Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
File:                     _oJu6bwS2q07GXRxsEE_HrIIJjU.mft (raw, json)
Hash identifier:          vTJx8BpfzFJ+j5dtLAY8DHg6dZcDA6Lk89WfhwBZljI=
Subject key identifier:   AD:C5:53:D8:7F:6D:27:47:14:86:85:03:AB:39:37:03:65:CE:F6:38
Authority key identifier: FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35
Certificate issuer:       /CN=A91CEBCA/serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
Certificate serial:       34DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
Manifest number:          34C6
Signing time:             Fri 08 Aug 2025 14:31:45 +0000
Manifest this update:     Fri 08 Aug 2025 14:31:44 +0000
Manifest next update:     Fri 15 Aug 2025 14:31:44 +0000
Files and hashes:         1: _oJu6bwS2q07GXRxsEE_HrIIJjU.crl (hash: A6sFwC0ChRcq1IYa5efkz7aVI7Laq6LFxpmkHVEe5y8=)
                          2: F175093C71A411F09351784AC4F9AE02.roa (hash: sX+/MXQGa3XOHWne5n8WyzQHADebdwQ8tiP703yRh44=)
                          3: 9954B962F02D11EFBA26B94FC4F9AE02.roa (hash: RpwdGJeEWb/3FqZBI7k4hyBai/WEVbuoaZIuDveesGk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl
                          rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13531 (0x34db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEBCA, serialNumber=FE826EE9BC12DAAD3B197471B0413F1EB2082635
        Validity
            Not Before: Aug  8 14:31:44 2025 GMT
            Not After : Aug 15 14:31:44 2025 GMT
        Subject: CN=68960a50-3cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:6c:2f:7e:69:1a:ea:b5:82:ee:2b:7a:c2:ec:
                    47:70:0f:fc:1b:51:60:d5:dc:ce:0c:b6:71:67:1d:
                    16:40:63:29:c9:86:f7:8d:b6:6a:7f:d7:98:4c:b9:
                    90:a5:b3:3d:3d:61:f3:ef:16:bf:5a:7c:97:22:81:
                    51:92:82:47:65:18:9b:23:44:4c:d0:ca:fb:29:c9:
                    0c:8f:2c:81:be:be:22:9f:77:81:4c:8e:c5:ff:c3:
                    96:19:59:26:50:c6:99:c7:3b:ed:37:b1:6d:4f:e7:
                    16:f6:1e:f6:87:aa:0f:09:d1:8a:ce:bb:f8:e0:a4:
                    49:e2:7c:74:a7:c8:45:f0:68:23:5f:f1:71:53:06:
                    74:26:34:21:00:6b:f0:64:7e:92:d5:04:46:94:7b:
                    44:a8:31:32:4b:d5:10:2b:ba:c8:36:5e:fd:b0:7b:
                    08:c6:83:2c:84:e2:32:d6:d7:a5:82:62:06:f6:c7:
                    ea:b6:e9:f0:28:85:ac:29:f8:8d:1f:6d:b4:2f:9a:
                    6c:d8:7d:fb:5e:c8:f9:ee:49:12:97:b2:1a:8b:b2:
                    b2:46:48:57:83:10:80:b9:7a:d5:39:cc:f3:81:c5:
                    62:4d:fc:02:56:79:bb:08:54:30:55:b0:72:de:31:
                    66:1e:43:81:2b:5c:ab:5f:b9:f5:7a:a6:09:11:fd:
                    e0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C5:53:D8:7F:6D:27:47:14:86:85:03:AB:39:37:03:65:CE:F6:38
            X509v3 Authority Key Identifier:
                keyid:FE:82:6E:E9:BC:12:DA:AD:3B:19:74:71:B0:41:3F:1E:B2:08:26:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_oJu6bwS2q07GXRxsEE_HrIIJjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEBCA/B588B4A61D8811E28CAE8FE108B02CD2/_oJu6bwS2q07GXRxsEE_HrIIJjU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:40:0f:88:ba:9d:09:79:e8:8b:81:aa:5f:d5:5a:68:b4:20:
         84:2a:c9:95:8b:1f:24:f5:5d:0d:a5:ab:c7:6d:73:73:7d:27:
         71:b7:16:5b:cf:c2:ea:47:aa:9e:3d:d2:35:ef:37:62:a6:b3:
         48:7d:9d:eb:0a:bd:1f:1e:5b:58:dd:dc:08:fc:f6:01:e3:c7:
         28:c3:ba:88:55:ad:8a:80:c9:d9:db:de:35:3e:44:fa:5e:49:
         8f:19:0e:ec:6b:fd:19:88:7d:33:ae:51:e4:3c:e6:57:e7:67:
         51:11:95:1e:29:38:eb:1d:e3:60:ba:05:1a:ce:04:06:c1:17:
         a0:ed:6a:70:9a:57:a1:1b:80:c7:68:97:f0:80:8c:a7:59:ad:
         32:ca:40:2a:de:0d:77:3d:08:ef:52:b8:4d:0f:24:b9:cc:f2:
         48:ec:f4:3e:11:72:6d:68:a9:14:1a:c4:38:cd:cd:d1:50:20:
         2d:4d:56:2b:af:3b:6f:68:e3:6c:6e:29:08:08:b0:0f:ac:41:
         12:70:65:00:7f:57:1e:9b:48:9d:f0:93:94:73:d5:bf:8f:73:
         14:51:3d:90:47:00:6e:5e:ef:91:d6:57:eb:fd:06:34:b9:df:
         b8:2a:19:e2:9b:7a:21:2c:36:af:af:d4:70:27:53:74:25:71:
         e7:31:72:d5
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0VCQ0ExMTAvBgNVBAUTKEZFODI2RUU5QkMxMkRBQUQzQjE5NzQ3MUIwNDEzRjFF
QjIwODI2MzUwHhcNMjUwODA4MTQzMTQ0WhcNMjUwODE1MTQzMTQ0WjAYMRYwFAYD
VQQDEw02ODk2MGE1MC0zY2ZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7mwvfmka6rWC7it6wuxHcA/8G1Fg1dzODLZxZx0WQGMpyYb3jbZqf9eYTLmQ
pbM9PWHz7xa/WnyXIoFRkoJHZRibI0RM0Mr7KckMjyyBvr4in3eBTI7F/8OWGVkm
UMaZxzvtN7FtT+cW9h72h6oPCdGKzrv44KRJ4nx0p8hF8GgjX/FxUwZ0JjQhAGvw
ZH6S1QRGlHtEqDEyS9UQK7rINl79sHsIxoMshOIy1telgmIG9sfqtunwKIWsKfiN
H220L5ps2H37Xsj57kkSl7Iai7KyRkhXgxCAuXrVOczzgcViTfwCVnm7CFQwVbBy
3jFmHkOBK1yrX7n1eqYJEf3gaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3FU9h/
bSdHFIaFA6s5NwNlzvY4MB8GA1UdIwQYMBaAFP6Cbum8EtqtOxl0cbBBPx6yCCY1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUJDQS9CNTg4QjRBNjFE
ODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJxMDdHWFJ4c0VFX0hySUlK
alUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19vSnU2YndTMnEwN0dYUnhzRUVfSHJJSUpqVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RUJDQS9CNTg4QjRBNjFEODgxMUUyOENBRThGRTEwOEIwMkNEMi9fb0p1NmJ3UzJx
MDdHWFJ4c0VFX0hySUlKalUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCiQA+Iup0JeeiLgapf1VpotCCEKsmVix8k9V0NpavHbXNzfSdxtxZb
z8LqR6qePdI17zdiprNIfZ3rCr0fHltY3dwI/PYB48cow7qIVa2KgMnZ2941PkT6
XkmPGQ7sa/0ZiH0zrlHkPOZX52dREZUeKTjrHeNgugUazgQGwReg7WpwmlehG4DH
aJfwgIynWa0yykAq3g13PQjvUrhNDyS5zPJI7PQ+EXJtaKkUGsQ4zc3RUCAtTVYr
rztvaONsbikICLAPrEEScGUAf1cem0id8JOUc9W/j3MUUT2QRwBuXu+R1lfr/QY0
ud+4Khnim3ohLDavr9RwJ1N0JXHnMXLV
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:37:08 2025 by rpki-client