Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
File:                     QVO6SZpE5-wQQcYO9_NprGI1eqg.mft (raw, json)
Hash identifier:          91Z8bl6gSQhxmJY9u/Bpa5vufk1fcmeRQi12q/McA5A=
Subject key identifier:   09:48:36:1A:38:87:C4:BD:98:A8:37:CF:A2:2C:86:BE:67:FB:1A:F3
Authority key identifier: 41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8
Certificate issuer:       /CN=A91423C1/serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
Certificate serial:       015F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
Manifest number:          0155
Signing time:             Sat 23 Aug 2025 04:26:15 +0000
Manifest this update:     Sat 23 Aug 2025 04:26:14 +0000
Manifest next update:     Sat 30 Aug 2025 04:26:14 +0000
Files and hashes:         1: QVO6SZpE5-wQQcYO9_NprGI1eqg.crl (hash: e0LHUHmVc8hNALIcxxMb30eNlTuWzeikVooMMYWyh1g=)
                          2: 3B83B2F4E30611EFA4B67C52C4F9AE02.roa (hash: FYt2RufvdZwSZ5zQDPicr3Fxe0XZIP7npmhW3SH2a8Y=)
                          3: 5A5E75E2E30611EFAD52D552C4F9AE02.roa (hash: nu5dbwOLlZ13YTkUDnySdOEtRFAsDLmzMv0XGB5W4wE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl
                          rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:26:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 351 (0x15f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91423C1, serialNumber=4153BA499A44E7EC1041C60EF7F369AC62357AA8
        Validity
            Not Before: Aug 23 04:26:14 2025 GMT
            Not After : Aug 30 04:26:14 2025 GMT
        Subject: CN=68a942e7-1ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:27:c0:2f:10:9f:a2:3e:c5:e5:c2:9e:16:96:
                    9f:35:a0:50:2b:1b:29:da:6c:70:51:40:9c:c3:41:
                    40:f2:0c:8f:db:c0:95:5b:fa:1b:98:c5:69:ae:19:
                    03:d5:34:14:ee:86:c6:bb:63:f3:b1:ef:25:d4:90:
                    1d:8f:59:e9:05:55:e8:d5:2a:22:c2:09:20:a8:e8:
                    ed:e1:ff:6d:55:01:9d:a3:76:28:5c:32:a9:9c:f3:
                    2d:33:38:07:af:2e:e9:84:06:40:5b:e0:8c:27:10:
                    a1:45:6a:8d:9d:0b:d6:56:61:62:ce:fd:22:4a:bb:
                    30:7b:8d:bf:cf:dc:be:97:08:83:da:30:6d:7d:e7:
                    86:aa:6e:73:44:b0:cf:10:29:df:1b:17:09:e6:35:
                    0f:9b:e1:99:47:19:f6:53:b1:a7:95:79:9e:2f:8b:
                    ad:55:34:c6:1b:f0:e4:b3:62:4a:f1:28:dd:a2:3d:
                    a8:b9:aa:66:de:c5:50:91:5e:e8:95:b0:3b:7f:23:
                    2e:b6:bd:5a:93:8e:a0:6c:0c:82:2d:2c:f3:b6:93:
                    2d:b8:11:81:53:6e:a2:d8:0d:79:1c:0c:27:54:1a:
                    53:8d:01:a5:dd:0c:15:c6:62:76:0a:34:50:b2:81:
                    cb:8f:f3:42:ca:d5:96:5f:d9:75:38:70:d5:48:95:
                    f6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:48:36:1A:38:87:C4:BD:98:A8:37:CF:A2:2C:86:BE:67:FB:1A:F3
