Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
File:                     sXSj1LqbR24rMeR8cqKY0ETZh4U.mft (raw, json)
Hash identifier:          I8yVkKrGf9Nl0F1CNbInyaEzpBVrGV4EJNRTLKDc20A=
Subject key identifier:   92:C0:92:8F:9E:BC:B9:E8:F7:94:3F:1F:5C:F6:1A:E0:B4:24:49:98
Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85
Certificate issuer:       /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
Manifest number:          6B
Signing time:             Sat 09 Aug 2025 07:40:50 +0000
Manifest this update:     Sat 09 Aug 2025 07:40:49 +0000
Manifest next update:     Sat 16 Aug 2025 07:40:49 +0000
Files and hashes:         1: sXSj1LqbR24rMeR8cqKY0ETZh4U.crl (hash: iK9umpwk7SQBgQCAFMYowsgwJ538/R80SW2X+Hw88V0=)
                          2: 000A7CE25A5911F0948C6D20C4F9AE02.roa (hash: GWfp52D5q+ZWDIE0kYIw+TpLPvEGwRDdK6mh7QUL+8M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl
                          rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
        Validity
            Not Before: Aug  9 07:40:49 2025 GMT
            Not After : Aug 16 07:40:49 2025 GMT
        Subject: CN=6896fb82-3fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f6:6d:94:40:e9:b7:53:c7:86:cc:8d:cd:d5:
                    a8:58:90:29:84:ba:ae:5f:90:11:c3:2e:c7:58:39:
                    07:4a:b6:77:1c:49:fb:6a:8f:b4:7f:de:0b:56:7e:
                    b5:e9:1f:6c:a3:13:2f:02:91:3f:ac:16:5a:69:a8:
                    84:83:cc:91:ed:c0:fc:73:3b:4a:1c:1b:a5:3d:22:
                    7f:66:31:1b:0e:5c:68:43:f6:b3:63:b5:45:79:3e:
                    88:25:46:2e:ff:5c:96:8e:9e:da:39:4c:21:b8:7c:
                    6a:86:70:dd:37:c6:c2:3d:2e:29:af:e2:b0:d1:0f:
                    d2:22:00:9a:c8:02:3b:37:90:1f:4e:c1:7b:2e:a4:
                    9f:7e:6e:77:a9:c1:83:11:96:fd:08:1a:d2:d4:67:
                    4b:05:38:d5:65:13:86:ef:22:bc:00:82:0a:f8:c1:
                    0f:d0:3c:cf:8e:d7:64:fc:c7:f8:51:e1:69:d8:d0:
                    b0:a3:c5:80:58:48:86:fb:77:bb:7b:ff:d1:5d:d7:
                    7b:c3:b4:a4:30:c9:0a:ec:b0:5c:15:33:bc:3e:f7:
                    a9:b0:bd:b6:da:ac:d5:b1:f7:11:3e:e4:56:fb:29:
                    74:14:bb:6f:d9:55:f5:7a:a7:ce:18:2e:4a:ca:98:
                    44:4f:de:b2:07:8d:7c:cd:c1:58:a4:a3:49:e0:5c:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C0:92:8F:9E:BC:B9:E8:F7:94:3F:1F:5C:F6:1A:E0:B4:24:49:98
            X509v3 Authority Key Identifier:
                keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:03:13:aa:35:1a:5e:0e:43:64:36:ee:e9:88:87:68:98:be:
