Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
File:                     KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft (raw, json)
Hash identifier:          jHiXDkdIuNfxQMy765XgoZ9y5qJyUr0lH21G/v82fno=
Subject key identifier:   4E:00:08:CD:01:7C:85:33:2A:BA:BE:A0:52:B8:5A:D0:84:89:E9:ED
Authority key identifier: 2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31
Certificate issuer:       /CN=A9190960/serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
Certificate serial:       06DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
Manifest number:          06D5
Signing time:             Mon 04 Aug 2025 22:24:57 +0000
Manifest this update:     Mon 04 Aug 2025 22:24:57 +0000
Manifest next update:     Mon 11 Aug 2025 22:24:57 +0000
Files and hashes:         1: KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl (hash: xO+IpHcI5zPttRkwJppc6SklFgbbxvXtEFsELknAL0s=)
                          2: ED534930C8B511ED9A1D817EC4F9AE02.roa (hash: cWc+J1TIBwheicFkr/uWy0LuYQxsGfxktq1Xam8BBXI=)
                          3: 9398F508619611EBA485B448C4F9AE02.roa (hash: Nd8Cn8Kc0/NAG96VlpahXIFBzBlttK0FrKVnW80S2cI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl
                          rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 11 Aug 2025 22:24:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1758 (0x6de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190960, serialNumber=2A900734C5E3B93ACA9470E3F5ADDADC2F215B31
        Validity
            Not Before: Aug  4 22:24:57 2025 GMT
            Not After : Aug 11 22:24:57 2025 GMT
        Subject: CN=68913339-625e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2e:2c:1b:86:ff:1d:91:01:ac:75:80:c9:d8:
                    c6:bb:77:2e:ab:b2:c4:b8:3b:c8:fe:73:4d:27:f7:
                    a1:30:88:9b:17:13:5f:65:81:2c:53:03:0f:0f:19:
                    c9:4b:65:14:d2:8b:0d:3e:c5:2d:86:7e:32:6f:19:
                    20:a7:13:f1:72:ff:9a:60:78:14:cd:ac:26:c0:68:
                    db:8d:cb:d1:1c:3f:fd:d6:36:b8:33:d8:78:54:cd:
                    c7:13:6c:9b:d3:47:1b:5f:5a:60:a1:fb:45:75:23:
                    16:90:f3:f9:96:f8:cc:ca:d8:a3:c7:e4:ad:c1:c0:
                    9a:dc:9d:17:81:35:a3:f1:33:48:60:50:6a:cc:80:
                    f9:ad:cb:10:74:f1:9c:87:6c:3d:f4:a3:47:71:e9:
                    a0:03:05:42:52:e4:a2:61:74:7b:90:9b:d6:bc:53:
                    ea:78:c0:1e:61:51:85:ab:9b:9a:f7:28:af:90:42:
                    cb:aa:a0:c9:6b:32:7e:2b:0d:b1:d8:6b:cb:d4:62:
                    1d:fa:ce:61:71:2f:a2:9a:23:7a:54:3b:50:15:c9:
                    cc:b0:19:9f:25:ab:e9:2f:03:f2:56:33:97:53:9a:
                    3b:60:cf:d3:f6:7b:e2:77:46:51:be:7a:ba:3e:f6:
                    0c:1d:a3:b5:e5:dc:18:b0:00:fc:d6:3d:ec:6b:0f:
                    50:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:00:08:CD:01:7C:85:33:2A:BA:BE:A0:52:B8:5A:D0:84:89:E9:ED
