Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
File:                     md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft (raw, json)
Hash identifier:          q0XgD/kiG4cbf4mCVog23mhOvHPlp3jWBlSe2jT2ji0=
Subject key identifier:   82:A6:5A:6A:AB:A6:1C:D7:38:D4:E9:57:42:D9:87:D7:FB:8E:A5:1B
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2850
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
Manifest number:          2616
Signing time:             Mon 30 Jun 2025 15:49:08 +0000
Manifest this update:     Mon 30 Jun 2025 15:49:08 +0000
Manifest next update:     Mon 07 Jul 2025 15:49:08 +0000
Files and hashes:         1: md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl (hash: 3NW3+vI+RcFiMlkdvVcD5xTUy4DD6fTNdbiZcwJAh38=)
                          2: E1944C7441C511E8BEC06D36C4F9AE02.roa (hash: hW9PJuONA5QRIVcSpabSYlVVHKZk9BhhHbhvMM44t/8=)
                          3: 37B8851C654F11EFACFE1271C4F9AE02.roa (hash: b9IowzbZhImT9dukZZkwtYOn3yQjca5UG8GP6zG77wI=)
                          4: 5EBAE6BA379F11EFA59DAE0AC4F9AE02.roa (hash: bnFdEar4yH5G0ieRoHZmbJlac6DU83wuBMH7SZoeRLU=)
                          5: E03999C441C511E8BEC06D36C4F9AE02.roa (hash: KyZfO2Rv8xr1eq0Z6LB6KMQ4937ZuffjM61C4GSQ2vY=)
                          6: 379554D48E1211EFA0811E85C4F9AE02.roa (hash: tNYJCGrYuXo5Hrub9Fajb3EOSnupw1gL2K4Vi5BTBzw=)
                          7: 99E3B47E230D11EBACAFB634C4F9AE02.roa (hash: mGEgqKyInP3xTTdwTZvDYcI96TtdW90NHjn0xmimCTE=)
                          8: 2B535080E79B11EFB484D12EC4F9AE02.roa (hash: +PPRjQ3J4z4+zUgLthK+tXOzNPu/Nlu703fNrOIAz9U=)
                          9: 360880DAACC311EAB7256C55C4F9AE02.roa (hash: sdwWUwTgXALoHHaNkZhUaFJ134MOe+G6MhsAnB/u7J4=)
                          10: 6BF06690D18111EE9F4F1C6BC4F9AE02.roa (hash: o1xi24rxew8B+n1Ze2MpLgZqjLBg0vnQljf/FndK59Q=)
                          11: 32D4E44AC47711EB9BD0E327C4F9AE02.roa (hash: E17da7jnji2zQiJp3BZYC4ul/T77SKv/cFnJq8MyOtw=)
                          12: EB263BE4DBF011EBA6E54586C4F9AE02.roa (hash: yJ+SVca3dIEVbLRKvfj50dgEnl+0SPNec7gFGt3BMLw=)
                          13: 2FF0D93AFEC911E88E78993AC4F9AE02.roa (hash: C4plZK6XXxKIeoIaaMmlznlh+k4bOliQDbE8KF8lE2A=)
                          14: A085C546F64511EAAF5AD93BC4F9AE02.roa (hash: db0U/TsFANPOKCaSANYPTiaFmXaAI4B890DaAhbxEP0=)
                          15: 315BBC4AA21C11E8B669A00BC4F9AE02.roa (hash: 4x8TYwFvDh4J4v8fsHCeCEnShmHBUnsGTqwCub56F+0=)
                          16: 4239C32A61C211E9B8967426C4F9AE02.roa (hash: u72uXA31Lv8jAYBmji/tVu+umDVdG7pS68qyRP1oSOQ=)
                          17: 8672C378CCCB11EAAAE49011C4F9AE02.roa (hash: pAeNijiYULFjzi5jYnKqqIcAfyApYD3cCW31vCnjAgw=)
                          18: 77F51DD83E0911EF9DC1A672C4F9AE02.roa (hash: rTPlG0v4VlMshsixF8ZZ1ynDNuAkOpLK+RIkg5oT0sI=)
                          19: 4969EFD6A34711EA996BB179C4F9AE02.roa (hash: DpWzhCiG9aPaalu/XUwzei3yZnGjkAbpq/hIoktNpf4=)
                          20: D9CB701ACBF311EBB9D2A784C4F9AE02.roa (hash: sWHpKYmtjy2XaK6xn6CLe444fqdYz6EFpueDCdz5kB8=)
                          21: E0CC264A41C511E8BEC06D36C4F9AE02.roa (hash: Q3kI8WbvmkHWw5DRT2fxzKvSMcybiP+tZ+WRit1qOp0=)
                          22: E681416041C511E8BEC06D36C4F9AE02.roa (hash: bHiiIS3BwoO5KuYLpL/BbLehporq4oxa+44HbBZEM3U=)
