Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
File:                     emDAS4fWxsslHxUpfuJa0tpQXg4.mft (raw, json)
Hash identifier:          jgcExDo2hYCJ6lkpFL7v14jakqK2QzZS6OhDZUv571E=
Subject key identifier:   BA:8D:5D:86:8B:B2:90:9C:73:0D:C0:F1:37:7D:16:57:58:B5:FF:96
Authority key identifier: 7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
Certificate issuer:       /CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Certificate serial:       0345
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
Manifest number:          033C
Signing time:             Sat 09 Aug 2025 01:36:59 +0000
Manifest this update:     Sat 09 Aug 2025 01:36:59 +0000
Manifest next update:     Sat 16 Aug 2025 01:36:59 +0000
Files and hashes:         1: emDAS4fWxsslHxUpfuJa0tpQXg4.crl (hash: Fn6D2enG/lxtgK2SOzp7QrTMGWhrVVlOnN560JhV6vo=)
                          2: 387AE648938B11EEA552D487C4F9AE02.roa (hash: n2JnUjdK1G3DKEtjobXUa5tJlDzoU7ugVziN4/cf1hI=)
                          3: 38043DF4938B11EEA552D487C4F9AE02.roa (hash: Z/v2dPSlVHtaS2gXVPwHt6zhX6qyLYHvPRCOMkLkMrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
                          rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 837 (0x345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0935, serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
        Validity
            Not Before: Aug  9 01:36:59 2025 GMT
            Not After : Aug 16 01:36:59 2025 GMT
        Subject: CN=6896a63b-b93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dc:de:11:93:1c:04:6e:c8:60:05:f9:f5:8b:
                    f4:54:22:48:1c:d4:63:18:97:a0:02:c1:b7:b3:9b:
                    26:e4:89:05:ff:3c:c1:d7:2e:19:13:1c:d2:8b:20:
                    a3:1c:ba:d6:25:f6:83:3e:42:d6:b2:c1:59:46:77:
                    73:59:01:56:6e:44:fb:34:35:d5:b0:7a:3c:a3:5d:
                    83:45:4f:46:6c:3b:ab:0b:0d:16:d2:7d:17:9c:78:
                    c4:6a:7e:ce:3a:79:2e:3a:79:68:57:8b:ff:4f:0c:
                    34:1e:e3:ca:c8:67:2c:ce:67:fe:de:12:ba:0c:07:
                    8e:3c:0f:f7:f9:11:ec:77:88:a3:18:3f:50:3b:d4:
                    f8:94:d9:7a:8f:a8:9d:7b:bc:48:05:a8:dd:58:f2:
                    67:a1:3d:06:86:df:09:69:24:92:9f:78:87:35:dc:
                    f4:5d:7a:9c:3a:09:e3:a8:97:04:5a:ef:01:2c:22:
                    21:09:80:0f:9b:6a:dd:ba:57:60:c4:6e:56:74:ff:
                    7d:64:8e:f1:de:a7:c6:56:30:d4:56:6c:4e:cb:05:
                    6a:89:6c:bf:07:12:3a:05:10:20:17:75:4b:98:98:
                    66:c2:68:5e:35:84:77:3f:0f:da:84:13:b8:2e:b5:
                    ac:7c:92:98:c5:3b:7a:19:c4:21:08:fc:80:5a:7f:
                    da:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8D:5D:86:8B:B2:90:9C:73:0D:C0:F1:37:7D:16:57:58:B5:FF:96
