Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
File:                     jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft (raw, json)
Hash identifier:          dPPYSchoA+ivjhwT/eywVkFTTX5joOFF+PEd7h6qWeU=
Subject key identifier:   B7:45:91:0C:B2:6E:9C:2C:26:08:28:D3:F3:A8:3C:26:92:45:5B:BD
Authority key identifier: 8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7
Certificate issuer:       /CN=A9132FA5/serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
Certificate serial:       0AEB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
Manifest number:          0AD4
Signing time:             Fri 22 Aug 2025 19:35:24 +0000
Manifest this update:     Fri 22 Aug 2025 19:35:24 +0000
Manifest next update:     Fri 29 Aug 2025 19:35:24 +0000
Files and hashes:         1: jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl (hash: l4c2euFxzWziOvDJTCD/yT3HGZKUPM/I+Aa/Ob4eRBo=)
                          2: 202A9E5E8B7811EF9E21317AC4F9AE02.roa (hash: 6eqU3D3nkl8TxNOcTzkOAZbDhLtOvIweFYcN2fOYDro=)
                          3: 0A9169068B7811EFB0820F7AC4F9AE02.roa (hash: DswYDUP/RD9PbGNtXcWRx0rv+yAsEjlaJqRA+mnEXlQ=)
                          4: C6766086579811EAA245BE5EC4F9AE02.roa (hash: E36u0CPRdhWTbG+OpjD/o5aQVXee0PchEbiLDGt9mTc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl
                          rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:35:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2795 (0xaeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132FA5, serialNumber=8D5AFF3219012A1C99E273C2B7E63A2D0C3962E7
        Validity
            Not Before: Aug 22 19:35:24 2025 GMT
            Not After : Aug 29 19:35:24 2025 GMT
        Subject: CN=68a8c67c-5838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:12:c2:83:33:65:6e:ab:0e:79:af:36:81:
                    a6:d6:f9:fa:21:d5:46:25:fb:43:b9:c5:46:78:13:
                    95:17:4f:06:e6:65:be:9a:b6:a5:d2:6f:0a:54:6a:
                    2b:ea:5b:f8:42:41:07:68:dc:5c:45:34:ba:dc:b2:
                    cb:82:0b:e0:61:ef:34:b9:4a:69:57:78:c7:1d:53:
                    65:c5:1f:10:07:96:6d:b2:7a:87:2a:8e:24:44:34:
                    32:97:56:75:97:a7:98:89:a1:88:61:e9:b9:77:0f:
                    2f:40:0b:ab:78:ee:49:b7:f6:f7:ff:0b:15:b4:78:
                    8f:e9:c6:0c:cb:db:d7:8b:e9:1f:a0:ab:ac:e1:50:
                    fe:6b:6a:69:4d:a7:fa:3d:3f:1f:05:14:32:bc:c5:
                    66:cb:17:01:4b:d7:18:3b:5a:d7:50:fa:a8:2b:39:
                    39:64:0a:b3:52:b4:cc:1d:6f:1d:d7:0e:56:94:e5:
                    92:ea:a5:aa:8b:79:d7:5e:88:c1:99:53:86:0e:64:
                    d5:37:1b:b6:53:99:81:b3:8a:b3:51:74:78:6a:1e:
                    84:c7:b8:58:4d:aa:eb:5c:0a:14:73:50:75:9f:b8:
                    3d:dc:5b:d8:00:04:4e:29:a5:5f:4d:54:5d:50:a3:
                    d2:de:16:7f:fe:9f:35:a3:35:ef:4c:f8:c6:ba:d1:
                    17:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:45:91:0C:B2:6E:9C:2C:26:08:28:D3:F3:A8:3C:26:92:45:5B:BD
            X509v3 Authority Key Identifier:
                keyid:8D:5A:FF:32:19:01:2A:1C:99:E2:73:C2:B7:E6:3A:2D:0C:39:62:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132FA5/ABD47108569111EAB5C5C70FC4F9AE02/jVr_MhkBKhyZ4nPCt-Y6LQw5Yuc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:51:6f:ea:27:c8:9a:09:8c:f4:43:ee:4a:e6:e0:84:19:a1:
         26:80:7c:33:91:6b:f6:e3:e0:44:68:56:42:ed:f2:d4:5a:2c:
         0f:99:07:2a:29:7b:84:10:7e:fb:29:4b:4f:f1:72:82:5e:51:
         ef:f9:a2:f3:8d:ef:05:ec:eb:5f:a4:ee:60:1b:57:25:49:58:
         92:7e:4f:3d:c6:17:6b:58:89:25:a3:30:d1:45:d4:65:3f:fa:
         a6:63:80:d4:03:e6:a6:99:95:43:04:fc:19:45:a5:71:37:89:
         51:5d:3c:22:ea:c0:44:7d:65:60:5a:89:29:fd:7f:0e:31:f6:
         7e:1b:1d:5c:23:c2:5d:37:ba:f1:0e:40:ad:2e:28:35:f0:44:
         e4:cf:16:93:0a:21:18:59:d6:b3:0d:d6:33:4a:d0:06:87:35:
         00:31:24:2c:b2:03:c7:e0:e1:f9:8b:28:63:cd:9e:93:5a:39:
         52:36:5a:0a:25:0e:76:ea:07:95:46:65:57:5b:e6:1c:a0:dc:
         53:ed:11:ee:7b:6d:db:17:99:b6:aa:02:12:fb:57:2d:43:6b:
         69:5e:2d:84:e8:d0:e7:4d:07:74:40:2b:24:9f:7e:80:a6:89:
         92:de:57:9b:b3:8b:11:6e:6e:36:1f:85:ae:15:5a:eb:44:44:
         f8:46:2f:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCuswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJGQTUxMTAvBgNVBAUTKDhENUFGRjMyMTkwMTJBMUM5OUUyNzNDMkI3RTYzQTJE
MEMzOTYyRTcwHhcNMjUwODIyMTkzNTI0WhcNMjUwODI5MTkzNTI0WjAYMRYwFAYD
VQQDEw02OGE4YzY3Yy01ODM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0DESwoMzZW6rDnmvNoGm1vn6IdVGJftDucVGeBOVF08G5mW+mral0m8KVGor
6lv4QkEHaNxcRTS63LLLggvgYe80uUppV3jHHVNlxR8QB5ZtsnqHKo4kRDQyl1Z1
l6eYiaGIYem5dw8vQAureO5Jt/b3/wsVtHiP6cYMy9vXi+kfoKus4VD+a2ppTaf6
PT8fBRQyvMVmyxcBS9cYO1rXUPqoKzk5ZAqzUrTMHW8d1w5WlOWS6qWqi3nXXojB
mVOGDmTVNxu2U5mBs4qzUXR4ah6Ex7hYTarrXAoUc1B1n7g93FvYAAROKaVfTVRd
UKPS3hZ//p81ozXvTPjGutEXeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdFkQyy
bpwsJggo0/OoPCaSRVu9MB8GA1UdIwQYMBaAFI1a/zIZASocmeJzwrfmOi0MOWLn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkZBNS9BQkQ0NzEwODU2
OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQktoeVo0blBDdC1ZNkxRdzVZ
dWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pWcl9NaGtCS2h5WjRuUEN0LVk2TFF3NVl1Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkZBNS9BQkQ0NzEwODU2OTExMUVBQjVDNUM3MEZDNEY5QUUwMi9qVnJfTWhrQkto
eVo0blBDdC1ZNkxRdzVZdWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPUW/qJ8iaCYz0Q+5K5uCEGaEmgHwzkWv24+BEaFZC7fLUWiwPmQcq
KXuEEH77KUtP8XKCXlHv+aLzje8F7OtfpO5gG1clSViSfk89xhdrWIklozDRRdRl
P/qmY4DUA+ammZVDBPwZRaVxN4lRXTwi6sBEfWVgWokp/X8OMfZ+Gx1cI8JdN7rx
DkCtLig18ETkzxaTCiEYWdazDdYzStAGhzUAMSQssgPH4OH5iyhjzZ6TWjlSNloK
JQ526geVRmVXW+YcoNxT7RHue23bF5m2qgIS+1ctQ2tpXi2E6NDnTQd0QCskn36A
pomS3lebs4sRbm42H4WuFVrrRET4Ri+q
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:20:02 2025 by rpki-client