Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
File:                     83GJVwUMS84UpOw46qzunHQkTE8.mft (raw, json)
Hash identifier:          Cg2E1JKnir9GSwvuaJNuxEgoItmSEBODYC/Q0MA6uhs=
Subject key identifier:   79:F3:57:74:AE:21:B3:4E:D6:2D:CB:D8:56:70:89:45:0A:92:FE:23
Authority key identifier: F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F
Certificate issuer:       /CN=A91426E8/serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
Manifest number:          2D
Signing time:             Sat 23 Aug 2025 07:57:54 +0000
Manifest this update:     Sat 23 Aug 2025 07:57:54 +0000
Manifest next update:     Sat 30 Aug 2025 07:57:54 +0000
Files and hashes:         1: 83GJVwUMS84UpOw46qzunHQkTE8.crl (hash: COsF2t5Y/4VHVfVlUvReuDVAbOheLNj0kQGhW1PP228=)
                          2: F34C44FC3F7511F0A963EE11C4F9AE02.roa (hash: 0lT1AyOiOXe+BKO1a/7QwW0Ghznoxt7Inz7Ksh5dWQc=)
                          3: B240CFC23F8A11F0B3F03A67C4F9AE02.roa (hash: sM8LsbsoEf9GFMasQUHdxFdj0W4Z3+oN5Sb3It4tBgc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl
                          rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:57:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91426E8, serialNumber=F3718957050C4BCE14A4EC38EAACEE9C74244C4F
        Validity
            Not Before: Aug 23 07:57:54 2025 GMT
            Not After : Aug 30 07:57:54 2025 GMT
        Subject: CN=68a97482-4038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:3d:f0:2b:6d:91:f6:77:62:5d:e6:6c:25:02:
                    28:b8:1a:fe:5b:b9:0e:d9:5e:00:24:af:d7:cf:9f:
                    79:e7:82:36:4d:c0:cb:6e:68:49:4a:b8:47:9c:d0:
                    6d:fd:f2:15:ef:ec:46:58:f5:dd:6b:97:45:3a:25:
                    bb:a9:d7:6e:df:2a:95:8d:02:28:43:80:57:a5:8c:
                    4d:fb:6f:b8:a2:8b:49:45:ed:9a:8c:98:8a:b2:f2:
                    70:e3:5c:bf:28:23:cc:f0:59:fb:e5:f9:10:80:b8:
                    92:bc:95:16:93:62:0d:d7:6e:87:b1:bb:c3:60:c2:
                    a7:ea:d5:2e:6b:1d:45:49:9a:5d:12:08:ec:2a:ba:
                    50:74:bf:9b:0a:68:50:c8:ad:11:9f:d5:46:4e:7f:
                    a8:6a:0a:9d:fb:ea:c7:b3:0e:20:44:21:24:57:9e:
                    51:15:b6:a5:c8:5e:c9:ee:d1:9b:7d:9f:ed:b9:ac:
                    46:2a:d0:ba:c8:94:db:de:f0:3b:82:cd:f3:a7:93:
                    a6:44:5f:79:fa:4b:06:c3:31:60:2e:48:47:4c:d2:
                    72:c4:ea:e6:15:55:cb:b2:4c:f4:e2:a8:53:c6:9b:
                    d0:c9:f0:db:37:06:44:a9:e3:39:25:2f:63:8e:c0:
                    f2:28:85:72:71:46:76:1a:3f:7e:39:c0:d1:ca:19:
                    bf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F3:57:74:AE:21:B3:4E:D6:2D:CB:D8:56:70:89:45:0A:92:FE:23
            X509v3 Authority Key Identifier:
                keyid:F3:71:89:57:05:0C:4B:CE:14:A4:EC:38:EA:AC:EE:9C:74:24:4C:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83GJVwUMS84UpOw46qzunHQkTE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91426E8/8D5AA17A3F7511F096232A11C4F9AE02/83GJVwUMS84UpOw46qzunHQkTE8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:29:c3:6c:b7:9a:0a:03:28:30:b9:43:77:04:ae:1d:31:f0:
         98:0f:5d:8b:7c:78:32:a0:b4:48:a2:13:e8:d7:87:1d:6f:5f:
         27:ec:8d:f3:b1:9e:84:ea:f2:93:5f:ef:91:e7:8d:9e:30:4e:
         69:37:47:0e:ea:32:2a:42:45:85:19:2e:21:bf:07:a4:20:a7:
         cb:a9:c6:4f:93:a6:57:34:8f:6e:e7:38:4e:ef:cf:04:d2:59:
         2b:5d:2f:9c:bd:4d:fc:e0:c6:c4:3b:fa:f7:cb:e0:5d:e1:52:
         55:a4:16:4a:33:db:f8:91:f7:a1:14:1b:45:81:6e:dd:df:74:
         fe:0a:ea:2c:f7:62:1b:f3:68:7d:fe:2b:c3:48:0e:56:b2:95:
         ea:89:cd:a8:c2:b4:44:d3:03:92:c0:b7:09:70:01:20:b9:15:
         ef:1c:e7:de:5a:bb:b8:ee:04:0f:25:ce:68:ba:48:ee:91:89:
         87:dc:87:ae:93:be:6f:cf:53:b6:2d:13:c4:13:e6:40:65:0f:
         36:ab:a4:2f:b3:99:46:d8:4b:7c:cc:25:ad:84:3f:43:d9:31:
         4c:e3:c4:d8:a9:64:82:ff:70:0f:fc:64:c9:98:1e:ca:79:26:
         c9:9e:d6:52:1e:b9:40:f0:85:44:fe:a4:3b:93:65:8b:4f:ad:
         c8:f0:55:77
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MjZFODExMC8GA1UEBRMoRjM3MTg5NTcwNTBDNEJDRTE0QTRFQzM4RUFBQ0VFOUM3
NDI0NEM0RjAeFw0yNTA4MjMwNzU3NTRaFw0yNTA4MzAwNzU3NTRaMBgxFjAUBgNV
BAMTDTY4YTk3NDgyLTQwMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDjPfArbZH2d2Jd5mwlAii4Gv5buQ7ZXgAkr9fPn3nngjZNwMtuaElKuEec0G39
8hXv7EZY9d1rl0U6Jbup127fKpWNAihDgFeljE37b7iii0lF7ZqMmIqy8nDjXL8o
I8zwWfvl+RCAuJK8lRaTYg3Xboexu8Ngwqfq1S5rHUVJml0SCOwqulB0v5sKaFDI
rRGf1UZOf6hqCp376sezDiBEISRXnlEVtqXIXsnu0Zt9n+25rEYq0LrIlNve8DuC
zfOnk6ZEX3n6SwbDMWAuSEdM0nLE6uYVVcuyTPTiqFPGm9DJ8Ns3BkSp4zklL2OO
wPIohXJxRnYaP345wNHKGb8NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUefNXdK4h
s07WLcvYVnCJRQqS/iMwHwYDVR0jBBgwFoAU83GJVwUMS84UpOw46qzunHQkTE8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNkU4LzhENUFBMTdBM0Y3
NTExRjA5NjIzMkExMUM0RjlBRTAyLzgzR0pWd1VNUzg0VXBPdzQ2cXp1bkhRa1RF
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvODNHSlZ3VU1TODRVcE93NDZxenVuSFFrVEU4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQy
NkU4LzhENUFBMTdBM0Y3NTExRjA5NjIzMkExMUM0RjlBRTAyLzgzR0pWd1VNUzg0
VXBPdzQ2cXp1bkhRa1RFOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAF4pw2y3mgoDKDC5Q3cErh0x8JgPXYt8eDKgtEiiE+jXhx1vXyfsjfOx
noTq8pNf75HnjZ4wTmk3Rw7qMipCRYUZLiG/B6Qgp8upxk+Tplc0j27nOE7vzwTS
WStdL5y9TfzgxsQ7+vfL4F3hUlWkFkoz2/iR96EUG0WBbt3fdP4K6iz3YhvzaH3+
K8NIDlayleqJzajCtETTA5LAtwlwASC5Fe8c595au7juBA8lzmi6SO6RiYfch66T
vm/PU7YtE8QT5kBlDzarpC+zmUbYS3zMJa2EP0PZMUzjxNipZIL/cA/8ZMmYHsp5
Jsme1lIeuUDwhUT+pDuTZYtPrcjwVXc=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:40:36 2025 by rpki-client