Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
File:                     XOe82cbkE4HMCvkJkN2gNpOF5lU.mft (raw, json)
Hash identifier:          dPFaoCcnNVV0DBy6LGFT4wAejswXOPn8Th60SJ1gttA=
Subject key identifier:   FF:77:CF:40:7D:4B:09:35:6C:1A:18:54:9A:83:94:34:0D:FF:C4:14
Authority key identifier: 5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55
Certificate issuer:       /CN=A91EC3A8/serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
Certificate serial:       0495
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
Manifest number:          0489
Signing time:             Thu 07 Aug 2025 00:33:37 +0000
Manifest this update:     Thu 07 Aug 2025 00:33:37 +0000
Manifest next update:     Thu 14 Aug 2025 00:33:36 +0000
Files and hashes:         1: XOe82cbkE4HMCvkJkN2gNpOF5lU.crl (hash: 0SQ3kCXMJtmkRfKiK5JsvGCUIPQBwqyfLmmyaO3g/5Q=)
                          2: 11330A4663F611ECB344F979C4F9AE02.roa (hash: EUhD1CogfYx019LqOHk5ZADPXKjO2pURWvfLLk3fqG8=)
                          3: 10A8D0E263F611ECB344F979C4F9AE02.roa (hash: 0C7V986gHLfF3RPO5trmAPFLdLtlvzlCJ3+47YeVJHU=)
                          4: C71919900BEE11EDBB84E711C4F9AE02.roa (hash: CMOccFw4JW9T0ieBo3En9p6kBriebw6aKjGeEamJ19Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl
                          rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 00:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1173 (0x495)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC3A8, serialNumber=5CE7BCD9C6E41381CC0AF90990DDA0369385E655
        Validity
            Not Before: Aug  7 00:33:37 2025 GMT
            Not After : Aug 14 00:33:36 2025 GMT
        Subject: CN=6893f461-b3c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:61:3b:6f:95:72:01:9b:cb:c8:6b:75:79:c7:
                    2a:87:42:8f:84:72:19:87:d1:16:1b:f5:0c:5a:8e:
                    1f:a4:92:27:2f:00:02:45:59:28:81:ad:b5:f2:61:
                    10:ed:4b:e1:9f:20:07:a4:67:12:0d:3e:bb:fc:7b:
                    70:4f:e6:18:b3:c3:73:3f:2a:99:0b:d6:9c:a4:19:
                    1d:b2:1e:15:b7:ed:35:57:78:05:6d:b9:d3:dd:e9:
                    28:4a:34:c3:cd:ad:12:ea:ac:6d:8c:90:41:d7:85:
                    74:e0:39:e3:5f:f7:f6:e6:0a:ea:47:a7:53:42:86:
                    ec:b8:c3:03:35:f9:77:b5:1f:21:37:52:c3:9a:73:
                    8f:50:ed:40:16:3e:1d:bc:76:fa:f3:15:72:a2:ac:
                    b7:c1:4f:3a:42:0d:76:4a:16:bf:93:15:67:7b:f4:
                    78:b8:1a:6b:37:15:ea:5e:ea:7c:07:a9:b7:73:4c:
                    f3:ab:db:f9:45:81:f5:0c:98:17:f4:1e:fe:84:b6:
                    c3:ff:6d:f0:21:95:9d:bf:24:4a:74:6b:f5:ce:d8:
                    7f:e7:35:96:8c:01:07:b0:c0:ca:22:65:9a:6d:18:
                    ca:a5:cb:44:cb:8a:fb:2d:f6:90:45:2f:bf:c4:cd:
                    58:8d:a0:78:56:d3:50:c4:d1:5b:97:4f:ac:3e:73:
                    ec:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:77:CF:40:7D:4B:09:35:6C:1A:18:54:9A:83:94:34:0D:FF:C4:14
