Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
File:                     C41jj_04sfd-SOG7XfKZKc59eLU.mft (raw, json)
Hash identifier:          XDLv9fY+5qEAEaEYoSQg6TwSG4YDZ59P7rASRFF0bDI=
Subject key identifier:   0A:3B:1A:AF:83:A1:00:18:10:C1:81:25:66:A2:D7:FF:81:8B:2D:B2
Authority key identifier: 0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5
Certificate issuer:       /CN=A917BEA7/serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
Certificate serial:       01CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
Manifest number:          01B6
Signing time:             Sat 23 Aug 2025 03:31:00 +0000
Manifest this update:     Sat 23 Aug 2025 03:30:59 +0000
Manifest next update:     Sat 30 Aug 2025 03:30:59 +0000
Files and hashes:         1: C41jj_04sfd-SOG7XfKZKc59eLU.crl (hash: kjJtT5BIPifxVLcgQDgb1cmmgIUXEz7U3cI6kEKHFbg=)
                          2: AA398864B96611EF8161BF51C4F9AE02.roa (hash: MfWpaMS6rRmOY6M0y/tJr6fftibzcsGmZcNhFWcJvTU=)
                          3: 8FD9EFB21C4B11EFA5B6383EC4F9AE02.roa (hash: Smb8FVURFKC3m7o10r8QWyGcKvfaOvh1xY2tx4Qk4ok=)
                          4: 899BFC6C533C11EF8B23DB12C4F9AE02.roa (hash: tmuz3PtTyclXWsH3tOxgjNzOWrm2oq8qXZwVq4xv3Xg=)
                          5: 99DA0A4C533C11EF92170913C4F9AE02.roa (hash: NNWnPeY+H+OxjWlVfrs0w5U8TUAoL0DUbiwdZQKCLSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl
                          rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:30:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BEA7, serialNumber=0B8D638FFD38B1F77E48E1BB5DF29929CE7D78B5
        Validity
            Not Before: Aug 23 03:30:59 2025 GMT
            Not After : Aug 30 03:30:59 2025 GMT
        Subject: CN=68a935f4-b51b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6d:9a:6d:f4:c0:44:8a:4a:fe:d3:a3:35:e5:
                    2e:df:8e:09:c4:a3:bf:8b:d7:94:43:70:b0:18:ea:
                    b8:56:3f:eb:80:1a:7d:5a:03:90:03:4f:d5:c6:08:
                    fb:8b:c8:72:c8:60:36:09:da:76:67:13:3c:ce:f1:
                    45:38:18:8f:58:5f:81:a3:bd:46:d7:16:4c:a4:1e:
                    63:9c:5a:50:48:30:80:81:ee:46:a0:2f:3d:11:9c:
                    02:9e:45:80:04:42:7b:7b:1a:50:a2:59:e3:83:02:
                    13:63:a3:93:3c:16:38:09:3a:1f:a2:1f:c0:5b:7a:
                    8f:92:85:9c:28:de:67:a2:b4:27:a3:4d:5e:03:71:
                    ad:bf:96:f8:7a:f1:68:cf:46:8d:77:46:6c:e9:04:
                    87:b4:74:6b:10:bc:7e:8e:6a:07:2c:19:f0:61:27:
                    df:11:1a:b5:92:a9:50:0f:8b:38:28:2c:93:88:0a:
                    2f:91:fe:a4:1c:0e:b7:9c:4d:1d:18:c2:23:14:94:
                    0e:fd:b6:07:e6:2b:cc:5a:54:8d:6e:84:34:f5:40:
                    88:b3:cc:c6:1c:2b:6d:a1:e6:a1:09:44:7d:00:06:
                    7f:7d:a6:01:63:a4:a1:49:e3:ca:a4:c0:8c:08:22:
                    25:99:4a:4a:fc:ff:58:49:b7:57:ae:b5:fa:9d:c9:
