Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
File:                     dxt4h8SJvZsXs87YMWTvRNxWTvU.mft (raw, json)
Hash identifier:          67Z6A3vu+UUN6whWAy13kdqkkF3l/9gaDUyABjjZoI8=
Subject key identifier:   AB:29:A9:19:7C:FB:8A:FB:F9:FE:73:0D:47:54:34:EB:9A:0A:C1:33
Authority key identifier: 77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5
Certificate issuer:       /CN=A91E9641/serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
Manifest number:          018B
Signing time:             Sat 09 Aug 2025 03:52:56 +0000
Manifest this update:     Sat 09 Aug 2025 03:52:55 +0000
Manifest next update:     Sat 16 Aug 2025 03:52:55 +0000
Files and hashes:         1: dxt4h8SJvZsXs87YMWTvRNxWTvU.crl (hash: Urg3AZLDHvx95I0yT3LZ6Vu2AtoW3PQLHY0klFgkR9M=)
                          2: 5D432F98177711EEAB396D1CC4F9AE02.roa (hash: 64T0QVyxSFq/Fdklobji66MEyYuHugmocsuY/nRlqQ0=)
                          3: 5CB1666C177711EEAB396D1CC4F9AE02.roa (hash: i/4qbq1olZ1yrHtpcck4H45nkVfaKLB8DIL2yG7lkLw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl
                          rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9641, serialNumber=771B7887C489BD9B17B3CED83164EF44DC564EF5
        Validity
            Not Before: Aug  9 03:52:55 2025 GMT
            Not After : Aug 16 03:52:55 2025 GMT
        Subject: CN=6896c618-5255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cd:b0:89:02:96:38:01:1d:40:d6:20:12:62:
                    78:fe:f8:a0:35:be:b8:64:6e:28:58:93:6e:f7:e0:
                    a0:00:21:58:ee:d0:bb:6b:30:5f:61:05:76:e0:d0:
                    95:33:b2:f7:f7:89:66:ba:68:d4:fa:a8:26:c7:4b:
                    11:20:d7:22:79:d4:36:8c:78:92:68:54:48:42:77:
                    12:a7:ad:cd:f8:7d:b8:73:d1:a3:b0:15:e2:44:ca:
                    ef:60:ee:c9:25:d4:14:54:56:c6:c5:da:e8:5e:98:
                    6b:16:4f:58:80:5f:54:5b:47:e8:30:51:43:56:cc:
                    7b:f9:de:66:45:be:db:93:13:66:be:1a:5a:4e:cd:
                    aa:c0:83:1d:72:05:a5:2b:58:b8:16:98:dd:c1:d9:
                    92:5d:f6:f2:6b:a6:0d:f1:5d:f9:2e:df:e8:cd:e6:
                    e7:c2:83:32:f2:eb:61:96:4e:f2:ee:c5:4f:81:22:
                    e6:41:1e:35:4b:21:5e:8c:26:4d:ea:42:5e:5d:2f:
                    1b:ca:a0:e8:cc:cd:7e:ac:d3:9e:15:c6:fd:8c:01:
                    46:7e:49:b0:20:ec:9c:e8:0b:64:34:8f:c1:8c:af:
                    a3:5c:fd:e4:64:85:77:ae:93:5a:7d:41:bb:c2:3b:
                    67:1e:b4:69:61:0e:55:00:d4:52:41:ef:20:33:dd:
                    d7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:29:A9:19:7C:FB:8A:FB:F9:FE:73:0D:47:54:34:EB:9A:0A:C1:33
            X509v3 Authority Key Identifier:
                keyid:77:1B:78:87:C4:89:BD:9B:17:B3:CE:D8:31:64:EF:44:DC:56:4E:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dxt4h8SJvZsXs87YMWTvRNxWTvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9641/7D0287EA177011EE945CD859C4F9AE02/dxt4h8SJvZsXs87YMWTvRNxWTvU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:2b:75:13:af:e1:b5:ef:b0:fc:5f:0a:0c:85:97:7c:f9:10:
         f7:10:80:44:4a:12:61:78:97:46:d4:ad:6c:77:b2:b1:5f:ef:
         11:0d:74:b5:77:8a:d7:85:8e:93:87:d5:d3:ef:9a:ec:58:13:
         a0:f9:b3:5b:ad:e9:c3:7d:80:3c:01:b2:b2:dd:8f:c1:2d:0d:
         f3:79:43:c8:1d:18:12:05:d3:ba:c6:c5:a3:4e:69:32:1a:5f:
         1d:c1:1a:e9:b1:48:cd:ba:53:92:f5:87:2c:36:fb:9d:06:06:
         c1:67:30:d3:c4:29:7a:a8:9d:b7:e8:db:73:7a:a7:12:16:f9:
         22:03:3f:f1:11:67:45:53:17:c2:d1:aa:04:b0:01:2d:6a:47:
         da:a5:e6:2a:a2:0c:ae:44:a0:41:fb:4f:ca:14:42:7b:15:14:
         8c:2a:75:5b:52:ea:d8:06:bd:92:f2:04:6f:29:03:12:96:08:
         91:fe:d9:0c:78:3b:a7:1d:0d:1f:86:d2:54:86:d2:c0:13:8a:
         ef:89:1a:34:2f:8a:b2:be:bd:8c:5f:33:ac:6a:d9:97:2d:de:
         3a:8c:2b:50:1a:e0:a1:6a:97:a3:71:9b:ea:80:20:7f:fa:7e:
         fc:39:70:87:82:92:c1:e4:db:c5:7d:55:aa:1f:14:de:e7:d7:
         76:f2:6f:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk2NDExMTAvBgNVBAUTKDc3MUI3ODg3QzQ4OUJEOUIxN0IzQ0VEODMxNjRFRjQ0
REM1NjRFRjUwHhcNMjUwODA5MDM1MjU1WhcNMjUwODE2MDM1MjU1WjAYMRYwFAYD
VQQDEw02ODk2YzYxOC01MjU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArs2wiQKWOAEdQNYgEmJ4/vigNb64ZG4oWJNu9+CgACFY7tC7azBfYQV24NCV
M7L394lmumjU+qgmx0sRINciedQ2jHiSaFRIQncSp63N+H24c9GjsBXiRMrvYO7J
JdQUVFbGxdroXphrFk9YgF9UW0foMFFDVsx7+d5mRb7bkxNmvhpaTs2qwIMdcgWl
K1i4FpjdwdmSXfbya6YN8V35Lt/ozebnwoMy8uthlk7y7sVPgSLmQR41SyFejCZN
6kJeXS8byqDozM1+rNOeFcb9jAFGfkmwIOyc6AtkNI/BjK+jXP3kZIV3rpNafUG7
wjtnHrRpYQ5VANRSQe8gM93XNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKspqRl8
+4r7+f5zDUdUNOuaCsEzMB8GA1UdIwQYMBaAFHcbeIfEib2bF7PO2DFk70TcVk71
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTY0MS83RDAyODdFQTE3
NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZac1hzODdZTVdUdlJOeFdU
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R4dDRoOFNKdlpzWHM4N1lNV1R2Uk54V1R2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTY0MS83RDAyODdFQTE3NzAxMUVFOTQ1Q0Q4NTlDNEY5QUUwMi9keHQ0aDhTSnZa
c1hzODdZTVdUdlJOeFdUdlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsK3UTr+G177D8XwoMhZd8+RD3EIBEShJheJdG1K1sd7KxX+8RDXS1
d4rXhY6Th9XT75rsWBOg+bNbrenDfYA8AbKy3Y/BLQ3zeUPIHRgSBdO6xsWjTmky
Gl8dwRrpsUjNulOS9YcsNvudBgbBZzDTxCl6qJ236NtzeqcSFvkiAz/xEWdFUxfC
0aoEsAEtakfapeYqogyuRKBB+0/KFEJ7FRSMKnVbUurYBr2S8gRvKQMSlgiR/tkM
eDunHQ0fhtJUhtLAE4rviRo0L4qyvr2MXzOsatmXLd46jCtQGuChapejcZvqgCB/
+n78OXCHgpLB5NvFfVWqHxTe59d28m/u
-----END CERTIFICATE-----
Generated at Sun Aug 10 21:14:10 2025 by rpki-client