Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
File:                     tSxU1GporezDfV9vJyKMbepz6Fw.mft (raw, json)
Hash identifier:          dJ7Qbxy0Ko/LnjTPAl0vIRGJ1N/BNv6dyOteXNahyHg=
Subject key identifier:   0E:AB:47:26:71:BB:05:7E:41:38:9C:8B:2C:A6:24:25:90:C1:C1:F5
Authority key identifier: B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C
Certificate issuer:       /CN=A918E79C/serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
Manifest number:          011D
Signing time:             Mon 11 Aug 2025 04:56:19 +0000
Manifest this update:     Mon 11 Aug 2025 04:56:18 +0000
Manifest next update:     Mon 18 Aug 2025 04:56:18 +0000
Files and hashes:         1: tSxU1GporezDfV9vJyKMbepz6Fw.crl (hash: 5tTmzurBV8edqhdm8qgbsWoPQVeNfjH9Grbch+ZVEIk=)
                          2: 28C6AB84C0E411EEAFFB100BC4F9AE02.roa (hash: V4rJ9+KQ3AK8oq6Dx/jnK6Kq8OonvPFz54Mtrt4dysM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl
                          rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E79C, serialNumber=B52C54D46A68ADECC37D5F6F27228C6DEA73E85C
        Validity
            Not Before: Aug 11 04:56:18 2025 GMT
            Not After : Aug 18 04:56:18 2025 GMT
        Subject: CN=689977f3-ca65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c6:87:50:69:df:35:c2:15:e8:3c:11:c5:9d:
                    02:fc:97:6b:98:00:61:43:48:50:03:36:69:26:3d:
                    4a:06:1d:b6:19:91:86:63:c7:ed:0a:08:52:ca:77:
                    21:a4:23:91:77:41:c9:c6:86:aa:4a:fd:0b:19:42:
                    80:7d:70:ae:36:85:57:71:ad:c1:f1:e9:d9:bb:04:
                    b1:45:cd:d4:be:0c:42:4d:e6:cc:7c:a3:18:db:e7:
                    cf:b5:da:a9:aa:51:b9:59:81:f0:46:7e:9e:74:3b:
                    7a:88:a0:75:ed:99:d8:a6:56:41:b9:85:c3:7f:3a:
                    35:51:7b:48:42:53:c2:d9:8c:5a:91:87:57:4b:ea:
                    cb:c9:39:f8:c0:d0:37:04:e2:61:92:2b:b3:38:1f:
                    d8:a7:a6:fa:ad:e1:77:92:15:40:2c:0d:e3:92:15:
                    cd:2f:02:56:e5:a4:31:4b:a3:e8:0d:25:0e:40:1a:
                    d7:be:fd:bb:09:b1:73:33:10:2d:1c:36:2b:a8:2d:
                    b9:45:73:f9:8d:c0:2a:7e:6e:46:2d:82:11:8c:ab:
                    c0:68:ff:eb:ed:c9:c9:79:c7:01:bb:b3:da:ba:93:
                    d8:86:ea:fc:7e:55:fa:e7:fc:42:d7:1e:31:1d:c9:
                    c2:3f:86:20:ad:e6:b8:0b:d6:3b:99:fc:89:3f:c1:
                    35:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AB:47:26:71:BB:05:7E:41:38:9C:8B:2C:A6:24:25:90:C1:C1:F5
            X509v3 Authority Key Identifier:
                keyid:B5:2C:54:D4:6A:68:AD:EC:C3:7D:5F:6F:27:22:8C:6D:EA:73:E8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tSxU1GporezDfV9vJyKMbepz6Fw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E79C/58A8118EC0E011EE90009209C4F9AE02/tSxU1GporezDfV9vJyKMbepz6Fw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c8:10:f3:75:5e:0c:94:1f:7d:a1:b7:b9:ed:75:f3:01:ab:
         83:b6:8e:db:74:ec:fb:03:fb:f8:9a:87:79:10:19:b4:c4:71:
         36:52:a4:45:52:8b:45:2a:b0:38:76:93:6d:35:6f:ea:6c:a7:
         34:a7:1b:35:a1:f7:25:c0:c8:33:ea:21:34:ae:32:d2:bf:2d:
         f9:7f:ba:f1:3a:a5:2a:26:f6:9a:4a:38:c9:1e:b7:b5:08:b8:
         63:0c:5c:8a:ac:3a:bc:05:4a:6d:06:8b:56:e6:7a:b7:a7:09:
         d1:ca:f2:b5:6e:98:ca:56:14:9a:88:35:c2:b4:7c:a7:1e:69:
         a9:ef:34:5d:0f:2d:aa:91:00:29:ab:f8:e5:26:b6:74:bc:10:
         c9:e9:51:17:6c:b0:86:54:30:5e:dc:f5:a8:3a:f7:a8:e5:05:
         b7:04:e3:37:94:de:a4:3e:2c:f9:15:19:ee:80:75:eb:22:d0:
         29:1f:cf:6c:31:ed:4e:be:c6:aa:3c:60:36:ae:f5:76:a4:46:
         a1:2e:e9:b7:0a:21:1d:a9:cc:0f:11:f6:8e:e5:e3:00:1b:31:
         32:3f:42:6f:62:02:c4:1f:28:f2:ca:ad:77:dc:92:f1:71:c7:
         ba:ab:80:28:77:c7:7c:63:f1:d4:29:3d:de:93:bf:2c:c9:fe:
         a5:84:12:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU3OUMxMTAvBgNVBAUTKEI1MkM1NEQ0NkE2OEFERUNDMzdENUY2RjI3MjI4QzZE
RUE3M0U4NUMwHhcNMjUwODExMDQ1NjE4WhcNMjUwODE4MDQ1NjE4WjAYMRYwFAYD
VQQDEw02ODk5NzdmMy1jYTY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1caHUGnfNcIV6DwRxZ0C/JdrmABhQ0hQAzZpJj1KBh22GZGGY8ftCghSynch
pCORd0HJxoaqSv0LGUKAfXCuNoVXca3B8enZuwSxRc3UvgxCTebMfKMY2+fPtdqp
qlG5WYHwRn6edDt6iKB17ZnYplZBuYXDfzo1UXtIQlPC2YxakYdXS+rLyTn4wNA3
BOJhkiuzOB/Yp6b6reF3khVALA3jkhXNLwJW5aQxS6PoDSUOQBrXvv27CbFzMxAt
HDYrqC25RXP5jcAqfm5GLYIRjKvAaP/r7cnJeccBu7PaupPYhur8flX65/xC1x4x
HcnCP4Ygrea4C9Y7mfyJP8E13QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6rRyZx
uwV+QTiciyymJCWQwcH1MB8GA1UdIwQYMBaAFLUsVNRqaK3sw31fbycijG3qc+hc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTc5Qy81OEE4MTE4RUMw
RTAxMUVFOTAwMDkyMDlDNEY5QUUwMi90U3hVMUdwb3JlekRmVjl2SnlLTWJlcHo2
RncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3RTeFUxR3BvcmV6RGZWOXZKeUtNYmVwejZGdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTc5Qy81OEE4MTE4RUMwRTAxMUVFOTAwMDkyMDlDNEY5QUUwMi90U3hVMUdwb3Jl
ekRmVjl2SnlLTWJlcHo2RncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAlyBDzdV4MlB99obe57XXzAauDto7bdOz7A/v4mod5EBm0xHE2UqRF
UotFKrA4dpNtNW/qbKc0pxs1ofclwMgz6iE0rjLSvy35f7rxOqUqJvaaSjjJHre1
CLhjDFyKrDq8BUptBotW5nq3pwnRyvK1bpjKVhSaiDXCtHynHmmp7zRdDy2qkQAp
q/jlJrZ0vBDJ6VEXbLCGVDBe3PWoOveo5QW3BOM3lN6kPiz5FRnugHXrItApH89s
Me1OvsaqPGA2rvV2pEahLum3CiEdqcwPEfaO5eMAGzEyP0JvYgLEHyjyyq133JLx
cce6q4Aod8d8Y/HUKT3ek78syf6lhBKn
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:34:19 2025 by rpki-client