            X509v3 Authority Key Identifier:
                keyid:2A:90:07:34:C5:E3:B9:3A:CA:94:70:E3:F5:AD:DA:DC:2F:21:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KpAHNMXjuTrKlHDj9a3a3C8hWzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190960/9C6F7BEA619411EBBFD2AA2AC4F9AE02/KpAHNMXjuTrKlHDj9a3a3C8hWzE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:8f:3d:ae:ac:dd:95:3d:1f:56:d9:29:00:df:c9:17:69:b0:
         9b:d8:f5:26:a4:0d:be:c1:25:2a:53:9d:51:83:7b:62:39:13:
         7d:23:c4:f3:3c:1a:2b:c8:d5:18:fc:78:36:4b:e9:ab:66:c1:
         5c:a4:89:9a:5c:fb:d3:2a:35:1d:a3:4e:3b:1c:05:32:4f:a6:
         07:b9:35:b5:6a:3b:bb:b5:ac:95:b8:aa:3c:8e:3a:a1:cd:96:
         41:0f:49:81:1d:f3:77:21:93:58:20:08:94:37:91:88:ad:78:
         9a:a1:e5:70:5b:fc:9c:4d:bd:83:cb:25:0a:39:82:3e:c7:b1:
         ab:38:33:dd:da:eb:9d:5f:76:88:c6:f6:59:04:42:16:7a:c2:
         fe:5a:29:18:a7:b2:ce:fd:df:61:b8:51:a7:79:48:e8:4f:23:
         9d:3f:8f:a7:97:bd:f2:d7:f1:14:29:1d:c1:6b:68:a9:a6:83:
         72:87:b2:e8:9e:05:6d:3c:ff:4c:70:92:fe:04:95:2e:5d:d3:
         72:be:aa:4a:21:90:8f:b6:0e:3f:7a:ec:64:60:3b:e8:51:1a:
         47:46:14:21:1a:81:0f:40:af:54:2f:87:51:18:ac:fd:71:4c:
         bc:99:29:9c:1b:43:ab:af:85:5a:79:44:9e:ee:81:4b:db:9d:
         dc:49:8c:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA5NjAxMTAvBgNVBAUTKDJBOTAwNzM0QzVFM0I5M0FDQTk0NzBFM0Y1QUREQURD
MkYyMTVCMzEwHhcNMjUwODA0MjIyNDU3WhcNMjUwODExMjIyNDU3WjAYMRYwFAYD
VQQDEw02ODkxMzMzOS02MjVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwi4sG4b/HZEBrHWAydjGu3cuq7LEuDvI/nNNJ/ehMIibFxNfZYEsUwMPDxnJ
S2UU0osNPsUthn4ybxkgpxPxcv+aYHgUzawmwGjbjcvRHD/91ja4M9h4VM3HE2yb
00cbX1pgoftFdSMWkPP5lvjMytijx+StwcCa3J0XgTWj8TNIYFBqzID5rcsQdPGc
h2w99KNHcemgAwVCUuSiYXR7kJvWvFPqeMAeYVGFq5ua9yivkELLqqDJazJ+Kw2x
2GvL1GId+s5hcS+imiN6VDtQFcnMsBmfJavpLwPyVjOXU5o7YM/T9nvid0ZRvnq6
PvYMHaO15dwYsAD81j3saw9QtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4ACM0B
fIUzKrq+oFK4WtCEientMB8GA1UdIwQYMBaAFCqQBzTF47k6ypRw4/Wt2twvIVsx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDk2MC85QzZGN0JFQTYx
OTQxMUVCQkZEMkFBMkFDNEY5QUUwMi9LcEFITk1YanVUcktsSERqOWEzYTNDOGhX
ekUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0twQUhOTVhqdVRyS2xIRGo5YTNhM0M4aFd6RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDk2MC85QzZGN0JFQTYxOTQxMUVCQkZEMkFBMkFDNEY5QUUwMi9LcEFITk1YanVU
cktsSERqOWEzYTNDOGhXekUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOjz2urN2VPR9W2SkA38kXabCb2PUmpA2+wSUqU51Rg3tiORN9I8Tz
PBoryNUY/Hg2S+mrZsFcpImaXPvTKjUdo047HAUyT6YHuTW1aju7tayVuKo8jjqh
zZZBD0mBHfN3IZNYIAiUN5GIrXiaoeVwW/ycTb2DyyUKOYI+x7GrODPd2uudX3aI
xvZZBEIWesL+WikYp7LO/d9huFGneUjoTyOdP4+nl73y1/EUKR3Ba2ippoNyh7Lo
ngVtPP9McJL+BJUuXdNyvqpKIZCPtg4/euxkYDvoURpHRhQhGoEPQK9UL4dRGKz9
cUy8mSmcG0Orr4VaeUSe7oFL253cSYw1
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:17:04 2025 by rpki-client