Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
File:                     zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json)
Hash identifier:          eDasvo2ZoouPzs6qCMyooF0z2R5baZIwe0urfm3mBTU=
Subject key identifier:   21:CF:13:B9:ED:BE:C1:41:31:48:3A:83:55:30:1B:59:4D:86:37:04
Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
Certificate issuer:       /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Certificate serial:       14E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
Manifest number:          14C6
Signing time:             Fri 22 Aug 2025 16:59:27 +0000
Manifest this update:     Fri 22 Aug 2025 16:59:26 +0000
Manifest next update:     Fri 29 Aug 2025 16:59:26 +0000
Files and hashes:         1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: fRyRAZScxFFc5mBkR0i6GNP1aIrIdrC+uvvuYQNPk0U=)
                          2: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: UtrqO+yyN3jQsZkVGkE+EUMbuUP0oNyEiC15gg1DC58=)
                          3: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: MomDGDWZ7/59k4xIjitSMBPT+iM+rJRkaviOBJD4QO4=)
                          4: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: xOWh/5c3MDcOPKKPOs5E2JDhcK3EitSd5z0mZVQAmn4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
                          rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 16:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5351 (0x14e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
        Validity
            Not Before: Aug 22 16:59:26 2025 GMT
            Not After : Aug 29 16:59:26 2025 GMT
        Subject: CN=68a8a1ee-0172
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:4d:f0:0d:8e:b5:82:41:5d:11:03:93:ec:
                    ec:ec:1f:5a:70:6b:60:ef:58:10:2d:21:f5:c0:52:
                    90:73:cd:8a:0b:35:54:98:e4:bb:68:92:2f:3c:82:
                    2c:04:ff:18:57:a9:79:34:e3:02:40:87:de:81:28:
                    c8:e2:f0:5a:e1:fb:ea:aa:fb:78:eb:db:00:bf:2b:
                    4d:e7:3d:98:42:4b:fd:3c:50:bb:2a:8a:94:7e:fe:
                    8f:98:96:e6:fc:c4:2b:f7:c6:07:62:eb:0f:3c:98:
                    19:aa:a8:95:a5:02:8a:8c:3a:80:a3:81:fd:b1:b3:
                    94:2a:f9:47:aa:69:a6:f1:02:49:42:50:d2:27:80:
                    30:c8:2f:7f:44:ab:a1:9c:89:31:f6:b9:10:e7:79:
                    34:0c:76:61:ad:bd:27:ac:72:5f:cd:7f:4a:6a:3b:
                    da:d4:6a:14:03:7e:50:62:8b:05:91:6e:b4:51:37:
                    4c:ff:78:2d:9a:9e:a2:f9:cd:de:d9:36:44:82:54:
                    f6:b1:32:3f:ec:9f:95:d8:76:0e:ab:da:b8:3e:fe:
                    28:8f:82:e9:ed:ea:81:47:9f:64:97:0b:c4:4f:64:
                    18:c4:ec:ff:6f:64:e9:a9:d2:7a:29:f3:13:8f:7d:
                    d2:75:4b:81:d4:3f:f2:53:53:f5:e7:78:15:e4:75:
                    f6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CF:13:B9:ED:BE:C1:41:31:48:3A:83:55:30:1B:59:4D:86:37:04
            X509v3 Authority Key Identifier:
                keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3e:59:1d:bb:6e:e7:f8:df:49:59:72:ce:b8:4b:de:d4:81:
         ae:2b:8a:da:d5:b5:47:20:5d:70:11:4a:04:dd:ce:9b:ae:97:
         5b:e5:90:c4:93:ea:d2:a5:ce:44:bf:db:d6:59:37:25:ea:17:
         2c:5a:ff:98:5a:1b:ea:3f:ad:e6:34:f0:9c:02:57:96:a6:88:
         d3:f3:19:c0:56:c9:a2:08:9c:62:32:eb:c8:08:d5:f4:62:b7:
         aa:29:70:64:8d:f4:69:e0:63:9c:fe:3d:0f:ea:62:cc:d8:9b:
         a8:33:45:02:bd:6a:58:3c:4d:45:c0:79:3b:b7:20:10:0a:d6:
         96:d5:af:c1:c2:06:48:89:39:ef:51:18:34:77:48:c1:45:ad:
         91:bd:56:96:b7:0c:24:d7:b0:8e:8f:46:bf:59:94:ed:b5:12:
         03:c6:4c:fa:a3:32:25:08:d7:6a:f9:fe:33:b5:1b:71:e6:a3:
         d4:13:ce:cf:45:ae:04:41:0b:19:18:ad:27:f3:74:08:a7:25:
         52:bb:11:d6:9d:f6:28:f0:cf:87:6c:f6:63:41:01:a8:34:ba:
         80:f8:2f:e0:0b:67:5f:ad:4b:71:9d:6a:e2:0f:c5:e0:b9:f5:
         42:86:b9:51:c3:43:6e:1b:96:58:8d:68:b7:08:09:a9:6c:0d:
         df:d4:d3:3e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQ0MzYxMTAvBgNVBAUTKENDNjkyMzFDMUNBMTVCQ0UwMEVFOEQ0NUQzQ0NGRkRF
NDUyRDRCOTIwHhcNMjUwODIyMTY1OTI2WhcNMjUwODI5MTY1OTI2WjAYMRYwFAYD
VQQDEw02OGE4YTFlZS0wMTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAun5N8A2OtYJBXREDk+zs7B9acGtg71gQLSH1wFKQc82KCzVUmOS7aJIvPIIs
BP8YV6l5NOMCQIfegSjI4vBa4fvqqvt469sAvytN5z2YQkv9PFC7KoqUfv6PmJbm
/MQr98YHYusPPJgZqqiVpQKKjDqAo4H9sbOUKvlHqmmm8QJJQlDSJ4AwyC9/RKuh
nIkx9rkQ53k0DHZhrb0nrHJfzX9Kajva1GoUA35QYosFkW60UTdM/3gtmp6i+c3e
2TZEglT2sTI/7J+V2HYOq9q4Pv4oj4Lp7eqBR59klwvET2QYxOz/b2TpqdJ6KfMT
j33SdUuB1D/yU1P153gV5HX2eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHPE7nt
vsFBMUg6g1UwG1lNhjcEMB8GA1UdIwQYMBaAFMxpIxwcoVvOAO6NRdPM/95FLUuS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDQzNi82NDA3RTA2NjY1
RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4NEE3bzFGMDh6XzNrVXRT
NUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pHa2pIQnloVzg0QTdvMUYwOHpfM2tVdFM1SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDQzNi82NDA3RTA2NjY1RTkxMUU4QjUyN0EzMjNDNEY5QUUwMi96R2tqSEJ5aFc4
NEE3bzFGMDh6XzNrVXRTNUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA4Plkdu27n+N9JWXLOuEve1IGuK4ra1bVHIF1wEUoE3c6brpdb5ZDE
k+rSpc5Ev9vWWTcl6hcsWv+YWhvqP63mNPCcAleWpojT8xnAVsmiCJxiMuvICNX0
YreqKXBkjfRp4GOc/j0P6mLM2JuoM0UCvWpYPE1FwHk7tyAQCtaW1a/BwgZIiTnv
URg0d0jBRa2RvVaWtwwk17COj0a/WZTttRIDxkz6ozIlCNdq+f4ztRtx5qPUE87P
Ra4EQQsZGK0n83QIpyVSuxHWnfYo8M+HbPZjQQGoNLqA+C/gC2dfrUtxnWriD8Xg
ufVChrlRw0NuG5ZYjWi3CAmpbA3f1NM+
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:27 2025 by rpki-client