Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
File:                     4659B01pZ-L0n_njuNebv6KAmpI.mft (raw, json)
Hash identifier:          2rfquXyK56cfVtzSeRSKcck51RoVgik3bzsRVngLp6o=
Subject key identifier:   AB:0B:8B:B2:A7:4E:26:82:66:C0:B7:04:1D:A7:8C:23:7C:07:2F:A1
Authority key identifier: E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92
Certificate issuer:       /CN=A918A695/serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92
Certificate serial:       B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
Manifest number:          B1
Signing time:             Sat 09 Aug 2025 06:30:13 +0000
Manifest this update:     Sat 09 Aug 2025 06:30:12 +0000
Manifest next update:     Sat 16 Aug 2025 06:30:12 +0000
Files and hashes:         1: 4659B01pZ-L0n_njuNebv6KAmpI.crl (hash: yCr7usxfRTRqnMgM/iW7N4O0QImLwQ/GyiJ8W7jGO7s=)
                          2: 0DE9C0F2691E11EF86B94667C4F9AE02.roa (hash: 13S0uPk78cTkONRaoiB2NygyvHW1IriAd1JcSvRHXys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl
                          rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A695, serialNumber=E3AE7D074D6967E2F49FF9E3B8D79BBFA2809A92
        Validity
            Not Before: Aug  9 06:30:12 2025 GMT
            Not After : Aug 16 06:30:12 2025 GMT
        Subject: CN=6896eaf5-7e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cf:1c:ad:f3:c1:9b:5d:1c:36:49:73:b3:aa:
                    40:1b:62:60:2e:95:77:a5:ba:5a:ed:9e:56:73:4d:
                    0b:19:4f:da:9a:c0:af:bc:f9:9e:5e:a0:52:6c:23:
                    aa:bb:b5:1e:6a:3c:6a:29:27:24:57:de:a0:a8:32:
                    0e:56:eb:fb:06:36:73:73:ad:0f:03:5a:61:5d:6d:
                    d3:ba:71:e7:06:44:5f:87:41:da:f1:73:55:a3:d6:
                    47:80:33:79:51:71:56:e7:da:b2:d9:c3:dc:c6:cc:
                    f3:7e:78:81:c0:75:34:11:43:cf:ee:12:28:0a:7d:
                    14:60:f0:ff:09:36:a7:76:83:8f:da:c8:49:b6:59:
                    87:8b:c7:3b:98:84:3b:15:59:21:7e:c6:61:3a:d7:
                    92:80:22:72:d3:27:d6:27:df:bf:76:29:d9:96:e8:
                    78:e1:bc:00:4e:97:30:71:4b:2a:33:18:0b:22:b1:
                    e2:c3:a1:e2:a4:1f:1c:1a:ae:38:28:be:f6:83:46:
                    0f:ba:c2:12:dd:98:35:64:18:95:6d:1d:a7:de:c9:
                    37:1b:72:43:d1:e6:7e:ea:1b:aa:ff:d7:18:b8:0c:
                    46:0e:8a:4b:de:59:1b:50:35:b0:62:d0:2e:4e:3b:
                    8f:af:23:f1:4a:fa:92:69:5e:c4:11:bb:71:16:40:
                    f5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0B:8B:B2:A7:4E:26:82:66:C0:B7:04:1D:A7:8C:23:7C:07:2F:A1
            X509v3 Authority Key Identifier:
                keyid:E3:AE:7D:07:4D:69:67:E2:F4:9F:F9:E3:B8:D7:9B:BF:A2:80:9A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4659B01pZ-L0n_njuNebv6KAmpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/8DEFE80E691D11EFB8FD1E64C4F9AE02/4659B01pZ-L0n_njuNebv6KAmpI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:02:30:06:48:2a:d5:e1:8c:86:7b:79:35:a9:e4:1f:71:d8:
         e0:93:39:bc:c5:19:b2:75:22:e8:68:1c:a0:be:3f:98:00:92:
         b2:ff:5e:09:25:d3:4b:27:97:67:6b:97:c0:3c:96:d4:f7:d6:
         4f:ae:41:40:0a:03:3e:60:84:55:37:22:01:39:3f:6a:56:2c:
         f2:ab:88:0b:bc:73:69:7f:bc:dc:7f:26:53:30:fc:c4:43:8f:
         60:cd:f3:a6:8d:3b:af:56:16:62:43:8a:4a:e7:20:49:0b:a2:
         71:fa:64:53:b9:06:ff:ce:87:cd:00:14:46:de:2d:5d:14:be:
         24:34:07:62:a1:4f:1a:fc:20:02:fb:c4:fa:74:b5:53:57:2a:
         03:03:0b:3f:3c:63:67:e7:39:5b:07:a9:b6:f4:d1:1e:09:26:
         71:ca:44:c6:67:0f:43:fe:64:39:75:03:13:ad:74:bd:e6:39:
         05:74:32:32:75:b2:7a:41:ea:3d:8a:84:68:cd:16:bc:48:cf:
         fe:a3:99:f1:3e:f5:a9:e9:e3:06:2d:f0:98:b1:bb:59:c9:6c:
         06:2f:67:51:80:95:7e:aa:f3:96:57:8a:f5:cd:11:e6:b4:d4:
         8a:f1:96:32:0f:04:5f:b0:72:4f:f5:b6:16:87:85:1d:db:68:
         c4:da:f7:5b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE2OTUxMTAvBgNVBAUTKEUzQUU3RDA3NEQ2OTY3RTJGNDlGRjlFM0I4RDc5QkJG
QTI4MDlBOTIwHhcNMjUwODA5MDYzMDEyWhcNMjUwODE2MDYzMDEyWjAYMRYwFAYD
VQQDEw02ODk2ZWFmNS03ZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAn88crfPBm10cNklzs6pAG2JgLpV3pbpa7Z5Wc00LGU/amsCvvPmeXqBSbCOq
u7UeajxqKSckV96gqDIOVuv7BjZzc60PA1phXW3TunHnBkRfh0Ha8XNVo9ZHgDN5
UXFW59qy2cPcxszzfniBwHU0EUPP7hIoCn0UYPD/CTandoOP2shJtlmHi8c7mIQ7
FVkhfsZhOteSgCJy0yfWJ9+/dinZluh44bwATpcwcUsqMxgLIrHiw6HipB8cGq44
KL72g0YPusIS3Zg1ZBiVbR2n3sk3G3JD0eZ+6huq/9cYuAxGDopL3lkbUDWwYtAu
TjuPryPxSvqSaV7EEbtxFkD1GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKsLi7Kn
TiaCZsC3BB2njCN8By+hMB8GA1UdIwQYMBaAFOOufQdNaWfi9J/547jXm7+igJqS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTY5NS84REVGRTgwRTY5
MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi80NjU5QjAxcFotTDBuX25qdU5lYnY2S0Ft
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzQ2NTlCMDFwWi1MMG5fbmp1TmVidjZLQW1wSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTY5NS84REVGRTgwRTY5MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi80NjU5QjAxcFot
TDBuX25qdU5lYnY2S0FtcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtAjAGSCrV4YyGe3k1qeQfcdjgkzm8xRmydSLoaBygvj+YAJKy/14J
JdNLJ5dna5fAPJbU99ZPrkFACgM+YIRVNyIBOT9qVizyq4gLvHNpf7zcfyZTMPzE
Q49gzfOmjTuvVhZiQ4pK5yBJC6Jx+mRTuQb/zofNABRG3i1dFL4kNAdioU8a/CAC
+8T6dLVTVyoDAws/PGNn5zlbB6m29NEeCSZxykTGZw9D/mQ5dQMTrXS95jkFdDIy
dbJ6Qeo9ioRozRa8SM/+o5nxPvWp6eMGLfCYsbtZyWwGL2dRgJV+qvOWV4r1zRHm
tNSK8ZYyDwRfsHJP9bYWh4Ud22jE2vdb
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:16:34 2025 by rpki-client