Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
File:                     e1kFUhKEkQWtbznliB2ELnB0Oa8.mft (raw, json)
Hash identifier:          hMpbmUUk9OIFE0SygCaiS+D+qleWsVVCdRFsJPA56S8=
Subject key identifier:   E8:3E:16:AA:8A:11:AD:D6:44:D4:98:DE:C0:38:B0:EC:F7:75:5D:1A
Authority key identifier: 7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF
Certificate issuer:       /CN=A91A5308/serialNumber=7B59055212849105AD6F39E5881D842E707439AF
Certificate serial:       0CF0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
Manifest number:          0CD3
Signing time:             Fri 08 Aug 2025 18:22:20 +0000
Manifest this update:     Fri 08 Aug 2025 18:22:20 +0000
Manifest next update:     Fri 15 Aug 2025 18:22:20 +0000
Files and hashes:         1: e1kFUhKEkQWtbznliB2ELnB0Oa8.crl (hash: e/+49ncpbwMSfA5AqubVV+j7SkqASTj/23frwh+8M7s=)
                          2: CD5B717E8AB811EDA3D4ED68C4F9AE02.roa (hash: XLP4ULkxYx27srGDokdT1/3ibgVd5Ja0S3t9A21I8Bo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl
                          rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3312 (0xcf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5308, serialNumber=7B59055212849105AD6F39E5881D842E707439AF
        Validity
            Not Before: Aug  8 18:22:20 2025 GMT
            Not After : Aug 15 18:22:20 2025 GMT
        Subject: CN=6896405c-fd7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b1:27:3d:8f:dd:0a:b9:de:8f:37:ef:c9:5c:
                    52:a0:ea:e5:44:43:81:f4:05:28:5d:21:fc:28:f5:
                    c3:92:1c:41:d9:93:4f:19:c7:96:e1:f0:97:8b:0d:
                    37:98:1b:5e:db:8c:e1:8c:36:cf:88:8e:ee:8a:b2:
                    da:b9:56:f3:26:36:47:2e:db:d8:67:1e:ee:d7:70:
                    8c:48:55:c9:59:ca:a8:1d:e1:97:38:55:3e:e2:46:
                    19:4f:b5:b1:37:de:65:65:49:1c:b9:dd:18:d6:79:
                    b1:40:8d:03:15:de:02:3f:3a:45:2b:ba:49:d2:0f:
                    00:cc:20:26:37:ca:3e:e9:b8:a9:f7:7f:5f:d4:33:
                    a5:2a:43:b4:f8:23:e9:56:ef:76:29:23:61:4d:15:
                    54:ec:54:fa:7c:09:23:a2:c0:34:31:61:18:d3:50:
                    d1:50:6e:f6:f1:86:c0:d3:79:50:87:0d:dd:b3:93:
                    12:c6:93:b3:99:b9:55:fd:35:ef:3c:46:b5:b2:c8:
                    af:db:4c:1f:64:aa:ec:df:cd:8c:41:53:a3:fb:d1:
                    a7:9f:8b:9c:ac:4e:98:54:78:2f:69:9e:61:8b:3f:
                    08:00:e5:cb:38:ac:70:d7:ad:c3:3c:83:43:a0:47:
                    92:56:60:0b:f1:f9:64:bf:d0:b7:fe:63:44:29:b7:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3E:16:AA:8A:11:AD:D6:44:D4:98:DE:C0:38:B0:EC:F7:75:5D:1A
            X509v3 Authority Key Identifier:
                keyid:7B:59:05:52:12:84:91:05:AD:6F:39:E5:88:1D:84:2E:70:74:39:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1kFUhKEkQWtbznliB2ELnB0Oa8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5308/A81914E2F4D511E9B917F349C4F9AE02/e1kFUhKEkQWtbznliB2ELnB0Oa8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a2:01:a6:df:0c:cd:53:89:fd:58:12:e8:6d:29:d1:c1:8a:
         22:2f:ba:58:7d:60:55:02:ef:91:39:54:68:10:a6:63:82:ed:
         67:1e:ec:fe:58:ee:ed:9e:97:4f:70:69:fb:95:bd:89:81:d8:
         ce:cc:7d:75:ba:8b:46:04:57:c6:2b:52:d1:52:b0:d1:fa:c8:
         55:aa:48:7f:80:d7:b4:97:c1:53:c1:d6:cd:47:06:e8:e6:df:
         37:e3:1f:c7:be:2d:54:9c:f4:82:3a:c7:77:cf:4e:f5:d3:69:
         85:78:53:ec:ac:24:cb:79:67:f0:26:63:61:20:e9:3b:1d:ec:
         6f:c6:d0:77:75:18:68:58:d7:fd:34:64:5c:b8:73:43:04:de:
         cf:c0:99:03:e2:4b:dd:ce:f2:d1:89:ef:a4:41:a8:bc:31:02:
         e3:34:5b:1f:3a:f3:f8:6b:19:ca:ef:b1:4b:05:c5:46:26:4b:
         f3:b5:09:fb:57:49:51:af:d9:d4:01:d3:ad:cc:04:f1:ad:c4:
         27:61:1d:cc:28:3e:1a:4a:b2:36:94:59:eb:84:9d:03:27:b0:
         e0:8a:a0:07:a3:ec:33:8a:16:fb:0f:e3:aa:97:c3:82:f3:ab:
         6e:03:03:2a:22:19:d6:99:d0:03:46:9f:df:f5:81:ca:2d:40:
         bd:03:0a:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTUzMDgxMTAvBgNVBAUTKDdCNTkwNTUyMTI4NDkxMDVBRDZGMzlFNTg4MUQ4NDJF
NzA3NDM5QUYwHhcNMjUwODA4MTgyMjIwWhcNMjUwODE1MTgyMjIwWjAYMRYwFAYD
VQQDEw02ODk2NDA1Yy1mZDdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlbEnPY/dCrnejzfvyVxSoOrlREOB9AUoXSH8KPXDkhxB2ZNPGceW4fCXiw03
mBte24zhjDbPiI7uirLauVbzJjZHLtvYZx7u13CMSFXJWcqoHeGXOFU+4kYZT7Wx
N95lZUkcud0Y1nmxQI0DFd4CPzpFK7pJ0g8AzCAmN8o+6bip939f1DOlKkO0+CPp
Vu92KSNhTRVU7FT6fAkjosA0MWEY01DRUG728YbA03lQhw3ds5MSxpOzmblV/TXv
PEa1ssiv20wfZKrs382MQVOj+9Gnn4ucrE6YVHgvaZ5hiz8IAOXLOKxw163DPIND
oEeSVmAL8flkv9C3/mNEKbcvDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOg+FqqK
Ea3WRNSY3sA4sOz3dV0aMB8GA1UdIwQYMBaAFHtZBVIShJEFrW855YgdhC5wdDmv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTMwOC9BODE5MTRFMkY0
RDUxMUU5QjkxN0YzNDlDNEY5QUUwMi9lMWtGVWhLRWtRV3Riem5saUIyRUxuQjBP
YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Uxa0ZVaEtFa1FXdGJ6bmxpQjJFTG5CME9hOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTMwOC9BODE5MTRFMkY0RDUxMUU5QjkxN0YzNDlDNEY5QUUwMi9lMWtGVWhLRWtR
V3Riem5saUIyRUxuQjBPYTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCeogGm3wzNU4n9WBLobSnRwYoiL7pYfWBVAu+ROVRoEKZjgu1nHuz+
WO7tnpdPcGn7lb2JgdjOzH11uotGBFfGK1LRUrDR+shVqkh/gNe0l8FTwdbNRwbo
5t834x/Hvi1UnPSCOsd3z07102mFeFPsrCTLeWfwJmNhIOk7HexvxtB3dRhoWNf9
NGRcuHNDBN7PwJkD4kvdzvLRie+kQai8MQLjNFsfOvP4axnK77FLBcVGJkvztQn7
V0lRr9nUAdOtzATxrcQnYR3MKD4aSrI2lFnrhJ0DJ7DgiqAHo+wzihb7D+Oql8OC
86tuAwMqIhnWmdADRp/f9YHKLUC9AwoW
-----END CERTIFICATE-----
Generated at Sat Aug 9 15:10:23 2025 by rpki-client