Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
File:                     rEGRrDoak5bnjWEvN026zI8tkbU.mft (raw, json)
Hash identifier:          Vocl2wl2/8RnI84aYNS/pHKGPSRY63fvK2bydvT+htQ=
Subject key identifier:   9C:6C:3D:56:D2:C2:3E:01:EF:F7:56:85:2A:09:EA:91:81:FB:48:0F
Authority key identifier: AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5
Certificate issuer:       /CN=A9169CD3/serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
Certificate serial:       24D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
Manifest number:          24B6
Signing time:             Fri 22 Aug 2025 15:49:43 +0000
Manifest this update:     Fri 22 Aug 2025 15:49:43 +0000
Manifest next update:     Fri 29 Aug 2025 15:49:43 +0000
Files and hashes:         1: rEGRrDoak5bnjWEvN026zI8tkbU.crl (hash: mZxm6ES6iZBCvo46dVLLuRf45vsMJXPc+/N7exE+gmE=)
                          2: 174B2A3441B611F0A03F6C24C4F9AE02.roa (hash: x6GPjwO5sO5Bvm7pWp4Iun3mTm45HGe7z8yRruy5J90=)
                          3: 842CE8807AE311EF91F51E42C4F9AE02.roa (hash: yW1gxtnqZQt1zea/7tYkbc/ydhmgNTTD61RsdDWGpBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl
                          rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:49:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9427 (0x24d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CD3, serialNumber=AC4191AC3A1A9396E78D612F374DBACC8F2D91B5
        Validity
            Not Before: Aug 22 15:49:43 2025 GMT
            Not After : Aug 29 15:49:43 2025 GMT
        Subject: CN=68a89197-7124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:f3:9e:3a:fc:0e:bd:36:05:52:bc:af:13:
                    43:1f:f5:44:0a:77:05:53:17:ab:98:72:41:0d:67:
                    92:f1:99:2a:fa:af:f5:29:c2:4a:30:6c:dc:07:d0:
                    5c:bd:f4:05:60:b4:88:a6:ab:7e:eb:f8:0c:e8:8b:
                    78:bf:af:72:4d:2b:78:20:ee:af:01:8b:c1:82:f8:
                    78:80:00:8a:85:22:92:3e:53:6b:7c:dd:b3:d6:c2:
                    88:fa:80:72:c3:73:64:b7:18:e1:df:22:46:b0:cb:
                    42:f9:f8:8a:ca:ed:e8:d8:5d:3b:44:69:25:a7:e5:
                    6d:2c:98:75:28:67:95:67:e1:5b:a6:5b:9a:ed:15:
                    92:96:09:0e:90:3f:da:d9:c5:5f:1b:4b:27:8a:e2:
                    8b:d7:04:62:78:2c:d9:7a:ca:08:6c:17:45:14:a1:
                    3c:0f:39:57:59:64:6f:f0:ed:3e:42:3c:5e:b7:f9:
                    36:1a:f5:ef:9f:47:ba:0c:4e:8c:a0:39:6e:fa:b2:
                    fc:9e:a3:58:7e:c9:46:a8:93:88:ff:b4:36:18:c5:
                    8c:9f:99:3f:da:07:0c:dc:b3:29:ac:c7:1f:2b:d4:
                    38:59:48:4b:ab:4c:0c:30:d6:12:3f:57:c7:b7:24:
                    dd:28:3d:6b:a6:a8:6c:73:3a:55:dc:a9:3c:e5:da:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:6C:3D:56:D2:C2:3E:01:EF:F7:56:85:2A:09:EA:91:81:FB:48:0F
            X509v3 Authority Key Identifier:
