Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
File:                     4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json)
Hash identifier:          8EyTTtBGXxoh/LJ4VlZMRdLv10VcAxSxo17FluI7IPg=
Subject key identifier:   7C:83:BC:84:06:AF:45:B3:33:D3:3E:F4:07:A5:6F:B3:A7:DC:DD:7B
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Certificate issuer:       /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial:       1324
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
Manifest number:          12A6
Signing time:             Wed 02 Jul 2025 17:17:48 +0000
Manifest this update:     Wed 02 Jul 2025 17:17:48 +0000
Manifest next update:     Wed 09 Jul 2025 17:17:48 +0000
Files and hashes:         1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: IBzj7SvPFajUnBojtnDvum28jSs/zquQqojBMePwNWU=)
                          2: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: jk5NfHi6Ak10G3qvwwRLBuA+9+MuEQTJVNCIOpp4ijc=)
                          3: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: o0TBqHxczgW2iXEBGTx5nw86Q8zs7jfB/2ZiH2tcXBM=)
                          4: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: J5LxjosxnnfdXaMAoaZ/PL1BfkizkN1e40crDyxzXgM=)
                          5: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: GdNQEvmzlHfA6Ec8mmP8z6x+jIWG7iAnHlvJMuf8oD8=)
                          6: F6EBC724B24211EF99C46E64C4F9AE02.roa (hash: q2Nqb/hrcV90WNVexwR/NHfj/Q0Tv7rC0yL9DHC6X3M=)
                          7: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: 08uSCXwlwYJnGMem9e+DAMnS4EN8A9/G3dvb9XlzVbk=)
                          8: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: 21MmIK/xKiS7JETWE4m4JFsmki6dx7l2EGE0grkpOo4=)
                          9: C2E189AC7F8C11EF94FCB676C4F9AE02.roa (hash: RAc63GKSag+ebIvPIiKjuswG8wAgmCrcqifdzue1EA8=)
                          10: FDB29514452511E98F23AE4FC4F9AE02.roa (hash: pyXuQQMaaHpRKrd64JzrpDvcZINK8BGOr87BtX8mKCw=)
                          11: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: duhPOulpnnqLJOw021zARLEkW5qMCDlozjaUuWOU1CE=)
                          12: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: RBZSewamTngEQkgjLa0OkH4nQrMAppxSjX91nS2Wpzo=)
                          13: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: PiSgVIn+A3YVcVJ8J1LY1Q9+m55+zt9vsCjTvJtZIKc=)
                          14: 0038D872072E11EB8914E540C4F9AE02.roa (hash: bM9HkA9Kov8pVlsp7/+B8Lhib1zUTj1baRTYw1iNq78=)
                          15: D8E0EC82927711E985E0423AC4F9AE02.roa (hash: +fJoTern1FEL3hWeQl1ij5UIzJGzXQGhkR014UlHjWU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
                          rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4900 (0x1324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
        Validity
            Not Before: Jul  2 17:17:48 2025 GMT
            Not After : Jul  9 17:17:48 2025 GMT
        Subject: CN=686569bc-2420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:49:4c:17:5b:06:c0:4d:00:97:54:c3:39:0d:
                    a8:f7:32:d9:21:06:7c:de:2c:bd:de:b6:c7:71:bb:
                    f9:ae:53:54:f9:03:ef:c1:44:07:44:98:31:73:ce:
                    dd:01:2f:c2:d2:15:19:81:84:ed:fe:60:21:37:c4:
                    55:27:58:50:61:0b:f4:8d:c0:79:9b:aa:2f:85:5e:
                    89:e6:47:72:4f:c7:5e:14:20:c4:5a:6d:f0:bc:81:
                    fc:e6:05:ba:06:23:4d:ee:61:0a:c5:e8:fe:dd:b4:
                    71:ab:5f:39:1a:48:89:28:66:e9:4c:fe:d3:b3:f7:
                    d6:66:35:3c:7a:d7:bc:4e:d6:51:c0:e3:99:3f:f7:
                    0f:b7:4e:cc:d3:bb:63:c6:18:9c:f8:41:96:8e:bf:
                    0e:62:8c:da:4f:b5:45:18:f4:00:6b:8f:09:c3:46:
                    ae:ad:4f:b1:98:dc:73:b2:6b:42:e7:45:83:7d:88:
                    ce:59:7a:0d:00:d0:74:22:5b:44:fc:30:b6:f3:d9:
                    0d:eb:c5:64:36:bf:bb:e8:82:b7:fd:23:75:ad:9d:
                    cf:2e:d8:3b:28:66:eb:90:c2:26:ad:b5:37:74:0a:
                    34:fb:db:36:a5:3a:79:4b:fb:fe:e1:68:ab:92:61:
                    4f:96:5e:f7:c7:9c:4f:0e:90:eb:6c:ed:76:e2:30:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:83:BC:84:06:AF:45:B3:33:D3:3E:F4:07:A5:6F:B3:A7:DC:DD:7B
            X509v3 Authority Key Identifier:
                keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:27:8d:3a:12:45:43:ca:72:9b:fe:36:05:e8:20:11:0f:
         46:ca:1a:d5:9b:58:70:01:c1:e2:dc:c2:89:ce:df:7d:2b:3e:
         4f:0e:bb:9b:0a:69:91:5e:3f:7e:ee:d0:3c:e3:0b:4b:26:e1:
         ce:b7:02:9d:42:d5:e5:c2:a7:27:af:69:a6:f4:24:65:77:9d:
         49:03:f9:64:36:8b:e8:39:22:d9:85:bb:1b:86:95:bb:a5:aa:
         c2:0e:bf:8a:0b:11:13:54:12:f5:d4:b4:34:29:7b:06:fa:85:
         0f:da:84:4e:6c:5e:b2:2d:47:40:2b:b3:d2:f5:79:de:9d:8e:
         6a:cc:91:74:92:41:04:36:4e:a6:82:9f:34:79:82:c2:9c:49:
         48:65:3c:e9:b1:40:1f:17:1a:d2:75:aa:b7:b4:18:81:11:34:
         0d:64:26:19:11:88:1d:7a:91:1b:ad:03:80:c2:6b:0b:6c:1a:
         43:71:eb:9b:a4:3f:39:56:32:cf:16:57:7d:17:68:5b:f4:4d:
         61:36:70:1f:73:b7:05:79:f0:f8:43:d6:f0:7e:6b:45:96:37:
         1b:71:0d:4d:e1:9b:66:d5:0a:37:8b:9d:dd:a0:d4:5f:c9:13:
         8d:bd:1a:87:a9:53:8d:29:94:4d:1a:b8:91:02:87:18:df:8d:
         da:a2:f3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:05:58 2025 by rpki-client