Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft
File:                     u2XjT0_eqStZoyVHozggimCJHgk.mft (raw, json)
Hash identifier:          uEys1O4DrHq+7cZxaIEWzN8JOiw1nmLruCixiuLiduo=
Subject key identifier:   DB:DD:B3:1D:C2:FD:83:F7:B2:5D:BB:13:9A:0A:82:31:DF:4F:41:97
Authority key identifier: BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09
Certificate issuer:       /CN=A917F224/serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09
Certificate serial:       0BE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft
Manifest number:          0BDE
Signing time:             Sun 10 Aug 2025 18:52:01 +0000
Manifest this update:     Sun 10 Aug 2025 18:52:00 +0000
Manifest next update:     Sun 17 Aug 2025 18:52:00 +0000
Files and hashes:         1: u2XjT0_eqStZoyVHozggimCJHgk.crl (hash: SJxuUgicLAygZJvzkL9lQzZM25S7LrLl/vGEzow1NZI=)
                          2: A46E4EAC205911EAAB6ECF1FC4F9AE02.roa (hash: 6VuhUdY4wX4JtAdDLdZ6VRCxsSJ2dhl5mfVJFdysXwU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl
                          rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3047 (0xbe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F224, serialNumber=BB65E34F4FDEA92B59A32547A338208A60891E09
        Validity
            Not Before: Aug 10 18:52:00 2025 GMT
            Not After : Aug 17 18:52:00 2025 GMT
        Subject: CN=6898ea51-0e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e8:60:0a:e3:9f:77:99:a8:75:6a:d8:2c:55:
                    43:e1:f7:bb:69:22:1a:94:03:a9:38:08:9c:bf:ce:
                    31:40:7d:d2:fd:e3:18:77:4b:c2:8e:d0:ed:66:e5:
                    28:92:03:f3:cd:3d:82:bd:64:b5:76:4d:12:61:3e:
                    68:02:64:e8:07:70:ff:ff:2b:3c:d5:a6:a1:7e:6d:
                    19:8f:d4:c9:9b:4f:38:1d:f6:2b:43:c8:ce:7d:83:
                    28:d3:ce:e9:1d:fb:00:2b:96:dc:5a:a1:49:d9:41:
                    8d:25:b4:7e:70:b7:45:8b:45:dc:e2:23:d7:94:32:
                    97:86:90:3b:19:7e:f8:aa:29:47:15:2b:56:78:a1:
                    ac:80:fe:d2:40:0c:f3:c6:11:d1:36:6c:e6:c8:0c:
                    ae:ea:8c:79:23:47:69:2a:7e:03:fd:e4:16:3d:9d:
                    69:70:60:e3:cd:ca:c5:3c:8b:d9:1b:71:9d:89:8a:
                    01:63:e9:e0:6b:a6:ac:54:d5:44:dc:50:d0:ac:d0:
                    f5:16:be:92:b7:82:24:d0:26:86:94:5c:cf:9c:24:
                    a4:96:d1:22:1c:37:43:64:40:e9:69:05:26:74:c7:
                    4d:b5:d6:04:c8:0a:6c:47:34:26:cc:e7:77:3b:e4:
                    80:2a:cd:31:52:d3:77:2a:17:a4:92:4e:b3:5a:31:
                    83:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:DD:B3:1D:C2:FD:83:F7:B2:5D:BB:13:9A:0A:82:31:DF:4F:41:97
            X509v3 Authority Key Identifier:
