Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
File:                     06m0znk41yolUFSgwIW_eI6wabA.mft (raw, json)
Hash identifier:          MErh3euW4m7l8OxTIE1J9vw6EnEYKGW1690bxQSv6+w=
Subject key identifier:   2C:7B:4F:5E:91:8A:F6:40:AF:38:A6:48:CE:F0:7A:32:20:3C:AD:0C
Authority key identifier: D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0
Certificate issuer:       /CN=A914331D/serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
Certificate serial:       0919
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
Manifest number:          0911
Signing time:             Fri 22 Aug 2025 20:26:20 +0000
Manifest this update:     Fri 22 Aug 2025 20:26:20 +0000
Manifest next update:     Fri 29 Aug 2025 20:26:20 +0000
Files and hashes:         1: 06m0znk41yolUFSgwIW_eI6wabA.crl (hash: CS/t+eV4wdCUmpjhYFR0hyzgEHNxK8l0IRvK6uE0KFI=)
                          2: 425602A0AD2111EA9510AC0DC4F9AE02.roa (hash: eiGSH0P7OA/wuySnx+L4WnNP4YI49fVfK6qem5HgBnk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl
                          rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:26:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2329 (0x919)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914331D, serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
        Validity
            Not Before: Aug 22 20:26:20 2025 GMT
            Not After : Aug 29 20:26:20 2025 GMT
        Subject: CN=68a8d26c-678b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9d:f5:71:ad:b3:f4:77:7d:8f:8e:13:10:e8:
                    f5:fa:65:ba:d7:bb:0a:09:0e:14:db:ab:54:d0:c0:
                    3d:51:6e:e7:ba:2c:d4:fc:9c:71:53:e3:af:d4:bd:
                    59:1b:37:60:6a:00:10:f4:40:dc:50:77:b7:e7:53:
                    cf:56:8f:02:72:72:8b:f0:c9:b7:f5:ad:0d:1d:82:
                    0f:84:e4:7e:15:0b:01:4b:3c:f7:a1:ec:a7:d2:8e:
                    fa:8f:ee:b5:f3:fd:79:46:ad:e7:ed:01:e6:23:76:
                    88:1b:df:92:47:94:6c:b8:dc:31:bd:4d:1e:78:6e:
                    6a:9e:3f:34:a0:c8:26:95:4a:4f:c4:7b:8d:d5:9e:
                    f4:3f:a6:3d:4f:f2:68:ac:6f:77:05:5a:c6:81:e9:
                    81:2c:cf:81:e6:30:72:bf:2d:eb:06:40:19:1c:f9:
                    8b:cb:e1:36:ab:88:64:6c:f3:92:6e:84:86:8a:d6:
                    59:74:9a:db:b5:51:7d:3e:60:43:9c:83:4f:be:bc:
                    c0:3b:88:16:2e:b9:39:9d:65:cf:0f:76:1f:ed:ce:
                    9e:05:ff:b2:70:55:fb:98:4d:4c:d2:36:40:2c:c8:
                    8e:87:87:49:48:69:80:68:1a:c8:8d:cd:2a:b1:74:
                    15:56:41:5d:34:8c:b7:01:7f:19:58:09:22:2a:ab:
                    66:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7B:4F:5E:91:8A:F6:40:AF:38:A6:48:CE:F0:7A:32:20:3C:AD:0C
