Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
File:                     M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft (raw, json)
Hash identifier:          GTmAcnTNe3vozP52GfUeII/59hDodyuCQLJkT5VQzGw=
Subject key identifier:   D0:21:B5:39:41:0B:29:89:A5:9C:A4:F0:AD:C4:76:91:54:75:53:D4
Authority key identifier: 33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98
Certificate issuer:       /CN=A91DEF41/serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
Certificate serial:       0107
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
Manifest number:          FD
Signing time:             Thu 07 Aug 2025 05:40:15 +0000
Manifest this update:     Thu 07 Aug 2025 05:40:15 +0000
Manifest next update:     Thu 14 Aug 2025 05:40:15 +0000
Files and hashes:         1: M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl (hash: Vp2uWZ0IN4tH6fdQdAMO35Bj3ywcjaCXuwCOWPbSrSo=)
                          2: 1698D0A4F3C511EEA51BD730C4F9AE02.roa (hash: dK1RlQyJjeiwzuMRZD6/CsndMyibK0XoFCLqDbss32s=)
                          3: 069E7950F3C611EE807A6F3EC4F9AE02.roa (hash: GMXU4PxSO88RcbBqzb2gyEchtqA2OVDVG15sHhZwd7g=)
                          4: 07258E36F3C611EE807A6F3EC4F9AE02.roa (hash: UOVpPqyzylpvUS4PFJS4QPq1eALE7pHfj83Afvy+ymM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl
                          rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 263 (0x107)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEF41, serialNumber=336DDE7EC3280499964371CAEE2620FBFCACDC98
        Validity
            Not Before: Aug  7 05:40:15 2025 GMT
            Not After : Aug 14 05:40:15 2025 GMT
        Subject: CN=68943c3f-b36b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:29:27:0e:d8:71:8a:67:08:09:67:40:2f:bb:
                    c5:c6:63:68:61:fd:c2:ff:6a:a3:4a:53:3b:1a:85:
                    0d:61:17:22:04:53:8a:e7:10:44:6f:d1:09:b1:28:
                    8d:52:a6:85:fb:d3:95:4e:4c:1a:93:55:a5:85:63:
                    c5:b7:17:7a:6b:00:b3:35:8c:76:4f:5a:42:92:08:
                    da:e7:80:bf:40:51:c4:0f:12:0b:ec:0a:74:15:2f:
                    a1:f9:72:05:66:aa:db:83:54:15:6f:8d:fa:b7:88:
                    c1:84:cb:1f:d7:82:48:a7:af:9c:d7:45:ce:61:f8:
                    c6:4c:48:f1:00:88:e2:b4:2e:d2:26:38:b2:15:28:
                    c5:94:7d:72:d4:27:c4:72:eb:80:5e:ad:86:5d:19:
                    6c:6c:d2:11:29:ad:e5:1f:a5:f9:ac:0f:3a:a9:58:
                    d2:2d:93:5d:ca:fe:b0:fd:f4:98:09:e1:4d:12:cf:
                    ae:2c:a3:52:8d:74:b9:53:aa:91:7b:9e:3b:2a:ce:
                    f3:d7:a2:ea:b8:df:17:b9:92:a4:0f:84:75:db:22:
                    93:5c:9b:e4:09:68:32:1a:37:50:9d:de:31:94:8d:
                    f0:20:71:ec:26:e8:49:ea:a5:98:77:68:1e:64:c6:
                    17:9c:f9:1e:0a:d7:8f:90:e7:fa:ca:58:e1:70:c6:
                    95:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:21:B5:39:41:0B:29:89:A5:9C:A4:F0:AD:C4:76:91:54:75:53:D4