                keyid:BB:65:E3:4F:4F:DE:A9:2B:59:A3:25:47:A3:38:20:8A:60:89:1E:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u2XjT0_eqStZoyVHozggimCJHgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F224/6E9BA41A205811EAB717721BC4F9AE02/u2XjT0_eqStZoyVHozggimCJHgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:5c:4d:72:a9:e9:31:d2:63:ae:d8:52:0b:77:e1:c6:9e:ee:
         e1:01:c6:87:12:cb:13:a1:68:f5:3d:20:4f:eb:2c:d9:29:b1:
         60:1d:16:3e:b7:17:d9:40:c5:97:71:51:c4:f1:64:48:98:cc:
         2b:1f:cc:1a:52:0e:48:39:3d:af:49:8a:8c:0c:0f:01:70:d3:
         e3:aa:49:e0:ba:b1:c5:68:05:02:3b:bd:17:ae:6f:25:9f:e2:
         87:a2:d3:0e:0a:3d:16:d7:ce:34:4e:a1:94:de:ff:47:55:6c:
         9f:55:5c:bb:85:9f:f2:4b:a1:b7:03:37:1a:cb:88:a7:44:3c:
         b2:79:a3:b0:8e:7e:df:28:7c:0a:0c:6d:a4:d7:55:ee:14:6a:
         84:b3:33:61:0c:0a:e2:ca:ae:95:dc:85:5a:a3:66:13:a7:93:
         5c:5a:85:94:e4:4f:d9:61:6b:db:87:c1:6c:9e:4c:db:d6:e9:
         9f:9a:20:af:ea:68:5a:fb:63:83:7c:7c:51:7e:7f:02:42:ac:
         af:7f:c1:74:fc:ce:80:6d:29:c0:42:36:8c:70:f1:eb:0f:91:
         4f:66:30:01:8b:f5:bc:a2:75:e0:ed:a6:b0:ca:8c:23:52:95:
         e7:b6:25:14:a0:d6:28:d2:e6:73:9f:25:d1:c6:5e:e8:ad:66:
         db:49:dd:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC+cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0YyMjQxMTAvBgNVBAUTKEJCNjVFMzRGNEZERUE5MkI1OUEzMjU0N0EzMzgyMDhB
NjA4OTFFMDkwHhcNMjUwODEwMTg1MjAwWhcNMjUwODE3MTg1MjAwWjAYMRYwFAYD
VQQDEw02ODk4ZWE1MS0wZTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0+hgCuOfd5modWrYLFVD4fe7aSIalAOpOAicv84xQH3S/eMYd0vCjtDtZuUo
kgPzzT2CvWS1dk0SYT5oAmToB3D//ys81aahfm0Zj9TJm084HfYrQ8jOfYMo087p
HfsAK5bcWqFJ2UGNJbR+cLdFi0Xc4iPXlDKXhpA7GX74qilHFStWeKGsgP7SQAzz
xhHRNmzmyAyu6ox5I0dpKn4D/eQWPZ1pcGDjzcrFPIvZG3GdiYoBY+nga6asVNVE
3FDQrND1Fr6St4Ik0CaGlFzPnCSkltEiHDdDZEDpaQUmdMdNtdYEyApsRzQmzOd3
O+SAKs0xUtN3Khekkk6zWjGDRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvdsx3C
/YP3sl27E5oKgjHfT0GXMB8GA1UdIwQYMBaAFLtl409P3qkrWaMlR6M4IIpgiR4J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RjIyNC82RTlCQTQxQTIw
NTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFTdFpveVZIb3pnZ2ltQ0pI
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3UyWGpUMF9lcVN0Wm95VkhvemdnaW1DSkhnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RjIyNC82RTlCQTQxQTIwNTgxMUVBQjcxNzcyMUJDNEY5QUUwMi91MlhqVDBfZXFT
dFpveVZIb3pnZ2ltQ0pIZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAxXE1yqekx0mOu2FILd+HGnu7hAcaHEssToWj1PSBP6yzZKbFgHRY+
txfZQMWXcVHE8WRImMwrH8waUg5IOT2vSYqMDA8BcNPjqkngurHFaAUCO70Xrm8l
n+KHotMOCj0W1840TqGU3v9HVWyfVVy7hZ/yS6G3Azcay4inRDyyeaOwjn7fKHwK
DG2k11XuFGqEszNhDAriyq6V3IVao2YTp5NcWoWU5E/ZYWvbh8Fsnkzb1umfmiCv
6mha+2ODfHxRfn8CQqyvf8F0/M6AbSnAQjaMcPHrD5FPZjABi/W8onXg7aawyowj
UpXntiUUoNYo0uZznyXRxl7orWbbSd1M
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:28:31 2025 by rpki-client