                keyid:AC:41:91:AC:3A:1A:93:96:E7:8D:61:2F:37:4D:BA:CC:8F:2D:91:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rEGRrDoak5bnjWEvN026zI8tkbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CD3/812286D2471111E5A4496335C4F9AE02/rEGRrDoak5bnjWEvN026zI8tkbU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:58:20:91:2d:60:6a:5b:5d:3a:a7:cb:88:77:f9:c2:da:25:
         c2:fa:7a:db:e9:36:33:b2:9c:b5:7c:e2:e3:6c:6c:52:04:f4:
         ff:66:43:79:4b:1a:72:dc:44:ef:be:b4:79:eb:56:54:1f:40:
         6e:f6:06:5f:5d:30:3c:86:e3:ee:de:f5:29:0e:68:b3:5a:5d:
         6b:71:eb:3e:34:5b:1a:ca:a5:63:b6:a7:ff:4e:63:6b:c2:b0:
         4f:db:c0:76:fa:01:36:c2:d6:e1:fe:7c:4a:2b:e6:17:8b:30:
         2c:46:d9:11:4d:c2:49:fe:55:52:1f:81:16:c5:19:db:8e:bd:
         ef:c8:d1:6d:c8:4a:d3:68:dd:f1:78:16:5d:34:7c:60:23:e7:
         b3:c6:77:3a:70:23:64:0d:ca:e9:6b:19:04:22:ed:6a:27:c0:
         6f:15:73:ed:44:bd:80:54:33:3a:d4:6d:b3:15:3c:98:c8:13:
         a7:34:1c:62:05:e8:96:d3:4b:b2:9b:98:b4:dd:d0:d4:8c:af:
         15:37:d6:a2:99:34:99:eb:21:00:08:f3:d5:73:0c:37:9e:03:
         56:bb:f5:66:a0:8b:12:85:04:cc:ae:35:e4:e0:d0:f4:21:e8:
         8e:41:1a:ac:8a:9a:79:0a:ff:ee:ac:04:e4:e7:f7:47:90:1b:
         e5:ad:6e:23
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlDRDMxMTAvBgNVBAUTKEFDNDE5MUFDM0ExQTkzOTZFNzhENjEyRjM3NERCQUND
OEYyRDkxQjUwHhcNMjUwODIyMTU0OTQzWhcNMjUwODI5MTU0OTQzWjAYMRYwFAYD
VQQDEw02OGE4OTE5Ny03MTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAurfznjr8Dr02BVK8rxNDH/VECncFUxermHJBDWeS8Zkq+q/1KcJKMGzcB9Bc
vfQFYLSIpqt+6/gM6It4v69yTSt4IO6vAYvBgvh4gACKhSKSPlNrfN2z1sKI+oBy
w3Nktxjh3yJGsMtC+fiKyu3o2F07RGklp+VtLJh1KGeVZ+Fbplua7RWSlgkOkD/a
2cVfG0sniuKL1wRieCzZesoIbBdFFKE8DzlXWWRv8O0+Qjxet/k2GvXvn0e6DE6M
oDlu+rL8nqNYfslGqJOI/7Q2GMWMn5k/2gcM3LMprMcfK9Q4WUhLq0wMMNYSP1fH
tyTdKD1rpqhsczpV3Kk85dqmQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJxsPVbS
wj4B7/dWhSoJ6pGB+0gPMB8GA1UdIwQYMBaAFKxBkaw6GpOW541hLzdNusyPLZG1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNEMy84MTIyODZEMjQ3
MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1Ym5qV0V2TjAyNnpJOHRr
YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JFR1JyRG9hazVibmpXRXZOMDI2ekk4dGtiVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUNEMy84MTIyODZEMjQ3MTExMUU1QTQ0OTYzMzVDNEY5QUUwMi9yRUdSckRvYWs1
Ym5qV0V2TjAyNnpJOHRrYlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBXWCCRLWBqW106p8uId/nC2iXC+nrb6TYzspy1fOLjbGxSBPT/ZkN5
Sxpy3ETvvrR561ZUH0Bu9gZfXTA8huPu3vUpDmizWl1rces+NFsayqVjtqf/TmNr
wrBP28B2+gE2wtbh/nxKK+YXizAsRtkRTcJJ/lVSH4EWxRnbjr3vyNFtyErTaN3x
eBZdNHxgI+ezxnc6cCNkDcrpaxkEIu1qJ8BvFXPtRL2AVDM61G2zFTyYyBOnNBxi
BeiW00uym5i03dDUjK8VN9aimTSZ6yEACPPVcww3ngNWu/VmoIsShQTMrjXk4ND0
IeiOQRqsipp5Cv/urATk5/dHkBvlrW4j
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:12:28 2025 by rpki-client