Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
File:                     EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft (raw, json)
Hash identifier:          sdkcMPhte3L7JnYYvRHrQb1r8EsZ/IJIJZ6oNxMxazE=
Subject key identifier:   01:A5:3D:41:0A:2E:C6:24:0D:CA:D1:E4:68:93:35:93:ED:4A:02:EC
Authority key identifier: 10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F
Certificate issuer:       /CN=A91C9B37/serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
Manifest number:          27
Signing time:             Sat 09 Aug 2025 08:18:53 +0000
Manifest this update:     Sat 09 Aug 2025 08:18:53 +0000
Manifest next update:     Sat 16 Aug 2025 08:18:53 +0000
Files and hashes:         1: EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl (hash: auR5RYBhscfab+7Wi5zfHrz0PPWF2hy1mLOBZ5k8PFw=)
                          2: 83CD918C3CA311F0AA61F12FC4F9AE02.roa (hash: ywFi/gtNdU8lkRVCHL6UwO/AhdTyOkF+YDOHO/p5BdE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B37, serialNumber=107DE26D17E31A048906ECAB59834FFEB148110F
        Validity
            Not Before: Aug  9 08:18:53 2025 GMT
            Not After : Aug 16 08:18:53 2025 GMT
        Subject: CN=6897046d-b5f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:e6:cc:22:42:49:9f:58:ed:c6:d6:a3:1f:
                    98:53:ed:5e:3b:78:09:16:89:e9:68:ed:ec:5d:f4:
                    49:dd:0e:69:3c:40:db:29:c8:86:cb:41:96:85:ab:
                    ad:08:20:f7:11:3f:98:76:3e:77:eb:32:a5:bf:84:
                    32:67:c8:ff:25:40:26:87:93:3a:bb:a3:28:f9:43:
                    66:15:16:25:c8:00:f9:b3:93:1e:d6:07:de:ad:29:
                    23:ff:4a:fa:d0:1b:f1:f0:92:e9:cf:7f:f7:b2:b6:
                    f8:5c:ca:3b:fe:95:a3:af:36:88:8f:a1:1d:eb:5f:
                    e1:a4:29:51:80:f6:bf:5f:41:9f:b0:89:76:12:fa:
                    18:3b:3b:8a:fe:cf:7b:6b:94:38:d9:2c:47:3f:66:
                    07:7a:85:c4:bc:ba:75:55:a4:3f:f5:d9:43:da:d6:
                    73:64:eb:d0:54:37:5c:4f:b6:f1:b7:00:3d:9b:a6:
                    01:a8:8a:93:8b:d6:bd:5d:48:86:b8:c1:a0:e4:bf:
                    2b:64:60:9f:61:39:18:f6:96:2d:48:b8:46:2b:43:
                    1f:f9:8a:49:34:d8:ce:aa:a2:38:82:29:f8:fd:8f:
                    14:b3:79:50:40:86:ab:c1:80:bf:4b:15:44:42:db:
                    e5:5a:d8:45:36:b9:31:8c:26:b5:5f:be:6e:46:37:
                    90:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A5:3D:41:0A:2E:C6:24:0D:CA:D1:E4:68:93:35:93:ED:4A:02:EC
            X509v3 Authority Key Identifier:
                keyid:10:7D:E2:6D:17:E3:1A:04:89:06:EC:AB:59:83:4F:FE:B1:48:11:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B37/34CD08CE3CA311F08A495C2FC4F9AE02/EH3ibRfjGgSJBuyrWYNP_rFIEQ8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:23:0b:9e:35:3a:7f:69:ec:ab:bd:fa:9a:2b:91:15:4f:93:
         03:f3:cd:a9:32:e6:aa:25:42:bc:49:9e:93:75:aa:7d:f5:2a:
         48:8b:fa:58:64:50:72:d7:29:c6:76:45:a3:c6:c1:46:ce:0d:
         fa:98:83:1c:64:72:1d:ec:51:f4:e9:d0:40:37:db:6d:2a:5f:
         7e:47:63:23:24:2e:f8:d5:e2:7e:6b:c3:35:e2:8c:af:5f:a8:
         01:8f:90:72:b6:96:17:d2:8a:8a:62:bc:df:50:a5:da:73:f6:
         f6:5e:8b:fc:9a:ba:b3:47:f1:2f:b4:57:3b:8e:05:04:87:79:
         f9:9a:e8:15:55:49:b1:ee:d5:fb:78:73:51:ed:b4:63:26:c3:
         3d:56:54:24:f3:75:9d:c5:28:a1:72:88:4f:56:75:89:a9:e4:
         08:06:0e:12:4f:b4:c6:c1:2a:06:71:f3:8c:5b:c1:ed:f2:53:
         37:d6:ab:02:29:59:98:01:06:be:28:e5:f0:e1:7c:b8:b7:cf:
         6e:b6:79:fa:a5:7b:8a:2e:94:56:d8:7d:5d:56:da:e6:01:92:
         0d:ef:9d:01:a9:57:8c:f1:30:7a:29:f8:5e:85:df:66:e6:05:
         da:ac:f6:13:5e:78:88:f2:86:de:e0:28:b0:ba:6a:53:97:0f:
         9c:17:90:46
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
OUIzNzExMC8GA1UEBRMoMTA3REUyNkQxN0UzMUEwNDg5MDZFQ0FCNTk4MzRGRkVC
MTQ4MTEwRjAeFw0yNTA4MDkwODE4NTNaFw0yNTA4MTYwODE4NTNaMBgxFjAUBgNV
BAMTDTY4OTcwNDZkLWI1ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDA0ObMIkJJn1jtxtajH5hT7V47eAkWielo7exd9EndDmk8QNspyIbLQZaFq60I
IPcRP5h2PnfrMqW/hDJnyP8lQCaHkzq7oyj5Q2YVFiXIAPmzkx7WB96tKSP/SvrQ
G/HwkunPf/eytvhcyjv+laOvNoiPoR3rX+GkKVGA9r9fQZ+wiXYS+hg7O4r+z3tr
lDjZLEc/Zgd6hcS8unVVpD/12UPa1nNk69BUN1xPtvG3AD2bpgGoipOL1r1dSIa4
waDkvytkYJ9hORj2li1IuEYrQx/5ikk02M6qojiCKfj9jxSzeVBAhqvBgL9LFURC
2+Va2EU2uTGMJrVfvm5GN5DhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAaU9QQou
xiQNytHkaJM1k+1KAuwwHwYDVR0jBBgwFoAUEH3ibRfjGgSJBuyrWYNP/rFIEQ8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5QjM3LzM0Q0QwOENFM0NB
MzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dTSkJ1eXJXWU5QX3JGSUVR
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRUgzaWJSZmpHZ1NKQnV5cldZTlBfckZJRVE4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5
QjM3LzM0Q0QwOENFM0NBMzExRjA4QTQ5NUMyRkM0RjlBRTAyL0VIM2liUmZqR2dT
SkJ1eXJXWU5QX3JGSUVROC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGAjC541On9p7Ku9+porkRVPkwPzzaky5qolQrxJnpN1qn31KkiL+lhk
UHLXKcZ2RaPGwUbODfqYgxxkch3sUfTp0EA3220qX35HYyMkLvjV4n5rwzXijK9f
qAGPkHK2lhfSiopivN9Qpdpz9vZei/yaurNH8S+0VzuOBQSHefma6BVVSbHu1ft4
c1HttGMmwz1WVCTzdZ3FKKFyiE9WdYmp5AgGDhJPtMbBKgZx84xbwe3yUzfWqwIp
WZgBBr4o5fDhfLi3z262efqle4oulFbYfV1W2uYBkg3vnQGpV4zxMHop+F6F32bm
Bdqs9hNeeIjyht7gKLC6alOXD5wXkEY=
-----END CERTIFICATE-----
Generated at Mon Aug 11 08:49:42 2025 by rpki-client