Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
File:                     RIptgpdqVdxXC6WAN3Csat272IY.mft (raw, json)
Hash identifier:          fM+Cu+IVMocpStmgfYwQbSj1KDG7JBKzZxt/sNqIOsI=
Subject key identifier:   97:8C:0F:BC:CD:D0:81:89:0D:16:19:74:2C:FB:DC:C6:6B:15:1D:74
Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
Certificate issuer:       /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Certificate serial:       01E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
Manifest number:          01E0
Signing time:             Sat 09 Aug 2025 03:02:21 +0000
Manifest this update:     Sat 09 Aug 2025 03:02:21 +0000
Manifest next update:     Sat 16 Aug 2025 03:02:21 +0000
Files and hashes:         1: RIptgpdqVdxXC6WAN3Csat272IY.crl (hash: 5rtFiaz2xVxRV8xHwW0BKeKUTNTGg02KNaFzwbn6fmg=)
                          2: B4914F2E91A211EDA6B67334C4F9AE02.roa (hash: Lgy8vm2n/ceKz+w+M1ZDWnunc26MQi1fRDcUPx4mLN8=)
                          3: B3F895D691A211EDA6B67334C4F9AE02.roa (hash: acIP9bNBSWQVEKBII6hnoV+cuy/+F66JRfGEFST3yH8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
                          rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194590, serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
        Validity
            Not Before: Aug  9 03:02:21 2025 GMT
            Not After : Aug 16 03:02:21 2025 GMT
        Subject: CN=6896ba3d-0a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:7c:4b:a0:ef:ab:29:b5:09:39:a5:eb:62:5e:
                    e1:10:de:e3:d5:0b:c1:e3:57:bb:a2:02:5d:c9:49:
                    82:72:aa:18:5b:a4:fe:d0:b4:74:c6:49:82:d0:8e:
                    5d:b8:a6:70:30:76:e7:06:43:0e:c8:3b:1c:1e:29:
                    d7:3a:b0:b5:11:a1:bd:70:f5:6b:7c:da:a3:84:39:
                    e2:76:84:ae:a7:5e:d9:ba:c9:43:b3:22:cf:1f:0c:
                    46:60:a5:fb:0c:fe:ff:08:80:42:da:46:77:92:2a:
                    56:1b:f3:d5:af:0d:ec:81:10:fb:cf:df:ec:61:80:
                    0c:8e:ca:06:a7:e7:4e:a6:24:34:95:e3:76:bb:ef:
                    9f:fd:0f:18:78:5e:8f:94:53:1d:0a:f2:72:21:75:
                    48:75:59:2c:fb:cc:3a:20:49:c8:18:29:fb:ac:6c:
                    16:7d:4d:95:97:43:24:24:17:3d:f8:59:be:5d:11:
                    2f:d3:b4:b1:4d:c1:10:5c:61:ba:60:ee:8d:c3:39:
                    cf:1c:51:fa:3e:39:c6:67:74:44:89:42:9c:c1:da:
                    fd:7c:56:04:97:67:5d:32:1b:67:f6:db:2e:a3:47:
                    a5:c4:6c:07:5b:b9:56:bd:61:3c:8f:b9:cf:ce:1f:
                    34:95:b7:4e:4a:6a:25:fe:2a:b1:3a:54:bf:8f:f3:
                    3d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8C:0F:BC:CD:D0:81:89:0D:16:19:74:2C:FB:DC:C6:6B:15:1D:74
