Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft
File:                     6bYAyebdjO7JchldY0nImDj3Rb4.mft (raw, json)
Hash identifier:          UGFMqT1O9YCcUbwXG43ZbQSImJW/YP04OEyTFjJal+k=
Subject key identifier:   D1:86:76:B2:A4:59:D8:82:CF:95:27:77:F9:98:8A:0C:32:F7:98:EB
Authority key identifier: E9:B6:00:C9:E6:DD:8C:EE:C9:72:19:5D:63:49:C8:98:38:F7:45:BE
Certificate issuer:       /CN=A9117257/serialNumber=E9B600C9E6DD8CEEC972195D6349C89838F745BE
Certificate serial:       01AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft
Manifest number:          019C
Signing time:             Sat 23 Aug 2025 03:36:19 +0000
Manifest this update:     Sat 23 Aug 2025 03:36:18 +0000
Manifest next update:     Sat 30 Aug 2025 03:36:18 +0000
Files and hashes:         1: 6bYAyebdjO7JchldY0nImDj3Rb4.crl (hash: ob6N+fLlIg8lcXF9XGL8nUED2POBH8xA1t/sQw+3IYE=)
                          2: 7138FC520BBE11F0B8594F31C4F9AE02.roa (hash: u0TZfdXd2yD8hw46tFZAqpMuUqoJV/+SKPoCBFmssmc=)
                          3: B38B0F188C8511EF8E80211BC4F9AE02.roa (hash: 7Hcw4C2xQHXLPVSHNIA8gNp3gJLpVIJXkzDqX/dxiW8=)
                          4: 705A5FF60BBE11F0B8594F31C4F9AE02.roa (hash: cvEJ9jiuaJJ+TrsFPTJkLMatiG6L6buFKdfhTi1uFFg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.crl
                          rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117257, serialNumber=E9B600C9E6DD8CEEC972195D6349C89838F745BE
        Validity
            Not Before: Aug 23 03:36:18 2025 GMT
            Not After : Aug 30 03:36:18 2025 GMT
        Subject: CN=68a93733-b172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d2:ae:a2:11:f4:ff:fd:ee:77:69:f7:bc:29:
                    5e:a8:18:55:2c:b6:6e:5a:d6:0f:37:b9:79:54:12:
                    34:40:1c:6d:a8:95:ac:86:68:02:91:c3:f4:ef:92:
                    81:3e:c7:94:65:54:ce:a6:ec:0d:41:91:2c:ff:83:
                    63:2f:a9:f3:f8:e0:78:b6:25:e8:8d:80:66:2d:0c:
                    8e:9a:9a:3b:11:41:9d:67:b1:0a:d5:d8:3d:e5:08:
                    95:13:25:fb:bd:4e:8e:b9:51:d1:fb:65:63:0a:40:
                    ab:29:f0:46:99:2d:51:ca:22:ca:7c:cb:25:9a:88:
                    04:d1:41:02:87:43:fd:ee:4c:c1:f7:24:47:a2:dc:
                    d2:25:1c:89:a0:79:9b:49:34:cc:8b:ef:3d:5e:60:
                    f4:d6:3f:ff:6f:c3:6f:bb:fa:55:bf:ca:7d:c7:eb:
                    be:a0:ce:3e:e6:f5:59:c8:e3:3a:4e:3d:f3:44:6d:
                    7c:da:85:b4:fa:cf:f0:48:df:e3:d6:6a:03:91:b5:
                    ee:19:a0:7a:f7:8d:b3:60:dd:3f:03:32:d1:50:78:
                    6a:28:62:46:1e:48:9b:6e:15:a1:fb:8c:e1:be:94:
                    0e:0d:41:b6:c0:95:7a:e5:85:d8:b7:e4:15:a7:d8:
                    c7:c5:ef:f9:16:ed:8b:fa:9f:10:2a:ad:b6:3c:9a:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:86:76:B2:A4:59:D8:82:CF:95:27:77:F9:98:8A:0C:32:F7:98:EB
