Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
File:                     T8Rg8J-QqobK9GfCha149DEnILA.mft (raw, json)
Hash identifier:          DSsC1IIXeUv136jX64qTYeKHt1Y2cfsLJ32qOT0GoCw=
Subject key identifier:   EE:DF:3D:7F:55:D0:D3:94:99:F7:ED:CD:AF:70:4E:A6:2E:1C:F9:A5
Authority key identifier: 4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0
Certificate issuer:       /CN=A91EDD99/serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
Manifest number:          E9
Signing time:             Sat 09 Aug 2025 05:50:00 +0000
Manifest this update:     Sat 09 Aug 2025 05:50:00 +0000
Manifest next update:     Sat 16 Aug 2025 05:49:59 +0000
Files and hashes:         1: T8Rg8J-QqobK9GfCha149DEnILA.crl (hash: rieZVG3aLI7fnc18v1ZgkpKPJzq1UVothqePgiFGlXY=)
                          2: F394D822271911EF86EB1C09C4F9AE02.roa (hash: Qh8PjLgGSm0UikgzIoT2yOicsZXmat+tWnCt5geWY08=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDD99, serialNumber=4FC460F09F90AA86CAF467C285AD78F4312720B0
        Validity
            Not Before: Aug  9 05:50:00 2025 GMT
            Not After : Aug 16 05:49:59 2025 GMT
        Subject: CN=6896e188-21db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b3:5f:fd:32:57:3b:c5:a5:70:8b:98:d9:3a:
                    8e:56:7e:a0:32:a3:7c:44:dd:52:eb:a1:25:e0:17:
                    6f:0a:a6:76:be:ec:32:9c:b9:17:2f:f3:1e:29:8f:
                    e7:ef:6f:6e:2f:13:23:f0:d2:c5:11:e5:58:64:b2:
                    e7:99:d7:3f:08:02:c0:bf:76:29:d2:3e:3b:8c:ab:
                    8b:52:d7:4b:69:6e:0a:7c:55:90:5b:19:fc:8d:9f:
                    ba:b8:49:4f:7d:dc:9e:8f:16:6e:8b:4a:51:3f:e0:
                    56:aa:96:c6:b9:5a:99:a1:af:f6:b8:31:10:8f:bb:
                    69:48:99:c0:cd:eb:9e:f5:8e:83:2f:82:c8:c0:fa:
                    12:06:5c:82:39:ce:ba:0b:3e:94:8c:e9:87:2c:b0:
                    4c:ce:28:ce:3e:d0:d3:cb:41:4b:19:ad:0a:31:58:
                    8f:b9:58:f6:01:08:50:43:c4:38:03:08:27:93:70:
                    8d:52:94:45:37:da:4e:ed:fe:9d:b5:67:08:2d:84:
                    8b:d8:c0:b5:3e:bc:92:51:70:cd:13:db:16:8a:b3:
                    29:4b:7c:e6:9f:42:ea:a9:2b:c1:fb:7c:a8:c9:75:
                    fa:92:4e:2e:df:ac:84:79:74:02:13:86:70:a6:de:
                    6b:62:b1:9d:f2:c0:57:dc:bb:98:a4:08:58:03:c0:
                    73:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DF:3D:7F:55:D0:D3:94:99:F7:ED:CD:AF:70:4E:A6:2E:1C:F9:A5
            X509v3 Authority Key Identifier:
                keyid:4F:C4:60:F0:9F:90:AA:86:CA:F4:67:C2:85:AD:78:F4:31:27:20:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T8Rg8J-QqobK9GfCha149DEnILA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDD99/05729B4C19B911EF8E0DFE3EC4F9AE02/T8Rg8J-QqobK9GfCha149DEnILA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:76:a7:b6:62:8c:20:13:0e:6a:ef:dd:0d:4b:ae:4b:ed:5b:
         a7:8c:48:6a:10:ab:cb:54:e6:64:50:cc:c6:ec:7f:20:ff:56:
         25:ec:9f:83:14:2e:37:5b:46:f9:db:0e:45:c4:e4:de:c4:27:
         32:3b:5d:9b:a0:da:c2:6a:01:ed:0d:33:9e:56:fa:d7:91:67:
         10:c8:96:72:65:80:20:0b:66:da:6f:67:96:b8:ce:df:5e:fe:
         e7:cd:84:b4:a4:d8:8a:a2:24:10:44:bf:bd:63:6e:20:b7:61:
         86:b7:b6:a6:d4:7a:9e:15:33:4a:b4:b5:61:8a:3e:7f:a6:ab:
         f6:73:d3:4d:10:5b:0b:40:a7:fe:4a:96:54:7b:c2:d4:72:3d:
         0f:62:20:cd:67:1c:9e:25:ad:ae:33:2f:d3:2f:66:11:a9:f3:
         ec:6d:c1:7d:4d:d4:14:55:b7:fa:40:a4:b1:9a:28:e7:ac:82:
         74:3f:d1:b5:83:5a:a5:3e:e5:21:a8:78:65:65:09:c2:3c:86:
         77:d0:0d:92:4c:04:42:d6:d0:9c:f6:ce:bd:dc:58:58:eb:99:
         db:53:02:ce:36:e4:9a:f7:c7:6e:51:33:1e:15:a2:ce:8c:49:
         8b:c9:87:fb:93:02:7d:86:17:e9:98:dd:ef:86:1d:21:d9:2f:
         28:a7:e9:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUREOTkxMTAvBgNVBAUTKDRGQzQ2MEYwOUY5MEFBODZDQUY0NjdDMjg1QUQ3OEY0
MzEyNzIwQjAwHhcNMjUwODA5MDU1MDAwWhcNMjUwODE2MDU0OTU5WjAYMRYwFAYD
VQQDEw02ODk2ZTE4OC0yMWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv7Nf/TJXO8WlcIuY2TqOVn6gMqN8RN1S66El4BdvCqZ2vuwynLkXL/MeKY/n
729uLxMj8NLFEeVYZLLnmdc/CALAv3Yp0j47jKuLUtdLaW4KfFWQWxn8jZ+6uElP
fdyejxZui0pRP+BWqpbGuVqZoa/2uDEQj7tpSJnAzeue9Y6DL4LIwPoSBlyCOc66
Cz6UjOmHLLBMzijOPtDTy0FLGa0KMViPuVj2AQhQQ8Q4Awgnk3CNUpRFN9pO7f6d
tWcILYSL2MC1PrySUXDNE9sWirMpS3zmn0LqqSvB+3yoyXX6kk4u36yEeXQCE4Zw
pt5rYrGd8sBX3LuYpAhYA8BzAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO7fPX9V
0NOUmfftza9wTqYuHPmlMB8GA1UdIwQYMBaAFE/EYPCfkKqGyvRnwoWtePQxJyCw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREQ5OS8wNTcyOUI0QzE5
QjkxMUVGOEUwREZFM0VDNEY5QUUwMi9UOFJnOEotUXFvYks5R2ZDaGExNDlERW5J
TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q4Umc4Si1RcW9iSzlHZkNoYTE0OURFbklMQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
REQ5OS8wNTcyOUI0QzE5QjkxMUVGOEUwREZFM0VDNEY5QUUwMi9UOFJnOEotUXFv
Yks5R2ZDaGExNDlERW5JTEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCydqe2YowgEw5q790NS65L7VunjEhqEKvLVOZkUMzG7H8g/1Yl7J+D
FC43W0b52w5FxOTexCcyO12boNrCagHtDTOeVvrXkWcQyJZyZYAgC2bab2eWuM7f
Xv7nzYS0pNiKoiQQRL+9Y24gt2GGt7am1HqeFTNKtLVhij5/pqv2c9NNEFsLQKf+
SpZUe8LUcj0PYiDNZxyeJa2uMy/TL2YRqfPsbcF9TdQUVbf6QKSxmijnrIJ0P9G1
g1qlPuUhqHhlZQnCPIZ30A2STARC1tCc9s693FhY65nbUwLONuSa98duUTMeFaLO
jEmLyYf7kwJ9hhfpmN3vhh0h2S8op+l6
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:46:20 2025 by rpki-client