Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft
File:                     tBNlbNepj73iI3_FMUyf9-jxoJ4.mft (raw, json)
Hash identifier:          tNf1Lmcp8UYYgXpWUjPGg4tW8ZRKJgR/gj0xwHH4qVs=
Subject key identifier:   18:E3:6D:02:88:E6:58:8F:93:1A:C9:26:48:1B:4F:97:FD:DF:D7:F3
Authority key identifier: B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E
Certificate issuer:       /CN=A91A5252/serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E
Certificate serial:       0711
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft
Manifest number:          0702
Signing time:             Sun 10 Aug 2025 21:57:50 +0000
Manifest this update:     Sun 10 Aug 2025 21:57:49 +0000
Manifest next update:     Sun 17 Aug 2025 21:57:49 +0000
Files and hashes:         1: tBNlbNepj73iI3_FMUyf9-jxoJ4.crl (hash: Pv6FLlew7cENIWDts3NUofSxhvBeqMYBWuOq5NUrCtE=)
                          2: B61AFCF654A411EB88DE1D23C4F9AE02.roa (hash: NhhtAZYHbi3OfuXlyk66ji/E3ItRuOfQUaOAVkaAmDI=)
                          3: 4DB43F043E6611ECBD788C16C4F9AE02.roa (hash: ing2Wn3yGuRf8bHPBaTCd2sus9ikor0GkhqqDA1X+gI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl
                          rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1809 (0x711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5252, serialNumber=B413656CD7A98FBDE2237FC5314C9FF7E8F1A09E
        Validity
            Not Before: Aug 10 21:57:49 2025 GMT
            Not After : Aug 17 21:57:49 2025 GMT
        Subject: CN=689915de-5446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f9:47:bd:8e:21:7b:96:08:b2:2d:b8:3b:ec:
                    2f:0a:72:bf:90:70:03:58:c4:70:2e:d6:4e:4c:0d:
                    7d:4d:08:f2:84:d7:d8:5d:de:aa:cb:f2:31:2d:e2:
                    af:7e:e9:e8:5b:90:9b:54:08:be:2c:c4:b5:4e:77:
                    de:8b:44:30:f9:ef:19:07:19:6d:10:de:48:d9:81:
                    65:66:43:6d:ce:b6:58:7a:73:5c:d8:dc:a9:a1:e0:
                    f5:14:ba:c9:be:37:7d:98:3d:e0:f8:fb:5a:e9:69:
                    f5:30:7f:ee:56:b5:62:3b:fa:af:ef:f5:a0:b4:90:
                    7b:c8:73:73:76:c9:e3:38:39:6f:1b:58:19:42:76:
                    ca:77:d5:8f:5b:be:56:5a:8c:b6:1f:51:94:7b:ef:
                    6d:e3:cc:cb:80:57:e7:81:5d:3d:ff:cd:20:79:a3:
                    ee:ed:5d:f8:6d:0b:17:0d:7d:76:a4:a9:b9:87:22:
                    dd:48:32:65:ff:86:02:71:fe:80:46:38:23:b5:88:
                    13:a4:41:69:82:19:2c:77:cf:62:a8:e9:66:5b:71:
                    f8:b7:51:12:a3:2e:7b:21:4f:92:84:6f:15:e8:42:
                    2f:0f:3f:3b:92:f2:9e:25:ab:e8:69:ad:81:f8:6c:
                    c7:6d:24:42:13:b8:cf:6f:0b:21:41:a8:ad:26:a2:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E3:6D:02:88:E6:58:8F:93:1A:C9:26:48:1B:4F:97:FD:DF:D7:F3
            X509v3 Authority Key Identifier:
                keyid:B4:13:65:6C:D7:A9:8F:BD:E2:23:7F:C5:31:4C:9F:F7:E8:F1:A0:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBNlbNepj73iI3_FMUyf9-jxoJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5252/CD163BCA54A211EBBF621E1EC4F9AE02/tBNlbNepj73iI3_FMUyf9-jxoJ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:27:69:7a:84:f7:e8:59:aa:46:5b:a6:e0:52:81:29:32:f1:
         ac:ec:7a:60:a4:53:5f:94:e9:fe:8a:e6:08:bc:87:bb:95:1a:
         43:4a:2f:bc:57:39:38:af:b5:4b:30:0c:61:42:4a:6e:36:0c:
         05:ca:b5:06:dc:d9:7f:5a:f9:db:aa:8e:51:61:39:62:95:ec:
         5a:4f:82:0d:cc:95:23:af:da:53:b9:1c:18:bf:16:9c:b8:15:
         35:54:c3:84:57:27:a0:42:0e:35:29:0d:c7:34:48:61:a7:14:
         53:44:d9:c0:62:5a:ee:6d:45:52:7d:bc:08:de:f6:6d:77:63:
         85:a1:9f:39:41:dd:68:2f:78:28:ee:c5:ae:3e:51:7c:18:e0:
         dd:a4:16:f1:08:ec:e8:c5:f1:db:f1:37:8d:00:ca:08:cd:9a:
         f3:33:c9:4f:dd:f3:94:a8:34:86:ed:5d:5c:a6:3c:1c:a0:8a:
         fc:74:42:24:c2:39:73:20:7f:4e:33:9b:21:d3:3a:d6:a8:a2:
         0b:4c:4a:1b:c1:23:16:66:8b:6a:af:a2:2b:ae:c3:37:1d:0b:
         9a:c1:cb:c3:36:c2:2e:ce:43:80:0b:18:a8:0f:5e:88:dd:38:
         8a:c5:57:ab:90:f1:b9:cf:d9:26:1a:7f:0a:00:ab:31:18:4f:
         47:54:34:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUyNTIxMTAvBgNVBAUTKEI0MTM2NTZDRDdBOThGQkRFMjIzN0ZDNTMxNEM5RkY3
RThGMUEwOUUwHhcNMjUwODEwMjE1NzQ5WhcNMjUwODE3MjE1NzQ5WjAYMRYwFAYD
VQQDEw02ODk5MTVkZS01NDQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp/lHvY4he5YIsi24O+wvCnK/kHADWMRwLtZOTA19TQjyhNfYXd6qy/IxLeKv
funoW5CbVAi+LMS1Tnfei0Qw+e8ZBxltEN5I2YFlZkNtzrZYenNc2NypoeD1FLrJ
vjd9mD3g+Pta6Wn1MH/uVrViO/qv7/WgtJB7yHNzdsnjODlvG1gZQnbKd9WPW75W
Woy2H1GUe+9t48zLgFfngV09/80geaPu7V34bQsXDX12pKm5hyLdSDJl/4YCcf6A
RjgjtYgTpEFpghksd89iqOlmW3H4t1ESoy57IU+ShG8V6EIvDz87kvKeJavoaa2B
+GzHbSRCE7jPbwshQaitJqKJxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBjjbQKI
5liPkxrJJkgbT5f939fzMB8GA1UdIwQYMBaAFLQTZWzXqY+94iN/xTFMn/fo8aCe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTI1Mi9DRDE2M0JDQTU0
QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3M2lJM19GTVV5Zjktanhv
SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RCTmxiTmVwajczaUkzX0ZNVXlmOS1qeG9KNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTI1Mi9DRDE2M0JDQTU0QTIxMUVCQkY2MjFFMUVDNEY5QUUwMi90Qk5sYk5lcGo3
M2lJM19GTVV5ZjktanhvSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCbJ2l6hPfoWapGW6bgUoEpMvGs7HpgpFNflOn+iuYIvIe7lRpDSi+8
Vzk4r7VLMAxhQkpuNgwFyrUG3Nl/Wvnbqo5RYTlilexaT4INzJUjr9pTuRwYvxac
uBU1VMOEVyegQg41KQ3HNEhhpxRTRNnAYlrubUVSfbwI3vZtd2OFoZ85Qd1oL3go
7sWuPlF8GODdpBbxCOzoxfHb8TeNAMoIzZrzM8lP3fOUqDSG7V1cpjwcoIr8dEIk
wjlzIH9OM5sh0zrWqKILTEobwSMWZotqr6IrrsM3HQuawcvDNsIuzkOACxioD16I
3TiKxVerkPG5z9kmGn8KAKsxGE9HVDS+
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:27:28 2025 by rpki-client