Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
File:                     28ptKqUoxLJFVtsH_LVpw2rC_rE.mft (raw, json)
Hash identifier:          dDAwYHtBLfIl9t4EYnD82r3tnvrCaBBz67puhXYh0QI=
Subject key identifier:   64:7C:CC:73:AE:AC:7D:7F:CF:58:05:FD:98:84:4D:E6:F2:92:D4:B4
Authority key identifier: DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1
Certificate issuer:       /CN=A918C477/serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
Certificate serial:       02A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
Manifest number:          029F
Signing time:             Sat 09 Aug 2025 02:05:57 +0000
Manifest this update:     Sat 09 Aug 2025 02:05:57 +0000
Manifest next update:     Sat 16 Aug 2025 02:05:57 +0000
Files and hashes:         1: 28ptKqUoxLJFVtsH_LVpw2rC_rE.crl (hash: iJZK8lJx95R1hEPysuvLcnshNIvSq1HU7sYYBmqb/PI=)
                          2: FB2262620C3111EDBD0F7137C4F9AE02.roa (hash: gKrsb4dZgy0MTcPqjVyZ2IoWxdZknG0vr+R6U+hRwFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl
                          rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C477, serialNumber=DBCA6D2AA528C4B24556DB07FCB569C36AC2FEB1
        Validity
            Not Before: Aug  9 02:05:57 2025 GMT
            Not After : Aug 16 02:05:57 2025 GMT
        Subject: CN=6896ad05-6781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:b2:55:47:9c:c0:60:91:7c:e1:dd:d2:10:
                    b7:a1:52:35:e3:35:66:a0:07:aa:c9:18:63:14:c8:
                    5e:f7:ea:d4:2f:cf:8e:75:bf:28:97:a6:2d:7f:75:
                    d8:7e:f2:e9:3a:ff:ab:a9:8d:e6:b4:41:f3:32:bd:
                    36:86:76:fd:ef:9e:12:9d:6f:d6:fd:53:e2:aa:5b:
                    c6:fa:cf:23:e7:cf:8b:0b:e7:9f:c5:4f:ec:16:92:
                    07:25:a5:24:60:d9:cc:ec:52:3f:f5:79:29:1e:24:
                    53:03:33:bf:99:38:f5:7e:1d:f3:89:fa:48:e3:38:
                    e0:7c:df:cd:a6:29:70:05:30:88:e8:d0:ff:5b:4d:
                    9c:47:0e:b5:fc:01:a2:9f:d3:b4:41:2a:05:c1:79:
                    83:f6:ed:19:80:df:46:ae:c5:e5:8e:1e:fe:fc:ae:
                    79:16:30:32:98:85:15:2f:81:10:13:92:c3:70:a0:
                    04:7a:ec:4b:03:c8:b3:0c:81:46:6d:92:5d:65:90:
                    8d:e1:51:f6:66:b0:60:ac:ce:b0:1f:7f:cd:1f:6d:
                    e8:2b:0d:35:d7:0d:4e:df:21:3c:a8:fc:49:db:27:
                    33:f7:d5:e9:2b:d2:85:01:dd:5e:88:14:79:db:6d:
                    ad:0a:bf:4e:ce:fa:27:d2:75:8f:30:77:0c:43:66:
                    b0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7C:CC:73:AE:AC:7D:7F:CF:58:05:FD:98:84:4D:E6:F2:92:D4:B4
            X509v3 Authority Key Identifier:
                keyid:DB:CA:6D:2A:A5:28:C4:B2:45:56:DB:07:FC:B5:69:C3:6A:C2:FE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/28ptKqUoxLJFVtsH_LVpw2rC_rE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C477/D55F29F40C2F11EDBC23BB36C4F9AE02/28ptKqUoxLJFVtsH_LVpw2rC_rE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:80:a6:60:65:dc:64:15:7e:e7:8c:e2:58:0c:d1:e9:fd:d0:
         00:0d:35:68:79:53:a5:32:e9:d4:60:d9:f8:ab:8a:44:e6:a5:
         ca:ec:a1:11:a8:ec:8b:9a:e2:8c:5d:75:ca:63:98:40:b7:3f:
         f3:12:4d:c8:74:76:34:f8:50:90:81:42:03:cf:11:c5:f7:9d:
         98:c9:c8:03:b0:8d:b9:3f:7c:4e:40:52:18:43:16:08:1c:4d:
         73:bf:a7:6c:44:2b:e7:f5:4d:a7:89:d6:51:76:5e:7d:32:7e:
         f3:c1:ed:a6:ef:cb:8f:16:28:9c:28:f2:bf:7e:1a:66:bf:88:
         63:30:3c:c0:ed:77:0e:19:d2:4b:db:65:2a:11:cd:7c:3e:96:
         5a:78:44:bd:72:24:9e:a6:f1:eb:f3:ba:01:6b:92:da:ec:7f:
         b0:e2:84:66:d0:40:d6:b7:2b:82:62:84:8c:2b:6c:bf:fd:e9:
         2c:19:0f:1a:93:b9:a3:dd:85:3d:ec:54:d5:b4:2b:2e:ac:82:
         ed:3e:fe:4d:e7:bd:3b:0f:1d:94:bd:74:22:18:67:18:1e:a2:
         ea:74:2f:8e:ac:be:96:c8:7e:d8:a6:e4:14:4f:71:11:dd:44:
         85:24:0e:43:33:66:06:b8:d9:da:1e:94:32:2e:b1:eb:08:31:
         5b:d3:20:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM0NzcxMTAvBgNVBAUTKERCQ0E2RDJBQTUyOEM0QjI0NTU2REIwN0ZDQjU2OUMz
NkFDMkZFQjEwHhcNMjUwODA5MDIwNTU3WhcNMjUwODE2MDIwNTU3WjAYMRYwFAYD
VQQDEw02ODk2YWQwNS02NzgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv8iyVUecwGCRfOHd0hC3oVI14zVmoAeqyRhjFMhe9+rUL8+Odb8ol6Ytf3XY
fvLpOv+rqY3mtEHzMr02hnb9754SnW/W/VPiqlvG+s8j58+LC+efxU/sFpIHJaUk
YNnM7FI/9XkpHiRTAzO/mTj1fh3zifpI4zjgfN/NpilwBTCI6ND/W02cRw61/AGi
n9O0QSoFwXmD9u0ZgN9GrsXljh7+/K55FjAymIUVL4EQE5LDcKAEeuxLA8izDIFG
bZJdZZCN4VH2ZrBgrM6wH3/NH23oKw011w1O3yE8qPxJ2ycz99XpK9KFAd1eiBR5
222tCr9Ozvon0nWPMHcMQ2awnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGR8zHOu
rH1/z1gF/ZiETebyktS0MB8GA1UdIwQYMBaAFNvKbSqlKMSyRVbbB/y1acNqwv6x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QzQ3Ny9ENTVGMjlGNDBD
MkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hMSkZWdHNIX0xWcHcyckNf
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI4cHRLcVVveExKRlZ0c0hfTFZwdzJyQ19yRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QzQ3Ny9ENTVGMjlGNDBDMkYxMUVEQkMyM0JCMzZDNEY5QUUwMi8yOHB0S3FVb3hM
SkZWdHNIX0xWcHcyckNfckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJgKZgZdxkFX7njOJYDNHp/dAADTVoeVOlMunUYNn4q4pE5qXK7KER
qOyLmuKMXXXKY5hAtz/zEk3IdHY0+FCQgUIDzxHF952YycgDsI25P3xOQFIYQxYI
HE1zv6dsRCvn9U2nidZRdl59Mn7zwe2m78uPFiicKPK/fhpmv4hjMDzA7XcOGdJL
22UqEc18PpZaeES9ciSepvHr87oBa5La7H+w4oRm0EDWtyuCYoSMK2y//eksGQ8a
k7mj3YU97FTVtCsurILtPv5N5707Dx2UvXQiGGcYHqLqdC+OrL6WyH7YpuQUT3ER
3USFJA5DM2YGuNnaHpQyLrHrCDFb0yBS
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:50:07 2025 by rpki-client