Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
File:                     Br1EFUedLHUIN8XJQzYTuyWIrrg.mft (raw, json)
Hash identifier:          OpWzESwJ3y8EFFzfLgOAPBd7k6DjIMhXAKm7rMsOf6Q=
Subject key identifier:   0A:9F:05:54:C0:20:5B:C1:EE:D7:83:DF:31:41:46:F7:30:89:CC:D1
Authority key identifier: 06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8
Certificate issuer:       /CN=A9177FC9/serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
Certificate serial:       5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
Manifest number:          58
Signing time:             Sat 23 Aug 2025 07:32:28 +0000
Manifest this update:     Sat 23 Aug 2025 07:32:28 +0000
Manifest next update:     Sat 30 Aug 2025 07:32:28 +0000
Files and hashes:         1: Br1EFUedLHUIN8XJQzYTuyWIrrg.crl (hash: IvkBMeI5LKpmmHeTOVsU2hDWee03FT+2JjQ4TMWMcgU=)
                          2: FDD39BD607B811F0AB98B333C4F9AE02.roa (hash: qoLPoA4lZ1ha+1hCNURiczpMXcx77W01//WQ1dkufkU=)
                          3: FD6DA4D407B811F0AB98B333C4F9AE02.roa (hash: 1A7do/sKIO8NT6R3NBCJ/yFYUs9LFmYB3G5A768MYYA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl
                          rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 07:32:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177FC9, serialNumber=06BD4415479D2C750837C5C9433613BB2588AEB8
        Validity
            Not Before: Aug 23 07:32:28 2025 GMT
            Not After : Aug 30 07:32:28 2025 GMT
        Subject: CN=68a96e8c-2ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:36:91:e8:f6:f7:a0:4e:95:4d:b3:c5:b2:dd:
                    d9:0b:ec:cc:7b:94:7a:e8:1b:a1:da:2b:06:9b:3e:
                    1e:4a:e2:c2:27:00:53:cb:ad:33:2d:43:ec:2e:7e:
                    e9:0c:b6:52:13:1b:8c:51:f2:7b:d7:01:77:3b:09:
                    fe:51:a2:fb:6d:08:33:a4:78:e9:c8:0c:7c:a9:a7:
                    ee:37:bc:9b:81:47:0a:24:16:35:b0:56:0d:c1:48:
                    68:82:d4:0f:0c:52:7c:56:5a:0f:ad:da:00:a1:f8:
                    ca:af:25:06:83:f7:52:70:dd:e8:f2:a7:02:c6:62:
                    c2:b7:28:f9:b2:ed:f3:40:16:0d:1b:2c:c2:23:1d:
                    00:12:3c:71:cb:ef:ab:7d:60:f0:7b:a4:57:04:d1:
                    db:dd:06:9d:ff:52:25:bf:8c:1d:6a:5e:64:05:d4:
                    e6:8b:42:d0:d6:16:d8:e6:19:56:2e:a6:81:63:bc:
                    39:18:d2:5c:53:39:e7:91:fe:3f:f5:1f:77:cc:ba:
                    8c:55:0e:2e:9d:8a:f0:df:da:3a:ca:0e:41:a6:49:
                    74:e7:65:0c:01:2f:03:45:b5:fe:1b:d7:69:f2:79:
                    b0:11:ef:8e:34:46:0d:30:78:9b:3d:eb:bf:c2:3d:
                    6f:61:cb:a3:4a:0e:0b:32:52:ba:5d:b2:2b:7a:bb:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9F:05:54:C0:20:5B:C1:EE:D7:83:DF:31:41:46:F7:30:89:CC:D1
            X509v3 Authority Key Identifier:
                keyid:06:BD:44:15:47:9D:2C:75:08:37:C5:C9:43:36:13:BB:25:88:AE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Br1EFUedLHUIN8XJQzYTuyWIrrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177FC9/F3CBF550075111F0818A5433C4F9AE02/Br1EFUedLHUIN8XJQzYTuyWIrrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9c:d8:d0:f5:dc:03:4a:fe:b7:b8:8c:0b:96:97:58:e0:6d:
         cc:37:ad:83:89:6f:bd:13:7e:d9:ed:32:4b:aa:11:c9:52:f3:
         47:cf:3d:70:49:72:ba:b7:4c:fa:6d:5b:2d:56:8b:90:e1:65:
         89:56:d4:9d:7a:bf:07:be:89:5f:66:dd:85:b0:4c:ca:49:68:
         ed:aa:6c:64:19:29:93:0a:c7:e3:40:99:43:7a:a4:e9:2d:dc:
         ad:fd:69:fc:8d:f7:6a:91:de:dd:e8:cb:9e:b7:b0:35:49:98:
         7d:6c:5d:6c:c4:cf:a3:c8:c8:24:dc:d9:8a:1a:a5:7d:6a:cf:
         2a:4b:e6:4e:90:7b:06:95:29:4a:8a:47:8d:14:32:2f:33:50:
         1d:ff:1f:81:c3:fe:99:d7:d3:b9:1a:18:bd:36:29:1d:59:38:
         7d:c6:25:db:76:f3:98:41:01:e6:c1:25:d0:71:b8:90:02:17:
         71:b1:e8:95:b8:1e:7c:0f:48:57:a6:d8:99:b7:35:ca:19:01:
         b1:ff:ef:e5:8e:b6:79:a1:76:61:e8:0c:07:c3:75:04:fa:a1:
         cd:a7:d0:11:43:d5:c3:6e:26:88:c6:62:d1:17:c6:36:23:12:
         a0:5d:7d:6c:20:a0:52:f3:0d:7d:4a:61:29:7c:26:05:ce:04:
         63:d2:8c:c8
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
N0ZDOTExMC8GA1UEBRMoMDZCRDQ0MTU0NzlEMkM3NTA4MzdDNUM5NDMzNjEzQkIy
NTg4QUVCODAeFw0yNTA4MjMwNzMyMjhaFw0yNTA4MzAwNzMyMjhaMBgxFjAUBgNV
BAMTDTY4YTk2ZThjLTJjYTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQNpHo9vegTpVNs8Wy3dkL7Mx7lHroG6HaKwabPh5K4sInAFPLrTMtQ+wufukM
tlITG4xR8nvXAXc7Cf5RovttCDOkeOnIDHypp+43vJuBRwokFjWwVg3BSGiC1A8M
UnxWWg+t2gCh+MqvJQaD91Jw3ejypwLGYsK3KPmy7fNAFg0bLMIjHQASPHHL76t9
YPB7pFcE0dvdBp3/UiW/jB1qXmQF1OaLQtDWFtjmGVYupoFjvDkY0lxTOeeR/j/1
H3fMuoxVDi6divDf2jrKDkGmSXTnZQwBLwNFtf4b12nyebAR7440Rg0weJs967/C
PW9hy6NKDgsyUrpdsit6uwmHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCp8FVMAg
W8Hu14PfMUFG9zCJzNEwHwYDVR0jBBgwFoAUBr1EFUedLHUIN8XJQzYTuyWIrrgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3RkM5L0YzQ0JGNTUwMDc1
MTExRjA4MThBNTQzM0M0RjlBRTAyL0JyMUVGVWVkTEhVSU44WEpRellUdXlXSXJy
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQnIxRUZVZWRMSFVJTjhYSlF6WVR1eVdJcnJnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTc3
RkM5L0YzQ0JGNTUwMDc1MTExRjA4MThBNTQzM0M0RjlBRTAyL0JyMUVGVWVkTEhV
SU44WEpRellUdXlXSXJyZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJic2ND13ANK/re4jAuWl1jgbcw3rYOJb70TftntMkuqEclS80fPPXBJ
crq3TPptWy1Wi5DhZYlW1J16vwe+iV9m3YWwTMpJaO2qbGQZKZMKx+NAmUN6pOkt
3K39afyN92qR3t3oy563sDVJmH1sXWzEz6PIyCTc2YoapX1qzypL5k6QewaVKUqK
R40UMi8zUB3/H4HD/pnX07kaGL02KR1ZOH3GJdt285hBAebBJdBxuJACF3Gx6JW4
HnwPSFem2Jm3NcoZAbH/7+WOtnmhdmHoDAfDdQT6oc2n0BFD1cNuJojGYtEXxjYj
EqBdfWwgoFLzDX1KYSl8JgXOBGPSjMg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:00:52 2025 by rpki-client