            X509v3 Authority Key Identifier:
                keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:ec:c9:c2:17:3d:6e:a2:0b:e5:0f:50:81:78:88:32:15:9f:
         3f:36:59:c1:97:25:84:15:db:43:98:53:d8:c0:06:29:3a:5a:
         9c:31:44:76:5d:f1:e3:a5:38:e0:06:5a:bb:90:2d:3d:21:c5:
         3a:8a:0c:38:20:aa:55:30:1a:30:27:20:b0:01:6a:4b:38:a7:
         98:97:3f:de:80:7e:21:de:30:b5:e1:21:67:71:e7:3c:40:3a:
         8f:55:97:a4:be:fe:c0:53:9c:54:ea:8c:8b:2d:9a:a4:c4:2f:
         a0:77:3c:52:a8:b6:33:ec:fb:e8:b6:92:1e:ef:f5:7f:6e:e5:
         25:98:e2:a0:b4:9e:cc:43:fe:75:94:5b:23:8b:e5:47:7e:cf:
         22:4e:73:05:f7:59:88:4e:71:2e:48:98:43:58:ec:bc:02:dd:
         97:0b:aa:3c:1e:de:6c:fe:bc:0f:96:77:c6:49:f0:15:ca:52:
         09:c4:7b:d3:2c:3c:fa:b9:2d:0a:b0:2f:d2:7b:9c:f2:e0:d6:
         89:b9:bc:13:44:cb:ee:c5:9f:69:86:e0:7d:5c:32:b1:90:90:
         7c:b4:6e:c0:86:3c:51:8a:bc:22:60:1c:93:b9:fd:b8:84:05:
         44:32:67:f3:2c:a2:a0:40:04:6f:09:fa:22:41:5a:a7:a2:74:
         94:73:70:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQ1OTAxMTAvBgNVBAUTKDQ0OEE2RDgyOTc2QTU1REM1NzBCQTU4MDM3NzBBQzZB
RERCQkQ4ODYwHhcNMjUwODA5MDMwMjIxWhcNMjUwODE2MDMwMjIxWjAYMRYwFAYD
VQQDEw02ODk2YmEzZC0wYTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApnxLoO+rKbUJOaXrYl7hEN7j1QvB41e7ogJdyUmCcqoYW6T+0LR0xkmC0I5d
uKZwMHbnBkMOyDscHinXOrC1EaG9cPVrfNqjhDnidoSup17ZuslDsyLPHwxGYKX7
DP7/CIBC2kZ3kipWG/PVrw3sgRD7z9/sYYAMjsoGp+dOpiQ0leN2u++f/Q8YeF6P
lFMdCvJyIXVIdVks+8w6IEnIGCn7rGwWfU2Vl0MkJBc9+Fm+XREv07SxTcEQXGG6
YO6NwznPHFH6PjnGZ3REiUKcwdr9fFYEl2ddMhtn9tsuo0elxGwHW7lWvWE8j7nP
zh80lbdOSmol/iqxOlS/j/M9iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJeMD7zN
0IGJDRYZdCz73MZrFR10MB8GA1UdIwQYMBaAFESKbYKXalXcVwulgDdwrGrdu9iG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDU5MC8zNjM1NTk1Mjkx
OUYxMUVEQjQ4RTUzNERDNEY5QUUwMi9SSXB0Z3BkcVZkeFhDNldBTjNDc2F0Mjcy
SVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JJcHRncGRxVmR4WEM2V0FOM0NzYXQyNzJJWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDU5MC8zNjM1NTk1MjkxOUYxMUVEQjQ4RTUzNERDNEY5QUUwMi9SSXB0Z3BkcVZk
eFhDNldBTjNDc2F0MjcySVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBK7MnCFz1uogvlD1CBeIgyFZ8/NlnBlyWEFdtDmFPYwAYpOlqcMUR2
XfHjpTjgBlq7kC09IcU6igw4IKpVMBowJyCwAWpLOKeYlz/egH4h3jC14SFncec8
QDqPVZekvv7AU5xU6oyLLZqkxC+gdzxSqLYz7PvotpIe7/V/buUlmOKgtJ7MQ/51
lFsji+VHfs8iTnMF91mITnEuSJhDWOy8At2XC6o8Ht5s/rwPlnfGSfAVylIJxHvT
LDz6uS0KsC/Se5zy4NaJubwTRMvuxZ9phuB9XDKxkJB8tG7AhjxRirwiYByTuf24
hAVEMmfzLKKgQARvCfoiQVqnonSUc3AW
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:50:52 2025 by rpki-client