Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
File:                     rtuffjhfpkQ204S8t7kuCUaVVDM.mft (raw, json)
Hash identifier:          JPUePSMz6ZjEsJhuy7odqMMJDJUgqf62ZbO/sCHTe/c=
Subject key identifier:   D8:9A:D8:B5:7F:45:D4:CD:54:A6:48:6A:74:CC:D4:17:EE:8E:FE:AD
Authority key identifier: AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33
Certificate issuer:       /CN=A911424D/serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
Certificate serial:       0EFE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
Manifest number:          0EF5
Signing time:             Wed 02 Jul 2025 17:50:57 +0000
Manifest this update:     Wed 02 Jul 2025 17:50:57 +0000
Manifest next update:     Wed 09 Jul 2025 17:50:57 +0000
Files and hashes:         1: rtuffjhfpkQ204S8t7kuCUaVVDM.crl (hash: lMFFI7CWpvVDZ9ROXsBdx1pfYPVjARI1iMdbaORtUhM=)
                          2: 87625FC0812011E9890A4533C4F9AE02.roa (hash: LbtoKXQWVtjM8PuzryWfj67xT/YA5C3Pl76nVAvV2lM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl
                          rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3838 (0xefe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911424D, serialNumber=AEDB9F7E385FA64436D384BCB7B92E0946955433
        Validity
            Not Before: Jul  2 17:50:57 2025 GMT
            Not After : Jul  9 17:50:57 2025 GMT
        Subject: CN=68657181-28e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:56:58:cd:ad:12:84:a2:43:f2:a8:14:0d:a9:
                    ca:63:3f:75:3f:3e:b4:cc:59:1b:fe:ed:ed:2a:f7:
                    fb:71:e9:e5:0b:ed:2e:30:a7:56:00:0b:00:43:71:
                    f7:e6:1f:31:f4:e0:17:ef:29:a1:c6:fc:af:55:1c:
                    49:c0:ae:dd:69:d7:18:29:d2:22:ea:9d:01:fe:64:
                    2f:66:4b:e5:c2:ea:00:c8:a8:02:c2:84:ad:06:d5:
                    1a:43:71:a2:fb:5e:b8:04:7f:27:eb:48:a0:3a:53:
                    38:fd:e0:81:52:95:7c:a6:92:9a:6e:1d:31:18:40:
                    6d:44:98:63:f2:4e:78:34:48:65:ee:d6:13:b5:04:
                    2e:52:c5:af:72:4d:b0:65:f4:1e:3a:41:ed:bf:a0:
                    78:ef:d7:2d:20:b0:36:8d:ac:1f:ee:54:32:63:51:
                    0f:aa:dc:5d:44:29:00:44:80:97:8b:c3:73:1d:9a:
                    41:41:b7:56:47:e0:88:31:a6:6c:4b:0f:8e:c9:e7:
                    9d:71:2d:8b:cb:d8:52:27:27:b1:31:ae:2e:aa:de:
                    4b:69:0b:84:e3:67:bf:f6:8e:ec:86:03:fd:01:7b:
                    2e:78:65:f3:31:d9:9c:bc:75:bf:e0:c6:1d:97:45:
                    07:89:f8:78:fc:48:a0:94:e5:c7:6b:89:5a:06:e3:
                    fe:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:9A:D8:B5:7F:45:D4:CD:54:A6:48:6A:74:CC:D4:17:EE:8E:FE:AD
            X509v3 Authority Key Identifier:
                keyid:AE:DB:9F:7E:38:5F:A6:44:36:D3:84:BC:B7:B9:2E:09:46:95:54:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rtuffjhfpkQ204S8t7kuCUaVVDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911424D/751109AA805F11E98A205B0BC4F9AE02/rtuffjhfpkQ204S8t7kuCUaVVDM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:55:12:ca:dd:4d:7f:59:f1:82:5a:1e:ae:bb:78:71:b0:09:
         6f:01:a2:0b:b8:00:14:c1:82:d0:b8:45:0c:36:92:25:29:8e:
         b0:6f:ae:fa:9c:ad:2d:0f:b8:3e:f8:0d:6e:76:4d:1e:6f:7d:
         c5:10:95:ac:43:89:65:28:f2:5b:db:a9:79:2d:65:0a:b8:ff:
         1e:d5:31:23:0d:1e:82:99:aa:1f:12:77:50:89:fd:58:8d:01:
         07:29:2b:b9:29:20:97:77:7f:10:c9:14:26:ac:9b:54:45:f9:
         6b:68:f3:44:80:a4:2a:28:2e:55:df:7d:ca:d0:4c:15:97:dc:
         61:d6:5d:d1:ad:48:f4:a5:02:01:f6:d1:b1:cc:ac:b8:d8:ea:
         99:b3:ab:aa:62:f2:2c:7f:2c:5d:57:7e:63:6b:48:2e:c3:02:
         aa:ca:41:3e:ca:d9:91:ff:f8:65:2e:5c:41:58:25:59:ec:e5:
         f3:b7:5f:05:2c:6c:1e:7f:2d:16:a1:79:d2:42:83:56:2f:37:
         23:02:a7:ef:5b:01:d8:b1:a9:6d:fc:e9:74:a9:ef:ea:82:c9:
         42:14:d8:bb:92:cf:09:31:f7:ff:ac:1e:19:bd:14:52:d0:45:
         4a:c9:69:6e:b1:97:33:85:75:42:dc:96:55:5b:bc:85:ef:9c:
         37:d6:07:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDv4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQyNEQxMTAvBgNVBAUTKEFFREI5RjdFMzg1RkE2NDQzNkQzODRCQ0I3QjkyRTA5
NDY5NTU0MzMwHhcNMjUwNzAyMTc1MDU3WhcNMjUwNzA5MTc1MDU3WjAYMRYwFAYD
VQQDEw02ODY1NzE4MS0yOGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyVZYza0ShKJD8qgUDanKYz91Pz60zFkb/u3tKvf7cenlC+0uMKdWAAsAQ3H3
5h8x9OAX7ymhxvyvVRxJwK7dadcYKdIi6p0B/mQvZkvlwuoAyKgCwoStBtUaQ3Gi
+164BH8n60igOlM4/eCBUpV8ppKabh0xGEBtRJhj8k54NEhl7tYTtQQuUsWvck2w
ZfQeOkHtv6B479ctILA2jawf7lQyY1EPqtxdRCkARICXi8NzHZpBQbdWR+CIMaZs
Sw+OyeedcS2Ly9hSJyexMa4uqt5LaQuE42e/9o7shgP9AXsueGXzMdmcvHW/4MYd
l0UHifh4/EiglOXHa4laBuP+MwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNia2LV/
RdTNVKZIanTM1Bfujv6tMB8GA1UdIwQYMBaAFK7bn344X6ZENtOEvLe5LglGlVQz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDI0RC83NTExMDlBQTgw
NUYxMUU5OEEyMDVCMEJDNEY5QUUwMi9ydHVmZmpoZnBrUTIwNFM4dDdrdUNVYVZW
RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J0dWZmamhmcGtRMjA0Uzh0N2t1Q1VhVlZETS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDI0RC83NTExMDlBQTgwNUYxMUU5OEEyMDVCMEJDNEY5QUUwMi9ydHVmZmpoZnBr
UTIwNFM4dDdrdUNVYVZWRE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBVVRLK3U1/WfGCWh6uu3hxsAlvAaILuAAUwYLQuEUMNpIlKY6wb676
nK0tD7g++A1udk0eb33FEJWsQ4llKPJb26l5LWUKuP8e1TEjDR6CmaofEndQif1Y
jQEHKSu5KSCXd38QyRQmrJtURflraPNEgKQqKC5V333K0EwVl9xh1l3RrUj0pQIB
9tGxzKy42OqZs6uqYvIsfyxdV35ja0guwwKqykE+ytmR//hlLlxBWCVZ7OXzt18F
LGwefy0WoXnSQoNWLzcjAqfvWwHYsalt/Ol0qe/qgslCFNi7ks8JMff/rB4ZvRRS
0EVKyWlusZczhXVC3JZVW7yF75w31gcb
-----END CERTIFICATE-----
Generated at Thu Jul 3 02:44:09 2025 by rpki-client