Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
File:                     _D97sEVCVvMfJcoAhkvDpr11X5Y.mft (raw, json)
Hash identifier:          L+rMlv33Bf7CtjmP2iEQSEcSxc+rYrN5j1uRuklgHpg=
Subject key identifier:   46:D1:F0:E5:B2:B1:91:35:32:C7:3E:E9:A3:E7:DC:3E:6D:7E:4A:15
Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
Certificate issuer:       /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Certificate serial:       0234
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
Manifest number:          0230
Signing time:             Sat 09 Aug 2025 02:26:56 +0000
Manifest this update:     Sat 09 Aug 2025 02:26:56 +0000
Manifest next update:     Sat 16 Aug 2025 02:26:56 +0000
Files and hashes:         1: _D97sEVCVvMfJcoAhkvDpr11X5Y.crl (hash: 5iSGJYIJoIT2vqpHk0AXS2bfp+FbFL/Xeuhbqwvur/w=)
                          2: 97B4F5603B3D11ED822BB46CC4F9AE02.roa (hash: XDsE6Ddixa5A+mdde/4fTJzczS6XmbdyS2Na1+31tR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
        Validity
            Not Before: Aug  9 02:26:56 2025 GMT
            Not After : Aug 16 02:26:56 2025 GMT
        Subject: CN=6896b1f0-7dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f9:2a:f1:9b:71:32:8e:9e:fc:83:ec:16:4b:
                    42:87:93:c0:b3:87:10:c8:e7:49:6e:15:58:ef:55:
                    5e:6d:b0:68:d0:eb:e4:fd:df:fb:0a:8f:79:70:64:
                    a4:53:49:98:43:a7:66:09:c4:6b:24:37:06:66:6f:
                    3a:6b:0b:9b:c1:00:eb:f7:ed:39:dd:5c:e0:cd:a0:
                    33:13:30:ba:b5:94:67:f4:e0:79:da:cc:ac:eb:3c:
                    a5:cd:85:e3:f2:f2:7c:8e:75:c5:99:b8:53:13:ba:
                    0e:91:40:89:3b:c7:3c:52:85:60:ef:f9:fe:7e:39:
                    a1:d5:53:1d:b8:1c:86:26:4d:fb:c6:47:e8:70:83:
                    a3:58:ef:0f:77:47:03:a3:d7:10:4f:3e:3b:bd:49:
                    ae:fe:24:56:e3:ee:1b:e8:19:04:b0:93:0e:b2:9e:
                    13:49:a5:e4:02:fb:f8:cb:df:1a:fb:b4:17:89:f7:
                    df:42:61:ad:c0:12:be:37:69:39:7b:fa:53:1d:99:
                    c8:52:ac:7c:a1:41:b2:c4:51:c2:a6:d5:35:38:3f:
                    3e:66:0e:ff:e3:15:ae:ce:5e:60:0b:82:27:b7:a0:
                    9d:5e:19:9b:65:21:3a:af:00:b9:b5:38:ef:98:19:
                    ac:75:d6:00:31:01:57:89:1c:ee:01:35:d9:37:12:
                    de:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D1:F0:E5:B2:B1:91:35:32:C7:3E:E9:A3:E7:DC:3E:6D:7E:4A:15
            X509v3 Authority Key Identifier:
                keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:aa:8b:65:4e:3c:a6:31:3b:75:35:c2:4e:cc:be:22:8a:da:
         cc:4e:75:db:6f:45:9e:78:51:83:17:4a:10:5b:3c:2c:ad:93:
         bf:a5:88:d0:c9:26:b5:35:6d:55:92:8f:12:b4:2d:49:4f:4d:
         20:11:c5:c7:1c:bf:e1:58:fb:15:9d:22:bf:f0:4f:cb:7f:77:
         20:c1:16:e3:c4:36:94:55:bd:1c:33:97:9a:1e:7f:85:2a:3a:
         a4:7a:e8:60:8f:ed:8f:a3:22:95:e2:5f:ef:23:37:a1:c8:9e:
         ba:a7:99:93:1e:ec:25:9d:c0:cb:68:e9:d2:4a:c7:ba:8c:7d:
         df:30:b6:33:28:22:9e:c7:a6:93:d8:6f:a2:64:44:73:10:a5:
         06:83:0e:53:a6:39:1d:6d:b1:fa:ac:ce:5f:55:91:0e:eb:70:
         94:64:3f:9b:b1:b5:e8:22:b2:ed:ba:dc:d1:a1:d0:84:9a:32:
         fd:f0:89:0c:5e:d8:a3:4c:de:1b:57:36:62:02:63:25:d4:56:
         29:44:dc:94:d2:07:b4:36:e2:fd:e5:47:49:58:37:7b:cc:c9:
         86:43:ce:b5:c2:b9:5b:24:42:ad:dd:ff:f8:43:74:be:3f:ff:
         8b:54:86:ce:ff:78:5f:12:3c:b0:82:a5:16:cf:d2:59:da:70:
         39:ca:fe:17
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0UyREUxMTAvBgNVBAUTKEZDM0Y3QkIwNDU0MjU2RjMxRjI1Q0EwMDg2NEJDM0E2
QkQ3NTVGOTYwHhcNMjUwODA5MDIyNjU2WhcNMjUwODE2MDIyNjU2WjAYMRYwFAYD
VQQDEw02ODk2YjFmMC03ZGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5fkq8ZtxMo6e/IPsFktCh5PAs4cQyOdJbhVY71VebbBo0Ovk/d/7Co95cGSk
U0mYQ6dmCcRrJDcGZm86awubwQDr9+053VzgzaAzEzC6tZRn9OB52sys6zylzYXj
8vJ8jnXFmbhTE7oOkUCJO8c8UoVg7/n+fjmh1VMduByGJk37xkfocIOjWO8Pd0cD
o9cQTz47vUmu/iRW4+4b6BkEsJMOsp4TSaXkAvv4y98a+7QXifffQmGtwBK+N2k5
e/pTHZnIUqx8oUGyxFHCptU1OD8+Zg7/4xWuzl5gC4Int6CdXhmbZSE6rwC5tTjv
mBmsddYAMQFXiRzuATXZNxLeNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbR8OWy
sZE1Msc+6aPn3D5tfkoVMB8GA1UdIwQYMBaAFPw/e7BFQlbzHyXKAIZLw6a9dV+W
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTJERS9BQkRFRTg3QTM3
RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2TWZKY29BaGt2RHByMTFY
NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19EOTdzRVZDVnZNZkpjb0Foa3ZEcHIxMVg1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RTJERS9BQkRFRTg3QTM3RTYxMUVEQjUxRTFENDVDNEY5QUUwMi9fRDk3c0VWQ1Z2
TWZKY29BaGt2RHByMTFYNVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA9qotlTjymMTt1NcJOzL4iitrMTnXbb0WeeFGDF0oQWzwsrZO/pYjQ
ySa1NW1Vko8StC1JT00gEcXHHL/hWPsVnSK/8E/Lf3cgwRbjxDaUVb0cM5eaHn+F
Kjqkeuhgj+2PoyKV4l/vIzehyJ66p5mTHuwlncDLaOnSSse6jH3fMLYzKCKex6aT
2G+iZERzEKUGgw5TpjkdbbH6rM5fVZEO63CUZD+bsbXoIrLtutzRodCEmjL98IkM
XtijTN4bVzZiAmMl1FYpRNyU0ge0NuL95UdJWDd7zMmGQ861wrlbJEKt3f/4Q3S+
P/+LVIbO/3hfEjywgqUWz9JZ2nA5yv4X
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:27:13 2025 by rpki-client