Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
File:                     i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft (raw, json)
Hash identifier:          hp+dw1YKt+LUoXzzAQeKqrasPS15EvEPYPKRFivHAew=
Subject key identifier:   FC:69:D8:22:6D:97:0C:08:0A:46:19:CC:95:DA:F0:4D:89:C9:6E:0B
Authority key identifier: 8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B
Certificate issuer:       /CN=A91BE056/serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B
Certificate serial:       056B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
Manifest number:          055F
Signing time:             Sun 10 Aug 2025 23:30:18 +0000
Manifest this update:     Sun 10 Aug 2025 23:30:17 +0000
Manifest next update:     Sun 17 Aug 2025 23:30:17 +0000
Files and hashes:         1: i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl (hash: D6LULlWDP9+ZK/10C53Bibo8HIcK+H+D6l6fTKpdmdc=)
                          2: F18DB130603911EF930C0567C4F9AE02.roa (hash: bMyNaPmBlCzUdt5NHJjdyDhr0LajMy+L36w7sDnDjCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl
                          rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 Aug 2025 23:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387 (0x56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE056, serialNumber=8BC01CEA44D3ED88F4153172B792456715C5260B
        Validity
            Not Before: Aug 10 23:30:17 2025 GMT
            Not After : Aug 17 23:30:17 2025 GMT
        Subject: CN=68992b89-c59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:7d:93:f5:0c:c3:90:52:1d:58:f8:b3:b4:11:
                    11:19:1a:01:87:a2:ba:25:fd:34:44:9f:98:3a:f6:
                    ef:42:81:bf:93:5b:81:f5:73:a4:cc:11:7a:8c:ad:
                    64:1e:7f:92:4b:c5:96:d2:6d:4c:79:94:82:78:13:
                    47:f2:ee:02:10:f7:68:22:22:a1:a1:8c:b0:a3:89:
                    26:80:90:7c:85:1e:4b:db:99:e7:c8:76:2a:62:14:
                    15:42:e1:6a:17:e2:a3:2a:f5:47:81:82:19:54:7f:
                    d3:ec:e5:21:ec:3c:3a:f8:f0:1d:04:d2:bc:63:7f:
                    43:6c:d3:95:06:3a:cc:69:9e:30:4a:ba:7e:06:87:
                    ec:54:ed:87:58:07:43:b9:4c:2e:1e:86:5d:99:86:
                    cd:11:57:7c:2b:e8:0b:84:de:88:ea:cb:5f:5d:5a:
                    27:c2:f7:ea:ac:d9:43:01:32:26:28:b7:38:65:a5:
                    0d:19:7b:af:7d:e5:06:b0:c6:aa:c3:a4:d3:b1:f8:
                    58:79:c6:5b:04:39:80:9c:57:d8:92:56:67:6d:2f:
                    da:58:e4:65:0b:d7:65:8e:6f:66:17:e8:54:a3:bf:
                    92:8f:f8:3e:d2:e7:20:80:48:d6:bf:cc:01:35:a3:
                    b6:55:62:a5:04:7e:5e:c4:f5:13:2e:24:54:29:9e:
                    95:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:69:D8:22:6D:97:0C:08:0A:46:19:CC:95:DA:F0:4D:89:C9:6E:0B
