Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
File:                     R29XKjgCNq8z9i2CpbomTS-7rXw.mft (raw, json)
Hash identifier:          86ps6uQ5QBJDPZ+zPvMWxoLXYtqHZUDmY7UtkoPvTFM=
Subject key identifier:   D7:26:1B:E1:CD:F1:AE:ED:D2:A6:E7:68:FD:58:DD:19:8B:09:69:DB
Authority key identifier: 47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C
Certificate issuer:       /CN=A91115D5/serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
Certificate serial:       12AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
Manifest number:          1288
Signing time:             Wed 02 Jul 2025 17:17:22 +0000
Manifest this update:     Wed 02 Jul 2025 17:17:22 +0000
Manifest next update:     Wed 09 Jul 2025 17:17:22 +0000
Files and hashes:         1: R29XKjgCNq8z9i2CpbomTS-7rXw.crl (hash: /cQi2qC542ID40GYCHsJ4AKjcETnF1cbGbOfdoLzeic=)
                          2: 4978C5B2089911F0B2664480C4F9AE02.roa (hash: 00dFUbxtRi+P5zmsb5ryh9HhmqE32J+HOZ/FYXFpiHQ=)
                          3: 48B8F476089911F0B2664480C4F9AE02.roa (hash: JWTxPbAMnC0V4yG1gFdPedapzuHJ8Aw4XsiM14hADdY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl
                          rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4778 (0x12aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115D5, serialNumber=476F572A380236AF33F62D82A5BA264D2FBBAD7C
        Validity
            Not Before: Jul  2 17:17:22 2025 GMT
            Not After : Jul  9 17:17:22 2025 GMT
        Subject: CN=686569a2-71f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:10:2d:8a:cc:30:56:42:9d:ee:ae:54:4c:d3:
                    ee:7c:6c:b0:a0:76:79:d8:51:4b:ea:1f:b6:9d:7a:
                    c5:9f:22:2b:6e:6e:3d:ef:43:17:1e:a8:f4:f3:69:
                    81:60:d4:73:ef:70:1d:7c:77:1a:13:ec:93:94:8f:
                    54:1c:48:a8:70:5e:46:30:88:1a:3a:24:c1:e4:14:
                    55:05:4b:cf:40:9a:45:ce:2c:09:97:8e:5f:bd:a3:
                    5b:62:e2:1b:15:66:52:fd:a1:52:4e:1e:60:5e:f1:
                    99:5a:5e:19:72:64:03:e0:06:d8:1a:13:49:74:df:
                    cc:b1:e7:62:27:f7:80:88:c2:8a:54:2f:fa:0f:3c:
                    2a:b0:cb:82:4e:5b:79:35:55:ff:78:0d:03:d6:3f:
                    11:6f:52:1d:a2:14:92:9b:b0:4d:26:52:bf:32:1a:
                    b0:06:1d:e9:be:65:4b:35:38:19:82:ea:d0:79:21:
                    4e:5e:5f:90:a2:bc:97:e8:80:c4:c0:70:ba:28:68:
                    f0:26:f5:4b:aa:52:27:e5:d6:de:90:80:63:85:93:
                    e2:f9:02:30:e7:ea:a2:5a:9b:2b:38:45:7f:55:6a:
                    eb:ce:7e:3a:35:09:7a:74:d1:26:38:ef:e8:f4:34:
                    ee:50:45:9e:44:c6:a9:b6:4b:ab:e9:78:54:bd:ef:
                    5b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:26:1B:E1:CD:F1:AE:ED:D2:A6:E7:68:FD:58:DD:19:8B:09:69:DB
            X509v3 Authority Key Identifier:
                keyid:47:6F:57:2A:38:02:36:AF:33:F6:2D:82:A5:BA:26:4D:2F:BB:AD:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R29XKjgCNq8z9i2CpbomTS-7rXw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91115D5/4EBCAF26D0AF11E8AAEB0756C4F9AE02/R29XKjgCNq8z9i2CpbomTS-7rXw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:5e:2c:0c:59:e3:ad:6f:c6:e9:85:0b:3a:ba:54:1a:75:d9:
         f1:5f:e1:b4:68:d7:a8:64:19:2d:f4:1b:e1:2a:f6:e9:80:6e:
         41:79:7a:1c:95:59:f0:42:7a:29:5f:23:24:70:67:b2:7b:d4:
         34:05:89:f8:49:29:49:e8:c9:d0:d8:0e:c4:ec:c1:92:da:ca:
         3d:9e:99:d3:e3:1a:a6:12:5b:54:28:be:47:12:65:ba:38:55:
         00:5f:f0:a9:29:8c:9a:73:76:42:ea:c5:9e:bf:b3:07:8c:3c:
         9e:1b:77:33:28:2c:76:ca:52:33:5b:df:4b:7d:72:f2:68:fb:
         a8:dd:7d:82:48:5d:0b:c1:4a:8b:23:f7:68:29:5a:a9:eb:cd:
         37:5f:44:58:4a:bf:ca:d7:a2:6d:24:e4:37:b5:a3:a3:3b:2d:
         9a:f7:37:8b:07:6c:2b:de:06:e0:a6:01:76:1b:b3:94:24:76:
         11:59:92:39:76:67:37:a5:1a:cf:ef:18:13:e5:cd:e7:3e:4b:
         5f:58:be:23:f2:29:bb:36:1c:04:3c:a3:2c:e6:18:53:ec:de:
         b8:ca:ef:8c:df:b9:20:83:b8:bc:d6:f1:d2:5c:a9:60:89:b5:
         f6:94:2e:66:e5:5f:db:96:0b:e1:d6:d1:81:01:e0:23:6c:9f:
         cd:7c:b3:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTE1RDUxMTAvBgNVBAUTKDQ3NkY1NzJBMzgwMjM2QUYzM0Y2MkQ4MkE1QkEyNjRE
MkZCQkFEN0MwHhcNMjUwNzAyMTcxNzIyWhcNMjUwNzA5MTcxNzIyWjAYMRYwFAYD
VQQDEw02ODY1NjlhMi03MWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3xAtiswwVkKd7q5UTNPufGywoHZ52FFL6h+2nXrFnyIrbm4970MXHqj082mB
YNRz73AdfHcaE+yTlI9UHEiocF5GMIgaOiTB5BRVBUvPQJpFziwJl45fvaNbYuIb
FWZS/aFSTh5gXvGZWl4ZcmQD4AbYGhNJdN/MsediJ/eAiMKKVC/6DzwqsMuCTlt5
NVX/eA0D1j8Rb1IdohSSm7BNJlK/MhqwBh3pvmVLNTgZgurQeSFOXl+QoryX6IDE
wHC6KGjwJvVLqlIn5dbekIBjhZPi+QIw5+qiWpsrOEV/VWrrzn46NQl6dNEmOO/o
9DTuUEWeRMaptkur6XhUve9b5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNcmG+HN
8a7t0qbnaP1Y3RmLCWnbMB8GA1UdIwQYMBaAFEdvVyo4AjavM/YtgqW6Jk0vu618
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTVENS80RUJDQUYyNkQw
QUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05xOHo5aTJDcGJvbVRTLTdy
WHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1IyOVhLamdDTnE4ejlpMkNwYm9tVFMtN3JYdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MTVENS80RUJDQUYyNkQwQUYxMUU4QUFFQjA3NTZDNEY5QUUwMi9SMjlYS2pnQ05x
OHo5aTJDcGJvbVRTLTdyWHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBqXiwMWeOtb8bphQs6ulQaddnxX+G0aNeoZBkt9BvhKvbpgG5BeXoc
lVnwQnopXyMkcGeye9Q0BYn4SSlJ6MnQ2A7E7MGS2so9npnT4xqmEltUKL5HEmW6
OFUAX/CpKYyac3ZC6sWev7MHjDyeG3czKCx2ylIzW99LfXLyaPuo3X2CSF0LwUqL
I/doKVqp6803X0RYSr/K16JtJOQ3taOjOy2a9zeLB2wr3gbgpgF2G7OUJHYRWZI5
dmc3pRrP7xgT5c3nPktfWL4j8im7NhwEPKMs5hhT7N64yu+M37kgg7i81vHSXKlg
ibX2lC5m5V/blgvh1tGBAeAjbJ/NfLPr
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:59:22 2025 by rpki-client