Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
File:                     V2eQJEzCknXBEjVv9iDyYg19YV4.mft (raw, json)
Hash identifier:          F5WNZbZntIIJvNUAgkzKChu+Ro9V9EFy7xliawb2SnQ=
Subject key identifier:   9A:D5:67:37:34:D8:24:08:4F:38:EF:E5:4B:2B:FC:82:12:DD:B3:5D
Authority key identifier: 57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E
Certificate issuer:       /CN=A916AC30/serialNumber=576790244CC29275C112356FF620F2620D7D615E
Certificate serial:       BF
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
Manifest number:          A8
Signing time:             Tue 01 Jul 2025 07:20:16 +0000
Manifest this update:     Tue 01 Jul 2025 07:20:15 +0000
Manifest next update:     Tue 08 Jul 2025 07:20:15 +0000
Files and hashes:         1: V2eQJEzCknXBEjVv9iDyYg19YV4.crl (hash: /dS5hJqBb21PFrzQ3IfuFEonk0/QjQmU6C1oTnPm0Rk=)
                          2: 33A6DBFAD31C11EFA728D52FC4F9AE02.roa (hash: +CoH9vvYQtHpPIw3bxnlYYwu+LY7MUnqgN15NGjmSak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl
                          rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 07:20:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC30, serialNumber=576790244CC29275C112356FF620F2620D7D615E
        Validity
            Not Before: Jul  1 07:20:15 2025 GMT
            Not After : Jul  8 07:20:15 2025 GMT
        Subject: CN=68638c30-a254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:47:ac:6d:d7:48:3d:fd:81:e3:0d:80:28:45:
                    00:de:23:6d:7e:f4:70:30:02:7f:6f:d3:87:c7:2b:
                    30:00:bf:60:f3:f2:d3:20:6b:c2:63:1a:87:34:72:
                    80:51:6c:8a:ec:79:6a:6b:e9:65:6e:b6:86:d2:f8:
                    59:81:78:00:f8:15:24:d4:69:60:15:7b:5a:43:3d:
                    83:17:73:e5:f0:92:3a:21:f2:c7:99:c3:b8:ad:ae:
                    5b:19:f0:b6:3b:11:46:31:2d:85:25:d3:15:2b:1b:
                    d7:d8:4c:91:a3:47:66:10:5a:e9:3a:ea:03:bf:e0:
                    db:c8:ca:90:76:7b:39:58:a1:82:20:4f:a6:9e:bf:
                    be:42:7a:21:54:50:75:c4:06:6e:53:28:cc:f5:39:
                    54:a6:35:4c:3e:08:90:7c:e0:f5:9c:e0:a4:65:b6:
                    57:13:f5:f1:9f:d7:5a:83:fe:bf:56:fe:ae:fc:09:
                    8a:78:c8:fa:dd:a1:f0:7f:ac:be:4a:6d:6a:0f:be:
                    61:45:48:a8:81:2a:9b:21:51:12:62:e3:ba:80:84:
                    a4:bb:b3:49:0d:06:94:7d:71:27:8d:0b:2d:f0:60:
                    58:bb:40:4e:c3:6d:90:94:9b:f8:4d:e1:3f:df:8c:
                    d3:e1:75:4c:3c:23:61:84:ed:db:87:c3:12:e4:e9:
                    f9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D5:67:37:34:D8:24:08:4F:38:EF:E5:4B:2B:FC:82:12:DD:B3:5D
            X509v3 Authority Key Identifier:
                keyid:57:67:90:24:4C:C2:92:75:C1:12:35:6F:F6:20:F2:62:0D:7D:61:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/V2eQJEzCknXBEjVv9iDyYg19YV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC30/6BC4CDFE8C6211EF99464085C4F9AE02/V2eQJEzCknXBEjVv9iDyYg19YV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:d7:4b:cd:0e:c6:41:e6:2c:f7:cf:05:a7:b9:d7:c5:a6:52:
         a2:a3:7b:da:0c:8b:06:d8:ff:66:52:cb:1f:5f:09:82:a7:a7:
         b8:22:b5:f5:75:1d:2e:bb:ef:3a:d0:70:a7:7c:1a:63:ed:92:
         47:8f:8d:02:13:99:04:95:13:c3:42:d8:22:5c:01:1f:45:1d:
         63:5e:2f:bc:59:df:03:87:99:a6:af:10:39:96:91:25:59:b4:
         d6:2a:d5:96:47:8d:2d:99:c5:cf:55:d4:95:b1:8a:5d:ec:46:
         08:86:3d:fa:ec:7b:eb:9d:8d:3b:a9:4c:e4:62:d2:71:ce:ce:
         4c:04:b8:a0:f7:9b:04:d4:ed:07:c6:8d:4f:49:a5:23:54:74:
         1c:ba:02:14:1f:76:be:59:61:fe:f9:60:e6:14:9f:83:6b:6e:
         fc:58:24:36:82:3f:3c:14:ca:6a:25:68:cb:fe:84:0d:50:a3:
         79:77:0b:71:74:91:2c:f7:80:ac:1c:bf:8b:27:5e:01:8c:e8:
         af:e1:7f:35:81:d3:32:38:5f:96:0b:18:a1:d8:54:88:5e:1d:
         4d:28:64:76:05:b2:f4:1a:01:24:dd:91:27:56:cd:b3:e7:b3:
         e0:2f:e0:17:06:ed:2f:b8:8a:72:5d:ca:33:da:fe:49:5e:76:
         b5:50:cf:fc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkFDMzAxMTAvBgNVBAUTKDU3Njc5MDI0NENDMjkyNzVDMTEyMzU2RkY2MjBGMjYy
MEQ3RDYxNUUwHhcNMjUwNzAxMDcyMDE1WhcNMjUwNzA4MDcyMDE1WjAYMRYwFAYD
VQQDEw02ODYzOGMzMC1hMjU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2EesbddIPf2B4w2AKEUA3iNtfvRwMAJ/b9OHxyswAL9g8/LTIGvCYxqHNHKA
UWyK7Hlqa+llbraG0vhZgXgA+BUk1GlgFXtaQz2DF3Pl8JI6IfLHmcO4ra5bGfC2
OxFGMS2FJdMVKxvX2EyRo0dmEFrpOuoDv+DbyMqQdns5WKGCIE+mnr++QnohVFB1
xAZuUyjM9TlUpjVMPgiQfOD1nOCkZbZXE/Xxn9dag/6/Vv6u/AmKeMj63aHwf6y+
Sm1qD75hRUiogSqbIVESYuO6gISku7NJDQaUfXEnjQst8GBYu0BOw22QlJv4TeE/
34zT4XVMPCNhhO3bh8MS5On5KQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrVZzc0
2CQITzjv5Usr/IIS3bNdMB8GA1UdIwQYMBaAFFdnkCRMwpJ1wRI1b/Yg8mINfWFe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QUMzMC82QkM0Q0RGRThD
NjIxMUVGOTk0NjQwODVDNEY5QUUwMi9WMmVRSkV6Q2tuWEJFalZ2OWlEeVlnMTlZ
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1YyZVFKRXpDa25YQkVqVnY5aUR5WWcxOVlWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QUMzMC82QkM0Q0RGRThDNjIxMUVGOTk0NjQwODVDNEY5QUUwMi9WMmVRSkV6Q2tu
WEJFalZ2OWlEeVlnMTlZVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAX10vNDsZB5iz3zwWnudfFplKio3vaDIsG2P9mUssfXwmCp6e4IrX1
dR0uu+860HCnfBpj7ZJHj40CE5kElRPDQtgiXAEfRR1jXi+8Wd8Dh5mmrxA5lpEl
WbTWKtWWR40tmcXPVdSVsYpd7EYIhj367HvrnY07qUzkYtJxzs5MBLig95sE1O0H
xo1PSaUjVHQcugIUH3a+WWH++WDmFJ+Da278WCQ2gj88FMpqJWjL/oQNUKN5dwtx
dJEs94CsHL+LJ14BjOiv4X81gdMyOF+WCxih2FSIXh1NKGR2BbL0GgEk3ZEnVs2z
57PgL+AXBu0vuIpyXcoz2v5JXna1UM/8
-----END CERTIFICATE-----
Generated at Wed Jul 2 01:22:09 2025 by rpki-client