Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
File:                     azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft (raw, json)
Hash identifier:          wd+qr8XjchTSeVy/M1ooOAvf7E3t+2DimIHF5Q0pYWM=
Subject key identifier:   D1:55:9C:99:0F:2E:4A:EA:4D:1D:33:74:77:83:5A:92:87:D4:CC:9B
Authority key identifier: 6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4
Certificate issuer:       /CN=A917B1EE/serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
Manifest number:          013E
Signing time:             Sat 23 Aug 2025 04:37:53 +0000
Manifest this update:     Sat 23 Aug 2025 04:37:52 +0000
Manifest next update:     Sat 30 Aug 2025 04:37:52 +0000
Files and hashes:         1: azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl (hash: uFIxdCQP/nB23hz97Mw46H5kGYDDUgeqWOc1XfTbtEU=)
                          2: 0F7A0CD4C72E11EEAA6B423BC4F9AE02.roa (hash: lqNFFXORI79Tp9nH7sxtcuWMLXX1DbMNSF2W2W7xgQw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl
                          rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B1EE, serialNumber=6B3BE8F34CEA694B0D64BCF85785D917443695D4
        Validity
            Not Before: Aug 23 04:37:52 2025 GMT
            Not After : Aug 30 04:37:52 2025 GMT
        Subject: CN=68a945a0-e312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5a:42:ba:34:3a:12:80:74:79:90:37:8a:82:
                    fe:aa:94:99:92:cb:af:8e:07:af:ee:88:e2:0d:f6:
                    3f:87:50:b2:7a:b8:d7:7f:16:3d:cb:b9:fb:08:39:
                    2b:fa:72:51:cc:b0:20:f7:96:7b:50:e1:03:97:24:
                    08:a4:a9:2b:4f:59:5a:fc:20:82:1f:6d:2f:97:47:
                    bf:e3:6f:fb:1b:49:0f:e1:d4:68:c2:a2:a4:ab:75:
                    08:f5:b1:ea:2e:7f:b8:81:36:ff:2a:5f:b6:9f:ac:
                    d5:32:bf:54:db:60:9c:d2:a1:47:e5:c7:51:61:b1:
                    22:7d:ef:52:90:20:f7:aa:12:a8:29:85:9d:59:b6:
                    3c:7a:2b:f7:0d:98:95:9e:8b:55:49:01:55:d4:3b:
                    e9:85:d5:04:39:f2:3b:4b:13:63:13:fe:ec:9b:c5:
                    53:1e:09:b6:7d:18:02:9c:7e:ac:72:89:7c:bd:2d:
                    03:0a:c0:98:52:99:ec:99:81:d6:9c:86:5a:51:3f:
                    4f:1c:ee:94:df:0d:ae:1c:1a:dd:10:ea:44:8b:ca:
                    67:0c:17:33:87:95:c6:85:66:2c:d0:2d:95:26:c4:
                    51:28:f2:5f:d0:60:0f:c4:f4:ae:3d:4c:36:e3:cd:
                    d7:bc:86:0a:6c:a0:33:f1:50:30:d9:e4:44:25:0d:
                    c7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:55:9C:99:0F:2E:4A:EA:4D:1D:33:74:77:83:5A:92:87:D4:CC:9B
            X509v3 Authority Key Identifier:
                keyid:6B:3B:E8:F3:4C:EA:69:4B:0D:64:BC:F8:57:85:D9:17:44:36:95:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/azvo80zqaUsNZLz4V4XZF0Q2ldQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B1EE/DE6A6130A55D11EEB8E9CE10C4F9AE02/azvo80zqaUsNZLz4V4XZF0Q2ldQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:5a:ab:2c:6f:93:b2:5a:13:d2:76:7a:47:57:fa:f5:08:4e:
         f1:e7:ed:90:64:32:1e:bd:79:86:f0:66:fb:3d:6b:e0:cb:96:
         be:ef:09:eb:87:3e:df:ca:11:e6:f0:e0:0b:5b:e0:b6:1c:aa:
         ca:0e:84:60:60:db:c1:18:c4:48:e4:64:b4:8d:f0:b5:e2:b6:
         f1:cf:18:6b:64:0f:5f:5d:f3:27:26:d3:ad:15:e6:41:d7:de:
         84:b9:4f:2c:35:6c:d4:c2:4b:57:a3:3b:91:f1:b4:e2:f9:c1:
         55:83:26:7b:79:c1:b1:2b:29:dd:8f:8e:d7:80:7d:43:3c:fd:
         fb:2c:60:37:25:8a:66:e4:14:e2:ad:67:e1:81:64:ab:9b:00:
         a2:b7:ca:02:4e:72:a2:fc:e0:53:a9:85:78:bf:3a:ad:10:4f:
         6f:a6:22:9f:0d:b1:40:9e:9b:c1:02:61:8d:04:f2:c9:f5:05:
         4f:0a:8d:cd:e5:b4:84:61:66:df:94:79:f1:59:d0:25:6c:24:
         7a:dc:d3:a0:7f:a0:84:bf:a4:53:d9:45:da:89:f2:f1:df:7e:
         90:58:f5:70:0c:85:6c:ac:32:c5:07:ba:f2:14:46:ba:28:3d:
         3d:a7:8b:e8:9b:a3:f7:0f:72:37:9f:b7:d1:ff:98:ee:ea:c7:
         16:a2:e8:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0IxRUUxMTAvBgNVBAUTKDZCM0JFOEYzNENFQTY5NEIwRDY0QkNGODU3ODVEOTE3
NDQzNjk1RDQwHhcNMjUwODIzMDQzNzUyWhcNMjUwODMwMDQzNzUyWjAYMRYwFAYD
VQQDEw02OGE5NDVhMC1lMzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwFpCujQ6EoB0eZA3ioL+qpSZksuvjgev7ojiDfY/h1CyerjXfxY9y7n7CDkr
+nJRzLAg95Z7UOEDlyQIpKkrT1la/CCCH20vl0e/42/7G0kP4dRowqKkq3UI9bHq
Ln+4gTb/Kl+2n6zVMr9U22Cc0qFH5cdRYbEife9SkCD3qhKoKYWdWbY8eiv3DZiV
notVSQFV1DvphdUEOfI7SxNjE/7sm8VTHgm2fRgCnH6scol8vS0DCsCYUpnsmYHW
nIZaUT9PHO6U3w2uHBrdEOpEi8pnDBczh5XGhWYs0C2VJsRRKPJf0GAPxPSuPUw2
483XvIYKbKAz8VAw2eREJQ3HLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFVnJkP
LkrqTR0zdHeDWpKH1MybMB8GA1UdIwQYMBaAFGs76PNM6mlLDWS8+FeF2RdENpXU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjFFRS9ERTZBNjEzMEE1
NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFVc05aTHo0VjRYWkYwUTJs
ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2F6dm84MHpxYVVzTlpMejRWNFhaRjBRMmxkUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QjFFRS9ERTZBNjEzMEE1NUQxMUVFQjhFOUNFMTBDNEY5QUUwMi9henZvODB6cWFV
c05aTHo0VjRYWkYwUTJsZFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCNWqssb5OyWhPSdnpHV/r1CE7x5+2QZDIevXmG8Gb7PWvgy5a+7wnr
hz7fyhHm8OALW+C2HKrKDoRgYNvBGMRI5GS0jfC14rbxzxhrZA9fXfMnJtOtFeZB
196EuU8sNWzUwktXozuR8bTi+cFVgyZ7ecGxKyndj47XgH1DPP37LGA3JYpm5BTi
rWfhgWSrmwCit8oCTnKi/OBTqYV4vzqtEE9vpiKfDbFAnpvBAmGNBPLJ9QVPCo3N
5bSEYWbflHnxWdAlbCR63NOgf6CEv6RT2UXaifLx336QWPVwDIVsrDLFB7ryFEa6
KD09p4vom6P3D3I3n7fR/5ju6scWoujG
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:00:00 2025 by rpki-client