Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
File:                     p878FwCk4YRmJQjHgV9-sdASnr4.mft (raw, json)
Hash identifier:          ZAbenhXXgf7wG3FW3Z5c0xNaMvPlW15kkpj5X+G3jzk=
Subject key identifier:   69:CA:2D:27:08:18:8F:B3:9E:66:3F:B7:15:2D:34:28:C1:96:FD:15
Authority key identifier: A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE
Certificate issuer:       /CN=A9152B13/serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
Certificate serial:       EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
Manifest number:          E9
Signing time:             Sat 23 Aug 2025 05:31:49 +0000
Manifest this update:     Sat 23 Aug 2025 05:31:49 +0000
Manifest next update:     Sat 30 Aug 2025 05:31:49 +0000
Files and hashes:         1: p878FwCk4YRmJQjHgV9-sdASnr4.crl (hash: lNlSDvrce/p835xRiailgQBsgHz2KdZMBtFhmoXzZN4=)
                          2: 0BBF212E1EC211EF82A61739C4F9AE02.roa (hash: Jf2arvBq83FoSm5BKtxRrGvm4pEMUSYC+oIeuz2JcN8=)
                          3: 479B58B21EC111EF9258717EC4F9AE02.roa (hash: QIMDScliq15LdkPQsPXmCzkeCzTbM6NI7el8bqF5qD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl
                          rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:31:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152B13, serialNumber=A7CEFC1700A4E184662508C7815F7EB1D0129EBE
        Validity
            Not Before: Aug 23 05:31:49 2025 GMT
            Not After : Aug 30 05:31:49 2025 GMT
        Subject: CN=68a95245-fa84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:c5:0c:b2:43:ed:f2:b0:57:82:15:f7:d4:
                    f5:24:b6:3c:14:e5:6f:e8:91:cc:a0:0b:dc:4a:17:
                    82:d9:8b:ba:b7:ff:4f:d2:35:9c:6a:bb:c2:b2:fb:
                    6b:6c:31:9d:e7:14:75:11:53:25:f9:b7:a2:a5:a9:
                    15:ec:13:cb:a8:1d:c9:21:24:d3:2c:b9:ab:02:44:
                    5f:59:42:44:b7:23:95:81:80:d3:af:9c:c9:75:0b:
                    26:6c:31:1d:14:ba:4a:5e:3b:d4:fb:6d:2a:d6:5c:
                    97:95:c6:90:fb:02:f0:91:d9:61:e2:dd:79:2f:7a:
                    18:f6:e3:5d:f8:0d:e1:af:7a:50:f4:2f:da:ba:f1:
                    35:4a:00:2f:a6:fe:90:8e:53:42:61:a6:48:94:9f:
                    08:23:87:9d:46:b8:6e:55:88:bb:3c:d1:60:e3:65:
                    44:3e:ea:97:da:ef:ed:e4:d0:b2:b7:8a:3d:15:da:
                    e3:61:3a:f7:94:6d:c2:c1:8c:8a:71:42:0b:76:48:
                    98:67:9e:04:36:50:d4:25:73:66:29:1a:0e:c4:c2:
                    00:08:48:5f:9d:31:07:47:c1:07:01:48:f6:d2:5c:
                    fc:fc:b1:d1:39:22:db:35:51:5c:aa:e1:e8:69:09:
                    39:ae:68:4b:3b:d0:f9:63:cf:e7:90:02:52:90:64:
                    8c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CA:2D:27:08:18:8F:B3:9E:66:3F:B7:15:2D:34:28:C1:96:FD:15
            X509v3 Authority Key Identifier:
                keyid:A7:CE:FC:17:00:A4:E1:84:66:25:08:C7:81:5F:7E:B1:D0:12:9E:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p878FwCk4YRmJQjHgV9-sdASnr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152B13/DC483F301EC011EF9629427DC4F9AE02/p878FwCk4YRmJQjHgV9-sdASnr4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:4f:67:13:52:3f:62:90:27:b7:0d:a1:4f:b9:d1:7a:61:50:
         0a:37:38:a6:00:91:27:a7:0a:25:3e:59:1b:45:2f:26:b6:d1:
         e5:e2:83:e5:50:96:d7:d9:48:c6:2e:ca:ba:d2:a1:3a:a0:8d:
         5d:9e:11:8d:7f:cf:a3:0a:c6:e7:3f:d4:dd:f1:f4:c8:3b:5e:
         5c:80:7c:64:bb:be:a6:b7:2d:c6:c4:16:eb:20:0f:26:55:fd:
         c4:77:4b:4e:dc:8f:7c:77:15:0f:8a:5d:99:96:54:1c:4b:3e:
         4b:97:fe:ee:16:e1:a4:51:00:9f:a3:bc:f2:26:0f:c1:e0:dc:
         59:7a:a5:43:78:d3:fb:73:6d:59:07:91:b6:cb:f3:c3:ba:5f:
         89:b5:02:e0:33:2b:f8:45:23:2c:3c:42:22:4b:02:93:ad:88:
         5b:fe:43:e5:c0:14:04:48:49:51:96:a4:3e:50:ba:c1:9e:df:
         60:fb:f2:f6:31:99:c4:7d:6b:12:42:77:6a:29:c3:e6:c7:21:
         fb:d2:d0:9b:2a:22:4c:00:0f:54:f8:24:5a:be:da:3c:40:c9:
         bd:9b:f6:ae:2d:c3:e7:6d:26:be:44:41:f3:8d:36:e8:43:5d:
         9d:19:43:f0:ed:41:99:23:92:41:29:9d:b9:e6:f7:94:fb:ee:
         0b:c3:39:27
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTJCMTMxMTAvBgNVBAUTKEE3Q0VGQzE3MDBBNEUxODQ2NjI1MDhDNzgxNUY3RUIx
RDAxMjlFQkUwHhcNMjUwODIzMDUzMTQ5WhcNMjUwODMwMDUzMTQ5WjAYMRYwFAYD
VQQDEw02OGE5NTI0NS1mYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx+TFDLJD7fKwV4IV99T1JLY8FOVv6JHMoAvcSheC2Yu6t/9P0jWcarvCsvtr
bDGd5xR1EVMl+beipakV7BPLqB3JISTTLLmrAkRfWUJEtyOVgYDTr5zJdQsmbDEd
FLpKXjvU+20q1lyXlcaQ+wLwkdlh4t15L3oY9uNd+A3hr3pQ9C/auvE1SgAvpv6Q
jlNCYaZIlJ8II4edRrhuVYi7PNFg42VEPuqX2u/t5NCyt4o9FdrjYTr3lG3CwYyK
cUILdkiYZ54ENlDUJXNmKRoOxMIACEhfnTEHR8EHAUj20lz8/LHROSLbNVFcquHo
aQk5rmhLO9D5Y8/nkAJSkGSMVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnKLScI
GI+znmY/txUtNCjBlv0VMB8GA1UdIwQYMBaAFKfO/BcApOGEZiUIx4FffrHQEp6+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MkIxMy9EQzQ4M0YzMDFF
QzAxMUVGOTYyOTQyN0RDNEY5QUUwMi9wODc4RndDazRZUm1KUWpIZ1Y5LXNkQVNu
cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3A4NzhGd0NrNFlSbUpRakhnVjktc2RBU25yNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MkIxMy9EQzQ4M0YzMDFFQzAxMUVGOTYyOTQyN0RDNEY5QUUwMi9wODc4RndDazRZ
Um1KUWpIZ1Y5LXNkQVNucjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwT2cTUj9ikCe3DaFPudF6YVAKNzimAJEnpwolPlkbRS8mttHl4oPl
UJbX2UjGLsq60qE6oI1dnhGNf8+jCsbnP9Td8fTIO15cgHxku76mty3GxBbrIA8m
Vf3Ed0tO3I98dxUPil2ZllQcSz5Ll/7uFuGkUQCfo7zyJg/B4NxZeqVDeNP7c21Z
B5G2y/PDul+JtQLgMyv4RSMsPEIiSwKTrYhb/kPlwBQESElRlqQ+ULrBnt9g+/L2
MZnEfWsSQndqKcPmxyH70tCbKiJMAA9U+CRavto8QMm9m/auLcPnbSa+REHzjTbo
Q12dGUPw7UGZI5JBKZ255veU++4Lwzkn
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:22:32 2025 by rpki-client