Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
File:                     mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json)
Hash identifier:          bAcu7SUJhVRB4nflXxwEh/9RPRd5XDN+XbwXRrpjGrY=
Subject key identifier:   7E:15:7E:93:36:59:F9:DF:41:02:27:F4:AC:66:B0:4E:59:51:C0:C3
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Certificate issuer:       /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
Manifest number:          0159
Signing time:             Thu 07 Aug 2025 04:35:49 +0000
Manifest this update:     Thu 07 Aug 2025 04:35:49 +0000
Manifest next update:     Thu 14 Aug 2025 04:35:49 +0000
Files and hashes:         1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: Zqac1jdqAIf5vpuznduyTm7lws8RVPsDZXr/Eaojy3o=)
                          2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: qDjDjx/58q+LWkw/PFVn1wwvsxzD4HwajEOfZNh5ZU0=)
                          3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: bQFYc9TGCv39aWTUTfzRcDtHtMAg4CgWesOizIV+Kko=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 04:35:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
        Validity
            Not Before: Aug  7 04:35:49 2025 GMT
            Not After : Aug 14 04:35:49 2025 GMT
        Subject: CN=68942d25-d78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:75:7d:2f:59:a5:75:9b:a3:1a:8a:3a:6f:
                    21:f7:ce:14:ef:79:42:14:a9:3e:ad:03:88:f6:5c:
                    24:96:66:94:94:1b:66:eb:b6:75:06:41:a6:3b:87:
                    fb:3f:12:bc:c0:30:6d:85:dc:6d:30:67:53:66:a9:
                    71:55:a6:c3:93:62:32:b0:23:f8:e8:8b:bd:c1:c2:
                    39:7d:21:1c:e8:23:51:b7:16:76:bf:9c:d0:ce:52:
                    76:63:3e:bf:56:ce:6c:12:eb:47:1e:7f:be:41:25:
                    ea:0f:9a:f1:55:20:bf:a3:67:a9:a6:c1:60:d6:fb:
                    63:55:78:68:a1:75:db:40:2f:d3:e5:7d:43:02:c1:
                    d8:d8:e3:20:bd:1a:63:91:96:7b:71:81:38:2d:e7:
                    d1:ed:9c:c2:e0:93:c8:11:03:78:8f:70:71:2f:9f:
                    6a:7a:26:4e:fd:0f:cc:e0:04:f7:b7:fd:40:eb:9d:
                    73:09:9f:c3:99:1e:82:b3:19:b2:3a:12:20:bb:38:
                    84:b0:68:b0:f7:ee:b2:b5:22:cc:c2:85:9c:1f:08:
                    a7:82:18:41:fb:1d:41:f6:9e:04:af:d7:f2:05:56:
                    cf:ac:49:c2:55:f8:db:73:e6:e0:d4:20:c4:26:21:
                    2f:0d:b7:ce:0d:b5:01:59:19:3f:1a:62:28:d8:ff:
                    15:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:15:7E:93:36:59:F9:DF:41:02:27:F4:AC:66:B0:4E:59:51:C0:C3
            X509v3 Authority Key Identifier:
                keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:60:5f:46:19:0d:30:97:e2:9f:05:66:57:a1:bf:9d:2c:e4:
         39:69:b3:4a:0c:84:26:ce:47:d7:79:97:63:11:0f:49:48:12:
         ab:da:28:cc:25:83:07:66:e5:16:ca:96:1c:05:f6:e5:c8:68:
         f2:8d:4a:37:d0:ee:c2:97:17:3d:a7:1d:dd:67:b0:60:19:49:
         36:be:64:a6:a8:ae:cc:90:c1:11:cc:d2:e7:67:74:89:ac:45:
         30:9b:d1:b5:86:38:a7:86:16:4d:e2:c8:96:3c:db:4b:c2:02:
         2a:3d:33:d9:58:15:c6:41:af:42:6e:17:93:f2:32:cf:17:8c:
         0a:23:e3:67:b8:dc:a9:e6:ce:3f:05:e9:46:f6:a6:c8:90:5c:
         20:89:91:06:a8:c4:be:ee:04:11:5c:12:d4:f7:24:72:02:30:
         d3:e6:5a:61:15:43:8d:29:47:2c:b3:b8:ae:ed:18:0d:99:a0:
         6c:28:58:ba:e1:68:7f:35:81:33:38:76:ae:c1:8c:a8:c3:51:
         8f:d7:a9:e9:4e:96:1c:ec:a9:9c:32:49:4d:2f:ef:98:ad:bf:
         3a:51:2b:3f:8d:6f:91:74:3f:2d:10:95:08:3e:9e:bc:c5:95:
         b4:48:17:d1:4e:d5:4d:d6:9d:e1:6b:d5:92:16:46:ca:44:59:
         7d:86:f4:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTZEOEIxMTAvBgNVBAUTKDlBQjY4NkUzQzI5OUFBN0U0NDU1NDkzNDk1QjQ2QkE1
QTc0NDA5OUQwHhcNMjUwODA3MDQzNTQ5WhcNMjUwODE0MDQzNTQ5WjAYMRYwFAYD
VQQDEw02ODk0MmQyNS1kNzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAudh1fS9ZpXWboxqKOm8h984U73lCFKk+rQOI9lwklmaUlBtm67Z1BkGmO4f7
PxK8wDBthdxtMGdTZqlxVabDk2IysCP46Iu9wcI5fSEc6CNRtxZ2v5zQzlJ2Yz6/
Vs5sEutHHn++QSXqD5rxVSC/o2eppsFg1vtjVXhooXXbQC/T5X1DAsHY2OMgvRpj
kZZ7cYE4LefR7ZzC4JPIEQN4j3BxL59qeiZO/Q/M4AT3t/1A651zCZ/DmR6Csxmy
OhIguziEsGiw9+6ytSLMwoWcHwinghhB+x1B9p4Er9fyBVbPrEnCVfjbc+bg1CDE
JiEvDbfODbUBWRk/GmIo2P8VGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH4VfpM2
WfnfQQIn9KxmsE5ZUcDDMB8GA1UdIwQYMBaAFJq2huPCmap+RFVJNJW0a6WnRAmd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNkQ4Qi9CMkYyMzVCMjY3
MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFuNUVWVWswbGJScnBhZEVD
WjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21yYUc0OEtacW41RVZVazBsYlJycGFkRUNaMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NkQ4Qi9CMkYyMzVCMjY3MjAxMUVFQTE0NkMyMkRDNEY5QUUwMi9tcmFHNDhLWnFu
NUVWVWswbGJScnBhZEVDWjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBIYF9GGQ0wl+KfBWZXob+dLOQ5abNKDIQmzkfXeZdjEQ9JSBKr2ijM
JYMHZuUWypYcBfblyGjyjUo30O7Clxc9px3dZ7BgGUk2vmSmqK7MkMERzNLnZ3SJ
rEUwm9G1hjinhhZN4siWPNtLwgIqPTPZWBXGQa9CbheT8jLPF4wKI+NnuNyp5s4/
BelG9qbIkFwgiZEGqMS+7gQRXBLU9yRyAjDT5lphFUONKUcss7iu7RgNmaBsKFi6
4Wh/NYEzOHauwYyow1GP16npTpYc7KmcMklNL++Yrb86USs/jW+RdD8tEJUIPp68
xZW0SBfRTtVN1p3ha9WSFkbKRFl9hvR9
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:41:14 2025 by rpki-client