         e1:39:bc:55:e5:4a:20:14:bc:f0:33:81:cd:d4:ea:40:36:6f:
         46:a8:5f:17:02:72:78:f1:3b:eb:4d:73:8a:e9:c2:81:41:0b:
         f0:c1:d8:b4:cc:ae:64:59:72:43:b8:4c:8e:c7:12:90:24:92:
         4b:e7:40:14:1b:8a:05:2b:31:9c:3c:85:ab:2a:29:9a:78:75:
         c9:0f:3a:fb:e2:57:b9:8b:72:3a:36:37:46:46:b0:91:85:90:
         85:ea:9b:35:f8:cf:26:9e:c9:56:ce:32:31:82:58:64:06:1d:
         01:22:37:11:a3:0e:55:a3:04:4c:cd:7d:07:33:4e:99:d5:95:
         40:47:8f:f1:22:ca:7a:61:6b:8e:9b:3c:34:9a:ae:53:72:b8:
         9f:cf:8f:9e:3c:2e:4e:fe:fe:da:0a:db:f6:4c:37:dc:1e:68:
         3a:61:c0:55:00:47:8e:49:22:07:b3:87:24:59:e3:8c:25:21:
         e9:1a:0d:df:77:db:f2:b1:ac:6a:46:8a:ff:1c:80:d6:57:b9:
         58:d2:69:6e:21:89:0d:4d:5f:3e:44:96:84:94:af:d2:f7:0e:
         bc:4b:b0:a5:ea:82:18:5d:c2:54:9b:e7:04:86:a1:59:a2:1e:
         4d:d1:4d:32
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
QkM4OTExMC8GA1UEBRMoQjE3NEEzRDRCQTlCNDc2RTJCMzFFNDdDNzJBMjk4RDA0
NEQ5ODc4NTAeFw0yNTA4MDkwNzQwNDlaFw0yNTA4MTYwNzQwNDlaMBgxFjAUBgNV
BAMTDTY4OTZmYjgyLTNmZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCw9m2UQOm3U8eGzI3N1ahYkCmEuq5fkBHDLsdYOQdKtnccSftqj7R/3gtWfrXp
H2yjEy8CkT+sFlppqISDzJHtwPxzO0ocG6U9In9mMRsOXGhD9rNjtUV5PoglRi7/
XJaOnto5TCG4fGqGcN03xsI9Limv4rDRD9IiAJrIAjs3kB9OwXsupJ9+bnepwYMR
lv0IGtLUZ0sFONVlE4bvIrwAggr4wQ/QPM+O12T8x/hR4WnY0LCjxYBYSIb7d7t7
/9Fd13vDtKQwyQrssFwVM7w+96mwvbbarNWx9xE+5Fb7KXQUu2/ZVfV6p84YLkrK
mERP3rIHjXzNwViko0ngXESzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUksCSj568
uej3lD8fXPYa4LQkSZgwHwYDVR0jBBgwFoAUsXSj1LqbR24rMeR8cqKY0ETZh4Uw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCQzg5LzlFNzI2MkJFRUZD
RTExRUY4OTNGRjcwRUM0RjlBRTAyL3NYU2oxTHFiUjI0ck1lUjhjcUtZMEVUWmg0
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvc1hTajFMcWJSMjRyTWVSOGNxS1kwRVRaaDRVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC
Qzg5LzlFNzI2MkJFRUZDRTExRUY4OTNGRjcwRUM0RjlBRTAyL3NYU2oxTHFiUjI0
ck1lUjhjcUtZMEVUWmg0VS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGQDE6o1Gl4OQ2Q27umIh2iYvuE5vFXlSiAUvPAzgc3U6kA2b0aoXxcC
cnjxO+tNc4rpwoFBC/DB2LTMrmRZckO4TI7HEpAkkkvnQBQbigUrMZw8hasqKZp4
dckPOvviV7mLcjo2N0ZGsJGFkIXqmzX4zyaeyVbOMjGCWGQGHQEiNxGjDlWjBEzN
fQczTpnVlUBHj/Eiynpha46bPDSarlNyuJ/Pj548Lk7+/toK2/ZMN9weaDphwFUA
R45JIgezhyRZ44wlIekaDd932/KxrGpGiv8cgNZXuVjSaW4hiQ1NXz5EloSUr9L3
DrxLsKXqghhdwlSb5wSGoVmiHk3RTTI=
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:39:39 2025 by rpki-client