            X509v3 Authority Key Identifier:
                keyid:D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b4:a4:cc:7a:b7:14:80:6e:69:b7:01:94:d3:8c:fa:ea:4e:
         56:9b:67:57:eb:0b:aa:fb:4e:0b:58:7c:ad:ad:9a:26:ce:c2:
         5d:8e:e6:b4:cf:c2:1d:40:ec:4f:c8:d2:b8:6e:12:b4:72:f1:
         c2:bd:a2:c2:0e:85:7d:f4:df:5e:84:45:83:e6:46:00:1b:59:
         58:2a:9c:b7:8f:52:df:16:e6:9c:40:ec:3c:d5:6a:21:b6:45:
         96:fa:92:f2:dc:83:25:a4:da:55:52:89:52:e4:a7:d0:c1:53:
         ea:9a:f5:c3:ca:6d:b8:64:5d:a5:9d:8a:c1:88:3b:a6:76:46:
         d7:21:68:8d:f7:19:bd:b2:82:41:31:66:3a:2a:28:87:6f:61:
         42:14:d7:2b:1b:b7:ff:b8:7d:63:39:9c:e6:99:d4:02:77:c5:
         1e:bf:00:c4:5b:f2:bf:10:75:70:7d:de:0d:39:e5:16:94:81:
         b4:ef:3e:78:99:a7:29:18:79:97:c8:4b:5d:b2:d8:43:15:ba:
         d7:dc:96:87:7b:e8:e1:dc:fa:d7:ec:a0:1c:ab:6c:99:13:f9:
         06:6c:2c:7f:f2:65:4e:21:31:bc:68:d2:78:59:7e:02:a2:34:
         4b:8e:f5:00:47:d6:8d:f3:7c:ec:60:ef:e4:73:5a:27:28:e2:
         d8:b5:b9:4d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCRkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMzMUQxMTAvBgNVBAUTKEQzQTlCNENFNzkzOEQ3MkEyNTUwNTRBMEMwODVCRjc4
OEVCMDY5QjAwHhcNMjUwODIyMjAyNjIwWhcNMjUwODI5MjAyNjIwWjAYMRYwFAYD
VQQDEw02OGE4ZDI2Yy02NzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Z31ca2z9Hd9j44TEOj1+mW617sKCQ4U26tU0MA9UW7nuizU/JxxU+Ov1L1Z
GzdgagAQ9EDcUHe351PPVo8CcnKL8Mm39a0NHYIPhOR+FQsBSzz3oeyn0o76j+61
8/15Rq3n7QHmI3aIG9+SR5RsuNwxvU0eeG5qnj80oMgmlUpPxHuN1Z70P6Y9T/Jo
rG93BVrGgemBLM+B5jByvy3rBkAZHPmLy+E2q4hkbPOSboSGitZZdJrbtVF9PmBD
nINPvrzAO4gWLrk5nWXPD3Yf7c6eBf+ycFX7mE1M0jZALMiOh4dJSGmAaBrIjc0q
sXQVVkFdNIy3AX8ZWAkiKqtmswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCx7T16R
ivZArzimSM7wejIgPK0MMB8GA1UdIwQYMBaAFNOptM55ONcqJVBUoMCFv3iOsGmw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMxRC80QjQ1QkZFOEFE
MUUxMUVBOTRDN0U1ODFDNEY5QUUwMi8wNm0wem5rNDF5b2xVRlNnd0lXX2VJNndh
YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA2bTB6bms0MXlvbFVGU2d3SVdfZUk2d2FiQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzMxRC80QjQ1QkZFOEFEMUUxMUVBOTRDN0U1ODFDNEY5QUUwMi8wNm0wem5rNDF5
b2xVRlNnd0lXX2VJNndhYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBVtKTMercUgG5ptwGU04z66k5Wm2dX6wuq+04LWHytrZomzsJdjua0
z8IdQOxPyNK4bhK0cvHCvaLCDoV99N9ehEWD5kYAG1lYKpy3j1LfFuacQOw81Woh
tkWW+pLy3IMlpNpVUolS5KfQwVPqmvXDym24ZF2lnYrBiDumdkbXIWiN9xm9soJB
MWY6KiiHb2FCFNcrG7f/uH1jOZzmmdQCd8UevwDEW/K/EHVwfd4NOeUWlIG07z54
macpGHmXyEtdsthDFbrX3JaHe+jh3PrX7KAcq2yZE/kGbCx/8mVOITG8aNJ4WX4C
ojRLjvUAR9aN83zsYO/kc1onKOLYtblN
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:51 2025 by rpki-client