            X509v3 Authority Key Identifier:
                keyid:5C:E7:BC:D9:C6:E4:13:81:CC:0A:F9:09:90:DD:A0:36:93:85:E6:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOe82cbkE4HMCvkJkN2gNpOF5lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3A8/21FA02724C6C11ECBBCFAD26C4F9AE02/XOe82cbkE4HMCvkJkN2gNpOF5lU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:06:8a:b1:9b:b9:e3:1b:2b:24:e9:01:54:48:ea:5b:eb:2a:
         6a:ca:d8:5f:a3:40:56:55:0e:9e:b6:39:0a:b1:0c:6f:bd:a5:
         df:91:37:52:2a:54:8e:7b:a1:8d:3a:79:7a:2d:03:a3:14:87:
         8f:4a:55:0a:a2:94:e6:65:46:f7:8d:20:3d:96:b0:8a:60:52:
         7a:9d:0c:fa:aa:fa:86:57:9f:fe:2b:44:41:af:f9:80:23:e1:
         d0:75:1a:c8:3a:a1:83:d7:9c:64:fd:8f:fb:eb:44:60:5c:d3:
         16:0c:78:b9:e7:3f:a2:0c:dd:3c:e8:64:50:00:26:a9:b3:82:
         60:18:11:16:cf:3b:46:12:c2:ca:a2:bb:ed:35:82:3d:d3:a5:
         d6:8c:3f:61:82:92:de:c6:5f:c8:22:cf:01:cd:08:81:ad:45:
         83:ac:3b:93:36:92:f4:9c:b3:2a:b7:86:f9:fe:ff:18:bb:da:
         5f:df:9f:60:89:a3:d4:bf:6d:41:36:7e:5d:53:7d:ad:50:d9:
         e1:86:91:9c:c5:33:f7:d8:0b:ea:20:46:a1:a7:a0:00:2a:05:
         5b:14:86:fb:8e:e7:bd:16:13:27:85:46:2b:c6:ec:08:26:f3:
         f2:f9:2a:90:54:d6:43:6f:5d:06:7b:7a:44:eb:9e:3b:50:5b:
         d6:5c:1f:2a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUMzQTgxMTAvBgNVBAUTKDVDRTdCQ0Q5QzZFNDEzODFDQzBBRjkwOTkwRERBMDM2
OTM4NUU2NTUwHhcNMjUwODA3MDAzMzM3WhcNMjUwODE0MDAzMzM2WjAYMRYwFAYD
VQQDEw02ODkzZjQ2MS1iM2M4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqmE7b5VyAZvLyGt1eccqh0KPhHIZh9EWG/UMWo4fpJInLwACRVkoga218mEQ
7UvhnyAHpGcSDT67/HtwT+YYs8NzPyqZC9acpBkdsh4Vt+01V3gFbbnT3ekoSjTD
za0S6qxtjJBB14V04DnjX/f25grqR6dTQobsuMMDNfl3tR8hN1LDmnOPUO1AFj4d
vHb68xVyoqy3wU86Qg12Sha/kxVne/R4uBprNxXqXup8B6m3c0zzq9v5RYH1DJgX
9B7+hLbD/23wIZWdvyRKdGv1zth/5zWWjAEHsMDKImWabRjKpctEy4r7LfaQRS+/
xM1YjaB4VtNQxNFbl0+sPnPsfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP93z0B9
Swk1bBoYVJqDlDQN/8QUMB8GA1UdIwQYMBaAFFznvNnG5BOBzAr5CZDdoDaTheZV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNBOC8yMUZBMDI3MjRD
NkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0SE1DdmtKa04yZ05wT0Y1
bFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hPZTgyY2JrRTRITUN2a0prTjJnTnBPRjVsVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzNBOC8yMUZBMDI3MjRDNkMxMUVDQkJDRkFEMjZDNEY5QUUwMi9YT2U4MmNia0U0
SE1DdmtKa04yZ05wT0Y1bFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBnBoqxm7njGysk6QFUSOpb6ypqythfo0BWVQ6etjkKsQxvvaXfkTdS
KlSOe6GNOnl6LQOjFIePSlUKopTmZUb3jSA9lrCKYFJ6nQz6qvqGV5/+K0RBr/mA
I+HQdRrIOqGD15xk/Y/760RgXNMWDHi55z+iDN086GRQACaps4JgGBEWzztGEsLK
orvtNYI906XWjD9hgpLexl/IIs8BzQiBrUWDrDuTNpL0nLMqt4b5/v8Yu9pf359g
iaPUv21BNn5dU32tUNnhhpGcxTP32AvqIEahp6AAKgVbFIb7jue9FhMnhUYrxuwI
JvPy+SqQVNZDb10Ge3pE6547UFvWXB8q
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:18:47 2025 by rpki-client