Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
File:                     DmxKtne94a1EYD_XN9olwGAcRZw.mft (raw, json)
Hash identifier:          mkDuYHFKXnJ0tF/LYfXx5SnQ+kgmh7+gbUBiAcLdW3g=
Subject key identifier:   BC:08:4D:5E:86:F2:1C:D6:28:67:E4:E7:48:B7:DF:56:CA:A0:5E:39
Authority key identifier: 0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C
Certificate issuer:       /CN=A91939CF/serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
Manifest number:          51
Signing time:             Mon 11 Aug 2025 07:32:00 +0000
Manifest this update:     Mon 11 Aug 2025 07:31:59 +0000
Manifest next update:     Mon 18 Aug 2025 07:31:59 +0000
Files and hashes:         1: DmxKtne94a1EYD_XN9olwGAcRZw.crl (hash: 8hlmL91E49x+vgLpLV8DygQ+O3dP1a8S+Bmx50NDKr4=)
                          2: C488A080FB5911EFA827FD17C4F9AE02.roa (hash: JCV9BgemXhUBaAgBPhl6UiNH0ukdvH/wrcQapOQQK+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl
                          rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 07:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91939CF, serialNumber=0E6C4AB677BDE1AD44603FD737DA25C0601C459C
        Validity
            Not Before: Aug 11 07:31:59 2025 GMT
            Not After : Aug 18 07:31:59 2025 GMT
        Subject: CN=68999c70-fb90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:7d:1c:a8:15:1e:04:00:06:7b:47:54:eb:
                    c8:63:21:02:66:f0:de:18:b4:a4:c6:fb:35:8d:34:
                    df:85:64:0c:a3:0a:32:da:43:71:13:80:84:bb:83:
                    7d:e5:0b:f9:dc:3f:dc:3e:86:a8:29:c8:26:bf:e6:
                    13:c3:b6:75:9c:42:1a:c3:4f:c6:4a:75:f3:b0:82:
                    c0:d0:09:c6:72:8e:2b:97:bd:82:d3:df:02:56:af:
                    62:c0:c1:64:50:67:09:34:88:30:de:c4:49:89:40:
                    da:72:f6:e5:ac:38:e8:05:c0:0e:47:c3:5c:1d:1c:
                    22:24:1f:ae:7f:b0:3b:c6:84:6f:2a:1a:20:54:82:
                    b4:5f:f9:bd:b6:4f:3c:dc:a9:04:28:4a:9d:cb:e0:
                    e0:16:98:fa:5c:30:af:c9:5d:d3:1c:22:7d:9e:9d:
                    15:4f:da:3e:1b:84:19:e0:73:df:2b:e5:04:bc:41:
                    f3:67:61:dd:33:88:1b:04:e4:14:bc:fe:07:c7:34:
                    06:7b:3a:4c:6c:1d:36:ba:5a:3a:18:08:39:75:59:
                    90:6f:db:bb:0d:92:c8:60:39:96:25:b3:af:b0:96:
                    46:c9:33:cb:28:99:c4:be:0d:ea:91:88:54:9b:18:
                    b7:82:22:56:79:1e:e5:8b:44:b5:21:44:d5:76:90:
                    cd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:08:4D:5E:86:F2:1C:D6:28:67:E4:E7:48:B7:DF:56:CA:A0:5E:39
            X509v3 Authority Key Identifier:
                keyid:0E:6C:4A:B6:77:BD:E1:AD:44:60:3F:D7:37:DA:25:C0:60:1C:45:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmxKtne94a1EYD_XN9olwGAcRZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91939CF/56F31FB4FB5911EF86502717C4F9AE02/DmxKtne94a1EYD_XN9olwGAcRZw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0a:37:f7:22:1e:a9:26:92:f9:c5:a9:97:b9:a6:c1:5c:05:
         b0:01:a8:87:e8:9c:16:df:11:87:39:05:17:d3:12:38:04:5e:
         bc:dc:a0:e8:24:34:d4:05:0f:cf:14:0d:bf:d8:a7:23:71:6d:
         6d:bd:79:fa:1b:15:73:2b:c3:c4:06:ff:b5:9d:91:ff:6d:55:
         d6:8a:81:0a:7b:bc:6f:1d:b0:bd:94:f4:1a:24:97:e8:0d:24:
         11:08:f9:4f:4c:2a:de:fe:93:64:7a:62:ff:fb:b8:a9:69:fc:
         1c:b7:27:5a:55:08:99:b5:55:c2:50:20:33:50:a3:75:a6:1b:
         f4:61:05:0c:9b:fc:67:21:2c:ea:d9:75:2c:7d:e4:24:5c:6b:
         22:1a:d7:95:a9:1d:6c:b3:ef:60:c5:f2:5d:2e:85:5b:f8:48:
         65:7a:bd:b9:14:b1:8f:7c:8e:3e:b5:fc:2d:cc:55:57:4b:2e:
         de:15:32:83:84:67:f1:12:6f:89:54:3a:49:38:a5:d0:14:f5:
         b1:d1:b2:02:b4:5f:41:99:d1:37:4d:6e:07:3a:ee:cf:58:ba:
         82:6c:c5:76:d2:c2:fd:f1:71:84:06:9c:f2:4f:e0:af:d7:b8:
         d2:ae:fe:74:3c:63:d5:a6:fc:bb:a8:20:6e:27:41:0d:23:b1:
         65:f8:b8:2d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MzlDRjExMC8GA1UEBRMoMEU2QzRBQjY3N0JERTFBRDQ0NjAzRkQ3MzdEQTI1QzA2
MDFDNDU5QzAeFw0yNTA4MTEwNzMxNTlaFw0yNTA4MTgwNzMxNTlaMBgxFjAUBgNV
BAMTDTY4OTk5YzcwLWZiOTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC1Zn0cqBUeBAAGe0dU68hjIQJm8N4YtKTG+zWNNN+FZAyjCjLaQ3ETgIS7g33l
C/ncP9w+hqgpyCa/5hPDtnWcQhrDT8ZKdfOwgsDQCcZyjiuXvYLT3wJWr2LAwWRQ
Zwk0iDDexEmJQNpy9uWsOOgFwA5Hw1wdHCIkH65/sDvGhG8qGiBUgrRf+b22Tzzc
qQQoSp3L4OAWmPpcMK/JXdMcIn2enRVP2j4bhBngc98r5QS8QfNnYd0ziBsE5BS8
/gfHNAZ7OkxsHTa6WjoYCDl1WZBv27sNkshgOZYls6+wlkbJM8somcS+DeqRiFSb
GLeCIlZ5HuWLRLUhRNV2kM2VAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvAhNXoby
HNYoZ+TnSLffVsqgXjkwHwYDVR0jBBgwFoAUDmxKtne94a1EYD/XN9olwGAcRZww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkzOUNGLzU2RjMxRkI0RkI1
OTExRUY4NjUwMjcxN0M0RjlBRTAyL0RteEt0bmU5NGExRVlEX1hOOW9sd0dBY1Ja
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvRG14S3RuZTk0YTFFWURfWE45b2x3R0FjUlp3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkz
OUNGLzU2RjMxRkI0RkI1OTExRUY4NjUwMjcxN0M0RjlBRTAyL0RteEt0bmU5NGEx
RVlEX1hOOW9sd0dBY1Jady5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFsKN/ciHqkmkvnFqZe5psFcBbABqIfonBbfEYc5BRfTEjgEXrzcoOgk
NNQFD88UDb/YpyNxbW29efobFXMrw8QG/7Wdkf9tVdaKgQp7vG8dsL2U9Bokl+gN
JBEI+U9MKt7+k2R6Yv/7uKlp/By3J1pVCJm1VcJQIDNQo3WmG/RhBQyb/GchLOrZ
dSx95CRcayIa15WpHWyz72DF8l0uhVv4SGV6vbkUsY98jj61/C3MVVdLLt4VMoOE
Z/ESb4lUOkk4pdAU9bHRsgK0X0GZ0TdNbgc67s9YuoJsxXbSwv3xcYQGnPJP4K/X
uNKu/nQ8Y9Wm/LuoIG4nQQ0jsWX4uC0=
-----END CERTIFICATE-----
Generated at Wed Aug 13 02:50:14 2025 by rpki-client