Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
File:                     MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft (raw, json)
Hash identifier:          MxIyTOALacOGHYibY+ArgO396vIMNTngWvz+bHwV2Oo=
Subject key identifier:   5F:AF:7A:3C:74:F5:A7:98:B3:82:5F:A9:E4:D5:59:39:41:1F:64:6B
Authority key identifier: 32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11
Certificate issuer:       /CN=A91A1CF4/serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411
Certificate serial:       068D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
Manifest number:          0684
Signing time:             Fri 08 Aug 2025 22:47:36 +0000
Manifest this update:     Fri 08 Aug 2025 22:47:35 +0000
Manifest next update:     Fri 15 Aug 2025 22:47:35 +0000
Files and hashes:         1: MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl (hash: HIogY0dc6vueQjW4WXAEPSmGx2TbnFcqAmtz6T5nd9I=)
                          2: 4863E7886BEA11F0AA50230BC4F9AE02.roa (hash: GcIFK8Guk5Mw4MCQJvhTgzOgqMQrjbwbQ9Fg20gZQJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl
                          rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677 (0x68d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1CF4, serialNumber=32A4F670DA0F52858EDDEF0690C8E550DFDB3411
        Validity
            Not Before: Aug  8 22:47:35 2025 GMT
            Not After : Aug 15 22:47:35 2025 GMT
        Subject: CN=68967e87-2895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:88:18:ff:c6:99:5b:96:07:eb:0d:b3:56:5a:
                    9f:ca:94:c8:ea:2c:31:76:ac:e3:9d:e7:ee:52:21:
                    64:e5:43:91:36:3d:d4:99:f2:db:30:58:d1:c2:9d:
                    5e:3f:cd:6d:ce:1f:c4:d4:43:9d:d4:11:2a:82:30:
                    10:41:eb:8b:41:ee:14:c9:83:25:03:79:57:7b:b6:
                    e5:e3:77:09:30:ef:ae:86:22:d8:df:ea:0e:93:17:
                    1a:aa:c3:dd:05:06:a5:45:ea:b7:1d:78:33:b6:b1:
                    bf:ce:23:4c:16:b8:46:41:10:f9:b0:fc:86:06:82:
                    83:9d:fe:ad:1e:99:f2:db:47:db:d3:ac:7c:0b:5c:
                    c0:77:67:9e:a0:20:04:9c:d3:c5:19:54:27:67:16:
                    0f:ed:e2:8e:3f:2a:41:82:d5:7b:5f:8e:6a:f8:28:
                    e8:2a:3c:e7:a6:96:ae:4f:33:3a:ed:73:2f:38:f0:
                    7a:78:5b:3e:ca:9e:2c:6f:a7:51:6f:ae:75:9b:7c:
                    59:f4:65:6f:ca:c8:a7:30:d3:2e:1d:26:ff:3b:e8:
                    ae:60:3d:f9:cc:ac:f1:86:22:f2:9f:22:4d:19:28:
                    32:5d:41:96:b3:71:e8:30:62:2b:be:f1:55:da:fc:
                    cc:c6:ca:aa:e9:f3:77:de:d4:9a:bc:66:73:33:f9:
                    6e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:AF:7A:3C:74:F5:A7:98:B3:82:5F:A9:E4:D5:59:39:41:1F:64:6B
            X509v3 Authority Key Identifier:
                keyid:32:A4:F6:70:DA:0F:52:85:8E:DD:EF:06:90:C8:E5:50:DF:DB:34:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MqT2cNoPUoWO3e8GkMjlUN_bNBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CF4/9AC4851A857F11EB9B285775C4F9AE02/MqT2cNoPUoWO3e8GkMjlUN_bNBE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:20:61:1b:cc:11:04:43:bd:6b:43:9a:73:a9:94:69:08:ce:
         9a:e4:e1:86:55:97:00:ca:33:9b:57:1b:ec:82:d6:22:e6:46:
         0a:3f:2b:1e:ee:b1:d3:8e:f3:b8:58:da:e1:5c:8e:28:4a:ee:
         79:67:58:23:a2:61:7b:32:bd:ad:16:f4:37:05:e2:53:eb:c1:
         16:e8:f6:8e:06:d5:25:8e:39:e7:69:10:b5:1a:5d:34:5f:92:
         94:0d:dd:38:00:16:ef:f9:1e:7a:85:10:65:a9:be:6a:b2:ed:
         22:ed:a9:6a:ff:4d:76:b6:86:97:70:ee:88:aa:48:af:b4:33:
         48:94:b4:a6:cc:5b:8b:f6:b8:ab:e9:63:fd:f3:3f:f7:1f:e1:
         35:21:bc:bf:25:1f:15:51:e5:22:e4:42:68:42:b7:c5:ff:58:
         f7:99:3c:05:f2:bb:f1:81:93:3c:a3:65:9d:72:f4:6c:fe:f7:
         aa:78:d9:6e:8d:1f:04:a6:73:00:a9:ab:f6:84:46:32:cf:3f:
         d1:d4:38:27:60:d6:68:ef:14:52:54:a5:7b:b3:81:8d:58:4b:
         08:03:45:d7:31:b0:66:87:d2:8a:7c:d7:30:45:de:04:71:c4:
         3f:27:af:3f:f2:51:50:19:b6:6e:14:c6:11:02:cb:cd:cd:72:
         6f:e0:2d:91
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTFDRjQxMTAvBgNVBAUTKDMyQTRGNjcwREEwRjUyODU4RURERUYwNjkwQzhFNTUw
REZEQjM0MTEwHhcNMjUwODA4MjI0NzM1WhcNMjUwODE1MjI0NzM1WjAYMRYwFAYD
VQQDEw02ODk2N2U4Ny0yODk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoIgY/8aZW5YH6w2zVlqfypTI6iwxdqzjnefuUiFk5UORNj3UmfLbMFjRwp1e
P81tzh/E1EOd1BEqgjAQQeuLQe4UyYMlA3lXe7bl43cJMO+uhiLY3+oOkxcaqsPd
BQalReq3HXgztrG/ziNMFrhGQRD5sPyGBoKDnf6tHpny20fb06x8C1zAd2eeoCAE
nNPFGVQnZxYP7eKOPypBgtV7X45q+CjoKjznppauTzM67XMvOPB6eFs+yp4sb6dR
b651m3xZ9GVvysinMNMuHSb/O+iuYD35zKzxhiLynyJNGSgyXUGWs3HoMGIrvvFV
2vzMxsqq6fN33tSavGZzM/luqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+vejx0
9aeYs4JfqeTVWTlBH2RrMB8GA1UdIwQYMBaAFDKk9nDaD1KFjt3vBpDI5VDf2zQR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUNGNC85QUM0ODUxQTg1
N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVvV08zZThHa01qbFVOX2JO
QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01xVDJjTm9QVW9XTzNlOEdrTWpsVU5fYk5CRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MUNGNC85QUM0ODUxQTg1N0YxMUVCOUIyODU3NzVDNEY5QUUwMi9NcVQyY05vUFVv
V08zZThHa01qbFVOX2JOQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwIGEbzBEEQ71rQ5pzqZRpCM6a5OGGVZcAyjObVxvsgtYi5kYKPyse
7rHTjvO4WNrhXI4oSu55Z1gjomF7Mr2tFvQ3BeJT68EW6PaOBtUljjnnaRC1Gl00
X5KUDd04ABbv+R56hRBlqb5qsu0i7alq/012toaXcO6IqkivtDNIlLSmzFuL9rir
6WP98z/3H+E1Iby/JR8VUeUi5EJoQrfF/1j3mTwF8rvxgZM8o2WdcvRs/veqeNlu
jR8EpnMAqav2hEYyzz/R1DgnYNZo7xRSVKV7s4GNWEsIA0XXMbBmh9KKfNcwRd4E
ccQ/J68/8lFQGbZuFMYRAsvNzXJv4C2R
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:05:07 2025 by rpki-client