                    25:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:3B:1A:AF:83:A1:00:18:10:C1:81:25:66:A2:D7:FF:81:8B:2D:B2
            X509v3 Authority Key Identifier:
                keyid:0B:8D:63:8F:FD:38:B1:F7:7E:48:E1:BB:5D:F2:99:29:CE:7D:78:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C41jj_04sfd-SOG7XfKZKc59eLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEA7/044F6448116811EEAC63C234C4F9AE02/C41jj_04sfd-SOG7XfKZKc59eLU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ed:f8:4b:57:00:c3:e0:20:50:dd:2d:e7:89:51:1a:bb:dc:
         36:2e:79:28:26:00:7f:bc:87:8e:da:63:dc:04:a5:4f:92:8c:
         7a:fe:2d:a4:34:1f:78:87:57:db:30:eb:d5:90:8a:50:21:32:
         80:b0:92:b5:8f:87:1c:10:46:73:ed:3a:e7:c2:06:b8:2e:f6:
         98:9b:8a:dd:41:df:8d:af:90:43:49:39:e6:ae:41:4c:15:ae:
         9b:18:ee:1e:f6:18:eb:69:f1:71:ea:0c:72:25:4a:84:be:cd:
         71:ae:4e:bc:31:f0:91:07:6d:39:99:1a:e0:6d:91:e4:32:9b:
         a7:ed:2b:70:58:11:f9:69:9c:72:ee:77:69:7e:2f:68:b9:9a:
         97:81:2f:0d:ad:e9:2d:3e:41:38:9a:f0:43:a7:24:96:89:12:
         2d:19:72:57:8b:52:ae:01:fd:8e:78:1d:35:bb:73:60:bb:de:
         c5:42:56:62:f9:48:f1:e3:56:2a:a2:97:f3:6c:06:18:0c:a5:
         fc:fe:c6:9c:e3:5a:26:c5:10:cc:7e:e5:a8:17:94:33:59:7d:
         1c:55:6d:74:07:12:04:ea:29:0d:20:d7:c0:b0:21:f9:3d:fa:
         1b:97:93:51:e3:a4:2b:6e:36:7c:39:89:8a:46:9a:0e:ca:ad:
         65:60:de:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0JFQTcxMTAvBgNVBAUTKDBCOEQ2MzhGRkQzOEIxRjc3RTQ4RTFCQjVERjI5OTI5
Q0U3RDc4QjUwHhcNMjUwODIzMDMzMDU5WhcNMjUwODMwMDMzMDU5WjAYMRYwFAYD
VQQDEw02OGE5MzVmNC1iNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoW2abfTARIpK/tOjNeUu344JxKO/i9eUQ3CwGOq4Vj/rgBp9WgOQA0/Vxgj7
i8hyyGA2Cdp2ZxM8zvFFOBiPWF+Bo71G1xZMpB5jnFpQSDCAge5GoC89EZwCnkWA
BEJ7expQolnjgwITY6OTPBY4CTofoh/AW3qPkoWcKN5norQno01eA3Gtv5b4evFo
z0aNd0Zs6QSHtHRrELx+jmoHLBnwYSffERq1kqlQD4s4KCyTiAovkf6kHA63nE0d
GMIjFJQO/bYH5ivMWlSNboQ09UCIs8zGHCttoeahCUR9AAZ/faYBY6ShSePKpMCM
CCIlmUpK/P9YSbdXrrX6ncklTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAo7Gq+D
oQAYEMGBJWai1/+Biy2yMB8GA1UdIwQYMBaAFAuNY4/9OLH3fkjhu13ymSnOfXi1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVBNy8wNDRGNjQ0ODEx
NjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNmZC1TT0c3WGZLWktjNTll
TFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M0MWpqXzA0c2ZkLVNPRzdYZktaS2M1OWVMVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QkVBNy8wNDRGNjQ0ODExNjgxMUVFQUM2M0MyMzRDNEY5QUUwMi9DNDFqal8wNHNm
ZC1TT0c3WGZLWktjNTllTFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBL7fhLVwDD4CBQ3S3niVEau9w2LnkoJgB/vIeO2mPcBKVPkox6/i2k
NB94h1fbMOvVkIpQITKAsJK1j4ccEEZz7Trnwga4LvaYm4rdQd+Nr5BDSTnmrkFM
Fa6bGO4e9hjrafFx6gxyJUqEvs1xrk68MfCRB205mRrgbZHkMpun7StwWBH5aZxy
7ndpfi9ouZqXgS8NrektPkE4mvBDpySWiRItGXJXi1KuAf2OeB01u3Ngu97FQlZi
+Ujx41YqopfzbAYYDKX8/sac41omxRDMfuWoF5QzWX0cVW10BxIE6ikNINfAsCH5
Pfobl5NR46QrbjZ8OYmKRpoOyq1lYN6/
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:52:36 2025 by rpki-client