Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft
File:                     dRqLPVti6B9GpMe9RpW_OoBpyj4.mft (raw, json)
Hash identifier:          HEeJeKxFPKmiuzU/qARCabFa8nvOr88Audt3dd9F+R4=
Subject key identifier:   B5:7B:D8:96:0D:77:00:97:04:35:3D:63:02:C9:1F:F6:F4:82:0B:A5
Authority key identifier: 75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E
Certificate issuer:       /CN=A9119010/serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft
Manifest number:          0CA6
Signing time:             Fri 22 Aug 2025 18:42:01 +0000
Manifest this update:     Fri 22 Aug 2025 18:42:00 +0000
Manifest next update:     Fri 29 Aug 2025 18:42:00 +0000
Files and hashes:         1: dRqLPVti6B9GpMe9RpW_OoBpyj4.crl (hash: DPrAdkH7zeP8RK6DL/rb08qNgnHuCbyOf5ubmJWWChI=)
                          2: 6AAE9EC03C6D11F0890C1546C4F9AE02.roa (hash: Fjs0TU9gzU04QRaG0LDDD3BWVYWiyk2BOJBnhSA8Uzo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.crl
                          rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:42:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119010, serialNumber=751A8B3D5B62E81F46A4C7BD4695BF3A8069CA3E
        Validity
            Not Before: Aug 22 18:42:00 2025 GMT
            Not After : Aug 29 18:42:00 2025 GMT
        Subject: CN=68a8b9f8-47a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:95:ab:c6:aa:23:37:4d:e6:38:4a:92:b8:63:
                    67:6f:e0:a3:ce:03:5e:14:aa:4e:a7:d6:f3:08:db:
                    78:7d:6e:8a:25:ec:78:95:ef:31:c8:3c:9b:85:2f:
                    67:97:4e:e8:9f:4a:8f:45:c4:1d:9d:a8:4a:c0:0c:
                    7a:bf:74:0c:03:49:f5:1b:a7:61:1e:40:e5:dd:7d:
                    a5:27:20:ee:04:cf:98:1d:4d:ca:a9:bf:82:a0:fd:
                    52:62:04:ff:fd:5e:33:32:1b:09:c2:f9:03:a9:37:
                    df:69:72:4e:65:b2:b0:8d:5b:db:a6:64:c0:2f:4c:
                    b4:c6:0f:e7:88:ed:7d:c4:81:e4:fb:bb:7e:73:2a:
                    f9:71:e7:a9:3b:d9:99:60:b5:44:8a:4f:29:fc:e9:
                    07:d4:82:47:2a:55:be:44:1d:bf:37:aa:1f:33:66:
                    cd:c3:48:2d:3d:e5:69:bc:9e:4d:e0:d4:fa:dc:b3:
                    a2:38:60:df:24:a0:86:8f:19:4a:57:0f:59:bb:85:
                    a9:27:64:42:dd:99:f2:47:0f:7f:ae:28:4f:94:b1:
                    63:cb:e1:76:ec:7e:e0:07:fa:21:1d:6e:d7:ef:ca:
                    9b:56:16:db:b3:45:1a:f4:54:25:d0:26:f6:cd:de:
                    f3:85:1c:c6:86:4b:91:db:08:5d:44:08:5c:2a:25:
                    59:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7B:D8:96:0D:77:00:97:04:35:3D:63:02:C9:1F:F6:F4:82:0B:A5
            X509v3 Authority Key Identifier:
                keyid:75:1A:8B:3D:5B:62:E8:1F:46:A4:C7:BD:46:95:BF:3A:80:69:CA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dRqLPVti6B9GpMe9RpW_OoBpyj4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119010/6A7E940A0C3A11EA93557C79C4F9AE02/dRqLPVti6B9GpMe9RpW_OoBpyj4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:55:dc:31:95:a9:ed:67:67:d9:19:ca:f5:ed:f5:b5:53:be:
         8d:01:aa:af:44:3b:a9:e4:0a:09:19:a3:b5:a4:55:a3:1d:54:
         24:cc:d0:c9:a3:30:b8:88:74:41:f8:1a:30:31:2a:cc:47:30:
         2f:c2:73:aa:d4:76:f7:e5:d8:9b:a8:33:94:f3:42:2b:8e:d1:
         74:b6:7d:e2:14:de:16:d2:cd:a3:82:7e:09:e0:55:5c:f9:67:
         91:35:50:7f:c3:a9:9f:c5:83:e6:df:15:d1:9d:43:e2:15:bf:
         b6:28:ee:18:67:7f:b5:aa:6d:f0:81:03:24:4f:c6:8a:b0:9a:
         79:0c:b8:65:92:a7:d4:84:5a:f1:38:77:89:20:4a:73:be:3b:
         4d:9f:ce:12:10:e2:59:06:4c:4e:33:8c:3a:75:c6:80:18:66:
         39:11:95:70:e8:2c:ce:93:94:de:9c:3b:70:05:5f:f8:b1:8f:
         76:05:38:e8:ac:26:25:8b:a8:8e:75:a9:ff:df:3b:33:cf:6f:
         33:71:88:a5:2c:73:85:d1:ef:20:b2:d3:42:eb:5d:42:5c:7b:
         62:9e:cb:30:54:ab:7d:3c:e1:9e:94:4b:ae:47:81:c3:75:cf:
         7e:40:8d:8e:7f:70:06:7a:e2:9f:3a:3c:f1:ce:68:8f:38:ce:
         57:82:f0:10
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
OTAxMDExMC8GA1UEBRMoNzUxQThCM0Q1QjYyRTgxRjQ2QTRDN0JENDY5NUJGM0E4
MDY5Q0EzRTAeFw0yNTA4MjIxODQyMDBaFw0yNTA4MjkxODQyMDBaMBgxFjAUBgNV
BAMTDTY4YThiOWY4LTQ3YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYlavGqiM3TeY4SpK4Y2dv4KPOA14Uqk6n1vMI23h9bool7HiV7zHIPJuFL2eX
TuifSo9FxB2dqErADHq/dAwDSfUbp2EeQOXdfaUnIO4Ez5gdTcqpv4Kg/VJiBP/9
XjMyGwnC+QOpN99pck5lsrCNW9umZMAvTLTGD+eI7X3EgeT7u35zKvlx56k72Zlg
tUSKTyn86QfUgkcqVb5EHb83qh8zZs3DSC095Wm8nk3g1Prcs6I4YN8koIaPGUpX
D1m7haknZELdmfJHD3+uKE+UsWPL4XbsfuAH+iEdbtfvyptWFtuzRRr0VCXQJvbN
3vOFHMaGS5HbCF1ECFwqJVnxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtXvYlg13
AJcENT1jAskf9vSCC6UwHwYDVR0jBBgwFoAUdRqLPVti6B9GpMe9RpW/OoBpyj4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5MDEwLzZBN0U5NDBBMEMz
QTExRUE5MzU1N0M3OUM0RjlBRTAyL2RScUxQVnRpNkI5R3BNZTlScFdfT29CcHlq
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZFJxTFBWdGk2QjlHcE1lOVJwV19Pb0JweWo0LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE5
MDEwLzZBN0U5NDBBMEMzQTExRUE5MzU1N0M3OUM0RjlBRTAyL2RScUxQVnRpNkI5
R3BNZTlScFdfT29CcHlqNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBALFV3DGVqe1nZ9kZyvXt9bVTvo0Bqq9EO6nkCgkZo7WkVaMdVCTM0Mmj
MLiIdEH4GjAxKsxHMC/Cc6rUdvfl2JuoM5TzQiuO0XS2feIU3hbSzaOCfgngVVz5
Z5E1UH/DqZ/Fg+bfFdGdQ+IVv7Yo7hhnf7WqbfCBAyRPxoqwmnkMuGWSp9SEWvE4
d4kgSnO+O02fzhIQ4lkGTE4zjDp1xoAYZjkRlXDoLM6TlN6cO3AFX/ixj3YFOOis
JiWLqI51qf/fOzPPbzNxiKUsc4XR7yCy00LrXUJce2KeyzBUq3084Z6US65HgcN1
z35AjY5/cAZ64p86PPHOaI84zleC8BA=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:46 2025 by rpki-client