            X509v3 Authority Key Identifier:
                keyid:41:53:BA:49:9A:44:E7:EC:10:41:C6:0E:F7:F3:69:AC:62:35:7A:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QVO6SZpE5-wQQcYO9_NprGI1eqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91423C1/0E0DFA988CCF11EE96F4E65AC4F9AE02/QVO6SZpE5-wQQcYO9_NprGI1eqg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:84:45:3d:86:73:63:15:f4:b1:ae:36:e6:5b:9e:a3:46:a5:
         8c:8c:88:27:6a:90:3b:6b:38:fc:67:b8:c8:e6:f5:1b:33:c2:
         0a:da:bf:63:e1:9b:19:5a:b7:a0:53:a6:9b:14:e2:ee:9c:1d:
         1d:a4:fe:6c:2f:41:47:4b:6c:d0:94:5f:07:1c:b5:37:d3:30:
         63:e6:de:b4:46:4f:ad:e7:f6:c6:a1:e1:33:bb:9a:cc:5e:47:
         e6:6e:cb:18:13:2a:db:17:bd:36:dd:d6:82:54:7c:08:a2:8a:
         d0:57:57:fd:2b:34:72:2f:f7:aa:69:85:6c:12:11:49:de:e3:
         8d:7b:b9:ef:97:a1:2a:81:02:be:86:ea:df:91:cc:de:10:43:
         ed:a7:6d:6b:e9:d4:5e:0d:7e:0a:28:bb:c0:01:03:f8:e2:b3:
         8e:a0:0f:67:67:8c:eb:3d:2c:ce:a6:48:4c:bb:e5:1a:2c:a0:
         66:65:70:37:d3:80:fd:09:b0:ed:cc:67:6d:3a:32:49:5b:ac:
         aa:97:7f:50:90:49:63:cd:3e:2d:23:3a:b0:9d:47:cf:b7:f6:
         a8:3b:db:ad:60:ac:35:02:9c:b8:b9:a9:7a:47:14:c5:31:a4:
         b1:e0:b4:de:52:26:e8:55:f1:50:59:d6:b7:86:c4:f5:89:7f:
         b7:37:70:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIzQzExMTAvBgNVBAUTKDQxNTNCQTQ5OUE0NEU3RUMxMDQxQzYwRUY3RjM2OUFD
NjIzNTdBQTgwHhcNMjUwODIzMDQyNjE0WhcNMjUwODMwMDQyNjE0WjAYMRYwFAYD
VQQDEw02OGE5NDJlNy0xZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4ifALxCfoj7F5cKeFpafNaBQKxsp2mxwUUCcw0FA8gyP28CVW/obmMVprhkD
1TQU7obGu2Pzse8l1JAdj1npBVXo1SoiwgkgqOjt4f9tVQGdo3YoXDKpnPMtMzgH
ry7phAZAW+CMJxChRWqNnQvWVmFizv0iSrswe42/z9y+lwiD2jBtfeeGqm5zRLDP
ECnfGxcJ5jUPm+GZRxn2U7GnlXmeL4utVTTGG/Dks2JK8Sjdoj2ouapm3sVQkV7o
lbA7fyMutr1ak46gbAyCLSzztpMtuBGBU26i2A15HAwnVBpTjQGl3QwVxmJ2CjRQ
soHLj/NCytWWX9l1OHDVSJX2zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlINho4
h8S9mKg3z6Ishr5n+xrzMB8GA1UdIwQYMBaAFEFTukmaROfsEEHGDvfzaaxiNXqo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjNDMS8wRTBERkE5ODhD
Q0YxMUVFOTZGNEU2NUFDNEY5QUUwMi9RVk82U1pwRTUtd1FRY1lPOV9OcHJHSTFl
cWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FWTzZTWnBFNS13UVFjWU85X05wckdJMWVxZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjNDMS8wRTBERkE5ODhDQ0YxMUVFOTZGNEU2NUFDNEY5QUUwMi9RVk82U1pwRTUt
d1FRY1lPOV9OcHJHSTFlcWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqhEU9hnNjFfSxrjbmW56jRqWMjIgnapA7azj8Z7jI5vUbM8IK2r9j
4ZsZWregU6abFOLunB0dpP5sL0FHS2zQlF8HHLU30zBj5t60Rk+t5/bGoeEzu5rM
XkfmbssYEyrbF7023daCVHwIoorQV1f9KzRyL/eqaYVsEhFJ3uONe7nvl6EqgQK+
hurfkczeEEPtp21r6dReDX4KKLvAAQP44rOOoA9nZ4zrPSzOpkhMu+UaLKBmZXA3
04D9CbDtzGdtOjJJW6yql39QkEljzT4tIzqwnUfPt/aoO9utYKw1Apy4ual6RxTF
MaSx4LTeUiboVfFQWda3hsT1iX+3N3BL
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:40:13 2025 by rpki-client