Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
File:                     ljP2L_shhnbryT8cN2lknAxdhN8.mft (raw, json)
Hash identifier:          8zYJioHJc/6j/tAwKc3bm+39G0OHaTAPpsQnxnRH0TQ=
Subject key identifier:   95:DE:74:86:30:C1:CC:9A:14:1F:91:E5:77:0B:84:39:28:76:8C:50
Authority key identifier: 96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF
Certificate issuer:       /CN=A91F20F8/serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
Manifest number:          0189
Signing time:             Sat 09 Aug 2025 03:53:21 +0000
Manifest this update:     Sat 09 Aug 2025 03:53:20 +0000
Manifest next update:     Sat 16 Aug 2025 03:53:20 +0000
Files and hashes:         1: ljP2L_shhnbryT8cN2lknAxdhN8.crl (hash: XRIll3G9Smivn2+PxvzcN82WlvoLL2Fzc8lsxDlnulk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl
                          rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F20F8, serialNumber=9633F62FFB218676EBC93F1C3769649C0C5D84DF
        Validity
            Not Before: Aug  9 03:53:20 2025 GMT
            Not After : Aug 16 03:53:20 2025 GMT
        Subject: CN=6896c631-b458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:7b:9d:d8:2d:fe:b9:e2:8c:10:99:81:b1:
                    93:16:f6:62:e7:78:eb:00:71:8f:af:2e:df:45:5a:
                    01:a6:88:46:21:9d:e2:b6:6f:4d:a2:ec:54:97:bf:
                    65:16:48:b8:d6:6b:7d:23:83:79:5b:36:f3:20:15:
                    e2:00:aa:d9:95:e6:50:a5:99:2b:e8:d0:99:fc:1b:
                    a2:3f:20:89:b1:54:a9:13:67:24:f7:69:6d:a4:39:
                    60:35:1c:f7:d2:3b:8e:18:a0:7c:34:2a:d0:c8:30:
                    81:21:28:d7:9e:28:a0:b8:2f:02:07:cb:b1:14:cc:
                    84:2e:ba:98:0b:60:20:79:4c:a4:81:ce:f6:da:66:
                    34:be:5e:c9:c0:b3:1a:54:f0:a7:60:f6:ca:78:13:
                    2c:75:12:bd:ed:2b:6d:93:95:fd:f7:c5:34:c3:e2:
                    e3:95:4e:ef:a3:8c:92:87:19:40:1b:28:3e:de:73:
                    a3:3f:a7:68:82:a5:88:6b:36:4a:3a:12:9b:a8:64:
                    92:8f:26:e3:9e:62:8a:a5:6a:0c:7a:fb:6d:3e:bb:
                    c5:c5:10:92:0b:fa:d0:d0:1a:d4:ef:94:91:22:78:
                    e5:23:b9:dc:97:94:25:22:af:16:d6:0c:c5:40:db:
                    17:c6:cf:bc:d2:2f:e2:10:d6:5c:b8:00:95:7c:92:
                    0b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DE:74:86:30:C1:CC:9A:14:1F:91:E5:77:0B:84:39:28:76:8C:50
            X509v3 Authority Key Identifier:
                keyid:96:33:F6:2F:FB:21:86:76:EB:C9:3F:1C:37:69:64:9C:0C:5D:84:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ljP2L_shhnbryT8cN2lknAxdhN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F20F8/B06FAE2E197C11EEBD21BB4CC4F9AE02/ljP2L_shhnbryT8cN2lknAxdhN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:54:a6:33:a8:49:b7:4b:2c:0a:60:8a:c3:ee:a6:27:bb:65:
         ce:e6:f1:05:1f:55:9f:13:c7:2a:80:bf:f5:8f:30:b0:c2:35:
         4e:ab:28:c4:3a:c0:b5:40:7a:a2:af:9e:8b:10:1e:b6:19:d4:
         4a:4e:e0:c0:3a:b4:29:54:64:8d:34:c6:ef:89:50:e8:f6:38:
         36:ae:4d:44:19:55:33:61:58:2b:00:f7:a8:ca:16:75:d6:44:
         e6:a6:60:08:ca:ac:b9:e1:7c:8d:f3:2b:0f:00:68:78:e5:76:
         4b:da:f6:9d:f4:90:b4:c1:12:f4:f5:a5:52:04:04:b5:2e:85:
         e0:57:0f:a5:46:7f:3e:41:f9:50:dc:b0:6e:97:e6:d6:7a:0e:
         5d:18:5c:e5:59:83:d7:7f:e2:dc:3d:33:01:0c:49:d5:db:92:
         29:c2:1f:49:83:7f:52:77:df:e8:a4:a3:2a:6a:48:7b:e3:57:
         2e:18:53:9a:bc:2a:7a:6f:cb:27:90:d3:63:d5:ab:e3:ec:fa:
         4f:1b:a1:c1:cc:27:02:41:16:98:1d:ee:e0:5a:5c:e2:0a:65:
         32:7b:e8:44:e6:66:48:41:48:56:db:b6:e2:66:86:14:53:9c:
         9f:b1:0d:4b:98:2e:9d:00:98:7d:8b:7a:1c:1b:7f:69:53:5b:
         bf:2d:1c:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjIwRjgxMTAvBgNVBAUTKDk2MzNGNjJGRkIyMTg2NzZFQkM5M0YxQzM3Njk2NDlD
MEM1RDg0REYwHhcNMjUwODA5MDM1MzIwWhcNMjUwODE2MDM1MzIwWjAYMRYwFAYD
VQQDEw02ODk2YzYzMS1iNDU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu6t7ndgt/rnijBCZgbGTFvZi53jrAHGPry7fRVoBpohGIZ3itm9NouxUl79l
Fki41mt9I4N5WzbzIBXiAKrZleZQpZkr6NCZ/BuiPyCJsVSpE2ck92ltpDlgNRz3
0juOGKB8NCrQyDCBISjXniiguC8CB8uxFMyELrqYC2AgeUykgc722mY0vl7JwLMa
VPCnYPbKeBMsdRK97Sttk5X998U0w+LjlU7vo4yShxlAGyg+3nOjP6dogqWIazZK
OhKbqGSSjybjnmKKpWoMevttPrvFxRCSC/rQ0BrU75SRInjlI7ncl5QlIq8W1gzF
QNsXxs+80i/iENZcuACVfJIL0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXedIYw
wcyaFB+R5XcLhDkodoxQMB8GA1UdIwQYMBaAFJYz9i/7IYZ268k/HDdpZJwMXYTf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjBGOC9CMDZGQUUyRTE5
N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhuYnJ5VDhjTjJsa25BeGRo
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xqUDJMX3NoaG5icnlUOGNOMmxrbkF4ZGhOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MjBGOC9CMDZGQUUyRTE5N0MxMUVFQkQyMUJCNENDNEY5QUUwMi9salAyTF9zaGhu
YnJ5VDhjTjJsa25BeGRoTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAZVKYzqEm3SywKYIrD7qYnu2XO5vEFH1WfE8cqgL/1jzCwwjVOqyjE
OsC1QHqir56LEB62GdRKTuDAOrQpVGSNNMbviVDo9jg2rk1EGVUzYVgrAPeoyhZ1
1kTmpmAIyqy54XyN8ysPAGh45XZL2vad9JC0wRL09aVSBAS1LoXgVw+lRn8+QflQ
3LBul+bWeg5dGFzlWYPXf+LcPTMBDEnV25Ipwh9Jg39Sd9/opKMqakh741cuGFOa
vCp6b8snkNNj1avj7PpPG6HBzCcCQRaYHe7gWlziCmUye+hE5mZIQUhW27biZoYU
U5yfsQ1LmC6dAJh9i3ocG39pU1u/LRxV
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:48:45 2025 by rpki-client