Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
File:                     7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft (raw, json)
Hash identifier:          eAl2nBd5441eVqukm72PGtwMMK5w/bA1vcZt3z609RM=
Subject key identifier:   D8:C0:BB:D7:D6:AA:D4:8C:7D:5F:F8:10:E3:FA:B2:F3:90:8C:10:BC
Authority key identifier: EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1
Certificate issuer:       /CN=A912B12A/serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
Certificate serial:       8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
Manifest number:          8A
Signing time:             Sat 23 Aug 2025 06:48:44 +0000
Manifest this update:     Sat 23 Aug 2025 06:48:44 +0000
Manifest next update:     Sat 30 Aug 2025 06:48:44 +0000
Files and hashes:         1: 7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl (hash: r10Hs2VayW3SN1N16cyl0dBFpUViFr5AV6La6e7Km5I=)
                          2: 2346577EAE5811EFAFE7FF84C4F9AE02.roa (hash: 2DuyIR+wk4mvn+XwoOsHwRQcxItN+5KREj3DX0f4tYs=)
                          3: 246315A2AE5811EFAFE7FF84C4F9AE02.roa (hash: GhFLUJsibCVFeaw+HURiwfIuyrQYgDP+XOZxzfH6Sw0=)
                          4: 23F9E186AE5811EFAFE7FF84C4F9AE02.roa (hash: 1/AZpd9pLcHU8N9tmsYLkTIAugSfqWDpWEBhQfVHYVc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl
                          rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B12A, serialNumber=ECFF32440C4EE1D27943CDB72A7D491063402DF1
        Validity
            Not Before: Aug 23 06:48:44 2025 GMT
            Not After : Aug 30 06:48:44 2025 GMT
        Subject: CN=68a9644c-83fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:00:56:a0:7c:68:63:fa:63:f2:a4:35:ce:dd:
                    dc:72:ae:5d:24:4d:8b:32:d7:44:f6:79:af:15:68:
                    cc:b0:43:bf:79:e3:d5:9f:71:79:ea:56:2b:7e:54:
                    78:30:8c:8d:5d:84:f8:46:de:b8:c5:53:fd:fc:85:
                    e5:c3:bd:a1:19:be:53:24:b9:26:45:7c:fa:2a:17:
                    0d:b2:f2:92:a7:a3:94:d8:06:7a:e6:a1:0a:5d:db:
                    90:8e:cc:1a:1a:e9:c7:1f:b5:32:6d:9f:53:7b:65:
                    23:5f:d8:28:cd:50:7e:eb:de:c7:0a:2f:47:a2:45:
                    74:2b:92:45:01:86:e3:ec:4e:82:89:78:f7:73:22:
                    29:cf:e1:56:2f:47:66:e9:d2:8a:ab:4c:2e:66:32:
                    a3:2f:a9:89:67:92:65:83:79:8e:e5:1b:ef:a0:cd:
                    fb:63:6c:ae:ae:0c:0c:3c:b0:07:ae:4b:0f:d0:56:
                    96:79:31:42:40:be:6f:62:a6:13:76:6c:a8:4f:10:
                    71:46:ab:e8:09:71:bf:a0:bb:7a:79:34:c3:aa:73:
                    23:28:ac:d0:02:bb:c2:42:18:14:05:f1:1b:6d:6c:
                    3f:63:6c:0b:5d:e4:84:aa:64:9e:4b:ef:ad:30:58:
                    90:b8:e3:06:24:1b:50:c7:a7:c1:17:96:5c:04:9f:
                    df:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C0:BB:D7:D6:AA:D4:8C:7D:5F:F8:10:E3:FA:B2:F3:90:8C:10:BC
