Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
File:                     ioDqhWIqoHAhvfSshBiw2aU5rOE.mft (raw, json)
Hash identifier:          3xeyVAOH1rzEkjTCh7JfC2U/K4SixnAtDvQ4wd58rXo=
Subject key identifier:   DC:49:63:DB:82:39:98:74:20:FD:10:FD:30:40:C1:83:F6:AD:62:C2
Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
Certificate issuer:       /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Certificate serial:       051A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
Manifest number:          0511
Signing time:             Wed 02 Jul 2025 23:58:26 +0000
Manifest this update:     Wed 02 Jul 2025 23:58:26 +0000
Manifest next update:     Wed 09 Jul 2025 23:58:26 +0000
Files and hashes:         1: ioDqhWIqoHAhvfSshBiw2aU5rOE.crl (hash: e3Twbnm7gJdagEdfOdTuEz5yG36rq8k1+sItwzh9drM=)
                          2: 47B1CB6E460D11F091179886C4F9AE02.roa (hash: UJrloLrvsoge3wfmese2Zva7x1vRvjjKxNvEsNCfNYE=)
                          3: DA0AD156799211EFADCD2257C4F9AE02.roa (hash: IKJkF5tTVOAg9Gcj+RMqJavUI1QmsLflBy8eIb93AAQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
                          rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:58:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1306 (0x51a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
        Validity
            Not Before: Jul  2 23:58:26 2025 GMT
            Not After : Jul  9 23:58:26 2025 GMT
        Subject: CN=6865c7a2-1f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b0:67:42:ae:dd:77:b9:16:a0:10:e8:d8:78:
                    47:00:9f:6d:a1:55:69:95:e6:88:f0:ab:f2:6f:9a:
                    f2:4e:40:fc:16:d6:a5:75:c0:3d:e0:e7:8f:5e:ba:
                    03:38:4b:08:da:92:20:48:52:3b:c7:d4:c0:d1:be:
                    96:0c:9c:f6:45:32:7d:fa:d7:b2:da:28:d5:1d:f0:
                    1f:56:fd:0f:bb:1e:bb:4f:05:d9:c9:e9:e2:d0:53:
                    85:d3:29:84:35:6b:3f:ca:da:9f:95:56:90:4c:ff:
                    44:f1:55:e1:02:92:ca:8a:50:3a:73:56:3e:90:71:
                    61:26:66:12:77:5c:57:06:6a:6b:2b:6a:17:34:11:
                    49:01:84:21:ad:2e:bf:d4:e1:e1:f3:f8:f4:10:78:
                    dc:58:c0:01:59:b7:1f:99:7d:9a:0b:a9:65:25:4d:
                    ac:86:44:93:be:74:70:9f:66:68:72:5b:f4:a0:ce:
                    5d:a3:e0:b7:7c:87:90:90:6e:37:0c:72:40:f8:5f:
                    22:b4:35:04:34:81:b9:45:37:7e:b0:c0:78:8e:13:
                    c3:08:35:5b:6a:c9:8b:7b:39:f3:02:44:44:15:d6:
                    4a:2e:80:b5:a8:d8:db:8b:c0:02:84:b1:bb:da:f2:
                    53:d2:37:e4:f2:f8:b8:44:4e:51:f2:bd:e7:88:d0:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:49:63:DB:82:39:98:74:20:FD:10:FD:30:40:C1:83:F6:AD:62:C2
