Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File:                     iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier:          WWVWkN4bfo27QNXnj1WqI8BIlPRno1VRgtBD0sB/zzQ=
Subject key identifier:   11:93:F6:27:66:19:15:FB:9C:A1:F5:99:09:1D:88:EC:CE:7E:3F:1E
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer:       /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial:       0FB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number:          0F9C
Signing time:             Fri 22 Aug 2025 17:39:11 +0000
Manifest this update:     Fri 22 Aug 2025 17:39:11 +0000
Manifest next update:     Fri 29 Aug 2025 17:39:11 +0000
Files and hashes:         1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: IbpNHaK4JKHcUVZjq4vU/Isjb2JAOPl+fY7edbE6IsM=)
                          2: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: E66SV6WNRD5ULWCmhiJGOhN+NZfmVirzyRoB4Hy/u4Q=)
                          3: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: i8fQntshSNYD8zDT2wDiHtaQKzGJtDGb0egHvcZuXHs=)
                          4: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: UGdOvww/zqYEiJCbgpSOvpp5LjsG3mU+jjIktHieTx8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
                          rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4018 (0xfb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
        Validity
            Not Before: Aug 22 17:39:11 2025 GMT
            Not After : Aug 29 17:39:11 2025 GMT
        Subject: CN=68a8ab3f-0c91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7f:a2:f4:5f:54:bf:00:27:ab:87:a1:74:f2:
                    32:dc:06:c2:2d:1d:75:77:8a:13:f2:7a:d4:01:51:
                    c6:1a:31:d9:2a:06:47:82:88:e6:dc:9a:6c:17:cd:
                    4d:1e:51:69:b0:41:39:37:fb:cc:52:90:6b:15:2f:
                    d0:fb:70:d5:8f:15:6c:2d:15:68:49:ba:da:01:0c:
                    ba:7f:1e:f9:a1:c5:e9:92:7d:27:fb:ac:cb:f4:e9:
                    ef:b7:0d:54:a8:33:83:63:ee:44:37:44:b9:d0:d6:
                    39:31:60:04:cd:f2:18:43:3f:3b:9a:73:e5:da:9d:
                    66:db:36:d0:29:e2:c4:75:77:51:eb:22:80:e6:a8:
                    48:7c:62:35:60:c4:28:68:cd:b9:0c:59:f8:4a:a2:
                    c8:07:61:62:74:fc:f0:d8:3f:17:72:b0:a4:1b:54:
                    25:af:ed:f7:cc:48:ce:79:e0:35:f3:ca:54:00:f7:
                    21:7a:2e:17:a0:3b:66:97:f2:7b:91:91:33:76:5d:
                    65:73:29:fe:a6:a5:92:ce:44:4f:dd:b1:01:96:43:
                    a7:a5:9b:b0:50:32:8d:67:b6:bd:55:a3:7a:64:ae:
                    1f:b4:62:f0:bb:f9:1f:a4:fd:e2:a8:cb:67:23:53:
                    d5:fd:ae:e6:b9:bf:25:2d:02:f1:a7:f1:0c:4b:7c:
                    91:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:93:F6:27:66:19:15:FB:9C:A1:F5:99:09:1D:88:EC:CE:7E:3F:1E
            X509v3 Authority Key Identifier:
                keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:61:88:d5:b3:81:5f:5a:5c:08:c0:8e:40:6c:7f:59:6f:02:
         b9:d6:b6:4a:15:b5:11:b7:83:a8:f0:29:30:ae:91:63:46:c2:
         8a:b0:05:04:39:bf:6b:43:d0:f2:97:c1:f1:13:09:54:78:c3:
         77:36:6f:54:f3:a9:10:69:cb:63:09:f4:20:8d:9f:af:04:36:
         5c:51:d3:e2:d1:3c:d3:9f:02:74:15:e1:ac:15:38:a4:cb:b8:
         d7:98:ba:3e:68:cf:c4:1a:4d:25:52:4f:19:d2:70:0b:98:be:
         b2:8c:cd:8b:6b:3e:c5:b3:a6:f3:79:b8:33:d6:40:aa:9a:5e:
         ec:04:96:48:80:29:89:91:b0:ef:c8:4e:2d:8f:80:bc:96:f6:
         7b:cf:ce:b8:f0:b0:a4:7a:34:11:0c:20:33:d0:ef:2c:54:70:
         42:dd:67:49:93:2a:a2:90:37:40:c0:15:d6:61:b2:27:69:ab:
         c2:ff:a6:17:8c:8e:5d:9e:ab:da:c4:d0:02:35:45:ad:c8:b0:
         ea:a0:2e:99:38:3e:8b:56:d1:39:04:64:82:8b:49:97:aa:6f:
         9c:f7:81:1d:2d:1a:47:74:96:ff:95:e7:13:e0:69:1b:e0:61:
         af:76:d3:11:e3:f0:be:67:a1:ab:af:4c:87:d3:46:77:71:2a:
         64:1c:62:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD7IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlDRUIxMTAvBgNVBAUTKDg5NURBNjhCQUQ4QTdGOUQzMTc4ODU2QzdCNjJFOUMx
Njg4QjJCNzMwHhcNMjUwODIyMTczOTExWhcNMjUwODI5MTczOTExWjAYMRYwFAYD
VQQDEw02OGE4YWIzZi0wYzkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv3+i9F9UvwAnq4ehdPIy3AbCLR11d4oT8nrUAVHGGjHZKgZHgojm3JpsF81N
HlFpsEE5N/vMUpBrFS/Q+3DVjxVsLRVoSbraAQy6fx75ocXpkn0n+6zL9Onvtw1U
qDODY+5EN0S50NY5MWAEzfIYQz87mnPl2p1m2zbQKeLEdXdR6yKA5qhIfGI1YMQo
aM25DFn4SqLIB2FidPzw2D8XcrCkG1Qlr+33zEjOeeA188pUAPchei4XoDtml/J7
kZEzdl1lcyn+pqWSzkRP3bEBlkOnpZuwUDKNZ7a9VaN6ZK4ftGLwu/kfpP3iqMtn
I1PV/a7mub8lLQLxp/EMS3yR1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBGT9idm
GRX7nKH1mQkdiOzOfj8eMB8GA1UdIwQYMBaAFIldpoutin+dMXiFbHti6cFoiytz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUNFQi83REE1ODNFNDY1
NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1MHhlSVZzZTJMcHdXaUxL
M00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lWMm1pNjJLZjUweGVJVnNlMkxwd1dpTEszTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUNFQi83REE1ODNFNDY1NTYxMUU5ODU4MTBEMzdDNEY5QUUwMi9pVjJtaTYyS2Y1
MHhlSVZzZTJMcHdXaUxLM00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDcYYjVs4FfWlwIwI5AbH9ZbwK51rZKFbURt4Oo8CkwrpFjRsKKsAUE
Ob9rQ9Dyl8HxEwlUeMN3Nm9U86kQactjCfQgjZ+vBDZcUdPi0TzTnwJ0FeGsFTik
y7jXmLo+aM/EGk0lUk8Z0nALmL6yjM2Laz7Fs6bzebgz1kCqml7sBJZIgCmJkbDv
yE4tj4C8lvZ7z8648LCkejQRDCAz0O8sVHBC3WdJkyqikDdAwBXWYbInaavC/6YX
jI5dnqvaxNACNUWtyLDqoC6ZOD6LVtE5BGSCi0mXqm+c94EdLRpHdJb/lecT4Gkb
4GGvdtMR4/C+Z6Grr0yH00Z3cSpkHGL8
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:09:54 2025 by rpki-client