Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
File:                     7ZIUoK3iNSkzeSFihbucXj4PXW8.mft (raw, json)
Hash identifier:          PLXQX8wAIw2LphOU+HefM7QBhHukemRI4X9bOQMjs3o=
Subject key identifier:   3D:B8:57:7C:67:0F:60:96:1C:88:40:9F:EA:A2:C7:DB:91:9A:7A:A3
Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F
Certificate issuer:       /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
Certificate serial:       035D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
Manifest number:          0355
Signing time:             Sat 09 Aug 2025 01:31:58 +0000
Manifest this update:     Sat 09 Aug 2025 01:31:57 +0000
Manifest next update:     Sat 16 Aug 2025 01:31:57 +0000
Files and hashes:         1: 7ZIUoK3iNSkzeSFihbucXj4PXW8.crl (hash: UOJElnUjgx2mMBM/uVTffNUi9BbdA/2n6oR0ouHqKtk=)
                          2: E9CDE63CD56811EFB4A0C533C4F9AE02.roa (hash: 5H3doinpQy2aJUR8V/Iyn/j6ZGC3RyvpumpsTRmuHeE=)
                          3: 632E90B0C6C811ECA5A9AB33C4F9AE02.roa (hash: lc1pPdhpDyedJmN9wKoMqneYMH913sVIQlr9uEAlmPc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl
                          rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861 (0x35d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
        Validity
            Not Before: Aug  9 01:31:57 2025 GMT
            Not After : Aug 16 01:31:57 2025 GMT
        Subject: CN=6896a50e-78dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:aa:a4:58:d6:dd:63:d4:72:43:44:57:ad:c2:
                    7f:b4:cb:24:f4:07:fa:62:75:69:ff:3d:69:73:12:
                    da:2a:43:8f:ca:25:1b:aa:ee:39:55:62:19:7d:02:
                    39:50:f7:e4:ca:2e:9f:34:b7:fa:8f:fd:1d:7f:1d:
                    16:8f:dd:35:c8:81:b9:2a:d6:c7:76:4e:2c:f9:4a:
                    d7:4f:bd:53:75:4d:89:8c:bb:85:13:55:58:68:d3:
                    bb:fe:63:10:77:d9:4d:da:f4:aa:22:7c:f1:c2:52:
                    55:7e:0a:b6:91:b1:10:1c:45:25:05:05:a8:98:74:
                    32:17:48:34:33:2a:1b:6d:24:ce:90:3f:3d:c3:14:
                    bf:79:92:98:e0:bb:8f:7b:34:0c:63:f8:12:86:bf:
                    cc:bf:39:ce:72:37:b6:39:5b:b3:23:cf:03:ab:0f:
                    93:ba:b2:ff:2d:9c:34:be:48:fd:24:cc:17:25:a0:
                    70:b2:10:ba:70:5e:ac:61:df:b6:4c:5f:d5:c5:b8:
                    cd:1f:d5:c2:fe:96:18:a3:1e:62:75:76:2e:db:37:
                    e3:63:4c:62:3d:e0:c0:5b:d7:b8:8b:a6:39:84:70:
                    73:51:27:69:0e:fd:61:d7:5b:94:22:96:4e:a5:28:
                    88:6a:2f:4d:cc:d6:1f:28:3f:6a:4f:e7:ef:8d:af:
                    bb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:B8:57:7C:67:0F:60:96:1C:88:40:9F:EA:A2:C7:DB:91:9A:7A:A3
