Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File:                     aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier:          U/sAOXpGxyYTLDnWyHkYo7cm8acQlQ1yAE8SMfBiaes=
Subject key identifier:   52:80:8D:11:2F:B2:8D:F4:3D:0D:EF:B9:FF:B4:8A:87:BB:10:5C:9A
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer:       /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial:       08CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number:          086C
Signing time:             Sun 10 Aug 2025 20:59:42 +0000
Manifest this update:     Sun 10 Aug 2025 20:59:41 +0000
Manifest next update:     Sun 17 Aug 2025 20:59:41 +0000
Files and hashes:         1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: Lqk+FmqiHZ3eJ/VYP1wFrIvs7tn9YYEcoJYgVA+nDBQ=)
                          2: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: 5OJq3TQL6UcD1e0FTm6+f4tFRojNv3dxN2hOmwh/XMU=)
                          3: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: 67FA0fogoOEO8ZhRY0Z7X/jNdUDR2kpHHHAZ7zc0DNU=)
                          4: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: mTf8cQmCDCOr2IAAbGwT5DT/HAjoFjlHGakTn87Xya0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
                          rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2253 (0x8cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
        Validity
            Not Before: Aug 10 20:59:41 2025 GMT
            Not After : Aug 17 20:59:41 2025 GMT
        Subject: CN=6899083e-445d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:0c:8f:10:90:bf:f6:1d:6f:20:0c:03:a6:
                    e4:ce:6c:7c:a6:d8:e5:61:59:6e:12:92:bb:0f:a4:
                    3d:38:4f:d3:95:11:e0:42:50:9b:2b:bc:19:45:91:
                    fe:89:86:e7:e2:fc:3c:f0:c3:0d:12:f9:0b:35:f0:
                    68:5c:fd:59:ee:d9:e8:3b:a8:5e:01:90:cf:38:c6:
                    9c:5c:d4:e7:31:c0:7c:84:01:0f:d8:96:cd:3a:7e:
                    fe:8f:40:fb:10:0e:4f:01:d8:27:72:76:24:9c:5a:
                    ae:65:2c:2a:12:6b:72:bf:35:32:87:44:43:31:9a:
                    00:12:0b:9c:e2:3c:98:19:4a:7a:cc:85:18:88:8b:
                    9b:dc:e8:67:86:cf:e3:29:0b:bb:42:4a:69:cc:fd:
                    26:cb:84:fb:7e:aa:ea:aa:d6:d9:a6:e3:7e:09:47:
                    2c:d6:55:ea:07:6f:bb:46:d1:d5:22:00:71:2f:67:
                    ce:a5:75:1a:85:41:c2:56:3e:c6:70:21:33:99:43:
                    31:dd:a7:9c:76:fe:ab:9c:ae:c3:cb:38:6b:07:0c:
                    b6:20:f7:fa:41:4b:64:8e:2c:8d:02:d1:50:12:e3:
                    80:e6:a1:5d:8f:5d:00:bd:6d:24:61:56:89:08:d6:
                    f5:9b:b1:75:61:8c:36:6e:20:22:be:22:ff:86:ec:
                    8d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:80:8D:11:2F:B2:8D:F4:3D:0D:EF:B9:FF:B4:8A:87:BB:10:5C:9A
            X509v3 Authority Key Identifier:
                keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:44:b6:da:be:59:16:50:c4:0d:03:51:23:44:15:b2:d1:4b:
         7a:1a:fb:c0:50:59:df:d9:05:8e:b3:4f:68:3a:c5:a0:0f:dd:
         34:67:ae:6d:b9:b6:8f:fd:b7:45:5a:5f:12:3c:a9:b1:08:5d:
         c4:7c:9f:3f:e1:9d:2c:9b:ef:fb:64:48:95:4b:a3:65:4a:19:
         d0:df:8f:d3:73:ef:66:55:ba:42:4f:6d:e6:c5:6b:98:d4:bb:
         c5:eb:c3:32:a3:de:8a:47:65:23:7c:de:48:75:ee:af:38:4a:
         84:7c:62:f5:dd:69:56:7e:e1:31:b1:d6:1c:40:6d:57:fa:a1:
         88:b8:ec:a6:f1:e0:5b:67:09:de:c1:57:6d:27:ed:03:6a:c7:
         73:84:53:68:93:9e:05:60:91:ee:d5:9c:6a:c1:74:23:68:62:
         e0:3f:fe:fe:56:e1:8c:c7:f0:7a:48:68:c2:23:99:a5:85:06:
         f9:10:4a:c1:48:87:25:2b:cd:0a:cd:46:d9:2d:10:5e:d8:62:
         d6:e8:ce:bc:36:91:72:de:1c:53:0f:46:6e:c4:40:8d:1d:55:
         48:a6:9f:85:d8:06:73:c1:e2:15:8b:16:b3:af:b0:c4:1e:e3:
         d0:18:be:5d:f5:e0:8e:b9:c5:d1:37:40:cc:ff:2d:e2:ad:7e:
         e5:e4:f2:97
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkxOTcxMTAvBgNVBAUTKDY4MzVEREZCODQzOEQyNEJCNkM1OTc5MzE2RTU0ODkx
MDY2MDkwQTcwHhcNMjUwODEwMjA1OTQxWhcNMjUwODE3MjA1OTQxWjAYMRYwFAYD
VQQDEw02ODk5MDgzZS00NDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtHUMjxCQv/YdbyAMA6bkzmx8ptjlYVluEpK7D6Q9OE/TlRHgQlCbK7wZRZH+
iYbn4vw88MMNEvkLNfBoXP1Z7tnoO6heAZDPOMacXNTnMcB8hAEP2JbNOn7+j0D7
EA5PAdgncnYknFquZSwqEmtyvzUyh0RDMZoAEguc4jyYGUp6zIUYiIub3Ohnhs/j
KQu7QkppzP0my4T7fqrqqtbZpuN+CUcs1lXqB2+7RtHVIgBxL2fOpXUahUHCVj7G
cCEzmUMx3aecdv6rnK7DyzhrBwy2IPf6QUtkjiyNAtFQEuOA5qFdj10AvW0kYVaJ
CNb1m7F1YYw2biAiviL/huyNVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFKAjREv
so30PQ3vuf+0ioe7EFyaMB8GA1UdIwQYMBaAFGg13fuEONJLtsWXkxblSJEGYJCn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTE5Ny84NEIyRUM5OEYy
N0QxMUVBOTQ1NkVFNjBDNEY5QUUwMi9hRFhkLTRRNDBrdTJ4WmVURnVWSWtRWmdr
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FEWGQtNFE0MGt1MnhaZVRGdVZJa1FaZ2tLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTE5Ny84NEIyRUM5OEYyN0QxMUVBOTQ1NkVFNjBDNEY5QUUwMi9hRFhkLTRRNDBr
dTJ4WmVURnVWSWtRWmdrS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCvRLbavlkWUMQNA1EjRBWy0Ut6GvvAUFnf2QWOs09oOsWgD900Z65t
ubaP/bdFWl8SPKmxCF3EfJ8/4Z0sm+/7ZEiVS6NlShnQ34/Tc+9mVbpCT23mxWuY
1LvF68Myo96KR2UjfN5Ide6vOEqEfGL13WlWfuExsdYcQG1X+qGIuOym8eBbZwne
wVdtJ+0DasdzhFNok54FYJHu1ZxqwXQjaGLgP/7+VuGMx/B6SGjCI5mlhQb5EErB
SIclK80KzUbZLRBe2GLW6M68NpFy3hxTD0ZuxECNHVVIpp+F2AZzweIVixazr7DE
HuPQGL5d9eCOucXRN0DM/y3irX7l5PKX
-----END CERTIFICATE-----
Generated at Mon Aug 11 05:16:27 2025 by rpki-client