            X509v3 Authority Key Identifier:
                keyid:E9:B6:00:C9:E6:DD:8C:EE:C9:72:19:5D:63:49:C8:98:38:F7:45:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bYAyebdjO7JchldY0nImDj3Rb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117257/94F497EE1E8211EE90B6263BC4F9AE02/6bYAyebdjO7JchldY0nImDj3Rb4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d1:7e:b5:f6:60:87:75:a5:42:3f:05:6c:98:68:54:00:9a:
         08:52:b2:80:f8:a3:6d:aa:de:3e:36:8b:20:ed:a2:eb:ef:e4:
         87:fd:2d:c0:ca:dd:3c:0f:71:24:1e:a8:db:a4:d3:b3:f2:77:
         70:dc:9e:ab:4c:a4:a3:d8:8c:8b:ce:ec:60:48:8f:e8:21:70:
         c3:63:8c:af:61:d6:bd:c4:58:87:09:7a:af:ab:a5:01:10:de:
         6e:74:01:eb:63:50:d6:76:58:28:ac:d2:23:b6:c0:f1:eb:2d:
         c8:a5:c0:9b:82:f5:44:94:8a:aa:61:14:46:36:cd:3a:9d:3e:
         c6:52:3e:47:4e:ec:16:c9:f9:a4:b6:e0:c1:56:32:48:4c:b0:
         24:4b:de:4e:a5:83:d1:f7:15:21:08:9e:ab:2c:1f:6c:e7:4f:
         63:b2:63:38:8c:de:66:3b:69:8c:bb:b7:29:68:39:2b:f9:14:
         04:e8:6d:84:16:5f:f5:c2:47:6b:9b:f7:d5:0c:a3:a4:cb:74:
         29:6d:a2:f1:3c:34:73:6a:d7:95:b4:95:9e:3f:f4:b2:bd:58:
         0c:a6:3f:ed:b4:fd:ae:a7:5f:fe:6d:66:50:b1:c3:9b:bc:2a:
         2e:09:97:2c:da:d6:98:46:c7:00:08:f9:7f:11:31:0d:1f:8e:
         ea:96:2c:c7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTcyNTcxMTAvBgNVBAUTKEU5QjYwMEM5RTZERDhDRUVDOTcyMTk1RDYzNDlDODk4
MzhGNzQ1QkUwHhcNMjUwODIzMDMzNjE4WhcNMjUwODMwMDMzNjE4WjAYMRYwFAYD
VQQDEw02OGE5MzczMy1iMTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1NKuohH0//3ud2n3vCleqBhVLLZuWtYPN7l5VBI0QBxtqJWshmgCkcP075KB
PseUZVTOpuwNQZEs/4NjL6nz+OB4tiXojYBmLQyOmpo7EUGdZ7EK1dg95QiVEyX7
vU6OuVHR+2VjCkCrKfBGmS1RyiLKfMslmogE0UECh0P97kzB9yRHotzSJRyJoHmb
STTMi+89XmD01j//b8Nvu/pVv8p9x+u+oM4+5vVZyOM6Tj3zRG182oW0+s/wSN/j
1moDkbXuGaB6942zYN0/AzLRUHhqKGJGHkibbhWh+4zhvpQODUG2wJV65YXYt+QV
p9jHxe/5Fu2L+p8QKq22PJqzTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNGGdrKk
WdiCz5Und/mYigwy95jrMB8GA1UdIwQYMBaAFOm2AMnm3YzuyXIZXWNJyJg490W+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzI1Ny85NEY0OTdFRTFF
ODIxMUVFOTBCNjI2M0JDNEY5QUUwMi82YllBeWViZGpPN0pjaGxkWTBuSW1EajNS
YjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZiWUF5ZWJkak83SmNobGRZMG5JbURqM1JiNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NzI1Ny85NEY0OTdFRTFFODIxMUVFOTBCNjI2M0JDNEY5QUUwMi82YllBeWViZGpP
N0pjaGxkWTBuSW1EajNSYjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAJ0X619mCHdaVCPwVsmGhUAJoIUrKA+KNtqt4+Nosg7aLr7+SH/S3A
yt08D3EkHqjbpNOz8ndw3J6rTKSj2IyLzuxgSI/oIXDDY4yvYda9xFiHCXqvq6UB
EN5udAHrY1DWdlgorNIjtsDx6y3IpcCbgvVElIqqYRRGNs06nT7GUj5HTuwWyfmk
tuDBVjJITLAkS95OpYPR9xUhCJ6rLB9s509jsmM4jN5mO2mMu7cpaDkr+RQE6G2E
Fl/1wkdrm/fVDKOky3QpbaLxPDRzateVtJWeP/SyvVgMpj/ttP2up1/+bWZQscOb
vCouCZcs2taYRscACPl/ETENH47qlizH
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:10:11 2025 by rpki-client