Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
File:                     u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json)
Hash identifier:          gxsyA5Uh8Gy5r/riz9Qx9oYdconmS79YpJJLdq+1Z+M=
Subject key identifier:   3D:E0:04:66:43:61:4C:71:9A:91:CB:5B:5B:FF:F0:B6:D2:72:6D:9A
Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE
Certificate issuer:       /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
Certificate serial:       068B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
Manifest number:          0673
Signing time:             Fri 08 Aug 2025 22:33:37 +0000
Manifest this update:     Fri 08 Aug 2025 22:33:37 +0000
Manifest next update:     Fri 15 Aug 2025 22:33:37 +0000
Files and hashes:         1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: /2zQu0GR62fKuT9jNcWP+eZJDbEzQTgoZaC0f3SYcqE=)
                          2: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: MXG2UaX3e+u+Jgkl2hW9VaZ5bWI3Hg2FUtWl1xPKFxI=)
                          3: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: A5KK9SQwb+EDWJ4jMnTUQq3SJ0SvbTU26Y/s1pM+n+I=)
                          4: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: myGu3py2MJoX+9pcsdAEfeXFlVuZbTSedA0MlFyQwmI=)
                          5: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: IRx8YlQZD3iZNO8ZkV5fm0YkjEB3fazq27IMfHjcxDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl
                          rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1675 (0x68b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE
        Validity
            Not Before: Aug  8 22:33:37 2025 GMT
            Not After : Aug 15 22:33:37 2025 GMT
        Subject: CN=68967b41-0981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:71:71:2e:a7:65:30:63:d9:82:bd:9f:d5:
                    36:64:77:e9:61:6d:ad:27:39:54:51:16:23:a9:2b:
                    73:26:30:f4:ba:d9:49:8a:e3:b3:02:8c:d9:d1:c8:
                    0b:f0:d0:e0:7e:dd:ae:3a:df:b3:0d:ab:f8:c4:fa:
                    46:bf:b4:c9:b0:96:18:ba:1d:c2:33:82:38:4f:54:
                    88:d3:97:5b:76:e8:e1:ae:79:ec:a0:b9:ba:e0:02:
                    81:ca:c0:47:a6:c6:1f:27:9f:53:64:c2:36:50:b4:
                    75:93:63:e1:36:d0:a6:d8:34:4d:6c:09:01:c7:6a:
                    ed:27:f3:3f:6f:e7:b7:04:40:38:11:bf:50:c7:bf:
                    7f:e2:47:27:cd:40:b1:44:7b:f2:13:16:9f:0b:dd:
                    58:a6:ef:ba:9d:b2:f0:d8:65:68:fa:a8:81:de:aa:
                    b0:90:18:95:0c:48:95:c7:91:84:3b:44:56:9f:66:
                    a7:74:11:0f:1f:53:9a:6c:46:c5:c4:a5:a9:f7:b3:
                    c9:4b:aa:31:b0:cd:79:ea:9f:8f:b3:ce:8a:05:22:
                    d2:4c:75:a6:85:1f:c9:97:10:90:6b:56:c4:83:d0:
                    b2:55:ff:ae:c3:51:0c:67:0c:b8:5c:e3:ad:77:c5:
                    4a:35:8e:76:56:ce:24:f3:5e:2b:a8:81:6c:97:3c:
                    e6:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E0:04:66:43:61:4C:71:9A:91:CB:5B:5B:FF:F0:B6:D2:72:6D:9A
            X509v3 Authority Key Identifier:
                keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7d:70:20:be:eb:93:9c:21:b3:20:1c:55:3c:4a:3b:55:fb:
         ab:1b:fc:e4:11:88:2c:eb:08:3d:87:15:c2:c8:9e:5d:e7:eb:
         6e:66:1b:40:61:9e:91:5e:cb:40:3a:c0:ed:4b:4c:20:c0:63:
         fc:0a:ae:94:20:9b:49:6e:26:92:83:c1:16:25:7f:10:75:94:
         59:d4:ae:95:68:61:4f:f8:cc:c6:ce:49:8a:aa:3c:86:0d:02:
         f4:fa:30:1a:d3:e2:a3:e8:f0:55:6e:3b:a7:f0:9b:96:fd:ad:
         f0:97:03:00:ff:ee:e1:0f:ba:92:f1:65:58:09:a9:d8:10:4e:
         67:55:0f:e6:84:00:de:b9:d1:c6:2b:2b:22:6b:6d:57:ad:4e:
         57:99:00:d6:1d:40:2b:42:05:fe:44:48:6d:14:c7:72:62:14:
         91:24:4a:5d:01:b3:4c:a6:36:a0:f1:08:5f:0f:1b:ad:3f:ef:
         04:3e:49:d8:07:9f:45:69:db:da:0b:2e:0a:bf:32:56:b3:24:
         a5:0c:54:6a:aa:ed:8c:61:05:24:f3:73:a5:a8:5a:9d:d9:54:
         97:12:43:cf:6c:cf:c2:75:eb:c8:cb:88:1c:f1:4a:cf:9f:43:
         e9:ff:a5:dc:58:c4:55:a3:b5:30:3f:c0:12:dd:28:6c:6a:d7:
         ce:46:14:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD
MkE0RTI5Q0UwHhcNMjUwODA4MjIzMzM3WhcNMjUwODE1MjIzMzM3WjAYMRYwFAYD
VQQDEw02ODk2N2I0MS0wOTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAue9xcS6nZTBj2YK9n9U2ZHfpYW2tJzlUURYjqStzJjD0utlJiuOzAozZ0cgL
8NDgft2uOt+zDav4xPpGv7TJsJYYuh3CM4I4T1SI05dbdujhrnnsoLm64AKBysBH
psYfJ59TZMI2ULR1k2PhNtCm2DRNbAkBx2rtJ/M/b+e3BEA4Eb9Qx79/4kcnzUCx
RHvyExafC91Ypu+6nbLw2GVo+qiB3qqwkBiVDEiVx5GEO0RWn2andBEPH1OabEbF
xKWp97PJS6oxsM156p+Ps86KBSLSTHWmhR/JlxCQa1bEg9CyVf+uw1EMZwy4XOOt
d8VKNY52Vs4k814rqIFslzzmqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3gBGZD
YUxxmpHLW1v/8LbScm2aMB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE
NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L
YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
Mjc3RC83OEExRDA4RThENkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVw
TURiUnh5M1V3S2ZDcE9LYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+fXAgvuuTnCGzIBxVPEo7VfurG/zkEYgs6wg9hxXCyJ5d5+tuZhtA
YZ6RXstAOsDtS0wgwGP8Cq6UIJtJbiaSg8EWJX8QdZRZ1K6VaGFP+MzGzkmKqjyG
DQL0+jAa0+Kj6PBVbjun8JuW/a3wlwMA/+7hD7qS8WVYCanYEE5nVQ/mhADeudHG
Kysia21XrU5XmQDWHUArQgX+REhtFMdyYhSRJEpdAbNMpjag8QhfDxutP+8EPknY
B59FadvaCy4KvzJWsySlDFRqqu2MYQUk83OlqFqd2VSXEkPPbM/CdevIy4gc8UrP
n0Pp/6XcWMRVo7UwP8AS3ShsatfORhQJ
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:09:05 2025 by rpki-client