Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
File:                     5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft (raw, json)
Hash identifier:          qkbvRFqesg3Alflf6dvBj8uBVsMGBq41t5XosOjtch4=
Subject key identifier:   80:53:3F:59:D4:35:CA:57:77:00:BC:EC:F2:EF:52:01:83:EC:B1:87
Authority key identifier: E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20
Certificate issuer:       /CN=A91D2B62/serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
Manifest number:          BA
Signing time:             Sat 09 Aug 2025 06:19:34 +0000
Manifest this update:     Sat 09 Aug 2025 06:19:33 +0000
Manifest next update:     Sat 16 Aug 2025 06:19:33 +0000
Files and hashes:         1: 5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl (hash: oePuRzZGkLOJvzZKePFjcVXmRxkAp8tLoOA71ghq5cE=)
                          2: F47CB05C5AE011EFB4CD7428C4F9AE02.roa (hash: dP/ms8awhu5P0L5X1kq3UaHwPpJfEdsfRvw8IFgrpFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl
                          rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D2B62, serialNumber=E6F65D221B595F6BA13EB314DEE338CA241E2720
        Validity
            Not Before: Aug  9 06:19:33 2025 GMT
            Not After : Aug 16 06:19:33 2025 GMT
        Subject: CN=6896e876-272f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:81:91:eb:ca:10:a1:ff:c9:56:f4:36:7a:
                    e1:20:d8:9a:75:ed:99:3e:66:53:f4:5d:9e:27:c9:
                    f7:5b:b3:74:c1:bc:62:71:45:14:54:7f:54:d3:23:
                    6f:bc:d5:c2:9e:0f:78:f6:22:ca:bf:2d:95:49:0a:
                    17:7c:34:08:e1:a5:67:75:b6:e3:38:e3:b6:79:4e:
                    fb:d9:5f:84:fb:43:29:3e:66:e2:0e:fa:d3:b3:7e:
                    f4:6d:4c:be:3a:55:14:37:8e:ac:0d:61:74:1b:5b:
                    1f:f6:c1:81:f1:78:92:a2:25:5e:46:03:bf:6d:30:
                    f0:16:f8:06:41:89:f4:6c:38:19:99:63:fb:58:51:
                    3e:c0:e8:89:2c:38:95:f2:69:eb:c4:64:c3:49:25:
                    31:28:58:6a:95:eb:00:20:57:da:83:1c:db:0e:fc:
                    5c:ea:22:47:2f:40:05:a3:56:cf:16:e0:19:48:5e:
                    7b:1b:f3:a7:9f:2e:68:e5:9f:31:58:38:40:31:5a:
                    93:b0:ba:83:e0:35:8b:3c:c8:91:3f:f3:a3:d2:f9:
                    47:28:7d:ee:50:b0:78:0a:88:d2:09:28:26:10:61:
                    1b:6a:d6:40:13:14:0c:41:f5:78:98:b4:98:9a:0b:
                    74:7f:9f:75:51:c6:f4:db:3b:0d:e4:30:20:11:e3:
                    03:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:53:3F:59:D4:35:CA:57:77:00:BC:EC:F2:EF:52:01:83:EC:B1:87
            X509v3 Authority Key Identifier:
                keyid:E6:F6:5D:22:1B:59:5F:6B:A1:3E:B3:14:DE:E3:38:CA:24:1E:27:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vZdIhtZX2uhPrMU3uM4yiQeJyA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2B62/BD29B8165AE011EF8651B61BC4F9AE02/5vZdIhtZX2uhPrMU3uM4yiQeJyA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:45:6a:34:eb:81:84:e9:f4:92:5f:65:cd:af:24:60:84:d5:
         0c:f1:5a:71:27:17:26:4e:9a:2f:7e:23:69:18:d0:da:0d:7a:
         47:70:97:fc:19:57:dc:56:68:fd:ca:f0:42:91:a3:a0:28:23:
         f3:61:e6:79:0a:2d:c5:89:82:31:f6:e6:79:80:f6:c0:c9:fe:
         e5:51:a7:b5:93:65:79:0a:47:51:cb:c3:e0:4e:84:8e:37:30:
         41:94:7b:32:1d:75:c5:58:9b:a9:c4:1d:df:87:7f:a2:fe:be:
         09:bd:4c:55:6c:10:ef:2d:d2:23:a5:e7:61:0d:cb:1c:60:32:
         7c:3a:e2:c9:33:dd:b3:74:f4:b8:5b:5c:23:e7:8c:eb:0c:31:
         a0:84:aa:2d:2b:ab:71:27:30:6b:39:64:2f:65:e0:52:2a:c9:
         df:d8:f8:98:f6:96:fb:b7:77:e7:68:00:e2:83:d2:c5:d0:7e:
         99:79:6d:56:37:e0:d9:76:b5:ce:45:09:08:ac:82:f8:db:bd:
         fa:8b:c2:8a:47:79:c7:37:fb:aa:6f:c0:2f:9f:33:da:b6:57:
         37:17:9c:7a:15:1b:98:67:7f:ec:37:3d:fa:cf:c4:b0:1d:15:
         4f:30:eb:bf:f6:dd:c6:be:89:ce:2f:52:15:d2:fc:0b:91:27:
         cb:a2:04:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDJCNjIxMTAvBgNVBAUTKEU2RjY1RDIyMUI1OTVGNkJBMTNFQjMxNERFRTMzOENB
MjQxRTI3MjAwHhcNMjUwODA5MDYxOTMzWhcNMjUwODE2MDYxOTMzWjAYMRYwFAYD
VQQDEw02ODk2ZTg3Ni0yNzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArMCBkevKEKH/yVb0NnrhINiade2ZPmZT9F2eJ8n3W7N0wbxicUUUVH9U0yNv
vNXCng949iLKvy2VSQoXfDQI4aVndbbjOOO2eU772V+E+0MpPmbiDvrTs370bUy+
OlUUN46sDWF0G1sf9sGB8XiSoiVeRgO/bTDwFvgGQYn0bDgZmWP7WFE+wOiJLDiV
8mnrxGTDSSUxKFhqlesAIFfagxzbDvxc6iJHL0AFo1bPFuAZSF57G/Onny5o5Z8x
WDhAMVqTsLqD4DWLPMiRP/Oj0vlHKH3uULB4CojSCSgmEGEbatZAExQMQfV4mLSY
mgt0f591Ucb02zsN5DAgEeMD6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIBTP1nU
NcpXdwC87PLvUgGD7LGHMB8GA1UdIwQYMBaAFOb2XSIbWV9roT6zFN7jOMokHicg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkI2Mi9CRDI5QjgxNjVB
RTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0WlgydWhQck1VM3VNNHlpUWVK
eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV2WmRJaHRaWDJ1aFByTVUzdU00eWlRZUp5QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MkI2Mi9CRDI5QjgxNjVBRTAxMUVGODY1MUI2MUJDNEY5QUUwMi81dlpkSWh0Wlgy
dWhQck1VM3VNNHlpUWVKeUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqRWo064GE6fSSX2XNryRghNUM8VpxJxcmTpovfiNpGNDaDXpHcJf8
GVfcVmj9yvBCkaOgKCPzYeZ5Ci3FiYIx9uZ5gPbAyf7lUae1k2V5CkdRy8PgToSO
NzBBlHsyHXXFWJupxB3fh3+i/r4JvUxVbBDvLdIjpedhDcscYDJ8OuLJM92zdPS4
W1wj54zrDDGghKotK6txJzBrOWQvZeBSKsnf2PiY9pb7t3fnaADig9LF0H6ZeW1W
N+DZdrXORQkIrIL42736i8KKR3nHN/uqb8AvnzPatlc3F5x6FRuYZ3/sNz36z8Sw
HRVPMOu/9t3GvonOL1IV0vwLkSfLogTu
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:28:06 2025 by rpki-client