            X509v3 Authority Key Identifier:
                keyid:7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:36:7a:f3:c5:8d:ff:ac:9e:8e:0a:e4:e2:97:0c:5d:44:30:
         b0:3f:66:aa:49:04:1c:15:60:79:46:75:3b:13:28:69:e5:20:
         56:cc:e8:f7:01:43:48:44:29:85:a2:40:65:82:03:b0:da:23:
         5c:37:68:67:b5:4b:17:15:43:cb:7e:86:7a:c6:34:1d:97:b1:
         cf:af:a6:1f:91:1e:d6:4f:6a:b3:5c:b4:29:8e:91:e4:34:ed:
         61:57:bb:b2:5b:d6:da:35:39:e2:ae:b1:1f:f8:fe:c3:d2:4d:
         a6:55:d3:d2:30:8c:4a:b0:bb:ba:55:67:78:77:99:61:78:ef:
         d8:71:58:cd:94:a1:78:b4:d1:2e:d3:2a:19:45:0f:cb:f9:72:
         3c:f0:fc:9f:ec:46:9a:3d:f8:c7:62:27:63:bf:6d:90:95:ef:
         e4:ca:0f:11:12:1a:3d:90:80:e3:89:ad:85:0b:b2:ab:16:cb:
         8e:ac:22:e5:1e:8f:1a:2f:af:f5:59:ae:49:f5:2d:35:2e:b6:
         e3:c9:e0:65:35:49:48:98:47:d3:51:20:8f:cc:26:ba:61:55:
         72:bc:8b:04:de:c6:fa:f6:4e:42:83:69:0c:39:45:2e:f0:d7:
         c6:93:13:10:93:fe:8b:f7:91:01:01:f2:f4:1c:cb:e4:c9:af:
         e8:1a:7c:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA0UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDA5MzUxMTAvBgNVBAUTKDdBNjBDMDRCODdENkM2Q0IyNTFGMTUyOTdFRTI1QUQy
REE1MDVFMEUwHhcNMjUwODA5MDEzNjU5WhcNMjUwODE2MDEzNjU5WjAYMRYwFAYD
VQQDEw02ODk2YTYzYi1iOTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyNzeEZMcBG7IYAX59Yv0VCJIHNRjGJegAsG3s5sm5IkF/zzB1y4ZExzSiyCj
HLrWJfaDPkLWssFZRndzWQFWbkT7NDXVsHo8o12DRU9GbDurCw0W0n0XnHjEan7O
OnkuOnloV4v/Tww0HuPKyGcszmf+3hK6DAeOPA/3+RHsd4ijGD9QO9T4lNl6j6id
e7xIBajdWPJnoT0Ght8JaSSSn3iHNdz0XXqcOgnjqJcEWu8BLCIhCYAPm2rduldg
xG5WdP99ZI7x3qfGVjDUVmxOywVqiWy/BxI6BRAgF3VLmJhmwmheNYR3Pw/ahBO4
LrWsfJKYxTt6GcQhCPyAWn/aEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqNXYaL
spCccw3A8Td9FldYtf+WMB8GA1UdIwQYMBaAFHpgwEuH1sbLJR8VKX7iWtLaUF4O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDkzNS8zMUIzRDE2MEQw
NDgxMUVDOUU4MTgxMzVDNEY5QUUwMi9lbURBUzRmV3hzc2xIeFVwZnVKYTB0cFFY
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VtREFTNGZXeHNzbEh4VXBmdUphMHRwUVhnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDkzNS8zMUIzRDE2MEQwNDgxMUVDOUU4MTgxMzVDNEY5QUUwMi9lbURBUzRmV3hz
c2xIeFVwZnVKYTB0cFFYZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAeNnrzxY3/rJ6OCuTilwxdRDCwP2aqSQQcFWB5RnU7Eyhp5SBWzOj3
AUNIRCmFokBlggOw2iNcN2hntUsXFUPLfoZ6xjQdl7HPr6YfkR7WT2qzXLQpjpHk
NO1hV7uyW9baNTnirrEf+P7D0k2mVdPSMIxKsLu6VWd4d5lheO/YcVjNlKF4tNEu
0yoZRQ/L+XI88Pyf7EaaPfjHYidjv22Qle/kyg8REho9kIDjia2FC7KrFsuOrCLl
Ho8aL6/1Wa5J9S01LrbjyeBlNUlImEfTUSCPzCa6YVVyvIsE3sb69k5Cg2kMOUUu
8NfGkxMQk/6L95EBAfL0HMvkya/oGnzu
-----END CERTIFICATE-----
Generated at Sat Aug 9 23:22:22 2025 by rpki-client