Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
File:                     KYEeHbBovbur-3q2lfhYmL1hjGk.mft (raw, json)
Hash identifier:          xAEQHD1eE7U8z/t2KplLlhUhtk8a9NoXNJOmORjl9RE=
Subject key identifier:   31:A9:A7:CF:72:C0:28:9F:B7:FA:40:E0:57:BF:77:B6:B5:9C:0E:8A
Authority key identifier: 29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69
Certificate issuer:       /CN=A91B0CAE/serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
Manifest number:          0157
Signing time:             Sat 09 Aug 2025 04:30:25 +0000
Manifest this update:     Sat 09 Aug 2025 04:30:24 +0000
Manifest next update:     Sat 16 Aug 2025 04:30:24 +0000
Files and hashes:         1: KYEeHbBovbur-3q2lfhYmL1hjGk.crl (hash: ZVytp4Fc7JAaDIq9H81GGo01XUdTgSRVf6tX+EbVxlM=)
                          2: 0B2052EA6D0D11EEA65D7522C4F9AE02.roa (hash: romYbuiWzdOqklzJCkUsUwW/w4kh63Rd2xMFubLjgPo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl
                          rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0CAE, serialNumber=29811E1DB068BDBBABFB7AB695F85898BD618C69
        Validity
            Not Before: Aug  9 04:30:24 2025 GMT
            Not After : Aug 16 04:30:24 2025 GMT
        Subject: CN=6896cee0-01b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:de:f4:bf:2c:42:a7:0c:30:75:30:e3:bd:
                    b1:c6:7b:72:2b:03:16:b0:6a:5c:d1:da:ee:bd:d7:
                    1f:1b:52:4a:39:cb:5b:85:89:07:0a:4f:b8:b2:ad:
                    81:d9:68:b8:cb:09:21:0e:b3:00:bc:b5:24:a9:31:
                    d7:1e:28:43:47:63:b3:e5:f1:c3:4f:c2:19:9b:17:
                    f6:a5:8c:b2:1f:dc:ca:41:0d:cd:15:66:72:f6:5f:
                    c5:3b:62:e2:2f:a4:18:7c:ea:44:c9:45:36:ea:6b:
                    08:c7:9c:88:9c:5b:06:d8:76:3c:e2:fa:fd:e8:96:
                    95:21:1f:ac:df:ed:9e:5b:e1:de:9a:b2:03:02:48:
                    3f:c4:42:2b:53:51:95:78:44:45:ad:fe:47:63:06:
                    23:b6:71:55:17:11:78:74:01:76:eb:cb:c1:79:25:
                    b3:6a:16:a8:87:a0:a3:4d:7f:f9:99:44:2b:da:20:
                    86:ae:4a:b7:dd:ce:34:03:43:84:57:a4:d9:73:f6:
                    24:ae:82:37:d6:ae:5c:0b:67:42:06:2c:f8:ba:db:
                    5b:ce:6c:bb:7e:7e:a0:a1:a3:8d:fc:28:42:0e:5f:
                    71:a7:ae:fc:47:98:52:ec:67:29:df:49:33:36:2a:
                    95:5e:0e:18:d0:cd:29:f0:35:af:89:e6:ae:04:e7:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A9:A7:CF:72:C0:28:9F:B7:FA:40:E0:57:BF:77:B6:B5:9C:0E:8A
            X509v3 Authority Key Identifier:
                keyid:29:81:1E:1D:B0:68:BD:BB:AB:FB:7A:B6:95:F8:58:98:BD:61:8C:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KYEeHbBovbur-3q2lfhYmL1hjGk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0CAE/7C644EE66A7111EEA5B4CB26C4F9AE02/KYEeHbBovbur-3q2lfhYmL1hjGk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:e4:7d:fa:ac:7c:37:ab:21:82:8a:36:cb:8d:5c:91:5e:e8:
         d9:4c:f5:b2:d1:d7:9e:a3:ae:82:ed:85:14:74:b4:b8:22:d1:
         a8:2a:82:34:d6:8d:fc:03:3a:e8:9c:79:b0:ad:45:38:e7:04:
         6c:a0:f9:6f:70:5a:cd:b9:2b:26:98:4e:8a:00:94:5d:ec:2d:
         a9:e3:d6:17:e9:3b:ba:8f:60:f9:5f:0d:20:45:65:fa:ef:68:
         dc:52:f4:09:b0:2e:dc:2a:3e:87:fd:b0:1e:fa:0c:93:da:eb:
         d7:f8:bb:83:8a:a3:2b:ff:2c:0c:ce:ec:5f:e6:23:28:26:ce:
         66:a0:14:f6:ec:50:75:74:1b:30:52:e1:eb:96:0e:ab:3d:a6:
         89:2c:1d:d6:ea:62:56:83:1d:53:c1:f7:82:6f:e7:89:25:a8:
         42:62:59:84:4f:89:eb:a9:26:66:2d:29:6f:86:83:6c:52:ae:
         af:f6:5c:53:35:7e:66:a6:1c:93:05:ef:d7:68:f2:ea:e5:25:
         95:48:93:3d:0d:2b:c8:8c:ee:49:a7:12:b7:4e:11:00:f6:35:
         c2:03:2d:cd:ec:57:b5:01:44:e7:46:fd:ac:3e:ce:f2:a2:88:
         95:91:e4:6b:0c:4d:0e:ae:21:5a:40:49:8b:6b:4b:b9:ba:99:
         82:0a:c6:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBDQUUxMTAvBgNVBAUTKDI5ODExRTFEQjA2OEJEQkJBQkZCN0FCNjk1Rjg1ODk4
QkQ2MThDNjkwHhcNMjUwODA5MDQzMDI0WhcNMjUwODE2MDQzMDI0WjAYMRYwFAYD
VQQDEw02ODk2Y2VlMC0wMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApkfe9L8sQqcMMHUw472xxntyKwMWsGpc0druvdcfG1JKOctbhYkHCk+4sq2B
2Wi4ywkhDrMAvLUkqTHXHihDR2Oz5fHDT8IZmxf2pYyyH9zKQQ3NFWZy9l/FO2Li
L6QYfOpEyUU26msIx5yInFsG2HY84vr96JaVIR+s3+2eW+HemrIDAkg/xEIrU1GV
eERFrf5HYwYjtnFVFxF4dAF268vBeSWzahaoh6CjTX/5mUQr2iCGrkq33c40A0OE
V6TZc/YkroI31q5cC2dCBiz4uttbzmy7fn6goaON/ChCDl9xp678R5hS7Gcp30kz
NiqVXg4Y0M0p8DWvieauBOf68wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGpp89y
wCift/pA4Fe/d7a1nA6KMB8GA1UdIwQYMBaAFCmBHh2waL27q/t6tpX4WJi9YYxp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMENBRS83QzY0NEVFNjZB
NzExMUVFQTVCNENCMjZDNEY5QUUwMi9LWUVlSGJCb3ZidXItM3EybGZoWW1MMWhq
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tZRWVIYkJvdmJ1ci0zcTJsZmhZbUwxaGpHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MENBRS83QzY0NEVFNjZBNzExMUVFQTVCNENCMjZDNEY5QUUwMi9LWUVlSGJCb3Zi
dXItM3EybGZoWW1MMWhqR2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCo5H36rHw3qyGCijbLjVyRXujZTPWy0deeo66C7YUUdLS4ItGoKoI0
1o38AzronHmwrUU45wRsoPlvcFrNuSsmmE6KAJRd7C2p49YX6Tu6j2D5Xw0gRWX6
72jcUvQJsC7cKj6H/bAe+gyT2uvX+LuDiqMr/ywMzuxf5iMoJs5moBT27FB1dBsw
UuHrlg6rPaaJLB3W6mJWgx1TwfeCb+eJJahCYlmET4nrqSZmLSlvhoNsUq6v9lxT
NX5mphyTBe/XaPLq5SWVSJM9DSvIjO5JpxK3ThEA9jXCAy3N7Fe1AUTnRv2sPs7y
ooiVkeRrDE0OriFaQEmLa0u5upmCCsY2
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:47:12 2025 by rpki-client