Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
File:                     jSAgfR7bX1wtZjsKahC81AutOt4.mft (raw, json)
Hash identifier:          vXduRG5yn7ABpNUmbNnyOng2cYjpW8aiLalf/T424nA=
Subject key identifier:   24:6D:A6:F8:C8:7B:D6:3F:F9:9F:33:C5:7C:2D:4E:C8:15:9A:D7:4A
Authority key identifier: 8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE
Certificate issuer:       /CN=A9185D6E/serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
Certificate serial:       03F5
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
Manifest number:          03E3
Signing time:             Wed 18 Jun 2025 23:08:39 +0000
Manifest this update:     Wed 18 Jun 2025 23:08:38 +0000
Manifest next update:     Wed 25 Jun 2025 23:08:38 +0000
Files and hashes:         1: jSAgfR7bX1wtZjsKahC81AutOt4.crl (hash: zdHM/wvTy2GpvLC4KzJVasAEMq4z4pbDavDu3q2TwOQ=)
                          2: AA14FB00C70811ECBAECCC78C4F9AE02.roa (hash: aj80KCIif9eZITuW9nRaN1zZrhEdRJFymu5+h23dMBM=)
                          3: A97B2098C70811ECBAECCC78C4F9AE02.roa (hash: rFV4dBSx4huWrYaHq03A3z+Pf588WQXVbdQYJWcq8sE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl
                          rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 23:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1013 (0x3f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D6E, serialNumber=8D20207D1EDB5F5C2D663B0A6A10BCD40BAD3ADE
        Validity
            Not Before: Jun 18 23:08:38 2025 GMT
            Not After : Jun 25 23:08:38 2025 GMT
        Subject: CN=685346f6-6d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:fb:c7:e0:7d:38:bb:30:8a:68:f2:7a:86:
                    41:ca:a2:c6:fe:3a:9b:b3:02:b1:31:f1:84:71:e7:
                    4a:6c:54:de:0f:56:8a:cc:31:83:cc:14:23:fb:11:
                    1b:84:6f:db:67:dd:c0:95:f8:c0:ee:ee:d3:a1:e8:
                    f2:85:a4:8d:bc:06:6b:79:b4:cf:20:ac:75:52:84:
                    23:c0:1d:de:b9:27:51:c3:85:25:4f:8f:53:c0:ea:
                    2a:e0:e4:1c:14:5e:27:99:b4:ba:9f:f1:e8:b3:92:
                    6c:14:0b:2d:e6:e7:71:ff:4d:1d:27:2f:4b:b8:5e:
                    e3:6f:0f:76:0a:cb:68:94:41:95:33:1e:6a:bc:35:
                    70:cd:83:17:0c:37:41:00:4d:ae:34:e6:5e:d0:2e:
                    9d:32:d9:e2:57:e3:57:5f:1c:6f:95:a5:7d:87:0c:
                    1c:c5:aa:20:c9:03:6e:fd:64:07:43:3a:9b:6d:11:
                    cd:02:61:ed:89:19:1f:6f:4d:ad:42:4d:87:74:84:
                    0d:40:f0:ab:7b:15:8d:5a:2f:ce:7a:3b:62:64:bf:
                    ab:2d:d5:af:69:b6:7c:55:48:03:15:fd:3b:fc:e4:
                    84:f4:a8:fa:dc:9c:42:06:aa:fe:74:6d:f7:e8:79:
                    59:e5:09:14:b3:cf:ba:49:c3:17:35:27:6d:8b:58:
                    21:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6D:A6:F8:C8:7B:D6:3F:F9:9F:33:C5:7C:2D:4E:C8:15:9A:D7:4A
            X509v3 Authority Key Identifier:
                keyid:8D:20:20:7D:1E:DB:5F:5C:2D:66:3B:0A:6A:10:BC:D4:0B:AD:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jSAgfR7bX1wtZjsKahC81AutOt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D6E/A46BE588888811EC91233A70C4F9AE02/jSAgfR7bX1wtZjsKahC81AutOt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c3:8c:23:86:0f:ad:29:c4:a7:89:ce:06:e0:53:d6:e6:e6:
         3e:5f:11:f9:af:cd:32:f5:e6:57:03:3c:27:cb:17:b7:3a:db:
         73:f2:2f:e0:e9:95:9f:68:8f:76:7c:12:7e:b3:c7:8f:42:dc:
         a3:9c:f3:75:7b:da:cb:1a:9d:85:17:bd:75:36:fc:f9:85:80:
         96:81:fe:0c:e6:85:d8:ed:89:6f:00:d1:cf:33:3b:63:ce:87:
         3f:9f:84:4c:01:66:86:14:4f:1b:59:bc:06:ba:cd:7a:e4:a9:
         d7:93:c3:c6:a3:e1:34:82:ef:b5:97:d0:9d:04:01:fd:dc:a5:
         49:a8:44:2c:14:b8:3d:bc:a3:bf:8f:4a:e8:8f:b8:56:a2:cb:
         04:e2:15:65:ec:1e:16:70:22:e9:65:00:8d:9e:4c:3b:bd:25:
         78:40:a8:67:66:78:53:e0:f5:fd:65:9e:d2:6a:de:06:db:4c:
         85:c6:15:18:61:bd:9d:cf:91:f3:aa:0e:1f:da:8d:6b:a4:d7:
         f5:60:e0:9f:76:02:24:1a:15:ef:50:bc:1d:7b:dd:5f:c5:6e:
         b9:32:5e:19:f5:34:37:d3:88:0b:35:bb:a3:9f:b6:2a:79:40:
         55:e7:a1:88:3f:50:58:d6:81:ba:9d:50:c3:a7:4f:50:ef:09:
         cf:60:51:d8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA/UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODVENkUxMTAvBgNVBAUTKDhEMjAyMDdEMUVEQjVGNUMyRDY2M0IwQTZBMTBCQ0Q0
MEJBRDNBREUwHhcNMjUwNjE4MjMwODM4WhcNMjUwNjI1MjMwODM4WjAYMRYwFAYD
VQQDEw02ODUzNDZmNi02ZDRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArdv7x+B9OLswimjyeoZByqLG/jqbswKxMfGEcedKbFTeD1aKzDGDzBQj+xEb
hG/bZ93AlfjA7u7ToejyhaSNvAZrebTPIKx1UoQjwB3euSdRw4UlT49TwOoq4OQc
FF4nmbS6n/Hos5JsFAst5udx/00dJy9LuF7jbw92CstolEGVMx5qvDVwzYMXDDdB
AE2uNOZe0C6dMtniV+NXXxxvlaV9hwwcxaogyQNu/WQHQzqbbRHNAmHtiRkfb02t
Qk2HdIQNQPCrexWNWi/OejtiZL+rLdWvabZ8VUgDFf07/OSE9Kj63JxCBqr+dG33
6HlZ5QkUs8+6ScMXNSdti1ghfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCRtpvjI
e9Y/+Z8zxXwtTsgVmtdKMB8GA1UdIwQYMBaAFI0gIH0e219cLWY7CmoQvNQLrTre
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUQ2RS9BNDZCRTU4ODg4
ODgxMUVDOTEyMzNBNzBDNEY5QUUwMi9qU0FnZlI3Ylgxd3RaanNLYWhDODFBdXRP
dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2pTQWdmUjdiWDF3dFpqc0thaEM4MUF1dE90NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NUQ2RS9BNDZCRTU4ODg4ODgxMUVDOTEyMzNBNzBDNEY5QUUwMi9qU0FnZlI3Ylgx
d3RaanNLYWhDODFBdXRPdDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkw4wjhg+tKcSnic4G4FPW5uY+XxH5r80y9eZXAzwnyxe3Ottz8i/g
6ZWfaI92fBJ+s8ePQtyjnPN1e9rLGp2FF711Nvz5hYCWgf4M5oXY7YlvANHPMztj
zoc/n4RMAWaGFE8bWbwGus165KnXk8PGo+E0gu+1l9CdBAH93KVJqEQsFLg9vKO/
j0roj7hWossE4hVl7B4WcCLpZQCNnkw7vSV4QKhnZnhT4PX9ZZ7Sat4G20yFxhUY
Yb2dz5Hzqg4f2o1rpNf1YOCfdgIkGhXvULwde91fxW65Ml4Z9TQ304gLNbujn7Yq
eUBV56GIP1BY1oG6nVDDp09Q7wnPYFHY
-----END CERTIFICATE-----
Generated at Thu Jun 19 21:32:20 2025 by rpki-client