                          23: 1968CADACCCA11EA86EC0A0DC4F9AE02.roa (hash: QQTC2eUq1wqSPRITL8Q1632ZtpBDKgN8BRZE3Y8ZWMU=)
                          24: 9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa (hash: ZYNUMLt8+FZbOksD49SAxknb/1VgqjoVu37R/ssmcAY=)
                          25: 5F92D6C0478F11E9A090265DC4F9AE02.roa (hash: kp2Ne0L+6ZRvk3UeVZo4IBQypi6UCTLf15snOjVh+N8=)
                          26: DCC9968641C511E8BEC06D36C4F9AE02.roa (hash: W30iKjI+iqsDik8HBCLCJKvO2ZtUPH1+IJj4lKt+vCo=)
                          27: 34D73F3E230C11EB825ED82EC4F9AE02.roa (hash: VU4QldGC/v4j0Hb0Rx/k/tkvrIanyxycIdDaCL+zWnc=)
                          28: 7F0F0E7AC92311EBB709B444C4F9AE02.roa (hash: JBC6Nw6olyRKC+trE5CNUXl8ZwEiFDPvV28v5+1RLXM=)
                          29: 350965D2992511EC94DB646EC4F9AE02.roa (hash: mXy5d+2/gCBgynaFsnxUK02Vetpl1veH15+hDv00Ibw=)
                          30: E2D385AA41C511E8BEC06D36C4F9AE02.roa (hash: 0kl+hzJ8ZMCYgestPzieZY+NU93SGaKTK67Lbi8jQ+E=)
                          31: E21558BE41C511E8BEC06D36C4F9AE02.roa (hash: NbY10qYOUw3OHS05Hf+2x8+PN5nVFdCWH4vub4c68dQ=)
                          32: 2F36F25EFEC911E88E78993AC4F9AE02.roa (hash: lbtfttZLykOFL2X6vUbtnMhzUOAWTePTmvUBhS0VvTo=)
                          33: 52360F6491CD11E99EE03151C4F9AE02.roa (hash: /GNyyQNtAeL82vuCHpE7yywDnTF2ey+BA1xxYUhNG4g=)
                          34: 9470344AA21D11E8A514700EC4F9AE02.roa (hash: zAl0HUgPI9JhzEfyu7S/wDlRLlFSPDVfkgipjw4CFZ8=)
                          35: 77C98D46C8E011EA9FF8027AC4F9AE02.roa (hash: VBJprD7+TtKMLPbz8klB2orCy+U8Nc+n0lT8H2YEjQs=)
                          36: AAF07158AFEB11EEBCAD8169C4F9AE02.roa (hash: 8RXwq8RXNSR/fht5p4KiYna1zWWPoNLPPrWh0oLtuoE=)
                          37: DC28826E41C511E8BEC06D36C4F9AE02.roa (hash: Peetxa/7+SFc9eDt8lOuZGUJqI2PmCoVxoHecxTgBsI=)
                          38: 1DB9AEFAE5EE11EABA8AEC34C4F9AE02.roa (hash: 5aV9XBXrcvbjgf/LPgaKXuKSTwY+yKVYWBNYr04mwwM=)
                          39: 2E6B58ECFEC911E88E78993AC4F9AE02.roa (hash: Paw5bfGld1oCSfMEWio7XkiKc/T5uM8UYHKa4CjPQCo=)
                          40: 3494EF9604AB11EB8AAF5923C4F9AE02.roa (hash: J16r+nqwYWjQC9q3yK2BAnvYm7fbGma4jggfeMpNhNk=)
                          41: 41C6F41AB84A11E98246736CC4F9AE02.roa (hash: lWG57GnAo3wTamtDoO521kw7gBuUbBZx14vu/uuNckg=)
                          42: 9F711570F64511EAAF5AD93BC4F9AE02.roa (hash: 1FQBmze3KRl2X+UiyCo2yqgQ02ZQk2o4NTqjpuUkEbY=)
                          43: DD8ACB8041C511E8BEC06D36C4F9AE02.roa (hash: EGrfhW/ypHvn7XWgRXxAc/1H7mG2Fbl9fbwfth7QklM=)
                          44: F47B2136202611F08C91C683C4F9AE02.roa (hash: bo83lWwkb62HCCBfEehNLe9siq1i68IzVQL3HJEnOzA=)
                          45: 2FD48F5AA21C11E8B669A00BC4F9AE02.roa (hash: u8gfXXtqm1gkzJMgdHqfg88L6v+Yz3/XKFWnq8AvFg8=)
                          46: 5C61E59E342911F09B7E033FC4F9AE02.roa (hash: Qd25oWPjz8OBk4WSNqVVlGxpeN3mwfx89abbnRqovvk=)
                          47: 406928720A2411F0A2D02B4AC4F9AE02.roa (hash: XB1FXJk+02Ga8yfAsMsEB/gNNXe0Zuk0SHtAoo0/aCY=)
                          48: 4FB7C576376811E9847C6223C4F9AE02.roa (hash: ZCOrT5ezhAw5uA4But/7LBxSZmuk6SHo4IcQd8SCZEs=)
