Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
File:                     r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft (raw, json)
Hash identifier:          +5d/i8SGEN9r6K7cJGcGyLL+ma6K2e6C30ZVStglLCc=
Subject key identifier:   E9:83:74:3C:58:94:BA:E8:DB:75:4B:9C:FE:B1:00:44:3F:B1:B3:13
Authority key identifier: AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48
Certificate issuer:       /CN=A919F53A/serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48
Certificate serial:       075B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
Manifest number:          0756
Signing time:             Fri 08 Aug 2025 22:03:36 +0000
Manifest this update:     Fri 08 Aug 2025 22:03:35 +0000
Manifest next update:     Fri 15 Aug 2025 22:03:35 +0000
Files and hashes:         1: r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl (hash: P+0aY4GISgn27FiA14ZOAP4CwPIGhAOq0XueFh6nrMc=)
                          2: 72BCBB042FC211EBB8550B0AC4F9AE02.roa (hash: kntkOaZrAaOx4SVIiImPb0s+dVekp3sawuWhb73K14Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl
                          rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1883 (0x75b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F53A, serialNumber=AF85788B8C52D128D5340A75095B8F0F11779C48
        Validity
            Not Before: Aug  8 22:03:35 2025 GMT
            Not After : Aug 15 22:03:35 2025 GMT
        Subject: CN=68967437-f82b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:df:7f:33:55:1d:c7:30:81:98:e7:52:31:fe:
                    d6:7c:02:64:2e:7f:64:15:d3:dd:ce:af:c6:26:68:
                    06:4e:88:5b:f1:00:70:27:5e:78:16:ef:0f:f6:84:
                    8e:52:d4:4b:dc:10:9f:ab:30:2d:6d:0f:5c:fe:d2:
                    de:c7:53:60:35:b5:3b:81:c8:cd:c7:80:76:a6:7a:
                    17:cb:d3:bd:83:95:52:b1:c8:fc:6f:e1:a4:df:12:
                    04:ea:ee:62:85:b1:8f:17:d6:e2:40:af:9a:f3:87:
                    14:84:c5:59:6c:4d:53:a0:24:34:61:ad:22:5e:e4:
                    81:8e:89:e1:09:bc:7f:26:de:77:eb:51:78:ae:31:
                    79:8c:68:74:9a:01:83:88:7a:66:3c:c7:1f:0d:34:
                    59:cb:9c:3f:ef:01:64:8f:35:87:27:da:0a:27:76:
                    3d:8d:1d:a6:e6:77:13:a8:29:89:14:75:2a:e4:99:
                    ff:3f:94:c0:ff:d0:d4:43:70:a6:1e:22:15:fd:77:
                    07:08:e7:1b:5d:ee:4e:3c:2d:c5:f7:b4:71:07:a1:
                    3b:31:ff:09:dd:29:ca:b0:83:5e:5b:eb:b4:5c:cc:
                    bd:58:08:64:f7:40:8f:7b:36:23:ef:62:d0:f3:94:
                    b9:2f:fd:b2:c5:45:3a:62:cb:99:c6:c4:f2:53:46:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:83:74:3C:58:94:BA:E8:DB:75:4B:9C:FE:B1:00:44:3F:B1:B3:13
            X509v3 Authority Key Identifier:
                keyid:AF:85:78:8B:8C:52:D1:28:D5:34:0A:75:09:5B:8F:0F:11:77:9C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4V4i4xS0SjVNAp1CVuPDxF3nEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F53A/36B52DFA2FC011EBA25FE982C4F9AE02/r4V4i4xS0SjVNAp1CVuPDxF3nEg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:03:09:14:68:58:8f:ef:fc:7f:af:66:61:5c:11:1d:bf:0e:
         fb:f7:ed:b2:d5:75:f8:b8:1b:8a:c2:41:ca:24:5b:85:31:56:
         c4:d5:1a:8f:aa:cd:58:fe:4d:2b:84:54:bb:27:18:80:1c:6c:
         94:f2:35:4d:9e:24:51:e9:56:18:b2:fd:fb:85:89:6e:63:94:
         42:3c:3e:2e:a2:a7:82:ea:25:b7:62:c3:cb:87:dd:f0:4c:77:
         43:67:2e:c0:8f:ad:45:90:b0:a9:e0:39:20:c1:4e:cd:a2:c6:
         cb:b8:af:8b:ec:34:ab:68:70:6d:dc:9e:b9:bf:c3:c9:fc:e4:
         f1:bb:fe:8e:5c:85:f5:d8:1d:18:55:fe:7c:8a:ae:e3:dd:6a:
         57:25:b1:ef:02:f7:3a:85:39:97:41:f1:14:ef:92:24:fd:a9:
         10:13:aa:52:07:95:3b:d7:4b:94:24:e9:55:b0:a6:84:ea:c2:
         42:06:28:16:ea:73:72:a7:35:ff:a5:8d:5b:85:75:4f:aa:bb:
         68:37:40:4a:7f:b6:b8:5d:cb:41:8e:e6:12:c2:f3:a2:92:31:
         25:e0:a3:d8:56:af:2f:ab:2e:99:93:ba:90:55:ff:33:b6:4a:
         3a:5e:be:b4:ba:e6:bc:1d:21:3c:1a:0a:08:95:46:b8:22:ab:
         6f:b2:44:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB1swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUY1M0ExMTAvBgNVBAUTKEFGODU3ODhCOEM1MkQxMjhENTM0MEE3NTA5NUI4RjBG
MTE3NzlDNDgwHhcNMjUwODA4MjIwMzM1WhcNMjUwODE1MjIwMzM1WjAYMRYwFAYD
VQQDEw02ODk2NzQzNy1mODJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4t9/M1UdxzCBmOdSMf7WfAJkLn9kFdPdzq/GJmgGTohb8QBwJ154Fu8P9oSO
UtRL3BCfqzAtbQ9c/tLex1NgNbU7gcjNx4B2pnoXy9O9g5VSscj8b+Gk3xIE6u5i
hbGPF9biQK+a84cUhMVZbE1ToCQ0Ya0iXuSBjonhCbx/Jt5361F4rjF5jGh0mgGD
iHpmPMcfDTRZy5w/7wFkjzWHJ9oKJ3Y9jR2m5ncTqCmJFHUq5Jn/P5TA/9DUQ3Cm
HiIV/XcHCOcbXe5OPC3F97RxB6E7Mf8J3SnKsINeW+u0XMy9WAhk90CPezYj72LQ
85S5L/2yxUU6YsuZxsTyU0aZOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOmDdDxY
lLro23VLnP6xAEQ/sbMTMB8GA1UdIwQYMBaAFK+FeIuMUtEo1TQKdQlbjw8Rd5xI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjUzQS8zNkI1MkRGQTJG
QzAxMUVCQTI1RkU5ODJDNEY5QUUwMi9yNFY0aTR4UzBTalZOQXAxQ1Z1UER4RjNu
RWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3I0VjRpNHhTMFNqVk5BcDFDVnVQRHhGM25FZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjUzQS8zNkI1MkRGQTJGQzAxMUVCQTI1RkU5ODJDNEY5QUUwMi9yNFY0aTR4UzBT
alZOQXAxQ1Z1UER4RjNuRWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBlAwkUaFiP7/x/r2ZhXBEdvw779+2y1XX4uBuKwkHKJFuFMVbE1RqP
qs1Y/k0rhFS7JxiAHGyU8jVNniRR6VYYsv37hYluY5RCPD4uoqeC6iW3YsPLh93w
THdDZy7Aj61FkLCp4DkgwU7NosbLuK+L7DSraHBt3J65v8PJ/OTxu/6OXIX12B0Y
Vf58iq7j3WpXJbHvAvc6hTmXQfEU75Ik/akQE6pSB5U710uUJOlVsKaE6sJCBigW
6nNypzX/pY1bhXVPqrtoN0BKf7a4XctBjuYSwvOikjEl4KPYVq8vqy6Zk7qQVf8z
tko6Xr60uua8HSE8GgoIlUa4IqtvskS7
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:24:40 2025 by rpki-client