Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
File:                     QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft (raw, json)
Hash identifier:          ECe6j2ePD5UNeVzpd69VT7hKisHwamdlkzbO+zwqoe0=
Subject key identifier:   5B:9D:F0:83:19:6E:A8:FA:80:78:05:1D:70:27:FC:E1:C8:7D:B0:87
Authority key identifier: 42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF
Certificate issuer:       /CN=A91758DF/serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
Certificate serial:       084F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
Manifest number:          083B
Signing time:             Wed 02 Jul 2025 21:06:11 +0000
Manifest this update:     Wed 02 Jul 2025 21:06:10 +0000
Manifest next update:     Wed 09 Jul 2025 21:06:10 +0000
Files and hashes:         1: QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl (hash: CSRU+i3Iss3sHvBb96rR3fnWpcwGMaK/ZipowU2cikg=)
                          2: 4F6913406BBF11EFA2832A74C4F9AE02.roa (hash: +e8I8Bn+e9DYeBtqHQQ6KWWC7iXcvB3bn0K/EgTSp6U=)
                          3: 4EA76BD26BBF11EFA2832A74C4F9AE02.roa (hash: SoizhIfWfVMFzbaPsRoPSJl0+AjhRi2T5wIECRdN0sY=)
                          4: F5E65C96FD6C11ECB2384E64C4F9AE02.roa (hash: jruCV8o7M+K9hoZkMPNs3l4bUYZ+XPug7o900UdOtso=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:06:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2127 (0x84f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=426B620C040C83946A4B7586436ECBD0FC4546CF
        Validity
            Not Before: Jul  2 21:06:10 2025 GMT
            Not After : Jul  9 21:06:10 2025 GMT
        Subject: CN=68659f42-365a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:83:76:ee:f9:8c:ba:e5:41:fe:2f:3b:9b:60:
                    bd:0a:a3:3b:44:dc:f0:f6:fc:46:81:92:83:ed:4b:
                    4b:45:de:3e:49:0a:c4:a8:4f:c7:1b:a8:4b:45:7d:
                    a5:3a:c7:09:16:e2:5d:f5:13:f3:7a:a9:8c:cb:66:
                    36:92:c7:5a:48:24:fa:b2:26:4e:82:50:ec:3a:c1:
                    00:e9:5c:51:d1:c2:ff:f4:bc:2d:0d:9b:c6:62:26:
                    8e:8a:19:9e:a8:6c:73:9e:d1:fa:83:31:9b:c6:91:
                    a4:88:12:cc:a9:e6:71:4f:5f:07:91:18:a7:0a:1d:
                    74:97:b8:22:3a:e9:38:9e:f2:5a:03:f4:1c:b8:45:
                    27:68:52:e3:ac:6e:aa:06:6e:b4:3e:b8:b4:1d:a2:
                    e1:cd:ec:ea:f6:99:28:cc:92:f6:d2:58:8b:2e:85:
                    00:96:11:35:38:2c:13:04:57:43:a0:64:be:62:77:
                    45:d9:17:f1:94:bd:16:bb:a0:c1:f3:04:ed:ec:ba:
                    42:46:86:a0:30:d0:d7:94:8e:4c:e4:29:ef:da:76:
                    55:cd:23:43:13:02:81:a6:e6:0e:ee:8a:23:51:81:
                    07:f8:ef:7a:97:37:dd:78:b2:39:45:5e:a6:08:58:
                    fa:1c:bb:1e:d0:f6:ad:de:5c:f7:3b:64:80:52:71:
                    34:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9D:F0:83:19:6E:A8:FA:80:78:05:1D:70:27:FC:E1:C8:7D:B0:87
