Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
File:                     PzsvWzuuUqa1aSyvkqJVSwbahj0.mft (raw, json)
Hash identifier:          EU7i5I9SYf7faMAEy0EKAs0dI2YJdqjveFt0RWMhYhg=
Subject key identifier:   62:F4:5A:04:84:91:BD:98:2D:01:EA:D1:A4:66:76:CB:F7:E6:D9:F0
Authority key identifier: 3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D
Certificate issuer:       /CN=A917C81C/serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
Certificate serial:       0553
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
Manifest number:          054E
Signing time:             Fri 22 Aug 2025 23:36:02 +0000
Manifest this update:     Fri 22 Aug 2025 23:36:02 +0000
Manifest next update:     Fri 29 Aug 2025 23:36:02 +0000
Files and hashes:         1: PzsvWzuuUqa1aSyvkqJVSwbahj0.crl (hash: 9PC1BLuTH3U9f3PwpUCRU033PxYdrohZSlHzU/RYBvY=)
                          2: 1953EB90FF1B11EBA5CEF970C4F9AE02.roa (hash: GyNWMA5uS2CM++CZD9BiRxHkePo3mscOl1IpeulPgT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl
                          rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:36:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363 (0x553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C81C, serialNumber=3F3B2F5B3BAE52A6B5692CAF92A2554B06DA863D
        Validity
            Not Before: Aug 22 23:36:02 2025 GMT
            Not After : Aug 29 23:36:02 2025 GMT
        Subject: CN=68a8fee2-e0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c4:f9:65:d1:2a:08:15:88:f2:56:0f:29:bb:
                    42:2b:e8:be:7f:db:52:ca:b9:ea:99:68:92:d1:ef:
                    f1:8b:23:61:f3:99:b9:49:e6:02:22:0b:ec:e8:31:
                    98:af:4d:97:3a:20:e9:fc:ec:f7:f6:ce:f1:d1:99:
                    86:be:28:13:88:fd:5a:c6:aa:da:e7:ef:c7:fb:8b:
                    43:b9:21:70:4c:d0:d1:9c:98:09:82:50:d6:11:3c:
                    ec:bd:34:66:53:61:fb:5a:db:40:fc:9b:6a:d7:4b:
                    35:f1:59:1b:57:a3:32:bc:e8:89:8a:71:08:df:d0:
                    4c:21:91:54:aa:76:8b:cc:bc:7a:a7:6e:46:fb:18:
                    57:19:f5:ba:8c:51:22:1d:6c:52:f5:f7:cd:88:df:
                    2d:8c:1b:40:8e:f5:5b:28:84:2b:22:f8:73:01:e1:
                    27:fc:d8:43:ec:f4:13:a6:6c:26:6c:bc:24:db:3b:
                    ca:12:be:9f:a2:63:f9:f1:fb:a7:e9:dc:4d:d5:37:
                    3b:cd:e5:43:f6:76:90:8e:e3:39:6c:6e:22:51:c7:
                    8b:24:bc:0b:c5:46:1c:27:69:28:c3:65:7b:27:9a:
                    7a:88:25:76:90:e4:41:e3:10:09:bd:22:64:bb:9a:
                    a2:93:99:c3:66:a4:35:d1:be:38:4a:5f:bc:dc:50:
                    42:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:F4:5A:04:84:91:BD:98:2D:01:EA:D1:A4:66:76:CB:F7:E6:D9:F0
            X509v3 Authority Key Identifier:
                keyid:3F:3B:2F:5B:3B:AE:52:A6:B5:69:2C:AF:92:A2:55:4B:06:DA:86:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzsvWzuuUqa1aSyvkqJVSwbahj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C81C/D19AEE3EFF1011EB9BD13D6CC4F9AE02/PzsvWzuuUqa1aSyvkqJVSwbahj0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:c5:1a:0f:ce:3f:b1:fb:af:16:c8:ec:55:4f:62:f5:84:0a:
         0a:3c:6d:c3:f6:e9:7b:61:e8:51:94:1e:d8:28:23:65:48:ac:
         81:6e:a4:43:0e:02:71:8f:6c:c5:d5:15:19:70:c3:6f:a7:71:
         83:2c:90:f1:3d:1e:5a:3c:aa:b9:f8:e0:46:4a:f8:e5:01:91:
         a4:86:87:d7:07:13:8a:89:46:86:99:88:97:7d:fd:ae:14:5c:
         54:79:b8:01:30:23:2d:fc:96:50:62:a3:c4:1a:3c:ae:a6:7a:
         bc:f0:a9:f0:ef:ff:52:05:34:91:16:f3:21:68:a8:17:04:28:
         58:df:f7:99:de:38:df:63:0b:d5:a5:ae:90:7f:7a:90:99:9d:
         fa:c3:5a:c1:60:86:40:31:ba:00:f0:84:15:e3:b3:9a:0b:c5:
         d8:86:b8:2f:08:d2:da:b3:5c:71:3f:f8:cd:19:c3:81:13:f8:
         ae:33:47:f3:60:c8:c8:dc:06:65:db:13:64:4c:93:fc:7d:76:
         3c:f5:ff:96:24:9f:8a:73:f7:7e:2f:bf:d3:2d:7b:a8:67:cf:
         1b:97:b1:e7:a7:06:bb:8a:f7:93:7c:39:9c:73:88:a9:7d:75:
         92:0d:6e:62:1e:3d:28:44:3f:4d:8b:d6:69:bc:d3:ae:bb:67:
         76:a5:99:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0M4MUMxMTAvBgNVBAUTKDNGM0IyRjVCM0JBRTUyQTZCNTY5MkNBRjkyQTI1NTRC
MDZEQTg2M0QwHhcNMjUwODIyMjMzNjAyWhcNMjUwODI5MjMzNjAyWjAYMRYwFAYD
VQQDEw02OGE4ZmVlMi1lMGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA58T5ZdEqCBWI8lYPKbtCK+i+f9tSyrnqmWiS0e/xiyNh85m5SeYCIgvs6DGY
r02XOiDp/Oz39s7x0ZmGvigTiP1axqra5+/H+4tDuSFwTNDRnJgJglDWETzsvTRm
U2H7WttA/Jtq10s18VkbV6MyvOiJinEI39BMIZFUqnaLzLx6p25G+xhXGfW6jFEi
HWxS9ffNiN8tjBtAjvVbKIQrIvhzAeEn/NhD7PQTpmwmbLwk2zvKEr6fomP58fun
6dxN1Tc7zeVD9naQjuM5bG4iUceLJLwLxUYcJ2kow2V7J5p6iCV2kORB4xAJvSJk
u5qik5nDZqQ10b44Sl+83FBCxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGL0WgSE
kb2YLQHq0aRmdsv35tnwMB8GA1UdIwQYMBaAFD87L1s7rlKmtWksr5KiVUsG2oY9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzgxQy9EMTlBRUUzRUZG
MTAxMUVCOUJEMTNENkNDNEY5QUUwMi9QenN2V3p1dVVxYTFhU3l2a3FKVlN3YmFo
ajAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1B6c3ZXenV1VXFhMWFTeXZrcUpWU3diYWhqMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
QzgxQy9EMTlBRUUzRUZGMTAxMUVCOUJEMTNENkNDNEY5QUUwMi9QenN2V3p1dVVx
YTFhU3l2a3FKVlN3YmFoajAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCsxRoPzj+x+68WyOxVT2L1hAoKPG3D9ul7YehRlB7YKCNlSKyBbqRD
DgJxj2zF1RUZcMNvp3GDLJDxPR5aPKq5+OBGSvjlAZGkhofXBxOKiUaGmYiXff2u
FFxUebgBMCMt/JZQYqPEGjyupnq88Knw7/9SBTSRFvMhaKgXBChY3/eZ3jjfYwvV
pa6Qf3qQmZ36w1rBYIZAMboA8IQV47OaC8XYhrgvCNLas1xxP/jNGcOBE/iuM0fz
YMjI3AZl2xNkTJP8fXY89f+WJJ+Kc/d+L7/TLXuoZ88bl7Hnpwa7iveTfDmcc4ip
fXWSDW5iHj0oRD9Ni9ZpvNOuu2d2pZnK
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:32:19 2025 by rpki-client