            X509v3 Authority Key Identifier:
                keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:51:86:54:f2:de:3d:2d:8e:45:fe:ed:58:4e:13:fc:98:21:
         14:40:42:ba:75:68:d4:12:9f:c9:0d:9d:75:17:f9:1e:6b:60:
         ea:51:12:c7:a2:68:1f:e2:71:00:70:ac:69:5a:45:6b:03:bf:
         21:16:e5:9b:bc:9d:54:fd:97:e9:5f:aa:3f:88:e1:a3:e5:27:
         8a:18:43:d0:02:d4:9b:1d:5b:0c:52:ac:35:d7:bc:5d:eb:ee:
         71:1b:e9:02:0d:bf:e9:cd:1f:6c:4d:f8:9c:16:54:b0:99:a9:
         71:c5:6d:03:0f:a6:96:73:f3:ee:05:e5:44:16:70:c5:af:30:
         a9:3a:01:09:01:b2:3b:fd:c8:1e:92:36:5e:d3:92:ea:97:f0:
         b2:96:cf:40:9d:03:d6:a9:e3:53:a2:d2:03:ca:c8:87:ae:03:
         7f:6c:e0:ac:31:40:65:a7:8e:df:a6:0e:c6:3b:30:e7:9d:29:
         cb:ff:9a:95:93:f6:0d:c9:13:fc:3e:e2:81:c7:18:75:ff:1f:
         11:62:b6:60:ba:76:42:4e:c9:20:dc:bf:d9:77:73:fd:af:5f:
         de:a1:e3:0e:e2:2a:df:c4:04:98:ff:3c:42:3b:98:46:49:b9:
         79:ca:7c:2c:d0:b2:2a:69:95:2a:d0:15:8a:f9:67:10:11:62:
         c9:4a:4a:ec
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ5QkUxMTAvBgNVBAUTKDhBODBFQTg1NjIyQUEwNzAyMUJERjRBQzg0MThCMEQ5
QTUzOUFDRTEwHhcNMjUwNzAyMjM1ODI2WhcNMjUwNzA5MjM1ODI2WjAYMRYwFAYD
VQQDEw02ODY1YzdhMi0xZjllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyrBnQq7dd7kWoBDo2HhHAJ9toVVpleaI8Kvyb5ryTkD8FtaldcA94OePXroD
OEsI2pIgSFI7x9TA0b6WDJz2RTJ9+tey2ijVHfAfVv0Pux67TwXZyeni0FOF0ymE
NWs/ytqflVaQTP9E8VXhApLKilA6c1Y+kHFhJmYSd1xXBmprK2oXNBFJAYQhrS6/
1OHh8/j0EHjcWMABWbcfmX2aC6llJU2shkSTvnRwn2Zoclv0oM5do+C3fIeQkG43
DHJA+F8itDUENIG5RTd+sMB4jhPDCDVbasmLeznzAkREFdZKLoC1qNjbi8AChLG7
2vJT0jfk8vi4RE5R8r3niNB7NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNxJY9uC
OZh0IP0Q/TBAwYP2rWLCMB8GA1UdIwQYMBaAFIqA6oViKqBwIb30rIQYsNmlOazh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDlCRS9CMDlDM0NFMjEx
N0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9IQWh2ZlNzaEJpdzJhVTVy
T0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lvRHFoV0lxb0hBaHZmU3NoQml3MmFVNXJPRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDlCRS9CMDlDM0NFMjExN0IxMUVDODBFNDIxNDNDNEY5QUUwMi9pb0RxaFdJcW9I
QWh2ZlNzaEJpdzJhVTVyT0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAjUYZU8t49LY5F/u1YThP8mCEUQEK6dWjUEp/JDZ11F/kea2DqURLH
omgf4nEAcKxpWkVrA78hFuWbvJ1U/ZfpX6o/iOGj5SeKGEPQAtSbHVsMUqw117xd
6+5xG+kCDb/pzR9sTficFlSwmalxxW0DD6aWc/PuBeVEFnDFrzCpOgEJAbI7/cge
kjZe05Lql/Cyls9AnQPWqeNTotIDysiHrgN/bOCsMUBlp47fpg7GOzDnnSnL/5qV
k/YNyRP8PuKBxxh1/x8RYrZgunZCTskg3L/Zd3P9r1/eoeMO4irfxASY/zxCO5hG
Sbl5ynws0LIqaZUq0BWK+WcQEWLJSkrs
-----END CERTIFICATE-----
Generated at Thu Jul 3 04:23:13 2025 by rpki-client