            X509v3 Authority Key Identifier:
                keyid:EC:FF:32:44:0C:4E:E1:D2:79:43:CD:B7:2A:7D:49:10:63:40:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7P8yRAxO4dJ5Q823Kn1JEGNALfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B12A/B9D4CF42AE3D11EF96B76C6AC4F9AE02/7P8yRAxO4dJ5Q823Kn1JEGNALfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:13:6d:2e:65:17:fe:ef:af:9a:e9:89:c2:51:64:78:84:45:
         2d:8c:37:4a:dc:a3:c0:a3:68:b2:95:ee:b3:c7:d6:77:d1:8f:
         52:de:7d:ba:fb:b0:ea:42:da:10:2d:1a:a4:e6:85:17:e3:20:
         64:18:5e:8f:8e:52:75:2d:1a:15:12:27:1b:d8:2a:83:f2:c8:
         d9:12:e6:5c:42:6f:6b:9a:79:0e:01:c6:20:69:08:dd:67:16:
         eb:75:d9:c6:9c:8b:d0:fb:4b:6f:f1:33:a6:cd:a1:ff:21:a9:
         53:e0:d2:68:29:4c:31:dd:f9:ef:84:c2:3a:16:14:5f:5e:7a:
         fb:1c:54:8f:7d:a6:f2:b1:9a:68:19:22:23:47:bc:8a:3b:9f:
         64:eb:36:ae:24:51:bb:7d:5a:e5:0b:89:8e:52:8d:01:00:20:
         00:07:8a:e9:f5:60:9c:cd:55:f3:85:dd:3a:e2:dd:73:66:f2:
         21:60:3e:60:75:6d:a7:d5:43:58:d5:af:ff:42:d0:42:d2:84:
         82:86:47:ca:9d:03:75:51:8e:3b:75:e1:e1:66:95:fc:71:3c:
         60:82:38:81:e2:c5:e7:d3:77:d8:7e:39:f9:46:83:45:44:0b:
         55:65:96:9f:48:51:1f:d9:97:04:36:2b:d2:6c:fd:84:be:d2:
         2f:cc:e9:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkIxMkExMTAvBgNVBAUTKEVDRkYzMjQ0MEM0RUUxRDI3OTQzQ0RCNzJBN0Q0OTEw
NjM0MDJERjEwHhcNMjUwODIzMDY0ODQ0WhcNMjUwODMwMDY0ODQ0WjAYMRYwFAYD
VQQDEw02OGE5NjQ0Yy04M2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmQBWoHxoY/pj8qQ1zt3ccq5dJE2LMtdE9nmvFWjMsEO/eePVn3F56lYrflR4
MIyNXYT4Rt64xVP9/IXlw72hGb5TJLkmRXz6KhcNsvKSp6OU2AZ65qEKXduQjswa
GunHH7UybZ9Te2UjX9gozVB+697HCi9HokV0K5JFAYbj7E6CiXj3cyIpz+FWL0dm
6dKKq0wuZjKjL6mJZ5Jlg3mO5RvvoM37Y2yurgwMPLAHrksP0FaWeTFCQL5vYqYT
dmyoTxBxRqvoCXG/oLt6eTTDqnMjKKzQArvCQhgUBfEbbWw/Y2wLXeSEqmSeS++t
MFiQuOMGJBtQx6fBF5ZcBJ/f8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjAu9fW
qtSMfV/4EOP6svOQjBC8MB8GA1UdIwQYMBaAFOz/MkQMTuHSeUPNtyp9SRBjQC3x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjEyQS9COUQ0Q0Y0MkFF
M0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRkSjVRODIzS24xSkVHTkFM
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdQOHlSQXhPNGRKNVE4MjNLbjFKRUdOQUxmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QjEyQS9COUQ0Q0Y0MkFFM0QxMUVGOTZCNzZDNkFDNEY5QUUwMi83UDh5UkF4TzRk
SjVRODIzS24xSkVHTkFMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCJE20uZRf+76+a6YnCUWR4hEUtjDdK3KPAo2iyle6zx9Z30Y9S3n26
+7DqQtoQLRqk5oUX4yBkGF6PjlJ1LRoVEicb2CqD8sjZEuZcQm9rmnkOAcYgaQjd
ZxbrddnGnIvQ+0tv8TOmzaH/IalT4NJoKUwx3fnvhMI6FhRfXnr7HFSPfabysZpo
GSIjR7yKO59k6zauJFG7fVrlC4mOUo0BACAAB4rp9WCczVXzhd064t1zZvIhYD5g
dW2n1UNY1a//QtBC0oSChkfKnQN1UY47deHhZpX8cTxggjiB4sXn03fYfjn5RoNF
RAtVZZafSFEf2ZcENivSbP2EvtIvzOlZ
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:47:39 2025 by rpki-client