbOOe+vYEDPKL25SXTr2T34w8MfVnTwVj25+feIY4U
eyV7hUKbtBS9Zm5zFcZ37JcTOk07v1pPEq8xhbNa1qw6uMVzkq4nYpGCoKHktp8f
ZVhGTcOy6BbsaJ6R8NEKPFyCNMuuOlkeNBDW5HCMEdBDLLVnuAboi7cq+zAIhNqN
PMsUFm3z2W+hL5oLz+P1llQ1T9YGJCVjeWiRC5MjSOz/SnOL7DLHbk3/siwL9SQf
7jCHagwgY0VlBmc0qS7gth1t1BNO+Ldr
-----END CERTIFICATE-----
Generated at Tue Aug 12 20:41:54 2025 by rpki-client