Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
File:                     _dJQeCIYPOgHWUGdVlQGBqJIa0s.mft (raw, json)
Hash identifier:          4hMoUJbL2+ApiswiPyU/5vymDo1aMpTEIfAxp8wspYU=
Subject key identifier:   D2:10:5C:9D:22:81:4D:34:D7:8E:A6:A9:E0:11:AC:8C:03:4E:91:A6
Authority key identifier: FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
Certificate issuer:       /CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Certificate serial:       0852
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
Manifest number:          0836
Signing time:             Wed 02 Jul 2025 21:02:52 +0000
Manifest this update:     Wed 02 Jul 2025 21:02:52 +0000
Manifest next update:     Wed 09 Jul 2025 21:02:52 +0000
Files and hashes:         1: _dJQeCIYPOgHWUGdVlQGBqJIa0s.crl (hash: HdjMbcM0R7fvwY2FUyLZVa7t2WEVctYmMKhSovsz0cQ=)
                          2: FD18A8AAD97B11EAB138A00FC4F9AE02.roa (hash: dUADLZNofYstB4J1GHJqZ4NyoXP/5OBBFPnTwTmX5d0=)
                          3: 5818925E826A11ECBF45DE23C4F9AE02.roa (hash: pVe/D2y8+Q5khNjEW30/uK4SviswKm/bN634mRuECH4=)
                          4: A69B6B8C082411EDADBE0C60C4F9AE02.roa (hash: JKAxoURLcld4TYBs+HuThRABfXOXWBihIh336+ir050=)
                          5: BFECDAAC803F11EC8394C23AC4F9AE02.roa (hash: Vhzmp3txj0Xul7ynXkTKnMTWBScHUp4m7KHYrp1yvUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
                          rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:35:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2130 (0x852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917647E, serialNumber=FDD2507822183CE80759419D56540606A2486B4B
        Validity
            Not Before: Jul  2 21:02:52 2025 GMT
            Not After : Jul  9 21:02:52 2025 GMT
        Subject: CN=68659e7c-7e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:49:b4:89:3f:91:e4:99:98:d5:ba:bd:f4:e2:
                    41:53:d0:77:c6:c9:56:39:41:47:f3:ac:02:97:09:
                    f9:d7:0c:58:26:51:7c:9e:d9:5b:83:37:63:e5:b1:
                    5d:57:49:89:1e:26:98:db:35:86:e4:d7:63:fa:4a:
                    51:95:c4:c0:fe:4e:11:34:8e:16:85:f1:63:37:dd:
                    81:ac:ce:c4:27:81:e9:27:23:dc:df:09:bc:c0:93:
                    33:ac:fe:38:55:6a:70:95:33:1f:12:fb:95:d4:81:
                    a4:f3:58:f3:e4:7e:98:2c:c4:cc:9e:2b:8f:76:10:
                    87:3d:69:69:5d:b7:8d:ce:74:5e:76:25:cf:05:01:
                    9b:c8:58:6a:8b:cb:67:f8:f8:7f:8c:63:c3:76:42:
                    f4:06:41:5d:d8:45:61:00:a0:c8:26:4d:7d:ba:de:
                    63:67:dc:7c:55:cc:17:5c:40:2a:b7:3c:16:d5:3b:
                    87:d4:0b:d6:72:7b:9b:ee:8c:7f:2a:fd:eb:ae:ee:
                    e8:81:db:75:ba:47:e0:ef:d1:26:d8:f6:e2:7a:cc:
                    92:71:d4:af:00:0c:54:39:b8:f5:39:ea:c1:7f:3e:
                    2d:59:e5:b5:38:56:24:12:0c:77:cc:77:35:a1:18:
                    38:8f:79:e3:ad:b2:c4:d3:61:2b:ac:15:f7:8f:a6:
                    15:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:10:5C:9D:22:81:4D:34:D7:8E:A6:A9:E0:11:AC:8C:03:4E:91:A6
            X509v3 Authority Key Identifier:
                keyid:FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:16:04:66:cf:9e:41:cb:4a:46:b9:68:46:56:6b:27:58:3c:
         1f:c4:83:d6:29:ae:d1:62:56:f7:c4:24:bf:bd:6d:4e:c2:97:
         22:df:79:6d:ab:12:99:b9:64:30:7e:93:68:06:c5:34:89:52:
         22:10:e3:37:21:c2:21:6e:90:1b:a7:30:46:57:cd:9b:78:bd:
         95:4a:f2:9d:1f:69:52:b1:4e:fe:38:81:83:b5:20:c3:7f:8e:
         e4:c4:f9:bc:ab:c1:8f:b8:80:cb:37:01:ba:0e:f8:1b:8a:11:
         2f:95:32:97:cb:20:6f:5f:ed:19:64:91:e1:f0:45:73:d9:e4:
         f1:7a:fc:d5:83:14:74:16:5a:99:1f:a1:50:0f:83:df:73:ff:
         35:2c:e8:99:24:e1:66:63:b9:67:39:39:70:31:de:7e:ab:04:
         94:76:36:7e:4d:d1:a0:4d:06:cd:72:0f:44:83:71:34:6a:c3:
         af:b3:11:dd:6e:fe:6c:90:25:b4:cc:41:6a:4b:d6:28:ca:3a:
         c9:00:f3:be:a4:49:23:21:ca:a1:72:d3:c4:f5:f7:49:21:8f:
         b3:36:19:20:e5:70:7e:5a:4c:c1:d6:88:67:9f:76:31:fa:7d:
         22:f1:b9:9c:9a:f6:74:3c:36:0b:56:a4:53:2a:96:ea:8e:fb:
         bd:07:19:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzY0N0UxMTAvBgNVBAUTKEZERDI1MDc4MjIxODNDRTgwNzU5NDE5RDU2NTQwNjA2
QTI0ODZCNEIwHhcNMjUwNzAyMjEwMjUyWhcNMjUwNzA5MjEwMjUyWjAYMRYwFAYD
VQQDEw02ODY1OWU3Yy03ZTNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1km0iT+R5JmY1bq99OJBU9B3xslWOUFH86wClwn51wxYJlF8ntlbgzdj5bFd
V0mJHiaY2zWG5Ndj+kpRlcTA/k4RNI4WhfFjN92BrM7EJ4HpJyPc3wm8wJMzrP44
VWpwlTMfEvuV1IGk81jz5H6YLMTMniuPdhCHPWlpXbeNznRediXPBQGbyFhqi8tn
+Ph/jGPDdkL0BkFd2EVhAKDIJk19ut5jZ9x8VcwXXEAqtzwW1TuH1AvWcnub7ox/
Kv3rru7ogdt1ukfg79Em2PbiesyScdSvAAxUObj1OerBfz4tWeW1OFYkEgx3zHc1
oRg4j3njrbLE02ErrBX3j6YVlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNIQXJ0i
gU00146mqeARrIwDTpGmMB8GA1UdIwQYMBaAFP3SUHgiGDzoB1lBnVZUBgaiSGtL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjQ3RS8wRDEwQjgwNEQ2
MzExMUVBOUE1QTU4M0JDNEY5QUUwMi9fZEpRZUNJWVBPZ0hXVUdkVmxRR0JxSklh
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19kSlFlQ0lZUE9nSFdVR2RWbFFHQnFKSWEwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjQ3RS8wRDEwQjgwNEQ2MzExMUVBOUE1QTU4M0JDNEY5QUUwMi9fZEpRZUNJWVBP
Z0hXVUdkVmxRR0JxSklhMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBkFgRmz55By0pGuWhGVmsnWDwfxIPWKa7RYlb3xCS/vW1Owpci33lt
qxKZuWQwfpNoBsU0iVIiEOM3IcIhbpAbpzBGV82beL2VSvKdH2lSsU7+OIGDtSDD
f47kxPm8q8GPuIDLNwG6DvgbihEvlTKXyyBvX+0ZZJHh8EVz2eTxevzVgxR0FlqZ
H6FQD4Pfc/81LOiZJOFmY7lnOTlwMd5+qwSUdjZ+TdGgTQbNcg9Eg3E0asOvsxHd
bv5skCW0zEFqS9YoyjrJAPO+pEkjIcqhctPE9fdJIY+zNhkg5XB+WkzB1ohnn3Yx
+n0i8bmcmvZ0PDYLVqRTKpbqjvu9BxkL
-----END CERTIFICATE-----
Generated at Wed Jul 2 23:27:16 2025 by rpki-client