Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
File:                     BcMvXW_ZVny3AAWx10pBqFtb5xI.mft (raw, json)
Hash identifier:          zpFcZybvmTeqZtD+YZ0NXGhes75qim9QCHajJEIwGIs=
Subject key identifier:   72:0F:90:70:32:6B:A8:19:B5:F2:9B:3F:21:51:30:E4:84:6D:60:FE
Authority key identifier: 05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12
Certificate issuer:       /CN=A91BB5D3/serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
Certificate serial:       064E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
Manifest number:          0642
Signing time:             Fri 08 Aug 2025 23:09:16 +0000
Manifest this update:     Fri 08 Aug 2025 23:09:15 +0000
Manifest next update:     Fri 15 Aug 2025 23:09:15 +0000
Files and hashes:         1: BcMvXW_ZVny3AAWx10pBqFtb5xI.crl (hash: FZJP4AleZ9QZNeDpYGKotvicqKcBWD+1oOPvDMCOShI=)
                          2: F164038CBBE211ED8685DC61C4F9AE02.roa (hash: NBdHfFLz3DL0xp9ly121d+fttg0f9aauvwFg8/4e9ds=)
                          3: 27B648124C9C11ECACB77370C4F9AE02.roa (hash: LKITiJ4ISd4LnGgW0YqiQuvoGRC1GVrRJfh2GhffjxY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl
                          rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1614 (0x64e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB5D3, serialNumber=05C32F5D6FD9567CB70005B1D74A41A85B5BE712
        Validity
            Not Before: Aug  8 23:09:15 2025 GMT
            Not After : Aug 15 23:09:15 2025 GMT
        Subject: CN=6896839c-286f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e7:52:92:2b:ff:f8:f7:e4:f9:c7:4f:91:46:
                    26:7b:7b:ea:d9:3a:a3:8e:aa:29:29:49:0a:a3:e8:
                    fb:03:10:51:82:35:66:b0:d7:82:f9:9b:be:27:11:
                    a8:5a:2c:c7:3e:c7:38:a9:cd:5c:38:4d:d6:63:c9:
                    7b:13:eb:3a:fd:6a:d9:c8:36:0e:fd:74:5b:9e:9f:
                    73:d4:c1:ea:2b:9e:cf:89:8a:89:87:6a:cd:cb:69:
                    8e:87:31:33:93:dc:b5:6a:05:fd:90:47:3c:f2:d3:
                    0e:e3:c7:3d:43:26:fb:dd:56:c1:3e:c2:a8:b5:5e:
                    82:d1:ba:ef:d9:63:17:55:e0:83:8b:b6:bc:52:ab:
                    52:9d:bb:47:bd:50:c1:a6:00:9e:22:ca:f8:cc:cc:
                    e6:56:5a:10:60:2f:fe:1f:c8:0e:ad:c3:7b:21:fa:
                    82:6c:46:c3:bd:f8:b0:77:89:35:94:c9:02:d0:a0:
                    23:32:30:73:96:68:eb:58:14:9f:e0:41:f4:df:07:
                    0a:f8:b3:4d:79:4b:e6:6b:b4:7f:09:2d:0a:06:10:
                    87:58:14:80:65:69:9e:ba:4c:63:b1:87:09:1a:3d:
                    aa:fd:15:ee:02:3e:99:aa:45:7f:5e:11:18:7a:ea:
                    f0:69:ec:25:44:61:9c:f7:78:6f:06:24:ba:3e:2e:
                    fc:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0F:90:70:32:6B:A8:19:B5:F2:9B:3F:21:51:30:E4:84:6D:60:FE
            X509v3 Authority Key Identifier:
                keyid:05:C3:2F:5D:6F:D9:56:7C:B7:00:05:B1:D7:4A:41:A8:5B:5B:E7:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BcMvXW_ZVny3AAWx10pBqFtb5xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB5D3/6CA9D690A1A811EB83214C74C4F9AE02/BcMvXW_ZVny3AAWx10pBqFtb5xI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:30:7b:e4:c8:96:df:8c:46:e9:a0:be:18:fa:04:4c:b1:8c:
         b3:e3:03:d9:87:13:3e:a8:ad:5b:23:d9:6a:78:16:2e:75:7a:
         01:a7:af:07:dc:4a:dd:c0:c7:4f:0c:5f:af:26:c4:76:66:5b:
         f8:4c:ad:25:df:be:15:68:b1:a1:34:c0:0a:0f:9f:5e:99:29:
         40:bf:b1:40:18:ea:58:3c:12:b8:9c:b3:b0:8b:46:be:7f:28:
         0a:bc:f9:2f:fa:a7:a6:8a:a3:41:71:64:4e:99:25:64:68:ce:
         bb:96:08:26:74:ac:24:c4:cc:fb:c3:a5:fb:c1:eb:cf:84:cd:
         47:fe:2f:91:72:10:ea:bd:9e:bb:2c:55:f9:93:d2:ff:e5:11:
         4a:5c:f3:ed:2b:0b:69:c6:77:1c:ea:e6:88:51:26:82:ed:fc:
         10:5d:f9:0d:7f:ad:e8:96:38:a2:64:b3:f4:25:c8:9f:87:f2:
         b2:1f:e2:50:4e:27:09:6e:19:2e:86:29:19:dd:11:15:d0:96:
         bd:2a:19:90:f0:8c:f9:20:fd:57:4a:03:b6:48:f2:5f:7e:28:
         4a:23:d7:2c:f6:d9:b2:ef:13:ae:57:34:14:0e:91:7b:fc:ac:
         f7:84:70:14:11:cf:97:ec:c6:50:90:77:74:43:8e:56:b0:02:
         1e:e5:65:cc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBk4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI1RDMxMTAvBgNVBAUTKDA1QzMyRjVENkZEOTU2N0NCNzAwMDVCMUQ3NEE0MUE4
NUI1QkU3MTIwHhcNMjUwODA4MjMwOTE1WhcNMjUwODE1MjMwOTE1WjAYMRYwFAYD
VQQDEw02ODk2ODM5Yy0yODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0udSkiv/+Pfk+cdPkUYme3vq2TqjjqopKUkKo+j7AxBRgjVmsNeC+Zu+JxGo
WizHPsc4qc1cOE3WY8l7E+s6/WrZyDYO/XRbnp9z1MHqK57PiYqJh2rNy2mOhzEz
k9y1agX9kEc88tMO48c9Qyb73VbBPsKotV6C0brv2WMXVeCDi7a8UqtSnbtHvVDB
pgCeIsr4zMzmVloQYC/+H8gOrcN7IfqCbEbDvfiwd4k1lMkC0KAjMjBzlmjrWBSf
4EH03wcK+LNNeUvma7R/CS0KBhCHWBSAZWmeukxjsYcJGj2q/RXuAj6ZqkV/XhEY
eurwaewlRGGc93hvBiS6Pi78WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHIPkHAy
a6gZtfKbPyFRMOSEbWD+MB8GA1UdIwQYMBaAFAXDL11v2VZ8twAFsddKQahbW+cS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjVEMy82Q0E5RDY5MEEx
QTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZueTNBQVd4MTBwQnFGdGI1
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JjTXZYV19aVm55M0FBV3gxMHBCcUZ0YjV4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjVEMy82Q0E5RDY5MEExQTgxMUVCODMyMTRDNzRDNEY5QUUwMi9CY012WFdfWlZu
eTNBQVd4MTBwQnFGdGI1eEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQMHvkyJbfjEbpoL4Y+gRMsYyz4wPZhxM+qK1bI9lqeBYudXoBp68H
3ErdwMdPDF+vJsR2Zlv4TK0l374VaLGhNMAKD59emSlAv7FAGOpYPBK4nLOwi0a+
fygKvPkv+qemiqNBcWROmSVkaM67lggmdKwkxMz7w6X7wevPhM1H/i+RchDqvZ67
LFX5k9L/5RFKXPPtKwtpxncc6uaIUSaC7fwQXfkNf63oljiiZLP0Jcifh/KyH+JQ
TicJbhkuhikZ3REV0Ja9KhmQ8Iz5IP1XSgO2SPJffihKI9cs9tmy7xOuVzQUDpF7
/Kz3hHAUEc+X7MZQkHd0Q45WsAIe5WXM
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:59:46 2025 by rpki-client