Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
File:                     ThuED1xmAWztfmLuxhuDIqMhtrY.mft (raw, json)
Hash identifier:          yKWhjyfmt9+ljcTIm+J0NAma9grvLn66VTpzfZKPK4Y=
Subject key identifier:   FA:3A:10:10:1F:50:A2:C6:B4:E5:65:B0:90:3B:12:84:E4:0F:E6:A3
Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6
Certificate issuer:       /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
Certificate serial:       0570
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
Manifest number:          055A
Signing time:             Sun 10 Aug 2025 23:34:02 +0000
Manifest this update:     Sun 10 Aug 2025 23:34:01 +0000
Manifest next update:     Sun 17 Aug 2025 23:34:01 +0000
Files and hashes:         1: ThuED1xmAWztfmLuxhuDIqMhtrY.crl (hash: UQAIQzKGU/QRCOswJocpFbhZkb4lk7/1vBjkcupW7ME=)
                          2: 533200D026D411EEA82C8A38C4F9AE02.roa (hash: ysl1ZBjVp+SRF53raaGNsY7NWXYxc5RoL/xzGfRsS0E=)
                          3: 125E6676E15B11ECA05C9236C4F9AE02.roa (hash: dSI8zY9bytp5eBJksSVe4bOFa/6h1+FUTuMvCdJDftM=)
                          4: 13702C3EE15B11ECA05C9236C4F9AE02.roa (hash: /t1afH0km8QSurkM4QTi1HV8BFIKxmQMxZ1B3BKeJz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl
                          rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6
        Validity
            Not Before: Aug 10 23:34:01 2025 GMT
            Not After : Aug 17 23:34:01 2025 GMT
        Subject: CN=68992c69-d8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:fc:17:59:1a:4c:74:14:f6:d4:fb:a4:58:
                    bf:2f:69:56:d2:d9:63:07:49:4a:a1:30:33:e2:79:
                    cf:20:28:9c:d8:ee:47:2c:bc:8b:26:2e:3d:61:f8:
                    33:a4:7b:d6:c3:b9:49:aa:7c:af:28:4e:c2:e2:f3:
                    3a:74:9c:6f:d4:13:dd:13:dd:9b:ab:52:bb:cf:88:
                    51:d3:0e:42:45:a9:4d:e8:7c:a9:b2:ed:24:42:15:
                    f1:28:96:0e:36:4c:7b:fb:90:4a:63:d8:fe:cc:3b:
                    e4:ba:08:7a:a5:0c:5c:f8:15:57:7b:b0:19:ef:fd:
                    cb:bf:76:a0:e2:9f:d1:cb:76:6c:3b:11:9f:95:0b:
                    45:2b:3d:cc:2e:37:a1:6f:29:76:b2:11:15:47:67:
                    79:23:27:33:f1:e6:8c:d5:68:37:a2:01:9a:70:6b:
                    79:5c:e7:4f:ff:ff:f8:2b:05:b8:f5:c5:3a:b9:f9:
                    c4:75:22:ef:6c:16:97:c7:18:f3:60:e5:93:3e:48:
                    b4:55:b3:86:b2:08:9b:22:aa:7e:69:ff:8a:e9:44:
                    5b:3d:3a:31:e2:ff:80:3e:8e:43:e0:1b:d7:90:80:
                    71:6f:fd:67:fd:be:21:1e:2b:64:23:7d:a1:ad:ac:
                    63:fe:c6:fc:a0:bf:50:a9:bd:5a:d9:4c:23:6e:97:
                    30:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3A:10:10:1F:50:A2:C6:B4:E5:65:B0:90:3B:12:84:E4:0F:E6:A3
            X509v3 Authority Key Identifier:
                keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b3:dd:dd:1e:28:0f:d3:f3:9b:08:75:58:bd:8d:86:70:2c:
         49:48:bc:fe:0f:d9:d9:8b:97:ce:a0:28:7c:25:48:f6:66:76:
         50:1b:b3:90:e3:a6:77:db:ed:56:51:23:b8:44:d9:18:36:be:
         75:7d:bb:c8:57:28:ba:39:b8:06:1c:99:93:c7:f0:8f:73:9b:
         4a:41:0f:99:42:2f:55:1d:b1:03:c0:48:76:ad:2f:21:0e:23:
         a3:ee:66:9e:4b:de:b1:e6:51:fd:19:8b:15:d4:48:a2:35:2e:
         17:d9:a5:c2:d9:f5:05:1c:d6:c2:9c:91:f6:89:e5:bd:13:4b:
         d1:60:b6:18:40:08:e9:31:bd:4e:8a:4e:2b:dc:50:7c:74:8e:
         41:07:81:16:6f:6a:db:01:15:b4:b3:68:fe:c1:ac:b2:78:b8:
         18:1b:90:cd:98:5c:ed:22:0b:a9:0a:fd:bd:84:b1:9b:be:36:
         a5:86:51:0f:6b:5e:1c:93:58:09:4c:c6:3e:87:d1:4a:a2:fa:
         2f:aa:1a:89:94:f5:86:df:fc:9d:22:53:e4:70:ea:b4:dc:12:
         1b:dd:02:0f:95:d5:67:9d:b9:47:1c:29:7c:2e:d1:3b:54:e6:
         56:c3:83:a8:b0:fd:fc:10:92:1c:93:de:65:ee:5a:84:0e:c9:
         19:79:db:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy
QTMyMUI2QjYwHhcNMjUwODEwMjMzNDAxWhcNMjUwODE3MjMzNDAxWjAYMRYwFAYD
VQQDEw02ODk5MmM2OS1kOGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo2z8F1kaTHQU9tT7pFi/L2lW0tljB0lKoTAz4nnPICic2O5HLLyLJi49Yfgz
pHvWw7lJqnyvKE7C4vM6dJxv1BPdE92bq1K7z4hR0w5CRalN6Hypsu0kQhXxKJYO
Nkx7+5BKY9j+zDvkugh6pQxc+BVXe7AZ7/3Lv3ag4p/Ry3ZsOxGflQtFKz3MLjeh
byl2shEVR2d5Iycz8eaM1Wg3ogGacGt5XOdP///4KwW49cU6ufnEdSLvbBaXxxjz
YOWTPki0VbOGsgibIqp+af+K6URbPTox4v+APo5D4BvXkIBxb/1n/b4hHitkI32h
raxj/sb8oL9Qqb1a2UwjbpcwlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPo6EBAf
UKLGtOVlsJA7EoTkD+ajMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw
MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0
clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTNEMy82NDgyREI3QzAwMEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFX
enRmbUx1eGh1RElxTWh0clkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCms93dHigP0/ObCHVYvY2GcCxJSLz+D9nZi5fOoCh8JUj2ZnZQG7OQ
46Z32+1WUSO4RNkYNr51fbvIVyi6ObgGHJmTx/CPc5tKQQ+ZQi9VHbEDwEh2rS8h
DiOj7maeS96x5lH9GYsV1EiiNS4X2aXC2fUFHNbCnJH2ieW9E0vRYLYYQAjpMb1O
ik4r3FB8dI5BB4EWb2rbARW0s2j+wayyeLgYG5DNmFztIgupCv29hLGbvjalhlEP
a14ck1gJTMY+h9FKovovqhqJlPWG3/ydIlPkcOq03BIb3QIPldVnnblHHCl8LtE7
VOZWw4OosP38EJIck95l7lqEDskZedt7
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:19:27 2025 by rpki-client