Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
File:                     oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json)
Hash identifier:          QrgwIjPCLVK31S3iXmvN++XpqKBdnWgzJ9PF3YuPOp4=
Subject key identifier:   9F:FC:A6:D1:EF:5E:82:AE:39:CC:60:43:10:AC:24:7A:34:47:37:9A
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       01CF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
Manifest number:          0196
Signing time:             Sat 09 Aug 2025 04:06:52 +0000
Manifest this update:     Sat 09 Aug 2025 04:06:51 +0000
Manifest next update:     Sat 16 Aug 2025 04:06:51 +0000
Files and hashes:         1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: jqu77iT4BlejqQTklc10VOVlCXD6oAs4jsGOv8F95ow=)
                          2: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: hs4pbkMdAj+D2UuqPGCvCOhNIxOm0iHH3n26RgqYzp4=)
                          3: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: 2oxGf1eF2vMP7e/KYqIXBpkCvgOIzwtv4aEoBWiSHEE=)
                          4: FAC35354610611EFB6324A30C4F9AE02.roa (hash: 4eY2s8Kl/roYRAvSuHuq1ezQDh2MWHLHPTeUX63R6yM=)
                          5: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: idXeV/vJmvr27TLb+qveG/iLmKPYdgqQIbqbNOCFSf4=)
                          6: AEC0C8428C5811EFA0E8E859C4F9AE02.roa (hash: E0/fmo1zRhNUo9QRAW44/yJchxGo4nB0rPZ+W1mU3F0=)
                          7: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: GBGetP5iCb9tsjZGfvDrYFe7zLDfSNoHPSI0qO5wZUo=)
                          8: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: kP45XXDunbMIfdqYzPQTlFvypMXpadnSedx4GT1Iwgc=)
                          9: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: pk4iRSrrvtFGqra4UOtTwUERBl9wGLn18X+I8xUeZuo=)
                          10: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: 9VTaK6okqIJvF9II2cb927AcLgrTqA9SlI29NpkDXFQ=)
                          11: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: jnn+3+ad82Cn/wKtacQrT2BVd7Rq7+SYdgr+JJUl5yM=)
                          12: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: Hll2+0qOoXsNfkp2NoMaxMw6B+0BSvaptL4oOoM252E=)
                          13: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: czjAqWQeWsyu/4wi/BZHeovzI0scnOJ//P4FWGc4nUs=)
                          14: 544F13A6B78111EF84611770C4F9AE02.roa (hash: n2ZNps1Q9cQsfWAtJjRE5AUYafhco8sajICleXYU/Io=)
                          15: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: oVqk1V6SMsFEFFypJZwBJY7tdrNrtjHmcrmlxHpAog8=)
                          16: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: wpnmGkguzd61ngA1alk/0gWu0+VGdOnX4QN2iRz/PDY=)
                          17: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: UClI42Nc4TAFt2EH/zfcSweF10PqmL7CvHfiL9lPAxM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Aug  9 04:06:51 2025 GMT
            Not After : Aug 16 04:06:51 2025 GMT
        Subject: CN=6896c95c-2a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:ee:3c:84:60:31:52:7f:99:93:b0:59:fa:
                    4f:0f:96:a7:fe:dc:8a:1f:fd:0c:7c:d9:d3:dd:0d:
                    20:24:12:95:07:4e:21:d0:23:c4:ff:9d:f9:25:ae:
                    91:95:40:24:c4:9d:40:4b:da:ed:49:38:0a:41:9b:
