Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
File:                     Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft (raw, json)
Hash identifier:          nbCzxqBCcEthPF9yNHzw4+FUZN9pGcFZ9EVTjcbyXwc=
Subject key identifier:   F4:E9:17:B6:5A:A5:40:9F:F7:59:38:46:0C:B4:6D:75:A1:AB:D0:D7
Authority key identifier: 26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0
Certificate issuer:       /CN=A9155FAB/serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
Manifest number:          60
Signing time:             Sat 23 Aug 2025 07:22:37 +0000
Manifest this update:     Sat 23 Aug 2025 07:22:37 +0000
Manifest next update:     Sat 30 Aug 2025 07:22:37 +0000
Files and hashes:         1: Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl (hash: +7w/uJiQ/Y8v6eQ93/MWtAlN0yFfNbGNWvKWLR9OmQ8=)
                          2: 4E66D766F5AD11EFA64C671CC4F9AE02.roa (hash: ddGHr0kpolkDLC4jRmYbLqkLIgOm/5JeTXQQ5En7IJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl
                          rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155FAB, serialNumber=26F8BD03C5A2B7AA7175459EA047A88676239EE0
        Validity
            Not Before: Aug 23 07:22:37 2025 GMT
            Not After : Aug 30 07:22:37 2025 GMT
        Subject: CN=68a96c3d-6e74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:60:40:14:d3:1c:e3:97:96:38:bf:b7:7b:59:
                    9e:3b:93:d7:fc:3a:6a:54:88:35:dc:9c:18:6a:10:
                    21:33:bc:2f:c0:af:62:7e:68:b7:a3:54:32:08:87:
                    1e:00:c5:13:ba:8a:91:bc:b4:f7:0b:97:06:fe:8b:
                    fd:9b:66:30:a9:1d:43:81:6c:17:0a:44:49:f9:f8:
                    ed:5e:db:e2:73:a7:4c:59:38:6a:5e:c8:b1:de:d0:
                    d2:9b:a2:6f:83:cc:37:89:03:a6:63:8f:a3:86:09:
                    61:64:a0:b1:71:73:50:f7:d8:fe:9e:50:e8:11:13:
                    79:5c:10:f4:a8:5f:03:2c:1a:17:61:f3:27:46:65:
                    f9:0b:60:22:2b:7d:82:5d:60:e0:dd:e6:67:a5:56:
                    26:70:5b:ba:9b:31:04:fe:5f:a3:e0:0d:6d:16:d1:
                    75:da:e0:ff:a8:c0:a2:bc:21:07:12:dc:b3:25:da:
                    5a:4c:d9:0b:6b:86:5c:a7:79:b8:0d:5d:bf:85:3e:
                    ff:3c:98:f4:f3:64:c4:68:02:43:f9:18:1f:d8:62:
                    88:30:9e:1f:48:71:00:ed:cb:8f:0f:4e:1f:23:41:
                    79:8e:f3:cd:a5:b0:8f:e0:81:de:1c:2a:c7:6d:30:
                    41:5a:29:e3:81:25:47:d5:c8:d2:e8:72:ec:3b:19:
                    a0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E9:17:B6:5A:A5:40:9F:F7:59:38:46:0C:B4:6D:75:A1:AB:D0:D7
            X509v3 Authority Key Identifier:
                keyid:26:F8:BD:03:C5:A2:B7:AA:71:75:45:9E:A0:47:A8:86:76:23:9E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jvi9A8Wit6pxdUWeoEeohnYjnuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155FAB/FA863772F5AC11EFAE40E71BC4F9AE02/Jvi9A8Wit6pxdUWeoEeohnYjnuA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:8c:7a:55:75:8a:ed:d0:f0:b8:f6:e3:02:e1:77:05:e6:91:
         99:17:3a:58:2a:27:b6:36:6d:f5:50:fa:2c:c9:7a:49:77:5d:
         29:55:38:d7:91:c8:a9:6e:e0:bd:5f:ab:70:5c:8b:b5:3a:91:
         ac:39:cc:05:9e:c5:46:8e:ce:5a:42:e5:f6:07:0e:7a:fc:c5:
         de:f4:32:ce:7c:14:4d:b4:dd:b6:e1:da:84:89:30:34:fb:99:
         98:39:32:9d:13:46:32:d7:4c:17:d6:8d:74:93:c6:4a:4e:af:
         48:d9:47:30:b2:28:64:9e:14:76:87:eb:86:a3:33:a8:33:f0:
         93:d1:52:29:af:5c:ec:06:7f:e7:38:d7:a7:99:20:14:9f:e9:
         9d:13:12:48:2e:07:11:66:a1:fc:75:bc:7d:4d:af:01:09:a6:
         73:05:e1:2c:b4:8b:fc:d7:da:8b:77:8f:62:bb:d7:a7:90:b5:
         22:a9:cc:4c:d0:d8:9b:7a:f5:8a:1b:de:b2:47:14:c4:4c:64:
         61:2a:9b:e0:95:e8:c5:fb:85:06:ae:59:f7:b4:0a:90:2c:57:
         46:ad:4a:74:99:53:0a:81:b5:50:2d:82:51:74:33:cd:d8:9e:
         4c:76:42:45:94:05:28:2a:71:8f:b6:1c:ea:d3:5d:b9:e2:16:
         1f:13:e8:e8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NUZBQjExMC8GA1UEBRMoMjZGOEJEMDNDNUEyQjdBQTcxNzU0NTlFQTA0N0E4ODY3
NjIzOUVFMDAeFw0yNTA4MjMwNzIyMzdaFw0yNTA4MzAwNzIyMzdaMBgxFjAUBgNV
BAMTDTY4YTk2YzNkLTZlNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDVYEAU0xzjl5Y4v7d7WZ47k9f8OmpUiDXcnBhqECEzvC/Ar2J+aLejVDIIhx4A
xRO6ipG8tPcLlwb+i/2bZjCpHUOBbBcKREn5+O1e2+Jzp0xZOGpeyLHe0NKbom+D
zDeJA6Zjj6OGCWFkoLFxc1D32P6eUOgRE3lcEPSoXwMsGhdh8ydGZfkLYCIrfYJd
YODd5melViZwW7qbMQT+X6PgDW0W0XXa4P+owKK8IQcS3LMl2lpM2QtrhlynebgN
Xb+FPv88mPTzZMRoAkP5GB/YYogwnh9IcQDty48PTh8jQXmO882lsI/ggd4cKsdt
MEFaKeOBJUfVyNLocuw7GaAxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9OkXtlql
QJ/3WThGDLRtdaGr0NcwHwYDVR0jBBgwFoAUJvi9A8Wit6pxdUWeoEeohnYjnuAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1RkFCL0ZBODYzNzcyRjVB
QzExRUZBRTQwRTcxQkM0RjlBRTAyL0p2aTlBOFdpdDZweGRVV2VvRWVvaG5Zam51
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvSnZpOUE4V2l0NnB4ZFVXZW9FZW9obllqbnVBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1
RkFCL0ZBODYzNzcyRjVBQzExRUZBRTQwRTcxQkM0RjlBRTAyL0p2aTlBOFdpdDZw
eGRVV2VvRWVvaG5Zam51QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADqMelV1iu3Q8Lj24wLhdwXmkZkXOlgqJ7Y2bfVQ+izJekl3XSlVONeR
yKlu4L1fq3Bci7U6kaw5zAWexUaOzlpC5fYHDnr8xd70Ms58FE203bbh2oSJMDT7
mZg5Mp0TRjLXTBfWjXSTxkpOr0jZRzCyKGSeFHaH64ajM6gz8JPRUimvXOwGf+c4
16eZIBSf6Z0TEkguBxFmofx1vH1NrwEJpnMF4Sy0i/zX2ot3j2K716eQtSKpzEzQ
2Jt69Yob3rJHFMRMZGEqm+CV6MX7hQauWfe0CpAsV0atSnSZUwqBtVAtglF0M83Y
nkx2QkWUBSgqcY+2HOrTXbniFh8T6Og=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:30:12 2025 by rpki-client