Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
File:                     2xinykRiG1ZTwgBDlHaz8qOAhT4.mft (raw, json)
Hash identifier:          6Pzw3/lUrAqx75N5SMXjV5cFJf/8rLzOSJXvNn6Jb4k=
Subject key identifier:   6E:04:B6:9D:8B:23:BC:33:40:D6:29:7B:77:B8:22:F8:69:40:F9:83
Authority key identifier: DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E
Certificate issuer:       /CN=A918C774/serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
Certificate serial:       34B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
Manifest number:          34B0
Signing time:             Tue 12 Aug 2025 14:55:55 +0000
Manifest this update:     Tue 12 Aug 2025 14:55:55 +0000
Manifest next update:     Tue 19 Aug 2025 14:55:55 +0000
Files and hashes:         1: 2xinykRiG1ZTwgBDlHaz8qOAhT4.crl (hash: PVzhQk7+N/8Y9dN/RnKUiqWSKBvU/72ZRwyQrSftOsM=)
                          2: 0458A9A409FB11EA8742F60AC4F9AE02.roa (hash: 3MU65ygEf1r2eIYg+fVLMHTs4lWxF35EpdxMw38lBRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl
                          rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 14:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13494 (0x34b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C774, serialNumber=DB18A7CA44621B5653C200439476B3F2A380853E
        Validity
            Not Before: Aug 12 14:55:55 2025 GMT
            Not After : Aug 19 14:55:55 2025 GMT
        Subject: CN=689b55fb-48da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:4b:14:6f:29:cd:59:bd:73:e5:0c:55:db:
                    35:18:56:0d:ed:ac:c5:cc:eb:88:8f:79:20:5d:3a:
                    ed:ad:d9:40:96:84:00:86:6c:ea:ad:26:6b:94:8e:
                    78:d2:64:8a:df:61:3e:85:0b:73:81:82:64:ca:ad:
                    0d:5b:73:da:8f:cc:d6:00:41:e4:ac:f3:a8:1e:78:
                    5e:59:44:f6:db:24:fd:5d:61:bc:bc:ba:9e:1d:b2:
                    ac:24:13:63:36:9f:1a:2b:c0:6b:22:eb:b3:ae:c9:
                    bc:51:bb:8e:f5:c2:f4:2e:b2:fb:34:38:8f:57:21:
                    df:b1:da:b5:d3:0f:73:fd:8d:13:3d:e9:ee:a6:80:
                    36:43:0e:ab:2e:38:0c:0b:d5:dd:b3:62:7c:9d:0e:
                    02:7d:8b:57:95:9a:32:c9:95:00:6b:8b:3a:a7:85:
                    6d:f8:02:11:e5:3f:c7:3c:ba:a3:95:2d:e6:9b:3d:
                    42:40:59:ec:c2:71:4b:75:20:af:1c:8a:cd:75:c2:
                    54:8d:59:3f:96:91:b8:7c:3e:05:ff:c7:fb:9b:4e:
                    b2:37:d1:52:a6:b0:d3:d6:24:03:17:49:f7:ab:ce:
                    ac:2c:27:7c:a2:e2:34:21:49:7f:91:bc:dc:e3:bb:
                    c4:50:4d:9e:98:d3:36:8d:46:bb:c1:b1:18:ae:2e:
                    c0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:04:B6:9D:8B:23:BC:33:40:D6:29:7B:77:B8:22:F8:69:40:F9:83
            X509v3 Authority Key Identifier:
                keyid:DB:18:A7:CA:44:62:1B:56:53:C2:00:43:94:76:B3:F2:A3:80:85:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xinykRiG1ZTwgBDlHaz8qOAhT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C774/579887B61D9911E29E2F098408B02CD2/2xinykRiG1ZTwgBDlHaz8qOAhT4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8d:c9:63:c0:c0:7a:f5:eb:01:57:dc:24:1d:08:76:26:d5:
         86:b7:21:06:5c:26:05:fa:fd:98:2e:00:ca:e0:27:bd:3b:6c:
         dd:f4:93:e7:21:96:69:f8:16:57:03:da:2c:b6:fb:1f:7f:e0:
         73:81:ff:b9:8e:3a:5c:3f:fc:06:db:b8:77:79:c5:df:5c:74:
         f9:87:28:3c:e7:c2:81:73:f0:ea:e6:42:f7:8f:4e:d4:34:37:
         bb:b0:de:0d:31:98:ca:1a:2c:54:3a:78:ec:db:3c:0a:89:8c:
         54:73:d7:4c:d8:71:e7:ce:31:72:8d:fb:ae:9d:4c:0e:13:1d:
         87:0c:89:a6:60:f5:c0:3c:d7:27:f6:7f:68:6e:7b:34:cd:13:
         3d:a0:dd:d8:63:57:a8:f6:62:b3:2b:36:1d:f9:7c:04:91:dd:
         44:79:8a:eb:dc:5d:ee:ec:79:66:fc:f6:a6:c7:b6:91:fa:6b:
         c3:9a:9a:23:8c:9a:01:35:fb:6a:4a:a9:9a:de:c2:76:03:10:
         23:ec:e3:66:68:9d:67:0e:7f:50:6d:6f:a1:db:9c:55:75:9a:
         48:25:bc:ec:ba:b9:19:90:53:ed:05:8a:74:41:85:63:1f:f9:
         cc:b5:6a:8b:81:12:64:48:a9:42:d6:7c:8a:e0:b9:c4:1f:60:
         e5:35:f4:cd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNLYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEM3NzQxMTAvBgNVBAUTKERCMThBN0NBNDQ2MjFCNTY1M0MyMDA0Mzk0NzZCM0Yy
QTM4MDg1M0UwHhcNMjUwODEyMTQ1NTU1WhcNMjUwODE5MTQ1NTU1WjAYMRYwFAYD
VQQDEw02ODliNTVmYi00OGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs+lLFG8pzVm9c+UMVds1GFYN7azFzOuIj3kgXTrtrdlAloQAhmzqrSZrlI54
0mSK32E+hQtzgYJkyq0NW3Paj8zWAEHkrPOoHnheWUT22yT9XWG8vLqeHbKsJBNj
Np8aK8BrIuuzrsm8UbuO9cL0LrL7NDiPVyHfsdq10w9z/Y0TPenupoA2Qw6rLjgM
C9Xds2J8nQ4CfYtXlZoyyZUAa4s6p4Vt+AIR5T/HPLqjlS3mmz1CQFnswnFLdSCv
HIrNdcJUjVk/lpG4fD4F/8f7m06yN9FSprDT1iQDF0n3q86sLCd8ouI0IUl/kbzc
47vEUE2emNM2jUa7wbEYri7AWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4Etp2L
I7wzQNYpe3e4IvhpQPmDMB8GA1UdIwQYMBaAFNsYp8pEYhtWU8IAQ5R2s/KjgIU+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Qzc3NC81Nzk4ODdCNjFE
OTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcxWlR3Z0JEbEhhejhxT0Fo
VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ4aW55a1JpRzFaVHdnQkRsSGF6OHFPQWhUNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Qzc3NC81Nzk4ODdCNjFEOTkxMUUyOUUyRjA5ODQwOEIwMkNEMi8yeGlueWtSaUcx
WlR3Z0JEbEhhejhxT0FoVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAijcljwMB69esBV9wkHQh2JtWGtyEGXCYF+v2YLgDK4Ce9O2zd9JPn
IZZp+BZXA9ostvsff+Bzgf+5jjpcP/wG27h3ecXfXHT5hyg858KBc/Dq5kL3j07U
NDe7sN4NMZjKGixUOnjs2zwKiYxUc9dM2HHnzjFyjfuunUwOEx2HDImmYPXAPNcn
9n9obns0zRM9oN3YY1eo9mKzKzYd+XwEkd1EeYrr3F3u7Hlm/Pamx7aR+mvDmpoj
jJoBNftqSqma3sJ2AxAj7ONmaJ1nDn9QbW+h25xVdZpIJbzsurkZkFPtBYp0QYVj
H/nMtWqLgRJkSKlC1nyK4LnEH2DlNfTN
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:32:05 2025 by rpki-client