Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
File:                     sY6ktIaEpn3qATi6uiMwbQADzcw.mft (raw, json)
Hash identifier:          MGaPbES64Zb0vu2NWvixZA64KMDVUXpIuXa8+lk6oU4=
Subject key identifier:   04:CC:CE:28:2A:CB:CF:F9:92:AC:B0:8F:D6:83:7B:CB:C8:AD:B4:71
Authority key identifier: B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC
Certificate issuer:       /CN=A913EE77/serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
Certificate serial:       0710
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
Manifest number:          0AA5
Signing time:             Wed 02 Jul 2025 19:44:33 +0000
Manifest this update:     Wed 02 Jul 2025 19:44:32 +0000
Manifest next update:     Wed 09 Jul 2025 19:44:32 +0000
Files and hashes:         1: sY6ktIaEpn3qATi6uiMwbQADzcw.crl (hash: jNrkHwbsS2G7bqD06Aqzz2AV6F5zRD/NfeYD6VTP/IQ=)
                          2: A8D10944DEA511EEB7B9DC35C4F9AE02.roa (hash: F5nZUR683r0GHaN7PIQS7ScZ+hYmoRww/yUwHk4aoNk=)
                          3: A0A9FE74DEA511EE8F515632C4F9AE02.roa (hash: SjnLXmN7OQs2QJo93KJDaMm8uwo9AE2p0tGK7wMyelo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl
                          rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 19:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EE77, serialNumber=B18EA4B48684A67DEA0138BABA23306D0003CDCC
        Validity
            Not Before: Jul  2 19:44:32 2025 GMT
            Not After : Jul  9 19:44:32 2025 GMT
        Subject: CN=68658c20-cba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:53:7f:6c:45:92:be:01:9c:82:a2:8f:bc:82:
                    c6:4f:7c:74:83:a8:45:41:cb:5b:7e:c0:fd:30:ee:
                    2a:b3:1d:be:84:fe:66:44:a4:6b:e8:40:4f:c1:68:
                    e2:56:75:b0:8b:47:6a:69:f8:b5:3b:85:a0:a2:ad:
                    23:96:73:68:08:0c:a8:c9:8b:64:0c:1f:00:31:72:
                    ee:57:3b:14:2f:1b:be:65:56:f1:1b:51:7d:5b:80:
                    cc:40:f3:4a:16:4d:c7:25:d0:b6:ba:f1:97:31:db:
                    56:76:4d:c7:77:0e:c0:f6:3f:08:e0:b4:ab:d1:a7:
                    8d:ab:86:c8:6f:16:39:06:32:8d:27:0a:ac:a6:33:
                    ae:0e:a4:81:80:95:71:2a:2c:0b:e8:2e:10:b4:76:
                    b4:63:b3:73:84:4f:65:ff:c7:5a:4b:52:e6:3d:92:
                    3f:60:4c:01:98:d0:95:a8:e1:e9:48:fb:bf:41:6c:
                    0e:85:9e:08:54:5a:13:fc:c0:75:95:a3:47:b6:4e:
                    67:1a:d6:b9:6e:d5:ec:18:80:a8:19:e5:b7:0e:19:
                    0f:45:ce:39:41:c4:3d:79:99:5f:87:30:4e:71:77:
                    17:72:7b:6d:73:bb:69:1b:f6:63:27:77:7d:1b:15:
                    33:72:0f:d8:3b:20:b7:b8:1a:29:c4:67:f9:96:1b:
                    37:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CC:CE:28:2A:CB:CF:F9:92:AC:B0:8F:D6:83:7B:CB:C8:AD:B4:71
            X509v3 Authority Key Identifier:
                keyid:B1:8E:A4:B4:86:84:A6:7D:EA:01:38:BA:BA:23:30:6D:00:03:CD:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sY6ktIaEpn3qATi6uiMwbQADzcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EE77/C400BB5C56D111EAA94E7E5DC4F9AE02/sY6ktIaEpn3qATi6uiMwbQADzcw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ee:80:ae:55:6f:79:d3:d8:d6:bf:a2:42:bc:72:1f:31:be:
         9e:2b:78:67:c9:ef:41:d6:5a:41:e0:39:b7:81:16:98:0e:a1:
         89:d3:fe:86:fd:b1:ea:37:e4:ba:6e:f8:dc:e5:72:87:e3:62:
         cd:a3:13:d4:ca:74:6d:6d:13:11:eb:89:db:83:f1:de:7d:38:
         8c:fa:c4:38:f1:41:3d:2a:ab:a1:be:00:42:69:95:ed:2c:96:
         d0:9b:30:03:fc:f3:80:5a:9b:9b:9c:de:a8:41:7b:65:51:3b:
         b3:e5:f0:70:3b:d9:8f:65:f6:a1:c1:20:20:c9:2d:a9:26:28:
         ee:16:09:d2:54:82:71:34:f9:6f:b4:c6:83:0a:4e:a2:f8:55:
         da:94:02:41:24:19:e6:7b:77:09:d9:6e:9e:da:20:a9:86:21:
         15:15:1a:f2:ef:70:9f:87:6e:6b:87:fa:a9:e0:ff:ff:a6:7c:
         1c:52:06:17:ad:2d:1c:b0:61:2a:1b:70:c2:3a:14:a7:c1:f9:
         51:6a:dc:ec:2a:19:b1:5b:e9:a8:42:09:34:bc:e8:50:a7:46:
         d3:76:30:f3:58:54:b5:9c:69:70:9f:68:b1:e6:cb:bb:5e:7d:
         68:ea:2a:aa:d9:a6:41:79:e0:e5:ba:ea:c7:35:ac:14:48:26:
         7a:43:f9:2d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBxAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VFNzcxMTAvBgNVBAUTKEIxOEVBNEI0ODY4NEE2N0RFQTAxMzhCQUJBMjMzMDZE
MDAwM0NEQ0MwHhcNMjUwNzAyMTk0NDMyWhcNMjUwNzA5MTk0NDMyWjAYMRYwFAYD
VQQDEw02ODY1OGMyMC1jYmE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtFN/bEWSvgGcgqKPvILGT3x0g6hFQctbfsD9MO4qsx2+hP5mRKRr6EBPwWji
VnWwi0dqafi1O4Wgoq0jlnNoCAyoyYtkDB8AMXLuVzsULxu+ZVbxG1F9W4DMQPNK
Fk3HJdC2uvGXMdtWdk3Hdw7A9j8I4LSr0aeNq4bIbxY5BjKNJwqspjOuDqSBgJVx
KiwL6C4QtHa0Y7NzhE9l/8daS1LmPZI/YEwBmNCVqOHpSPu/QWwOhZ4IVFoT/MB1
laNHtk5nGta5btXsGICoGeW3DhkPRc45QcQ9eZlfhzBOcXcXcnttc7tpG/ZjJ3d9
GxUzcg/YOyC3uBopxGf5lhs36wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATMzigq
y8/5kqywj9aDe8vIrbRxMB8GA1UdIwQYMBaAFLGOpLSGhKZ96gE4urojMG0AA83M
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUU3Ny9DNDAwQkI1QzU2
RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBuM3FBVGk2dWlNd2JRQUR6
Y3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NZNmt0SWFFcG4zcUFUaTZ1aU13YlFBRHpjdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUU3Ny9DNDAwQkI1QzU2RDExMUVBQTk0RTdFNURDNEY5QUUwMi9zWTZrdElhRXBu
M3FBVGk2dWlNd2JRQUR6Y3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCb7oCuVW9509jWv6JCvHIfMb6eK3hnye9B1lpB4Dm3gRaYDqGJ0/6G
/bHqN+S6bvjc5XKH42LNoxPUynRtbRMR64nbg/HefTiM+sQ48UE9KquhvgBCaZXt
LJbQmzAD/POAWpubnN6oQXtlUTuz5fBwO9mPZfahwSAgyS2pJijuFgnSVIJxNPlv
tMaDCk6i+FXalAJBJBnme3cJ2W6e2iCphiEVFRry73Cfh25rh/qp4P//pnwcUgYX
rS0csGEqG3DCOhSnwflRatzsKhmxW+moQgk0vOhQp0bTdjDzWFS1nGlwn2ix5su7
Xn1o6iqq2aZBeeDluurHNawUSCZ6Q/kt
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:08:51 2025 by rpki-client