            X509v3 Authority Key Identifier:
                keyid:8B:C0:1C:EA:44:D3:ED:88:F4:15:31:72:B7:92:45:67:15:C5:26:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/FB59344EFB1C11EBB5464F64C4F9AE02/i8Ac6kTT7Yj0FTFyt5JFZxXFJgs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:89:44:fc:dd:c9:17:d9:d8:62:38:c0:2a:52:33:b4:03:75:
         0b:69:24:0b:3d:9b:4b:68:d5:cf:ab:51:f5:64:e3:fa:3b:8b:
         67:19:d2:d6:fc:d7:51:cb:f3:74:b1:86:18:c9:c0:80:5d:87:
         04:b8:a3:b3:4e:76:0a:ad:eb:f3:a5:39:57:52:33:76:ab:54:
         48:2d:3f:67:de:a4:58:f3:b7:18:ed:3d:38:37:6c:60:0e:6d:
         47:74:3a:4d:b4:6a:b8:41:cc:56:be:eb:40:c6:fc:8d:0e:6d:
         05:56:97:6e:2a:9c:4a:6d:5a:ac:bf:73:80:ff:81:7b:9a:32:
         3c:cd:44:34:1b:5c:ac:3d:ae:dd:c8:ca:06:ac:ed:8a:3f:93:
         85:67:dc:98:6e:98:79:bb:ec:af:cf:b4:4b:63:11:37:64:ce:
         ba:f9:59:fc:96:66:ac:03:74:13:a5:f2:02:89:4b:32:d0:47:
         30:af:af:e8:91:b2:7a:c7:f7:94:50:a7:59:b5:2f:85:71:5d:
         b7:69:8a:df:26:27:3e:15:0b:1b:16:d8:cd:68:53:d1:ad:31:
         aa:d6:99:49:5c:fa:ef:eb:0b:dc:e1:10:fd:64:6a:d3:e9:53:
         cc:5f:9c:c3:05:41:f3:53:9c:8f:91:36:5b:aa:e1:a2:b3:98:
         54:9e:0a:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUwNTYxMTAvBgNVBAUTKDhCQzAxQ0VBNDREM0VEODhGNDE1MzE3MkI3OTI0NTY3
MTVDNTI2MEIwHhcNMjUwODEwMjMzMDE3WhcNMjUwODE3MjMzMDE3WjAYMRYwFAYD
VQQDEw02ODk5MmI4OS1jNTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzn2T9QzDkFIdWPiztBERGRoBh6K6Jf00RJ+YOvbvQoG/k1uB9XOkzBF6jK1k
Hn+SS8WW0m1MeZSCeBNH8u4CEPdoIiKhoYywo4kmgJB8hR5L25nnyHYqYhQVQuFq
F+KjKvVHgYIZVH/T7OUh7Dw6+PAdBNK8Y39DbNOVBjrMaZ4wSrp+BofsVO2HWAdD
uUwuHoZdmYbNEVd8K+gLhN6I6stfXVonwvfqrNlDATImKLc4ZaUNGXuvfeUGsMaq
w6TTsfhYecZbBDmAnFfYklZnbS/aWORlC9dljm9mF+hUo7+Sj/g+0ucggEjWv8wB
NaO2VWKlBH5exPUTLiRUKZ6VpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPxp2CJt
lwwICkYZzJXa8E2JyW4LMB8GA1UdIwQYMBaAFIvAHOpE0+2I9BUxcreSRWcVxSYL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni9GQjU5MzQ0RUZC
MUMxMUVCQjU0NjRGNjRDNEY5QUUwMi9pOEFjNmtUVDdZajBGVEZ5dDVKRlp4WEZK
Z3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2k4QWM2a1RUN1lqMEZURnl0NUpGWnhYRkpncy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RTA1Ni9GQjU5MzQ0RUZCMUMxMUVCQjU0NjRGNjRDNEY5QUUwMi9pOEFjNmtUVDdZ
ajBGVEZ5dDVKRlp4WEZKZ3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCPiUT83ckX2dhiOMAqUjO0A3ULaSQLPZtLaNXPq1H1ZOP6O4tnGdLW
/NdRy/N0sYYYycCAXYcEuKOzTnYKrevzpTlXUjN2q1RILT9n3qRY87cY7T04N2xg
Dm1HdDpNtGq4QcxWvutAxvyNDm0FVpduKpxKbVqsv3OA/4F7mjI8zUQ0G1ysPa7d
yMoGrO2KP5OFZ9yYbph5u+yvz7RLYxE3ZM66+Vn8lmasA3QTpfICiUsy0Ecwr6/o
kbJ6x/eUUKdZtS+FcV23aYrfJic+FQsbFtjNaFPRrTGq1plJXPrv6wvc4RD9ZGrT
6VPMX5zDBUHzU5yPkTZbquGis5hUngoe
-----END CERTIFICATE-----
Generated at Tue Aug 12 14:49:08 2025 by rpki-client