            X509v3 Authority Key Identifier:
                keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:21:b3:07:0f:47:4e:56:3d:d2:7d:ea:cb:8e:cd:7b:f5:24:
         15:46:42:1f:78:e6:fc:19:7e:9f:3d:5d:4f:52:84:2d:a3:03:
         e3:18:f6:75:26:ba:7b:10:c3:d8:db:8b:0e:c6:27:38:60:bf:
         7d:45:7f:6e:4f:87:8a:24:92:d6:d0:30:92:d9:c5:65:0e:95:
         53:63:4a:ca:33:f8:35:3b:22:a3:d0:9d:4d:4d:22:cc:f7:93:
         dc:dc:64:f2:81:39:af:2f:f8:2f:c8:13:b2:f8:61:a2:86:ee:
         c6:21:80:6a:0d:81:14:d3:61:94:97:ca:52:ef:70:66:fd:77:
         1a:13:a5:0e:9e:bc:22:dd:48:09:ef:04:76:fa:5b:7b:e0:d7:
         4c:9d:c4:f8:46:e6:83:9b:57:9d:76:57:9a:86:0d:a0:10:08:
         3a:88:1d:15:a4:b5:c5:fd:2f:9b:82:23:3d:f4:48:cf:14:52:
         74:63:08:6e:fa:94:4d:d0:3e:ad:a4:f3:f3:a9:84:f6:5a:87:
         20:c7:22:b1:f2:57:4b:68:15:c4:71:0a:fb:00:41:dd:24:76:
         b5:ef:4a:18:17:93:c7:dd:47:39:c6:19:ed:41:c6:91:64:73:
         a2:90:97:cc:e3:9f:1c:52:6f:eb:46:db:aa:0e:03:3e:44:fa:
         b3:b2:90:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODM1ODcxMTAvBgNVBAUTKEVEOTIxNEEwQURFMjM1MjkzMzc5MjE2Mjg1QkI5QzVF
M0UwRjVENkYwHhcNMjUwODA5MDEzMTU3WhcNMjUwODE2MDEzMTU3WjAYMRYwFAYD
VQQDEw02ODk2YTUwZS03OGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3aqkWNbdY9RyQ0RXrcJ/tMsk9Af6YnVp/z1pcxLaKkOPyiUbqu45VWIZfQI5
UPfkyi6fNLf6j/0dfx0Wj901yIG5KtbHdk4s+UrXT71TdU2JjLuFE1VYaNO7/mMQ
d9lN2vSqInzxwlJVfgq2kbEQHEUlBQWomHQyF0g0MyobbSTOkD89wxS/eZKY4LuP
ezQMY/gShr/MvznOcje2OVuzI88Dqw+TurL/LZw0vkj9JMwXJaBwshC6cF6sYd+2
TF/VxbjNH9XC/pYYox5idXYu2zfjY0xiPeDAW9e4i6Y5hHBzUSdpDv1h11uUIpZO
pSiIai9NzNYfKD9qT+fvja+7lQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD24V3xn
D2CWHIhAn+qix9uRmnqjMB8GA1UdIwQYMBaAFO2SFKCt4jUpM3khYoW7nF4+D11v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzU4Ny8xQTY5NzlFMkM2
MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5Ta3plU0ZpaGJ1Y1hqNFBY
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdaSVVvSzNpTlNremVTRmloYnVjWGo0UFhXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MzU4Ny8xQTY5NzlFMkM2MDcxMUVDOUVDQjVFNjdDNEY5QUUwMi83WklVb0szaU5T
a3plU0ZpaGJ1Y1hqNFBYVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJIbMHD0dOVj3SferLjs179SQVRkIfeOb8GX6fPV1PUoQtowPjGPZ1
Jrp7EMPY24sOxic4YL99RX9uT4eKJJLW0DCS2cVlDpVTY0rKM/g1OyKj0J1NTSLM
95Pc3GTygTmvL/gvyBOy+GGihu7GIYBqDYEU02GUl8pS73Bm/XcaE6UOnrwi3UgJ
7wR2+lt74NdMncT4RuaDm1eddleahg2gEAg6iB0VpLXF/S+bgiM99EjPFFJ0Ywhu
+pRN0D6tpPPzqYT2WocgxyKx8ldLaBXEcQr7AEHdJHa170oYF5PH3Uc5xhntQcaR
ZHOikJfM458cUm/rRtuqDgM+RPqzspAx
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:48:28 2025 by rpki-client