                          49: 411624587D2511ECA2A43549C4F9AE02.roa (hash: 0CUs/An2VlXKWHjA3XebOjMGi45BiV95SBtUt/fAPh8=)
                          50: 50527DFCD27811EBB9B4BB66C4F9AE02.roa (hash: +sgWUxPgZYqdHfuSJA/5OOyi2/G/J5JJMKk1Q2ZipDA=)
                          51: B1A34CDCD53A11EDB199211BC4F9AE02.roa (hash: l6JYToju68IzUtZzHFgCZis3cWCR44kbaf5G79V9hRo=)
                          52: 3404E194C47711EB9BD0E327C4F9AE02.roa (hash: fZqpzbalO5KpYxN3RGdtzePMX7BwaVGglvOgJcFt/KY=)
                          53: AFC59224604711E9BB8C0349C4F9AE02.roa (hash: 86fvCe3ZggiV+Ztt8qUapJoZWtynZNCJo38wxy2dPrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 15:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10320 (0x2850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D, serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: Jun 30 15:49:08 2025 GMT
            Not After : Jul  7 15:49:08 2025 GMT
        Subject: CN=6862b1f4-0f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d7:f6:f4:86:6b:2d:8b:96:fc:8e:54:73:73:
                    86:ef:fa:ca:6c:1c:19:aa:98:8a:87:0d:c6:36:53:
                    d5:45:ef:53:34:66:71:72:46:a0:8d:c7:15:7b:d4:
                    5c:e2:3b:1b:60:8b:d7:da:cc:79:fc:55:c8:ef:8f:
                    6c:23:e8:d2:15:1f:0f:f2:b9:5d:dd:b4:8c:a1:19:
                    8a:21:d7:d4:d7:ea:44:4e:ff:77:3e:00:2b:12:57:
                    a3:8a:b9:ea:95:5d:7f:61:8c:e8:06:2f:0c:68:7d:
                    4c:d3:1f:8b:b5:b7:02:ac:13:76:7e:5d:1b:4d:7d:
                    03:41:f8:a3:76:61:ec:b5:d2:a7:95:2e:72:7f:d4:
                    df:b4:79:b6:03:39:c7:6e:0c:7d:ee:75:43:e5:cd:
                    0c:ba:59:2b:35:f0:6c:de:1a:f6:f6:a5:6c:bf:4e:
                    4a:29:cc:0c:17:86:d1:5c:be:4a:d5:2d:e1:5a:f0:
                    c5:d3:a1:84:1d:d9:ab:c1:a1:9b:6f:89:b9:61:c6:
                    80:35:54:7a:76:a1:cd:95:4b:2f:a8:42:39:37:df:
                    49:69:ed:5e:3d:0b:22:74:b2:c8:68:6e:6d:9d:2f:
                    b5:3e:9d:c7:e9:1b:b2:32:49:14:bd:b4:27:3f:a8:
                    dc:fb:6a:cc:d1:c5:2c:45:d4:a0:af:06:27:17:22:
                    00:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A6:5A:6A:AB:A6:1C:D7:38:D4:E9:57:42:D9:87:D7:FB:8E:A5:1B
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:5d:e9:4f:9f:35:ee:82:5a:ab:0c:7c:c4:b0:5f:e4:c4:7e:
         af:5d:5d:31:26:31:9c:11:02:df:c0:e7:79:91:e9:2c:6d:3a:
         c9:22:e4:33:7b:d7:dd:52:17:d2:18:67:c2:20:16:48:75:82:
         9a:e4:28:2d:30:a5:1b:a4:73:12:4c:16:97:eb:b8:2e:5b:43:
         22:eb:0a:dd:bd:de:8c:2a:05:77:5e:10:ca:b1:a7:dc:55:a6:
         96:7e:cc:a6:7f:bc:dd:27:6b:21:b9:76:50:88:3f:a9:f8:e1:
         60:85:37:be:5a:92:f8:e3:10:cc:63:34:9f:b2:29:9f:53:1f:
         50:3c:ff:07:ca:8e:79:46:32:43:81:00:c2:c5:c3:5f:25:6f:
         d6:aa:f7:cd:05:fb:63:7c:2c:e8:c4:fa:75:59:0c:6d:0b:49:
         9b:b1:de:73:34:3d:d7:bf:6a:3f:15:8b:97:2d:45:ab:c9:46:
         28:d9:7e:d9:3d:fe:76:5b:b6:59:be:3d:05:a0:ee:68:2a:b7:
         62:5e:dc:20:48:0f:57:fb:d7:14:6b:6e:f7:6a:6d:ec:ba:39:
         5d:91:c2:ad:68:0b:eb:c5:f6:13:ba:28:fd:eb:cd:aa:cb:f5:
         db:85:6d:37:14:52:e1:9e:08:09:80:21:0c:a8:15:9a:15:66:
         15:bf:58:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:05:40 2025 by rpki-client