Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
File:                     Grie9bKOyC1q4hD8Kb3opxdWsbA.mft (raw, json)
Hash identifier:          jQxzRBh3GgCYc1962JMGtVG/8f2Wnf5LwLi6IErHf9M=
Subject key identifier:   66:15:69:F5:49:49:54:3F:3A:28:A9:77:DE:08:89:C8:6A:7C:28:E1
Authority key identifier: 1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0
Certificate issuer:       /CN=A91E90DD/serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0
Certificate serial:       049E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
Manifest number:          0491
Signing time:             Wed 13 Aug 2025 00:31:47 +0000
Manifest this update:     Wed 13 Aug 2025 00:31:47 +0000
Manifest next update:     Wed 20 Aug 2025 00:31:47 +0000
Files and hashes:         1: Grie9bKOyC1q4hD8Kb3opxdWsbA.crl (hash: p5Vo8CLcTm7HrMh0NFOqlKtwwcoJUhPxXtNhmd+x16M=)
                          2: 7112985C4DE711EC92010E61C4F9AE02.roa (hash: M1i4rWrbGKWHBYp62z8SKmnQxpHNlWERMJQXrk6a0Go=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl
                          rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 00:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182 (0x49e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E90DD, serialNumber=1AB89EF5B28EC82D6AE210FC29BDE8A71756B1B0
        Validity
            Not Before: Aug 13 00:31:47 2025 GMT
            Not After : Aug 20 00:31:47 2025 GMT
        Subject: CN=689bdcf3-e076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:9a:58:ea:7d:7f:76:b7:68:3f:30:54:42:dd:
                    5d:0a:a3:7c:81:24:bd:c2:bb:2e:ed:1c:c5:ac:20:
                    23:05:3f:92:8a:b1:d3:32:92:a9:9b:08:1d:81:2c:
                    45:83:da:fa:88:1c:69:1c:7e:8e:04:b3:33:7f:06:
                    69:03:16:a4:05:34:b4:e0:b4:91:4e:92:d6:c1:bf:
                    4b:78:48:57:dc:e5:a6:1c:43:37:b0:3d:53:93:ee:
                    ea:93:75:be:c1:29:af:ea:c6:ca:a9:ca:31:d1:aa:
                    fd:63:6b:f1:80:de:31:3c:85:0b:c9:d9:90:23:65:
                    bd:9f:26:ed:9f:62:5a:17:46:bc:11:bf:60:a8:2b:
                    05:22:b1:04:2f:cb:63:87:fb:4f:24:2c:dd:64:e9:
                    21:e0:f0:60:84:f9:e4:4b:d5:6f:76:8e:40:83:d2:
                    64:21:c5:71:d6:25:95:fe:f7:d1:84:53:49:be:36:
                    22:5b:78:8d:63:4a:d8:ab:e1:6b:c8:48:e0:d2:bd:
                    96:78:fd:72:ed:9b:ad:7b:49:ae:6b:52:e8:8b:82:
                    cf:62:db:2f:92:3d:0d:01:41:15:22:ff:e0:8b:88:
                    97:10:1f:22:67:fe:97:89:6c:2e:38:ab:10:b7:db:
                    3c:20:cc:80:34:8f:18:f7:46:1c:a6:12:4a:35:a2:
                    83:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:15:69:F5:49:49:54:3F:3A:28:A9:77:DE:08:89:C8:6A:7C:28:E1
            X509v3 Authority Key Identifier:
                keyid:1A:B8:9E:F5:B2:8E:C8:2D:6A:E2:10:FC:29:BD:E8:A7:17:56:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Grie9bKOyC1q4hD8Kb3opxdWsbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E90DD/6D87ED024DE411ECA317915DC4F9AE02/Grie9bKOyC1q4hD8Kb3opxdWsbA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:cd:4f:bc:5c:54:f4:35:cc:e5:7b:f7:db:8c:95:8b:3c:62:
         40:99:47:40:2e:20:04:53:bb:8d:b3:47:38:f5:b1:70:c4:40:
         54:82:69:cf:07:bf:59:36:6a:d5:19:e3:f5:bb:b1:fa:6d:aa:
         6b:76:3d:51:01:d7:ed:0c:45:3e:e7:cb:b7:6d:eb:9a:9e:25:
         71:3b:5d:9a:4f:ba:80:fc:30:e5:a6:29:8a:87:6c:12:c1:cf:
         d2:f3:96:5b:74:58:c2:68:f0:8b:dc:67:94:d8:e0:b9:97:a9:
         81:d7:10:c4:26:43:d4:35:1e:19:a4:77:a4:a4:37:35:57:84:
         7b:9d:52:cf:40:52:2c:20:df:b4:6b:aa:28:af:c5:ef:e9:a0:
         22:cb:ef:a1:e4:b5:75:d2:c2:df:be:02:c6:db:ad:48:98:d1:
         7a:dd:cd:21:01:da:d1:69:7e:08:98:85:11:f3:61:ef:9f:25:
         e4:8f:44:e3:23:2a:0e:7b:a5:2d:ec:cf:de:8c:fc:9d:2b:18:
         52:d9:dd:62:8f:79:fa:66:26:bc:cf:83:2f:19:46:af:f7:23:
         0b:f4:71:96:0f:81:69:18:36:7e:bd:ad:71:db:c8:5e:50:44:
         46:e8:2b:e9:10:bc:74:4f:73:25:5a:89:54:2d:11:89:6a:a3:
         e6:08:bf:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBJ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTkwREQxMTAvBgNVBAUTKDFBQjg5RUY1QjI4RUM4MkQ2QUUyMTBGQzI5QkRFOEE3
MTc1NkIxQjAwHhcNMjUwODEzMDAzMTQ3WhcNMjUwODIwMDAzMTQ3WjAYMRYwFAYD
VQQDEw02ODliZGNmMy1lMDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8ZpY6n1/drdoPzBUQt1dCqN8gSS9wrsu7RzFrCAjBT+SirHTMpKpmwgdgSxF
g9r6iBxpHH6OBLMzfwZpAxakBTS04LSRTpLWwb9LeEhX3OWmHEM3sD1Tk+7qk3W+
wSmv6sbKqcox0ar9Y2vxgN4xPIULydmQI2W9nybtn2JaF0a8Eb9gqCsFIrEEL8tj
h/tPJCzdZOkh4PBghPnkS9Vvdo5Ag9JkIcVx1iWV/vfRhFNJvjYiW3iNY0rYq+Fr
yEjg0r2WeP1y7Zute0mua1Loi4LPYtsvkj0NAUEVIv/gi4iXEB8iZ/6XiWwuOKsQ
t9s8IMyANI8Y90YcphJKNaKDGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGYVafVJ
SVQ/Oiipd94IichqfCjhMB8GA1UdIwQYMBaAFBq4nvWyjsgtauIQ/Cm96KcXVrGw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTBERC82RDg3RUQwMjRE
RTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lDMXE0aEQ4S2Izb3B4ZFdz
YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0dyaWU5YktPeUMxcTRoRDhLYjNvcHhkV3NiQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTBERC82RDg3RUQwMjRERTQxMUVDQTMxNzkxNURDNEY5QUUwMi9HcmllOWJLT3lD
MXE0aEQ4S2Izb3B4ZFdzYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCOzU+8XFT0Nczle/fbjJWLPGJAmUdALiAEU7uNs0c49bFwxEBUgmnP
B79ZNmrVGeP1u7H6baprdj1RAdftDEU+58u3beuaniVxO12aT7qA/DDlpimKh2wS
wc/S85ZbdFjCaPCL3GeU2OC5l6mB1xDEJkPUNR4ZpHekpDc1V4R7nVLPQFIsIN+0
a6oor8Xv6aAiy++h5LV10sLfvgLG261ImNF63c0hAdrRaX4ImIUR82HvnyXkj0Tj
IyoOe6Ut7M/ejPydKxhS2d1ij3n6Zia8z4MvGUav9yML9HGWD4FpGDZ+va1x28he
UERG6CvpELx0T3MlWolULRGJaqPmCL+P
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:36:18 2025 by rpki-client