Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
File:                     5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json)
Hash identifier:          4S7h8E/DrxP0Hw7AIn5qsTVowbgnLm2NP6+a7UBGpc4=
Subject key identifier:   2B:04:48:B7:C9:D4:CD:92:0D:6F:E7:C0:60:DB:0A:7B:B7:EE:71:BB
Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
Certificate issuer:       /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Certificate serial:       0499
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
Manifest number:          0480
Signing time:             Sat 09 Aug 2025 00:36:33 +0000
Manifest this update:     Sat 09 Aug 2025 00:36:33 +0000
Manifest next update:     Sat 16 Aug 2025 00:36:33 +0000
Files and hashes:         1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: FLiTVtum1KZ2UqeRAycmjczxIyBWr4eTg25HWOutsMg=)
                          2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: ZCpdqccvGNQRvKgyIaRry+OF/s1VpSriPxxNhei30Yk=)
                          3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: JbuO9QygXZWdecTCM5Sf89ukRTRQrSasLXKuG+IV9QE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
                          rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1177 (0x499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
        Validity
            Not Before: Aug  9 00:36:33 2025 GMT
            Not After : Aug 16 00:36:33 2025 GMT
        Subject: CN=68969811-0d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6d:02:ea:8b:ed:38:4e:50:2b:1a:cb:7c:20:
                    43:58:f6:fd:9d:e4:f4:a1:e6:87:86:0f:44:1d:6f:
                    5c:df:ca:39:5d:ba:15:93:fa:42:a4:17:f2:51:8d:
                    ae:5c:c8:65:6e:bd:ff:17:0c:f7:74:9c:71:1e:82:
                    99:24:01:6d:52:e1:5b:8d:d7:06:46:cf:3d:94:9a:
                    fe:69:4d:9b:98:92:ec:26:06:ab:db:08:66:3e:d8:
                    09:49:c1:76:9a:ad:aa:92:ec:fd:54:78:b5:04:51:
                    ed:30:a1:ec:ca:66:cb:fc:67:f1:51:f2:af:28:23:
                    75:34:7c:75:7d:21:ab:75:3a:93:1c:93:f8:a2:b7:
                    be:62:bc:d4:c3:94:17:1a:1d:76:23:d6:f7:16:84:
                    0e:ce:52:a9:23:98:f9:47:ce:9d:21:54:d6:9a:39:
                    9b:bf:d9:58:c8:3a:a6:2d:83:68:a9:67:eb:b1:3a:
                    c1:b3:0f:7d:59:6f:eb:44:31:5f:c1:ac:f2:02:78:
                    ad:5b:74:7c:45:78:bc:18:9e:6d:f3:4e:d6:61:6d:
                    73:30:60:00:e2:35:4c:2b:5d:4e:1d:94:e8:bc:22:
                    80:48:ea:a8:ac:0d:be:ca:5b:ec:53:6b:05:08:42:
                    73:7a:80:3c:1e:c3:cf:dc:26:34:10:a0:79:69:85:
                    4a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:04:48:B7:C9:D4:CD:92:0D:6F:E7:C0:60:DB:0A:7B:B7:EE:71:BB
            X509v3 Authority Key Identifier:
                keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3c:18:46:d5:05:a6:b5:dd:8b:e5:c5:a8:94:13:8f:e3:a3:
         92:06:6d:59:a9:00:cd:22:89:0c:55:41:bf:ef:f0:fe:12:38:
         a7:71:b6:8d:f2:2b:39:f5:f4:cd:e9:9d:b0:f4:d0:de:a2:0d:
         65:52:5d:f8:0b:62:d5:23:17:dd:f0:03:ce:01:ab:75:73:66:
         be:70:bd:f5:c0:58:31:b2:79:60:cc:d1:fe:3e:a8:24:84:24:
         c0:d7:0f:f7:f5:3e:2a:ef:1b:bf:7b:2d:b2:f7:94:aa:02:a0:
         8b:28:93:98:0a:8c:cf:df:83:60:66:e5:93:50:7d:82:7c:96:
         41:3d:2d:c0:c0:e6:14:ec:29:ec:f3:8c:38:81:78:7e:d1:5c:
         80:9a:df:4b:ff:b7:20:c0:aa:86:a0:72:be:28:0f:25:53:2a:
         55:0d:9b:b2:f5:b9:36:0f:35:7d:e5:d8:e1:95:19:f9:3e:6d:
         25:b4:16:fe:3d:fb:e1:ee:7b:09:17:0f:8f:40:4a:93:8d:01:
         25:60:e0:ae:d4:7a:df:28:81:b4:c3:dc:5e:00:30:1a:ea:cf:
         50:c4:51:22:5f:a9:93:56:48:25:e8:a3:66:99:28:7c:9d:10:
         b9:57:5f:1d:aa:1b:c3:ff:3e:1d:05:99:7a:66:e3:5c:d5:64:
         63:94:bf:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUYzNUIxMTAvBgNVBAUTKEU0MDcyMEJBMjkzQkFGMjVCQzBBMTc3OEM2NUNGMEQy
RTBGMzUxNjAwHhcNMjUwODA5MDAzNjMzWhcNMjUwODE2MDAzNjMzWjAYMRYwFAYD
VQQDEw02ODk2OTgxMS0wZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvW0C6ovtOE5QKxrLfCBDWPb9neT0oeaHhg9EHW9c38o5XboVk/pCpBfyUY2u
XMhlbr3/Fwz3dJxxHoKZJAFtUuFbjdcGRs89lJr+aU2bmJLsJgar2whmPtgJScF2
mq2qkuz9VHi1BFHtMKHsymbL/GfxUfKvKCN1NHx1fSGrdTqTHJP4ore+YrzUw5QX
Gh12I9b3FoQOzlKpI5j5R86dIVTWmjmbv9lYyDqmLYNoqWfrsTrBsw99WW/rRDFf
wazyAnitW3R8RXi8GJ5t807WYW1zMGAA4jVMK11OHZTovCKASOqorA2+ylvsU2sF
CEJzeoA8HsPP3CY0EKB5aYVKvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsESLfJ
1M2SDW/nwGDbCnu37nG7MB8GA1UdIwQYMBaAFOQHILopO68lvAoXeMZc8NLg81Fg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjM1Qi9FMDEwMTU4QTU2
NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5VzhDaGQ0eGx6dzB1RHpV
V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVBY2d1aWs3cnlXOENoZDR4bHp3MHVEelVXQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjM1Qi9FMDEwMTU4QTU2NEUxMUVDODU4ODU5MTRDNEY5QUUwMi81QWNndWlrN3J5
VzhDaGQ0eGx6dzB1RHpVV0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4PBhG1QWmtd2L5cWolBOP46OSBm1ZqQDNIokMVUG/7/D+EjincbaN
8is59fTN6Z2w9NDeog1lUl34C2LVIxfd8APOAat1c2a+cL31wFgxsnlgzNH+Pqgk
hCTA1w/39T4q7xu/ey2y95SqAqCLKJOYCozP34NgZuWTUH2CfJZBPS3AwOYU7Cns
84w4gXh+0VyAmt9L/7cgwKqGoHK+KA8lUypVDZuy9bk2DzV95djhlRn5Pm0ltBb+
Pfvh7nsJFw+PQEqTjQElYOCu1HrfKIG0w9xeADAa6s9QxFEiX6mTVkgl6KNmmSh8
nRC5V18dqhvD/z4dBZl6ZuNc1WRjlL/s
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:24:04 2025 by rpki-client