Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
File:                     DprNgHEUtY9xipwrhZUmJebbK9E.mft (raw, json)
Hash identifier:          wEYMxidYPVCWGceGcCACapl82W6bBvpvvQZhOq1Kys8=
Subject key identifier:   98:B3:30:13:E2:A5:92:35:F6:B4:FE:E1:FA:FB:82:77:05:9F:29:64
Authority key identifier: 0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1
Certificate issuer:       /CN=A9146D7A/serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
Manifest number:          012F
Signing time:             Sat 23 Aug 2025 04:45:22 +0000
Manifest this update:     Sat 23 Aug 2025 04:45:22 +0000
Manifest next update:     Sat 30 Aug 2025 04:45:22 +0000
Files and hashes:         1: DprNgHEUtY9xipwrhZUmJebbK9E.crl (hash: 1/EQXP4Br6YlWv/Yt4aoVzIJ6cvaHPrI9ENC+Ff/VoA=)
                          2: E3AB124AB5C811EE8795EB6FC4F9AE02.roa (hash: aM0ebxOeAp/0tw2kKItKBwN7ixtJh2EMTHdvNuXJzzw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl
                          rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:45:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146D7A, serialNumber=0E9ACD807114B58F718A9C2B85952625E6DB2BD1
        Validity
            Not Before: Aug 23 04:45:22 2025 GMT
            Not After : Aug 30 04:45:22 2025 GMT
        Subject: CN=68a94762-c575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e6:6c:73:00:d5:05:6a:4e:fe:2d:25:e3:8c:
                    2f:81:c7:c4:25:a6:49:1d:b5:14:87:48:ee:38:91:
                    31:70:0a:72:57:94:0b:e2:6c:87:85:ce:1a:93:2f:
                    78:12:eb:7e:65:4c:d1:ea:63:2d:82:48:61:11:a0:
                    80:a0:ea:12:5d:9d:2e:c3:2a:8a:69:15:9b:51:51:
                    0b:ef:de:de:89:6d:c3:a3:e8:98:81:f3:6d:0c:15:
                    f4:e3:16:72:78:93:6c:e3:ae:e7:b8:45:c8:c3:7a:
                    53:68:6a:5f:04:23:e2:83:77:d0:55:13:b8:95:21:
                    cd:09:bf:ce:a6:70:d6:78:59:b8:f8:d9:37:d7:cf:
                    8d:73:41:cd:b8:c1:f5:5e:da:31:e6:dd:23:3d:e5:
                    6a:97:86:85:5f:e1:22:39:37:b6:6e:04:7a:76:cd:
                    7b:a4:8a:3e:03:d0:8c:24:4b:36:db:2a:97:11:bc:
                    f6:45:bb:da:e5:e1:48:99:b6:f3:24:30:9c:f1:05:
                    d6:29:22:3a:24:18:06:ca:00:05:33:7a:d1:6d:34:
                    4f:0c:2a:e4:47:9e:04:a7:34:6d:cc:e2:fe:f8:e9:
                    48:b9:00:2d:e5:e2:d2:00:aa:1b:14:86:a1:df:a9:
                    40:2e:f7:44:fb:1d:d8:03:a4:01:28:8c:47:0b:43:
                    a7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B3:30:13:E2:A5:92:35:F6:B4:FE:E1:FA:FB:82:77:05:9F:29:64
            X509v3 Authority Key Identifier:
                keyid:0E:9A:CD:80:71:14:B5:8F:71:8A:9C:2B:85:95:26:25:E6:DB:2B:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DprNgHEUtY9xipwrhZUmJebbK9E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146D7A/93D24F4AB5C811EEB4A24A6FC4F9AE02/DprNgHEUtY9xipwrhZUmJebbK9E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a7:bc:52:9f:cd:96:13:82:f7:a4:c5:83:b5:42:49:ae:fe:
         61:e8:ff:76:41:bb:ef:e5:2b:ba:2c:a3:cb:90:c4:91:98:57:
         5c:f7:bf:5e:98:2c:79:97:47:1f:3c:e5:f6:fd:87:fd:19:e9:
         88:3d:52:9c:f9:9f:b4:e7:f1:8c:43:03:16:22:6c:21:e4:c5:
         a6:db:15:ff:62:c5:2f:a8:81:f3:8b:d7:db:6b:db:99:05:e9:
         c0:ed:80:93:d4:97:2c:a0:b8:d6:34:30:67:ea:04:02:83:12:
         65:ce:30:5f:be:df:e4:6d:a6:39:00:7f:5e:d0:af:33:7f:36:
         08:52:21:28:c4:0c:ad:bf:ce:96:9c:8a:6f:d0:ba:67:49:17:
         3c:be:62:91:be:91:8f:3a:27:fb:06:a3:0c:af:15:01:57:f2:
         0f:88:53:da:a8:bb:cc:ba:e1:cb:8b:38:13:94:e3:c9:2f:8f:
         47:13:3d:75:6a:9e:8d:79:72:5e:08:84:06:a6:87:30:5d:36:
         ed:7c:df:ef:60:7d:6c:b1:a4:56:40:db:eb:6b:81:5f:d1:ff:
         01:fb:dc:bc:83:6c:67:bb:7e:c9:a3:b8:ff:d8:b4:a9:a0:a2:
         50:f8:42:8a:c1:15:19:7b:dc:e5:7b:de:cf:e8:d6:fa:4f:1b:
         e3:e0:99:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICATIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZEN0ExMTAvBgNVBAUTKDBFOUFDRDgwNzExNEI1OEY3MThBOUMyQjg1OTUyNjI1
RTZEQjJCRDEwHhcNMjUwODIzMDQ0NTIyWhcNMjUwODMwMDQ0NTIyWjAYMRYwFAYD
VQQDEw02OGE5NDc2Mi1jNTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4OZscwDVBWpO/i0l44wvgcfEJaZJHbUUh0juOJExcApyV5QL4myHhc4aky94
Eut+ZUzR6mMtgkhhEaCAoOoSXZ0uwyqKaRWbUVEL797eiW3Do+iYgfNtDBX04xZy
eJNs467nuEXIw3pTaGpfBCPig3fQVRO4lSHNCb/OpnDWeFm4+Nk318+Nc0HNuMH1
Xtox5t0jPeVql4aFX+EiOTe2bgR6ds17pIo+A9CMJEs22yqXEbz2Rbva5eFImbbz
JDCc8QXWKSI6JBgGygAFM3rRbTRPDCrkR54EpzRtzOL++OlIuQAt5eLSAKobFIah
36lALvdE+x3YA6QBKIxHC0OnMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJizMBPi
pZI19rT+4fr7gncFnylkMB8GA1UdIwQYMBaAFA6azYBxFLWPcYqcK4WVJiXm2yvR
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkQ3QS85M0QyNEY0QUI1
QzgxMUVFQjRBMjRBNkZDNEY5QUUwMi9EcHJOZ0hFVXRZOXhpcHdyaFpVbUplYmJL
OUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Rwck5nSEVVdFk5eGlwd3JoWlVtSmViYks5RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkQ3QS85M0QyNEY0QUI1QzgxMUVFQjRBMjRBNkZDNEY5QUUwMi9EcHJOZ0hFVXRZ
OXhpcHdyaFpVbUplYmJLOUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQArp7xSn82WE4L3pMWDtUJJrv5h6P92Qbvv5Su6LKPLkMSRmFdc979e
mCx5l0cfPOX2/Yf9GemIPVKc+Z+05/GMQwMWImwh5MWm2xX/YsUvqIHzi9fba9uZ
BenA7YCT1JcsoLjWNDBn6gQCgxJlzjBfvt/kbaY5AH9e0K8zfzYIUiEoxAytv86W
nIpv0LpnSRc8vmKRvpGPOif7BqMMrxUBV/IPiFPaqLvMuuHLizgTlOPJL49HEz11
ap6NeXJeCIQGpocwXTbtfN/vYH1ssaRWQNvra4Ff0f8B+9y8g2xnu37Jo7j/2LSp
oKJQ+EKKwRUZe9zle97P6Nb6Txvj4JkA
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:35:33 2025 by rpki-client