Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
File:                     jVvm9QWF2v57SAa6CeIlsMxvKQs.mft (raw, json)
Hash identifier:          nE0DvBv76mpnMUmWav8wPpqp/hu1ylxOKUAw1uE3N/M=
Subject key identifier:   45:A9:7E:6C:40:01:81:CA:3F:15:BC:4E:15:17:DF:C2:70:06:98:E5
Authority key identifier: 8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B
Certificate issuer:       /CN=A911681C/serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B
Certificate serial:       09C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
Manifest number:          09B3
Signing time:             Fri 22 Aug 2025 20:09:41 +0000
Manifest this update:     Fri 22 Aug 2025 20:09:41 +0000
Manifest next update:     Fri 29 Aug 2025 20:09:41 +0000
Files and hashes:         1: jVvm9QWF2v57SAa6CeIlsMxvKQs.crl (hash: xIxiKoaCIDbc3kA1b2nfjFAXXvbUd74LDfQkwjDdoQs=)
                          2: E7BABAC2217111EC9C97E95CC4F9AE02.roa (hash: OjAcbEOp0amxQNPqpOvSSPyQnwHnVe9MoEWy3pew2ow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl
                          rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2497 (0x9c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911681C, serialNumber=8D5BE6F50585DAFE7B4806BA09E225B0CC6F290B
        Validity
            Not Before: Aug 22 20:09:41 2025 GMT
            Not After : Aug 29 20:09:41 2025 GMT
        Subject: CN=68a8ce85-12eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9b:f8:9a:3b:ab:5c:0a:7e:b4:f2:2e:e3:37:
                    e6:bd:63:97:12:15:5c:ff:1e:9d:4d:14:0a:8d:64:
                    ae:19:85:31:2a:a7:0e:d5:e6:de:2c:36:6f:5c:ad:
                    97:88:75:2d:49:c5:cc:db:f5:1f:e0:0c:a4:8e:ae:
                    f3:96:c9:89:96:30:43:90:46:b5:96:00:75:78:d6:
                    56:89:b5:88:6f:d2:4b:8a:23:6a:86:b8:f8:8b:44:
                    99:fc:aa:a7:88:e3:89:8c:64:57:5e:f9:98:08:05:
                    ff:e1:0c:3f:6d:c0:1d:ed:e4:bf:74:0f:87:84:d2:
                    23:06:f1:90:96:d0:10:c4:3f:64:a7:35:c0:c4:56:
                    8b:8b:02:65:3b:10:b7:6e:87:99:9c:a0:f9:67:7c:
                    48:e7:cc:15:f7:a2:79:7b:7e:6a:07:fb:bd:8d:3f:
                    da:24:4b:cd:f2:5b:21:6b:71:ad:d8:99:53:e1:11:
                    66:bd:3f:aa:1e:3a:3c:61:26:17:12:27:45:9b:56:
                    88:6c:0d:3a:e5:ff:58:94:d1:be:21:c3:c7:92:82:
                    33:1d:de:7f:f6:70:70:f7:ea:00:43:b7:78:24:41:
                    dd:98:76:25:01:36:1e:56:d9:10:21:12:12:f9:92:
                    f2:be:ba:f0:94:7b:bf:c1:e6:14:21:65:d0:a1:47:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A9:7E:6C:40:01:81:CA:3F:15:BC:4E:15:17:DF:C2:70:06:98:E5
            X509v3 Authority Key Identifier:
                keyid:8D:5B:E6:F5:05:85:DA:FE:7B:48:06:BA:09:E2:25:B0:CC:6F:29:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVvm9QWF2v57SAa6CeIlsMxvKQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911681C/BC78E36A8E7F11EA9471D168C4F9AE02/jVvm9QWF2v57SAa6CeIlsMxvKQs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:53:45:33:d6:28:be:f7:e8:f0:71:29:4c:d6:8f:09:4a:72:
         47:49:96:8d:af:00:48:9c:3c:d9:8d:d9:ef:08:f8:ad:c1:d7:
         1e:bc:c7:ab:71:09:fb:89:8e:70:43:e7:7c:c3:61:3b:12:c7:
         39:f1:75:f5:16:e0:fc:be:b5:75:41:00:b8:70:8b:85:2f:1e:
         dd:56:7d:c7:f3:1e:6d:82:d8:a9:5f:4b:a5:a3:6b:07:11:ed:
         fe:43:0f:d1:b6:41:2b:e7:07:91:b5:03:d0:bb:b7:23:e7:d6:
         d1:a7:14:53:fb:87:2a:ca:88:ed:86:f9:ba:7c:a7:1f:d5:f6:
         f9:02:15:3b:b3:19:b8:0f:0d:9d:80:15:d1:a7:a6:a8:c0:e7:
         72:05:34:3d:0a:1b:af:99:f6:85:4b:21:2b:ab:38:f9:0a:20:
         16:59:2d:a4:df:51:9a:19:71:9c:6b:02:d1:f5:5d:e4:61:7b:
         7c:01:27:53:f3:46:dd:04:6b:ea:d2:9f:55:3c:c4:8d:6c:0d:
         2f:84:77:ad:65:54:38:c9:4c:4f:8e:aa:6c:8b:93:88:c3:cd:
         87:f9:36:68:63:a8:1c:b3:10:01:ed:2a:dd:f5:fd:04:e8:9f:
         1a:93:64:43:8b:b4:20:67:e1:c8:c2:b0:20:cf:06:a0:54:ca:
         25:27:4b:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCcEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY4MUMxMTAvBgNVBAUTKDhENUJFNkY1MDU4NURBRkU3QjQ4MDZCQTA5RTIyNUIw
Q0M2RjI5MEIwHhcNMjUwODIyMjAwOTQxWhcNMjUwODI5MjAwOTQxWjAYMRYwFAYD
VQQDEw02OGE4Y2U4NS0xMmViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuJv4mjurXAp+tPIu4zfmvWOXEhVc/x6dTRQKjWSuGYUxKqcO1ebeLDZvXK2X
iHUtScXM2/Uf4Aykjq7zlsmJljBDkEa1lgB1eNZWibWIb9JLiiNqhrj4i0SZ/Kqn
iOOJjGRXXvmYCAX/4Qw/bcAd7eS/dA+HhNIjBvGQltAQxD9kpzXAxFaLiwJlOxC3
boeZnKD5Z3xI58wV96J5e35qB/u9jT/aJEvN8lsha3Gt2JlT4RFmvT+qHjo8YSYX
EidFm1aIbA065f9YlNG+IcPHkoIzHd5/9nBw9+oAQ7d4JEHdmHYlATYeVtkQIRIS
+ZLyvrrwlHu/weYUIWXQoUcF+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWpfmxA
AYHKPxW8ThUX38JwBpjlMB8GA1UdIwQYMBaAFI1b5vUFhdr+e0gGugniJbDMbykL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjgxQy9CQzc4RTM2QThF
N0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2NTdTQWE2Q2VJbHNNeHZL
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pWdm05UVdGMnY1N1NBYTZDZUlsc014dktRcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjgxQy9CQzc4RTM2QThFN0YxMUVBOTQ3MUQxNjhDNEY5QUUwMi9qVnZtOVFXRjJ2
NTdTQWE2Q2VJbHNNeHZLUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAtU0Uz1ii+9+jwcSlM1o8JSnJHSZaNrwBInDzZjdnvCPitwdcevMer
cQn7iY5wQ+d8w2E7Esc58XX1FuD8vrV1QQC4cIuFLx7dVn3H8x5tgtipX0ulo2sH
Ee3+Qw/RtkEr5weRtQPQu7cj59bRpxRT+4cqyojthvm6fKcf1fb5AhU7sxm4Dw2d
gBXRp6aowOdyBTQ9ChuvmfaFSyErqzj5CiAWWS2k31GaGXGcawLR9V3kYXt8ASdT
80bdBGvq0p9VPMSNbA0vhHetZVQ4yUxPjqpsi5OIw82H+TZoY6gcsxAB7Srd9f0E
6J8ak2RDi7QgZ+HIwrAgzwagVMolJ0v9
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:33:23 2025 by rpki-client