Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
File:                     AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json)
Hash identifier:          WQZHOXOR/yZbNfvUzlp3tW3X5oRkLG2eAbOwgrhtw4E=
Subject key identifier:   79:AE:9D:24:A1:9E:A2:6E:0E:AD:8B:64:64:46:9A:02:3A:57:57:8B
Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37
Certificate issuer:       /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937
Certificate serial:       0F6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
Manifest number:          0F63
Signing time:             Sat 02 Aug 2025 17:44:40 +0000
Manifest this update:     Sat 02 Aug 2025 17:44:39 +0000
Manifest next update:     Sat 09 Aug 2025 17:44:39 +0000
Files and hashes:         1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: R0HiQlJGC94DwDNBtZBTlwkE2HB+I5DcDxcsLHxKL2E=)
                          2: 85B9F090F35011EFAE695322C4F9AE02.roa (hash: lww/ZRWFPgZIaev9PDmaV5kjaByxeNEFJJYVjFLwNzI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl
                          rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 Aug 2025 17:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3948 (0xf6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FECDA, serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937
        Validity
            Not Before: Aug  2 17:44:39 2025 GMT
            Not After : Aug  9 17:44:39 2025 GMT
        Subject: CN=688e4e87-8117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:06:8a:b6:4e:fd:7f:80:28:94:36:6b:d6:67:
                    51:3f:0a:ac:bf:e3:64:d8:05:7f:b3:8b:95:78:28:
                    e0:67:05:c1:0e:22:f0:aa:16:e9:95:d8:64:a0:23:
                    e4:55:f7:d0:7b:e8:01:58:dc:46:da:16:1c:cc:f0:
                    98:f1:26:31:32:65:1d:7a:56:e6:81:9c:ce:32:0f:
                    85:ce:cd:7f:7b:6d:b2:4d:4d:fd:da:33:62:22:e7:
                    72:29:13:3c:d4:6d:1d:5b:ef:e6:31:01:16:4e:79:
                    98:58:dc:52:ed:4c:00:aa:7e:14:32:b6:28:a8:3b:
                    2f:35:93:07:82:a5:12:96:19:ee:15:28:72:8f:e7:
                    40:d6:74:5a:d7:68:6c:11:26:62:a2:92:e0:60:90:
                    31:d1:c3:07:5d:3b:c3:5f:39:e5:94:b4:0d:a3:07:
                    60:9a:40:d0:11:1e:17:c6:67:08:58:74:f5:fc:a0:
                    d3:0c:3e:c1:82:c2:da:54:35:0e:aa:0e:07:c7:c4:
                    e9:bd:63:cf:5e:f4:ab:e1:ed:00:f1:eb:c5:ec:b0:
                    ce:2e:ef:2b:1e:3c:1a:0d:57:70:72:eb:89:c1:b4:
                    ae:e9:07:7e:a5:84:60:14:44:4c:84:6a:8f:92:eb:
                    8b:a8:5d:cc:59:09:fd:bb:eb:21:a0:31:7c:04:ba:
                    51:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AE:9D:24:A1:9E:A2:6E:0E:AD:8B:64:64:46:9A:02:3A:57:57:8B
            X509v3 Authority Key Identifier:
                keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:aa:05:c7:f4:4f:a6:19:13:01:20:42:37:1f:8d:84:c1:89:
         3f:0b:f1:2f:ed:a9:3a:6a:eb:ea:72:73:6b:9f:99:1b:fb:4b:
         80:82:b3:3f:8a:cc:af:4d:9d:bb:32:f5:85:5d:e7:e4:04:a5:
         d4:28:a6:a1:ac:db:b6:35:5a:73:d7:77:57:37:ff:20:0d:a0:
         c2:c0:e7:d0:6a:e7:e2:cf:8c:58:ad:38:70:9a:2e:f5:29:03:
         b5:fb:f0:23:31:14:4e:45:b4:f2:5e:0b:f6:7a:6c:23:35:7d:
         1f:2b:d5:74:70:d4:3d:e7:91:ed:ba:af:b6:9d:c4:bb:96:6b:
         38:46:a0:90:e1:91:19:67:4c:21:37:65:76:2e:a0:b5:79:36:
         9c:a6:81:bd:6e:7a:49:69:5a:24:7a:5a:5c:a2:17:22:3a:ad:
         b7:c5:06:4d:9c:be:79:ef:33:a9:d9:41:64:5e:2e:14:f4:56:
         ee:97:0c:51:c0:b3:4b:ff:11:ab:a2:b7:b5:d5:54:71:45:9f:
         f5:49:04:e5:1f:8b:69:2f:d0:d5:3f:c3:1a:95:77:d4:0b:75:
         c9:9c:bf:5f:99:0c:2e:a3:00:79:39:34:6e:3e:5b:1f:d2:a9:
         98:c8:a4:f7:cb:4f:a7:21:81:05:c1:eb:b8:f9:e9:ea:66:af:
         71:8d:33:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVDREExMTAvBgNVBAUTKDAxREI4MUVGNkQ2Mzk0RTY2RDNCMzIzMTVCNDc5RUJF
RDc5OUM5MzcwHhcNMjUwODAyMTc0NDM5WhcNMjUwODA5MTc0NDM5WjAYMRYwFAYD
VQQDEw02ODhlNGU4Ny04MTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7waKtk79f4AolDZr1mdRPwqsv+Nk2AV/s4uVeCjgZwXBDiLwqhbpldhkoCPk
VffQe+gBWNxG2hYczPCY8SYxMmUdelbmgZzOMg+Fzs1/e22yTU392jNiIudyKRM8
1G0dW+/mMQEWTnmYWNxS7UwAqn4UMrYoqDsvNZMHgqUSlhnuFShyj+dA1nRa12hs
ESZiopLgYJAx0cMHXTvDXznllLQNowdgmkDQER4XxmcIWHT1/KDTDD7BgsLaVDUO
qg4Hx8TpvWPPXvSr4e0A8evF7LDOLu8rHjwaDVdwcuuJwbSu6Qd+pYRgFERMhGqP
kuuLqF3MWQn9u+shoDF8BLpRswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmunSSh
nqJuDq2LZGRGmgI6V1eLMB8GA1UdIwQYMBaAFAHbge9tY5TmbTsyMVtHnr7Xmck3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS84QTg4RjEwNDZG
OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxPWnRPekl4VzBlZXZ0ZVp5
VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FkdUI3MjFqbE9adE96SXhXMGVldnRlWnlUYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUNEQS84QTg4RjEwNDZGOUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxP
WnRPekl4VzBlZXZ0ZVp5VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFqgXH9E+mGRMBIEI3H42EwYk/C/Ev7ak6auvqcnNrn5kb+0uAgrM/
isyvTZ27MvWFXefkBKXUKKahrNu2NVpz13dXN/8gDaDCwOfQaufiz4xYrThwmi71
KQO1+/AjMRRORbTyXgv2emwjNX0fK9V0cNQ955Htuq+2ncS7lms4RqCQ4ZEZZ0wh
N2V2LqC1eTacpoG9bnpJaVokelpcohciOq23xQZNnL557zOp2UFkXi4U9FbulwxR
wLNL/xGrore11VRxRZ/1SQTlH4tpL9DVP8MalXfUC3XJnL9fmQwuowB5OTRuPlsf
0qmYyKT3y0+nIYEFweu4+enqZq9xjTN9
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:41 2025 by rpki-client