Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
File:                     P80_M6jgglw55KhM1pOVpvKwYUg.mft (raw, json)
Hash identifier:          pJjTPTKTQdF+6qFoyjx5H4kOsQMZVd/xBw3jJZqtRYc=
Subject key identifier:   B5:98:63:96:B0:F6:B7:C3:A5:17:44:C4:44:51:CB:06:8E:FF:5D:4E
Authority key identifier: 3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48
Certificate issuer:       /CN=A91D4120/serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148
Certificate serial:       01E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
Manifest number:          01E3
Signing time:             Mon 11 Aug 2025 02:44:42 +0000
Manifest this update:     Mon 11 Aug 2025 02:44:42 +0000
Manifest next update:     Mon 18 Aug 2025 02:44:42 +0000
Files and hashes:         1: P80_M6jgglw55KhM1pOVpvKwYUg.crl (hash: eq6kmNW9zEqSDTk0BzhSPFvu6DykyVeZ3ToyGvFjbco=)
                          2: F67C04568FE011EDA9919C57C4F9AE02.roa (hash: LmlR9YlBwg7cT9J6J0IKLnKoAUaVj8qqBXEJpjhDI58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl
                          rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 02:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4120, serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148
        Validity
            Not Before: Aug 11 02:44:42 2025 GMT
            Not After : Aug 18 02:44:42 2025 GMT
        Subject: CN=6899591a-66c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:28:23:ce:fb:39:44:ec:44:4d:0c:61:35:a5:
                    09:1b:b7:4d:96:1d:3d:6a:fb:eb:ab:25:ae:e9:98:
                    80:43:57:c1:7f:46:a7:98:40:f2:a0:50:5e:a0:65:
                    c2:d0:b1:9a:5c:0d:f8:a3:a6:f0:4c:da:38:27:22:
                    5d:ef:52:d9:5f:b2:fe:5c:88:0e:90:f4:f9:54:08:
                    cc:23:7d:a2:fe:f2:77:58:8c:87:54:99:4d:f7:32:
                    8a:b0:40:2b:81:79:93:ec:b8:85:7e:e8:b4:a3:22:
                    4d:a5:78:8a:aa:ed:01:8f:26:34:66:9d:3e:6d:ee:
                    18:18:a4:4e:c0:43:67:22:28:f4:15:e8:15:d8:10:
                    0a:48:5b:33:d6:4e:a2:c6:e3:08:0d:99:17:29:73:
                    b5:83:e7:58:6c:5b:ac:98:30:fc:e3:42:d9:95:51:
                    86:bc:27:2c:a0:b7:2a:b6:3b:78:5c:68:a9:88:bd:
                    95:28:12:08:a6:19:0e:f6:b5:0e:fe:2d:84:29:b9:
                    2c:77:0e:82:9f:c4:80:3c:fc:d5:99:e2:34:f5:ae:
                    c6:05:6c:59:db:11:94:22:73:a6:5d:f8:00:05:b0:
                    18:5e:50:12:e5:9b:7d:62:35:ad:33:dc:62:10:79:
                    19:7a:df:73:fd:9b:05:c8:ec:75:b2:c7:7d:d5:35:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:98:63:96:B0:F6:B7:C3:A5:17:44:C4:44:51:CB:06:8E:FF:5D:4E
            X509v3 Authority Key Identifier:
                keyid:3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:c4:21:62:6b:f1:0e:a0:fb:7c:74:9b:16:3d:ac:d5:f1:b3:
         70:43:a6:48:51:22:a1:c1:7e:3e:6f:4e:54:f3:6f:95:c7:10:
         ff:3c:c1:a5:03:ed:4a:68:e7:66:0c:5d:ae:a7:83:ff:22:7e:
         26:16:53:34:d0:46:e5:f5:d2:08:7e:3e:b4:d3:cd:e8:db:1c:
         b3:ae:a7:0f:b5:f2:3e:3c:e5:11:60:23:e8:c6:00:7a:45:7a:
         96:39:14:54:eb:99:44:02:c2:ec:8a:ca:f0:9f:14:df:eb:c7:
         8b:3a:93:db:c3:56:cd:b0:59:82:5c:6a:5a:40:f1:f8:60:a9:
         6a:72:22:c7:58:2a:59:6c:85:8a:ac:cb:54:b4:e6:23:86:d2:
         ac:fb:32:ad:ff:2f:54:d1:7e:52:ee:09:1a:57:5f:bb:12:14:
         16:ad:f0:3f:f6:db:ff:fd:d5:53:5c:37:82:c6:82:16:68:da:
         e3:d5:f3:3e:6e:5e:2b:a4:15:b8:b7:ce:67:ba:e0:cb:63:3d:
         bd:76:9f:17:13:2d:b7:7f:4c:6f:c6:fb:30:34:a7:df:58:1f:
         17:e9:94:83:0a:bf:08:12:a2:b2:c8:e2:e9:11:8f:ab:03:ed:
         d2:6e:84:24:ec:18:01:3c:e7:98:96:b8:e6:12:fa:b5:4c:00:
         da:36:4a:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQxMjAxMTAvBgNVBAUTKDNGQ0QzRjMzQThFMDgyNUMzOUU0QTg0Q0Q2OTM5NUE2
RjJCMDYxNDgwHhcNMjUwODExMDI0NDQyWhcNMjUwODE4MDI0NDQyWjAYMRYwFAYD
VQQDEw02ODk5NTkxYS02NmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxSgjzvs5ROxETQxhNaUJG7dNlh09avvrqyWu6ZiAQ1fBf0anmEDyoFBeoGXC
0LGaXA34o6bwTNo4JyJd71LZX7L+XIgOkPT5VAjMI32i/vJ3WIyHVJlN9zKKsEAr
gXmT7LiFfui0oyJNpXiKqu0BjyY0Zp0+be4YGKROwENnIij0FegV2BAKSFsz1k6i
xuMIDZkXKXO1g+dYbFusmDD840LZlVGGvCcsoLcqtjt4XGipiL2VKBIIphkO9rUO
/i2EKbksdw6Cn8SAPPzVmeI09a7GBWxZ2xGUInOmXfgABbAYXlAS5Zt9YjWtM9xi
EHkZet9z/ZsFyOx1ssd91TVi8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLWYY5aw
9rfDpRdExERRywaO/11OMB8GA1UdIwQYMBaAFD/NPzOo4IJcOeSoTNaTlabysGFI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDEyMC83NkE1ODg0RThG
REUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2dsdzU1S2hNMXBPVnB2S3dZ
VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A4MF9NNmpnZ2x3NTVLaE0xcE9WcHZLd1lVZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDEyMC83NkE1ODg0RThGREUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2ds
dzU1S2hNMXBPVnB2S3dZVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBYxCFia/EOoPt8dJsWPazV8bNwQ6ZIUSKhwX4+b05U82+VxxD/PMGl
A+1KaOdmDF2up4P/In4mFlM00Ebl9dIIfj60083o2xyzrqcPtfI+POURYCPoxgB6
RXqWORRU65lEAsLsisrwnxTf68eLOpPbw1bNsFmCXGpaQPH4YKlqciLHWCpZbIWK
rMtUtOYjhtKs+zKt/y9U0X5S7gkaV1+7EhQWrfA/9tv//dVTXDeCxoIWaNrj1fM+
bl4rpBW4t85nuuDLYz29dp8XEy23f0xvxvswNKffWB8X6ZSDCr8IEqKyyOLpEY+r
A+3SboQk7BgBPOeYlrjmEvq1TADaNkqx
-----END CERTIFICATE-----
Generated at Wed Aug 13 00:32:59 2025 by rpki-client