                    80:7f:bc:bf:47:56:f9:74:d9:77:fa:22:2b:43:2b:
                    1f:ed:8f:47:9a:45:18:46:8b:29:63:fe:e1:fe:72:
                    54:cc:3f:b5:7f:a4:e7:4d:9f:12:43:a5:52:12:ba:
                    11:62:28:3d:0b:5c:35:af:f5:7c:c7:89:56:91:c1:
                    e5:39:cd:4f:7d:b9:57:64:1e:7f:f6:80:de:82:fd:
                    ad:d9:59:48:bc:58:3d:e2:34:13:1e:be:63:28:f1:
                    4e:fd:32:5c:3a:1d:1c:95:4c:b5:33:32:e0:47:06:
                    28:30:99:cb:9e:85:81:27:78:15:41:11:22:5c:58:
                    0f:b7:c1:82:e0:aa:d0:84:77:ee:11:df:97:b1:10:
                    87:10:c2:b1:80:61:d1:84:01:f2:70:10:f2:b0:a0:
                    e5:94:57:04:68:a8:05:39:27:6a:58:fb:11:76:84:
                    92:98:2f:0d:bc:59:a4:2d:19:b3:48:84:76:b6:e9:
                    96:7c:47:7b:c9:00:5b:3d:9a:8c:eb:c3:52:72:c1:
                    0b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:FC:A6:D1:EF:5E:82:AE:39:CC:60:43:10:AC:24:7A:34:47:37:9A
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:36:fc:15:e6:82:ff:83:30:46:a4:e8:c3:a9:bd:d5:b3:4b:
         0d:f0:be:18:3f:64:f1:97:31:1f:94:f9:3d:80:85:50:dc:7c:
         d0:d4:1b:86:66:cb:4a:1d:95:58:7c:87:a6:09:2e:ca:83:f5:
         5f:c0:3e:af:a0:dd:cb:f7:5e:bc:b3:f3:72:b6:42:6e:b2:f2:
         3c:0e:7e:c7:ee:d9:65:f7:9a:6a:f3:c4:f9:4b:56:83:4d:80:
         51:d5:96:36:bf:13:29:f4:da:1b:31:1a:46:b2:ee:d0:bd:15:
         db:a6:09:5f:65:2d:39:da:38:db:64:48:ba:e2:f8:13:ae:c6:
         d5:72:01:d6:15:62:aa:9c:8b:a9:2a:c7:e4:2f:2a:2c:51:47:
         68:f1:e4:e7:47:7d:e0:d1:fb:f8:5a:96:15:63:c5:1e:d7:fd:
         00:58:d5:85:71:fd:6d:cc:a9:ae:07:9c:5e:2d:29:51:25:b3:
         71:0a:4b:e9:40:7a:29:d2:b8:cc:19:1d:ef:d0:3f:e3:f0:09:
         9f:02:4d:3a:b9:60:f9:a0:fe:62:fa:5c:96:42:38:6e:e6:07:
         18:76:73:0a:a6:49:5e:d3:3b:be:d4:ed:4c:1b:e6:db:de:71:
         e0:c3:b7:32:22:be:37:f5:0a:de:17:22:57:c6:64:d1:e9:cb:
         11:d8:fc:22
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3
NThGNkFFMUQwHhcNMjUwODA5MDQwNjUxWhcNMjUwODE2MDQwNjUxWjAYMRYwFAYD
VQQDEw02ODk2Yzk1Yy0yYTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArMbuPIRgMVJ/mZOwWfpPD5an/tyKH/0MfNnT3Q0gJBKVB04h0CPE/535Ja6R
lUAkxJ1AS9rtSTgKQZuAf7y/R1b5dNl3+iIrQysf7Y9HmkUYRospY/7h/nJUzD+1
f6TnTZ8SQ6VSEroRYig9C1w1r/V8x4lWkcHlOc1PfblXZB5/9oDegv2t2VlIvFg9
4jQTHr5jKPFO/TJcOh0clUy1MzLgRwYoMJnLnoWBJ3gVQREiXFgPt8GC4KrQhHfu
Ed+XsRCHEMKxgGHRhAHycBDysKDllFcEaKgFOSdqWPsRdoSSmC8NvFmkLRmzSIR2
tumWfEd7yQBbPZqM68NScsELTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ/8ptHv
XoKuOcxgQxCsJHo0RzeaMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTM2Qy83NUI5OEJGMDM2NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVm
TDl6dTFCT3ZKNngxajJyaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDCNvwV5oL/gzBGpOjDqb3Vs0sN8L4YP2TxlzEflPk9gIVQ3HzQ1BuG
ZstKHZVYfIemCS7Kg/VfwD6voN3L9168s/NytkJusvI8Dn7H7tll95pq88T5S1aD
TYBR1ZY2vxMp9NobMRpGsu7QvRXbpglfZS052jjbZEi64vgTrsbVcgHWFWKqnIup
KsfkLyosUUdo8eTnR33g0fv4WpYVY8Ue1/0AWNWFcf1tzKmuB5xeLSlRJbNxCkvp
QHop0rjMGR3v0D/j8AmfAk06uWD5oP5i+lyWQjhu5gcYdnMKpkle0zu+1O1MG+bb
3nHgw7cyIr439QreFyJXxmTR6csR2Pwi
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:46:09 2025 by rpki-client