            X509v3 Authority Key Identifier:
                keyid:33:6D:DE:7E:C3:28:04:99:96:43:71:CA:EE:26:20:FB:FC:AC:DC:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23efsMoBJmWQ3HK7iYg-_ys3Jg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEF41/C75DA132F2FB11EE9FCF764CC4F9AE02/M23efsMoBJmWQ3HK7iYg-_ys3Jg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:46:3a:7a:a5:13:c5:37:2d:87:db:55:76:f4:62:6c:91:6d:
         99:a8:86:f1:f7:b0:8f:d3:ef:f2:c0:41:6b:b6:2a:a8:a1:61:
         90:37:27:e0:25:66:59:4b:59:f7:9b:33:ab:57:dc:1d:f1:83:
         01:a8:ff:49:92:28:f2:0c:6b:71:0b:c5:f4:71:a9:08:1c:34:
         16:85:99:94:e4:44:8b:3e:5b:75:03:a8:8a:2b:c4:1e:60:84:
         d8:45:96:81:15:49:1d:7e:55:59:b0:ea:2a:36:7f:01:3a:02:
         98:a4:8d:fa:ce:fd:19:16:f0:a5:b5:2e:7b:27:52:7f:d8:89:
         15:3b:6d:d6:05:64:0f:d3:e4:9e:43:a1:65:4e:96:05:50:01:
         c7:c1:92:bf:89:be:f9:92:b3:9f:a9:a7:7e:ad:b3:77:87:bb:
         76:c6:77:79:43:71:2d:64:2d:3d:74:44:5e:02:cb:65:ea:11:
         e2:44:23:c9:9f:9d:c1:6b:f5:20:ce:4e:29:0d:e7:0b:7c:db:
         d6:25:8b:5d:cc:15:64:a2:96:7f:f0:14:c1:84:16:fe:f7:73:
         21:75:c3:b6:af:98:0b:47:7d:7a:46:0c:21:fd:32:c8:19:7b:
         af:be:2f:40:75:6e:8a:be:cb:73:0d:fc:65:04:d0:84:42:ba:
         f8:56:89:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVGNDExMTAvBgNVBAUTKDMzNkRERTdFQzMyODA0OTk5NjQzNzFDQUVFMjYyMEZC
RkNBQ0RDOTgwHhcNMjUwODA3MDU0MDE1WhcNMjUwODE0MDU0MDE1WjAYMRYwFAYD
VQQDEw02ODk0M2MzZi1iMzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxCknDthximcICWdAL7vFxmNoYf3C/2qjSlM7GoUNYRciBFOK5xBEb9EJsSiN
UqaF+9OVTkwak1WlhWPFtxd6awCzNYx2T1pCkgja54C/QFHEDxIL7Ap0FS+h+XIF
Zqrbg1QVb436t4jBhMsf14JIp6+c10XOYfjGTEjxAIjitC7SJjiyFSjFlH1y1CfE
cuuAXq2GXRlsbNIRKa3lH6X5rA86qVjSLZNdyv6w/fSYCeFNEs+uLKNSjXS5U6qR
e547Ks7z16LquN8XuZKkD4R12yKTXJvkCWgyGjdQnd4xlI3wIHHsJuhJ6qWYd2ge
ZMYXnPkeCtePkOf6yljhcMaVxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNAhtTlB
CymJpZyk8K3EdpFUdVPUMB8GA1UdIwQYMBaAFDNt3n7DKASZlkNxyu4mIPv8rNyY
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUY0MS9DNzVEQTEzMkYy
RkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JKbVdRM0hLN2lZZy1feXMz
SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL00yM2Vmc01vQkptV1EzSEs3aVlnLV95czNKZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RUY0MS9DNzVEQTEzMkYyRkIxMUVFOUZDRjc2NENDNEY5QUUwMi9NMjNlZnNNb0JK
bVdRM0hLN2lZZy1feXMzSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAIRjp6pRPFNy2H21V29GJskW2ZqIbx97CP0+/ywEFrtiqooWGQNyfg
JWZZS1n3mzOrV9wd8YMBqP9JkijyDGtxC8X0cakIHDQWhZmU5ESLPlt1A6iKK8Qe
YITYRZaBFUkdflVZsOoqNn8BOgKYpI36zv0ZFvCltS57J1J/2IkVO23WBWQP0+Se
Q6FlTpYFUAHHwZK/ib75krOfqad+rbN3h7t2xnd5Q3EtZC09dEReAstl6hHiRCPJ
n53Ba/Ugzk4pDecLfNvWJYtdzBVkopZ/8BTBhBb+93MhdcO2r5gLR316Rgwh/TLI
GXuvvi9AdW6KvstzDfxlBNCEQrr4Vokz
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:16 2025 by rpki-client