Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
File:                     iH554lttHTfvHzG8WgIy-OdlFUU.mft (raw, json)
Hash identifier:          7d4g2d3CQhIeMI1i1jpBuQC1WwY/Vee5oX4iNlrCjkg=
Subject key identifier:   FC:B9:12:19:07:E0:19:26:87:BF:C5:AD:58:25:97:4F:39:75:FE:92
Authority key identifier: 88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45
Certificate issuer:       /CN=A91D9F5A/serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
Certificate serial:       0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
Manifest number:          07B2
Signing time:             Wed 06 Aug 2025 21:39:40 +0000
Manifest this update:     Wed 06 Aug 2025 21:39:39 +0000
Manifest next update:     Wed 13 Aug 2025 21:39:39 +0000
Files and hashes:         1: iH554lttHTfvHzG8WgIy-OdlFUU.crl (hash: SLgXVi+S0BiQ0P6Z6ahLVs7ty+2qQTXAZffT1IAOvUg=)
                          2: CF6A89D86B3D11F0A0837D7FC4F9AE02.roa (hash: O05NjBwYNNvXC8JoMWk3EyZg7iktCjusVDBEEW7nGKc=)
                          3: CEFEDAB26B3D11F0A0837D7FC4F9AE02.roa (hash: cqaNGUAp+AM9Nk5TWMcE/5SRJKY4Makpxzc5uTKkH7g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl
                          rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 21:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9F5A, serialNumber=887E79E25B6D1D37EF1F31BC5A0232F8E7651545
        Validity
            Not Before: Aug  6 21:39:39 2025 GMT
            Not After : Aug 13 21:39:39 2025 GMT
        Subject: CN=6893cb9c-cf88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:13:13:4e:2d:f5:87:9f:74:1c:60:e1:ec:
                    4e:8f:6e:dc:e6:82:f2:98:3f:41:2a:db:75:0d:9e:
                    38:65:e8:e8:b0:04:93:a7:1d:f9:81:aa:4d:5b:da:
                    6a:a8:8c:63:ba:b8:fc:52:c4:13:b9:9e:2f:e4:fb:
                    5f:51:a2:73:05:9e:98:1b:2f:38:41:97:f0:dc:3d:
                    bf:a9:93:d9:73:45:e7:b1:8a:58:35:67:be:93:3f:
                    0a:b9:19:9e:42:fb:00:57:5c:9a:c9:1f:47:99:dc:
                    39:d2:68:e8:3b:a0:28:32:44:50:e6:99:ca:ae:e2:
                    6d:9d:96:62:77:02:06:f7:48:c3:7e:dd:e7:f2:66:
                    7c:70:3e:e3:c1:4a:c1:c6:25:ea:5f:3b:92:81:56:
                    7f:bb:b7:37:40:a0:e8:c3:10:6c:e1:35:f6:2b:04:
                    77:e5:e3:d1:bb:9a:10:10:5c:7d:d6:ea:4c:f6:e6:
                    8a:b2:50:6f:86:96:67:99:f3:4c:c9:98:aa:a3:99:
                    b3:ba:a4:f6:22:5f:d3:17:a3:8f:6c:5d:bb:0b:8c:
                    78:b7:19:2f:54:0a:5d:77:46:b8:35:f8:77:9f:24:
                    5b:86:c7:3a:53:e5:b8:f1:22:5b:41:f5:12:73:71:
                    2e:57:3d:94:15:13:57:84:e7:e7:2c:a9:4d:81:c6:
                    3e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B9:12:19:07:E0:19:26:87:BF:C5:AD:58:25:97:4F:39:75:FE:92
            X509v3 Authority Key Identifier:
                keyid:88:7E:79:E2:5B:6D:1D:37:EF:1F:31:BC:5A:02:32:F8:E7:65:15:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iH554lttHTfvHzG8WgIy-OdlFUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/iH554lttHTfvHzG8WgIy-OdlFUU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d2:63:02:f7:ee:fd:4c:bc:be:fa:36:99:cc:c3:67:01:b2:
         f6:e0:14:cb:f1:63:40:0e:a6:6e:8c:6d:d5:d5:11:2b:4d:48:
         23:80:74:04:f0:df:57:a9:a6:93:85:f7:d3:8a:7f:11:cf:0e:
         b8:dd:6b:f1:b1:77:20:15:27:3b:0e:04:8a:52:c5:c9:6f:a9:
         94:bf:03:75:ba:a2:71:a2:94:0d:25:22:d1:ce:4b:9c:8e:79:
         57:27:76:b7:3a:94:19:8d:e3:04:33:52:7e:af:07:b6:37:25:
         a8:85:36:45:e8:e1:af:06:c7:db:56:45:82:7d:36:bf:62:ac:
         56:13:d0:e4:22:28:bd:82:18:9d:b8:49:20:8e:2c:c1:0e:0d:
         1e:70:56:c2:5b:69:24:69:be:fe:37:a1:94:8a:32:28:96:48:
         0b:c0:8c:18:e2:51:7e:5f:46:f5:9a:7e:66:a7:f1:c1:bb:5f:
         0c:4c:c7:e1:b9:e1:d8:c7:a4:62:b8:fe:8a:5f:90:6a:51:f5:
         35:8c:23:9a:bc:b9:e7:7b:85:91:91:44:7b:60:19:a9:6b:8b:
         f7:4e:51:8e:b9:da:a9:75:10:d2:fe:f8:35:19:dc:c2:ff:0b:
         c8:6c:89:c0:c7:a4:39:90:8e:36:90:81:ec:23:d9:37:56:44:
         d7:b5:e1:ff
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
OUY1QTExMC8GA1UEBRMoODg3RTc5RTI1QjZEMUQzN0VGMUYzMUJDNUEwMjMyRjhF
NzY1MTU0NTAeFw0yNTA4MDYyMTM5MzlaFw0yNTA4MTMyMTM5MzlaMBgxFjAUBgNV
BAMTDTY4OTNjYjljLWNmODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC3MRMTTi31h590HGDh7E6PbtzmgvKYP0Eq23UNnjhl6OiwBJOnHfmBqk1b2mqo
jGO6uPxSxBO5ni/k+19RonMFnpgbLzhBl/DcPb+pk9lzReexilg1Z76TPwq5GZ5C
+wBXXJrJH0eZ3DnSaOg7oCgyRFDmmcqu4m2dlmJ3Agb3SMN+3efyZnxwPuPBSsHG
JepfO5KBVn+7tzdAoOjDEGzhNfYrBHfl49G7mhAQXH3W6kz25oqyUG+GlmeZ80zJ
mKqjmbO6pPYiX9MXo49sXbsLjHi3GS9UCl13Rrg1+HefJFuGxzpT5bjxIltB9RJz
cS5XPZQVE1eE5+csqU2Bxj6RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/LkSGQfg
GSaHv8WtWCWXTzl1/pIwHwYDVR0jBBgwFoAUiH554lttHTfvHzG8WgIy+OdlFUUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5RjVBLzA4OThCMjNBMTFC
QTExRUJCQzFBNTg0Q0M0RjlBRTAyL2lINTU0bHR0SFRmdkh6RzhXZ0l5LU9kbEZV
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaUg1NTRsdHRIVGZ2SHpHOFdnSXktT2RsRlVVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5
RjVBLzA4OThCMjNBMTFCQTExRUJCQzFBNTg0Q0M0RjlBRTAyL2lINTU0bHR0SFRm
dkh6RzhXZ0l5LU9kbEZVVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAzSYwL37v1MvL76NpnMw2cBsvbgFMvxY0AOpm6MbdXVEStNSCOAdATw
31epppOF99OKfxHPDrjda/GxdyAVJzsOBIpSxclvqZS/A3W6onGilA0lItHOS5yO
eVcndrc6lBmN4wQzUn6vB7Y3JaiFNkXo4a8Gx9tWRYJ9Nr9irFYT0OQiKL2CGJ24
SSCOLMEODR5wVsJbaSRpvv43oZSKMiiWSAvAjBjiUX5fRvWafman8cG7XwxMx+G5
4djHpGK4/opfkGpR9TWMI5q8ued7hZGRRHtgGalri/dOUY652ql1ENL++DUZ3ML/
C8hsicDHpDmQjjaQgewj2TdWRNe14f8=
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:31:01 2025 by rpki-client