            X509v3 Authority Key Identifier:
                keyid:42:6B:62:0C:04:0C:83:94:6A:4B:75:86:43:6E:CB:D0:FC:45:46:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QmtiDAQMg5RqS3WGQ27L0PxFRs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/53191046DC2411EABD057F16C4F9AE02/QmtiDAQMg5RqS3WGQ27L0PxFRs8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:79:a0:5f:4a:77:bb:8c:8a:a6:91:ca:06:52:53:51:f8:cb:
         b4:77:18:fc:6c:47:49:df:fb:67:d6:50:19:47:e9:3e:75:89:
         66:ac:4f:5d:89:6f:ca:19:50:a6:b1:10:33:f6:81:6b:99:27:
         bf:80:8d:52:14:51:b0:59:d2:d4:6d:17:33:92:a5:ef:2e:be:
         32:22:d4:19:8b:07:2e:9c:97:22:d6:14:68:08:18:e0:00:56:
         fb:bd:be:cc:77:24:4a:37:cd:03:da:29:b5:1c:24:7e:ce:f3:
         e8:2f:a8:f1:dc:28:28:24:d0:94:ff:c8:4d:d9:25:77:c3:f9:
         96:2c:a8:56:f9:79:d3:03:15:c4:61:61:9b:fd:46:e5:6b:3f:
         78:7f:f6:f6:93:d4:c8:5c:8e:2b:dd:d8:c0:8a:da:d6:6e:8c:
         ba:fc:d0:1f:b5:72:3b:f4:31:19:25:32:75:97:d5:d8:2d:18:
         21:cf:59:17:18:b1:9c:53:44:97:71:0a:57:04:0f:a1:f0:4f:
         e2:15:e2:22:5f:87:3d:37:a9:06:53:30:bd:99:d5:ee:93:ef:
         0d:9f:78:4b:e7:9b:06:60:79:54:83:e3:5e:09:30:18:ed:3e:
         07:9e:58:ac:f1:7d:d7:cf:72:86:25:e6:ec:8c:e5:df:8c:2e:
         b6:1c:3a:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU4REYxMTAvBgNVBAUTKDQyNkI2MjBDMDQwQzgzOTQ2QTRCNzU4NjQzNkVDQkQw
RkM0NTQ2Q0YwHhcNMjUwNzAyMjEwNjEwWhcNMjUwNzA5MjEwNjEwWjAYMRYwFAYD
VQQDEw02ODY1OWY0Mi0zNjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4YN27vmMuuVB/i87m2C9CqM7RNzw9vxGgZKD7UtLRd4+SQrEqE/HG6hLRX2l
OscJFuJd9RPzeqmMy2Y2ksdaSCT6siZOglDsOsEA6VxR0cL/9LwtDZvGYiaOihme
qGxzntH6gzGbxpGkiBLMqeZxT18HkRinCh10l7giOuk4nvJaA/QcuEUnaFLjrG6q
Bm60Pri0HaLhzezq9pkozJL20liLLoUAlhE1OCwTBFdDoGS+YndF2RfxlL0Wu6DB
8wTt7LpCRoagMNDXlI5M5Cnv2nZVzSNDEwKBpuYO7oojUYEH+O96lzfdeLI5RV6m
CFj6HLse0Pat3lz3O2SAUnE0+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFud8IMZ
bqj6gHgFHXAn/OHIfbCHMB8GA1UdIwQYMBaAFEJrYgwEDIOUakt1hkNuy9D8RUbP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi81MzE5MTA0NkRD
MjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1UnFTM1dHUTI3TDBQeEZS
czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1FtdGlEQVFNZzVScVMzV0dRMjdMMFB4RlJzOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NThERi81MzE5MTA0NkRDMjQxMUVBQkQwNTdGMTZDNEY5QUUwMi9RbXRpREFRTWc1
UnFTM1dHUTI3TDBQeEZSczgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQeaBfSne7jIqmkcoGUlNR+Mu0dxj8bEdJ3/tn1lAZR+k+dYlmrE9d
iW/KGVCmsRAz9oFrmSe/gI1SFFGwWdLUbRczkqXvLr4yItQZiwcunJci1hRoCBjg
AFb7vb7MdyRKN80D2im1HCR+zvPoL6jx3CgoJNCU/8hN2SV3w/mWLKhW+XnTAxXE
YWGb/Ublaz94f/b2k9TIXI4r3djAitrWboy6/NAftXI79DEZJTJ1l9XYLRghz1kX
GLGcU0SXcQpXBA+h8E/iFeIiX4c9N6kGUzC9mdXuk+8Nn3hL55sGYHlUg+NeCTAY
7T4Hnlis8X3Xz3KGJebsjOXfjC62HDqf
-----END CERTIFICATE-----
Generated at Thu Jul 3 12:06:36 2025 by rpki-client