Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
File:                     c0H2TqslF-qZON3k-wqBTly7fnc.mft (raw, json)
Hash identifier:          i3JjBAmIomOIdvaKZt/+aBC0fiYhHNMX0Y72gKSrfMk=
Subject key identifier:   C1:48:05:DF:22:E8:4B:95:BA:0E:22:61:5F:D9:03:44:42:D9:BE:A8
Authority key identifier: 73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77
Certificate issuer:       /CN=A912184B/serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
Certificate serial:       1E44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
Manifest number:          1E2A
Signing time:             Fri 22 Aug 2025 16:08:36 +0000
Manifest this update:     Fri 22 Aug 2025 16:08:36 +0000
Manifest next update:     Fri 29 Aug 2025 16:08:36 +0000
Files and hashes:         1: c0H2TqslF-qZON3k-wqBTly7fnc.crl (hash: j7T7MelW5fovQYiD9qqgtpIxVzUnFSQtbu1/EIX7NKg=)
                          2: 22DC230C299311F0B32D9F82C4F9AE02.roa (hash: KiZSjsjHSWTeGrVHyQ1fRZOy4p6+ElPmGCwKFduLkFA=)
                          3: 8144C55412E611E98A4A6A35C4F9AE02.roa (hash: HcaovZ/E4LVI99vShwEF3DVWudHVhbjCDuMnNSp75nw=)
                          4: 51D65180A2DC11E9B63C6C2BC4F9AE02.roa (hash: lziphfAQalP1g1qd41FgsGMuQq4aElhXOf7iBsezcaw=)
                          5: 234A6628299311F0B32D9F82C4F9AE02.roa (hash: D4LXE7yxCKGNNUhuHC7/Q5q8EQPtCwzUchpxHBJ/u58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl
                          rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7748 (0x1e44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912184B, serialNumber=7341F64EAB2517EA9938DDE4FB0A814E5CBB7E77
        Validity
            Not Before: Aug 22 16:08:36 2025 GMT
            Not After : Aug 29 16:08:36 2025 GMT
        Subject: CN=68a89604-73dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c6:52:c8:b0:32:60:31:ba:97:54:4b:73:6f:
                    1a:02:d6:3b:ae:26:f2:b1:bf:42:52:ab:1b:21:b1:
                    e7:d6:14:f2:ee:36:c3:a4:6c:98:7d:d7:1e:d3:43:
                    35:f3:a9:7e:fa:dd:17:8e:15:f4:d1:8a:05:46:7b:
                    69:08:6e:7f:46:33:8d:75:0e:4f:07:77:a3:f6:02:
                    ae:6a:30:8f:a0:38:03:f2:0c:a5:dd:91:11:19:a0:
                    c9:50:c9:fc:8d:c0:46:e8:e9:6c:a6:b7:ce:49:78:
                    3e:10:05:58:a2:76:bc:7f:49:64:3c:ee:a3:72:4c:
                    be:5d:e0:53:c2:08:bf:a2:80:bd:64:a6:a4:69:64:
                    84:f1:91:5d:0b:bd:47:1b:ca:9a:1e:16:f8:38:6d:
                    6f:4a:7b:a0:08:30:dd:6c:3f:97:bc:db:47:a7:33:
                    1c:ab:9a:7c:6d:4c:00:22:87:98:33:89:40:9a:b1:
                    eb:56:12:36:7b:6e:1b:22:ed:7b:38:38:4a:1c:bc:
                    89:00:33:e0:4b:aa:f5:c8:d2:68:32:50:4e:31:7a:
                    78:aa:b5:be:ea:1d:0b:d1:e6:d5:5b:5f:99:9c:56:
                    01:c1:9d:f2:d3:99:09:07:4d:f2:0e:7f:68:69:19:
                    e9:a7:0a:ef:22:93:e8:79:e8:c2:62:32:c4:28:73:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:48:05:DF:22:E8:4B:95:BA:0E:22:61:5F:D9:03:44:42:D9:BE:A8
