Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
File:                     ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json)
Hash identifier:          EhJXWCrtt9PMPDWHkQLs6vqosL0NqGCidyKJlqneYzw=
Subject key identifier:   57:E5:E5:33:E7:FB:C0:55:E4:BC:C3:01:88:D9:A5:21:F4:4B:0E:8A
Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
Certificate issuer:       /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
Manifest number:          12
Signing time:             Mon 11 Aug 2025 08:20:34 +0000
Manifest this update:     Mon 11 Aug 2025 08:20:33 +0000
Manifest next update:     Mon 18 Aug 2025 08:20:33 +0000
Files and hashes:         1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: D2q1zDYIKueTAuGw9j3LOjeV8frXcG8yPicR0og2+Co=)
                          2: E2245D966E8B11F09764751EC4F9AE02.roa (hash: 5pGnOwvPyuBY3emdEWsMf9K+kdFirxYb8pbexFpI8HY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
                          rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
        Validity
            Not Before: Aug 11 08:20:33 2025 GMT
            Not After : Aug 18 08:20:33 2025 GMT
        Subject: CN=6899a7d1-9601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:be:b4:00:2b:33:ab:93:82:43:88:47:72:e2:
                    b4:e3:53:8d:e0:76:fa:f4:b8:66:71:45:30:f8:9f:
                    1b:2c:d9:64:21:18:03:82:90:d7:81:68:bb:f3:96:
                    f9:a7:05:a8:5e:66:54:a8:01:b8:4a:72:a6:1f:71:
                    e2:2c:d1:7a:c8:d3:27:a8:90:7d:e1:38:69:68:b5:
                    ae:da:b9:b7:f6:7d:b2:b1:0b:16:3a:25:22:55:fb:
                    a4:6c:71:7a:93:60:57:45:6f:ce:f1:df:71:1b:3a:
                    27:fa:3b:79:b4:58:15:97:c6:30:0c:8c:4d:4d:08:
                    77:bf:da:b6:ec:9b:fc:b9:42:0d:67:c3:d2:97:c7:
                    4e:0a:80:3d:34:88:b1:d4:15:ab:01:31:52:13:a2:
                    fb:33:24:7a:1c:07:b6:26:6c:09:6c:4f:47:e6:59:
                    e9:63:c9:9c:1e:46:00:8a:56:73:73:1d:89:e5:d1:
                    e1:af:f6:be:c9:ef:6d:b1:cc:b0:17:68:f2:ed:b6:
                    71:93:fd:b4:86:51:22:45:07:2a:76:b5:c4:d0:3d:
                    71:4b:81:62:ec:e6:f1:d4:17:7a:fe:51:bb:89:bd:
                    97:7a:6c:b8:99:0b:f9:2e:51:ef:99:23:1d:3c:53:
                    79:86:7e:b8:a5:e6:6f:4d:9a:70:4b:37:a9:39:a7:
                    65:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E5:E5:33:E7:FB:C0:55:E4:BC:C3:01:88:D9:A5:21:F4:4B:0E:8A
            X509v3 Authority Key Identifier:
                keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e3:43:2d:75:16:01:56:ad:fa:ae:bc:92:b3:6b:51:36:9f:
         fc:08:38:1d:41:0d:4f:08:aa:68:96:77:48:0e:ba:4d:ac:ec:
         11:71:47:91:fd:fe:1e:77:b9:4f:f0:0e:5f:4b:bf:34:e6:81:
         db:39:dc:36:fa:67:29:17:52:21:32:c4:b4:33:bd:f1:7a:a5:
         fa:a1:a6:d5:65:6e:cf:cf:25:81:1c:b9:ef:95:d8:57:0b:0b:
         84:fb:f0:67:b4:29:5a:3e:34:d5:de:9b:48:0c:ef:42:10:f8:
         63:6e:4c:b8:62:04:2c:3a:7a:5b:80:48:f1:4a:08:9f:65:7d:
         79:ec:75:a0:f0:79:33:ef:a7:54:12:ab:b3:dc:2f:fd:cf:cb:
         a0:26:e6:e3:7b:6e:2f:c7:d7:e5:b9:24:cd:1f:53:46:f0:35:
         96:0b:dc:ae:90:2b:8b:b7:2f:07:f7:9c:e0:bb:87:81:a6:4d:
         ca:41:4b:45:90:3f:48:82:a8:2e:8c:df:40:5b:9f:be:6c:0e:
         df:0b:ce:7f:3f:94:e2:c3:a8:34:87:6d:d7:a3:97:a9:cf:d1:
         3f:c0:c9:d9:31:6f:a9:d0:37:b7:1d:ad:7b:6e:01:24:26:e5:
         bb:96:fe:20:e6:d6:61:94:1d:b3:2d:e4:58:d8:10:16:d2:66:
         c0:f1:a8:08
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MDk2MTExMC8GA1UEBRMoNjYzMjZDQzA2ODVBMzc2MzZBNDVCQzcwOTQ3QzIxOUQw
QjVDQ0M2MDAeFw0yNTA4MTEwODIwMzNaFw0yNTA4MTgwODIwMzNaMBgxFjAUBgNV
BAMTDTY4OTlhN2QxLTk2MDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDpvrQAKzOrk4JDiEdy4rTjU43gdvr0uGZxRTD4nxss2WQhGAOCkNeBaLvzlvmn
BaheZlSoAbhKcqYfceIs0XrI0yeokH3hOGlota7aubf2fbKxCxY6JSJV+6RscXqT
YFdFb87x33EbOif6O3m0WBWXxjAMjE1NCHe/2rbsm/y5Qg1nw9KXx04KgD00iLHU
FasBMVITovszJHocB7YmbAlsT0fmWeljyZweRgCKVnNzHYnl0eGv9r7J722xzLAX
aPLttnGT/bSGUSJFByp2tcTQPXFLgWLs5vHUF3r+UbuJvZd6bLiZC/kuUe+ZIx08
U3mGfril5m9NmnBLN6k5p2VDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUV+XlM+f7
wFXkvMMBiNmlIfRLDoowHwYDVR0jBBgwFoAUZjJswGhaN2NqRbxwlHwhnQtczGAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwOTYxLzhFNTk5NkM0NjAz
RDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJOcVJieHdsSHdoblF0Y3pH
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWmpKc3dHaGFOMk5xUmJ4d2xId2huUXRjekdBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw
OTYxLzhFNTk5NkM0NjAzRDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJO
cVJieHdsSHdoblF0Y3pHQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAA/jQy11FgFWrfquvJKza1E2n/wIOB1BDU8IqmiWd0gOuk2s7BFxR5H9
/h53uU/wDl9LvzTmgds53Db6ZykXUiEyxLQzvfF6pfqhptVlbs/PJYEcue+V2FcL
C4T78Ge0KVo+NNXem0gM70IQ+GNuTLhiBCw6eluASPFKCJ9lfXnsdaDweTPvp1QS
q7PcL/3Py6Am5uN7bi/H1+W5JM0fU0bwNZYL3K6QK4u3Lwf3nOC7h4GmTcpBS0WQ
P0iCqC6M30Bbn75sDt8Lzn8/lOLDqDSHbdejl6nP0T/Aydkxb6nQN7cdrXtuASQm
5buW/iDm1mGUHbMt5FjYEBbSZsDxqAg=
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:35:22 2025 by rpki-client