            X509v3 Authority Key Identifier:
                keyid:73:41:F6:4E:AB:25:17:EA:99:38:DD:E4:FB:0A:81:4E:5C:BB:7E:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c0H2TqslF-qZON3k-wqBTly7fnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912184B/136487FA8C8C11E6B0B7C528C4F9AE02/c0H2TqslF-qZON3k-wqBTly7fnc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:5a:62:67:4c:a7:c7:cb:54:c6:42:29:3e:24:ea:32:c4:b5:
         05:43:6a:46:ae:a8:ef:34:bf:e5:bc:df:61:9b:22:93:02:55:
         d4:b6:9d:ce:64:13:8c:57:f3:e6:07:a1:23:33:8b:83:a7:ed:
         7c:e8:41:2c:11:79:d2:8a:8f:25:9d:a8:c7:a1:6e:7b:59:f8:
         61:c6:21:01:bd:07:87:0c:7c:bd:23:90:1f:60:78:32:51:ba:
         3c:7d:d9:a5:88:29:21:21:54:09:36:af:d7:67:7a:29:2b:dd:
         ac:0a:26:90:65:58:66:17:d0:87:4e:58:b7:43:b2:f0:5d:7f:
         73:e5:e0:fa:28:f3:34:4b:9b:74:30:48:76:38:e2:a7:64:b7:
         6c:0f:94:b7:bf:9b:62:45:01:84:ef:34:b9:c8:ad:0e:d3:25:
         24:27:b6:79:d5:71:74:c5:30:a5:4c:de:75:12:ec:4c:0d:93:
         4d:63:af:f7:a4:90:63:94:b0:20:ff:e8:33:83:23:66:ed:ec:
         f6:d5:34:64:b4:c9:24:cf:ad:56:51:ee:cf:90:0e:eb:55:84:
         28:6b:42:bd:d1:3c:e6:e5:23:a8:fe:08:7c:12:53:a9:41:52:
         42:ef:e4:7e:54:37:93:d7:56:3e:22:60:55:62:59:56:4f:c5:
         06:9a:47:74
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICHkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE4NEIxMTAvBgNVBAUTKDczNDFGNjRFQUIyNTE3RUE5OTM4RERFNEZCMEE4MTRF
NUNCQjdFNzcwHhcNMjUwODIyMTYwODM2WhcNMjUwODI5MTYwODM2WjAYMRYwFAYD
VQQDEw02OGE4OTYwNC03M2RkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAosZSyLAyYDG6l1RLc28aAtY7ribysb9CUqsbIbHn1hTy7jbDpGyYfdce00M1
86l++t0XjhX00YoFRntpCG5/RjONdQ5PB3ej9gKuajCPoDgD8gyl3ZERGaDJUMn8
jcBG6OlsprfOSXg+EAVYona8f0lkPO6jcky+XeBTwgi/ooC9ZKakaWSE8ZFdC71H
G8qaHhb4OG1vSnugCDDdbD+XvNtHpzMcq5p8bUwAIoeYM4lAmrHrVhI2e24bIu17
ODhKHLyJADPgS6r1yNJoMlBOMXp4qrW+6h0L0ebVW1+ZnFYBwZ3y05kJB03yDn9o
aRnppwrvIpPoeejCYjLEKHNd+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFIBd8i
6EuVug4iYV/ZA0RC2b6oMB8GA1UdIwQYMBaAFHNB9k6rJRfqmTjd5PsKgU5cu353
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTg0Qi8xMzY0ODdGQThD
OEMxMUU2QjBCN0M1MjhDNEY5QUUwMi9jMEgyVHFzbEYtcVpPTjNrLXdxQlRseTdm
bmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2MwSDJUcXNsRi1xWk9OM2std3FCVGx5N2ZuYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTg0Qi8xMzY0ODdGQThDOEMxMUU2QjBCN0M1MjhDNEY5QUUwMi9jMEgyVHFzbEYt
cVpPTjNrLXdxQlRseTdmbmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7WmJnTKfHy1TGQik+JOoyxLUFQ2pGrqjvNL/lvN9hmyKTAlXUtp3O
ZBOMV/PmB6EjM4uDp+186EEsEXnSio8lnajHoW57WfhhxiEBvQeHDHy9I5AfYHgy
Ubo8fdmliCkhIVQJNq/XZ3opK92sCiaQZVhmF9CHTli3Q7LwXX9z5eD6KPM0S5t0
MEh2OOKnZLdsD5S3v5tiRQGE7zS5yK0O0yUkJ7Z51XF0xTClTN51EuxMDZNNY6/3
pJBjlLAg/+gzgyNm7ez21TRktMkkz61WUe7PkA7rVYQoa0K90Tzm5SOo/gh8ElOp
QVJC7+R+VDeT11Y+ImBVYllWT8UGmkd0
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:29:18 2025 by rpki-client