Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
File:                     2nNptJciuhObe2DznIi0m9uzXz0.mft (raw, json)
Hash identifier:          yPapbGBOFBeEjtPOflm3wRoh9ZpSYMe2IvKlLbjq0VI=
Subject key identifier:   71:B0:1D:34:0A:B2:73:81:95:54:80:08:79:5A:77:8F:4F:61:8A:B9
Authority key identifier: DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D
Certificate issuer:       /CN=A917E623/serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
Manifest number:          0178
Signing time:             Sat 23 Aug 2025 03:57:21 +0000
Manifest this update:     Sat 23 Aug 2025 03:57:21 +0000
Manifest next update:     Sat 30 Aug 2025 03:57:21 +0000
Files and hashes:         1: 2nNptJciuhObe2DznIi0m9uzXz0.crl (hash: 4FOvRQY6ZyzUVfxBqotDfni1k2UKuvhSnsdIPmOSxtk=)
                          2: C12ACE6AC17E11EE95D6821CC4F9AE02.roa (hash: 0VizvwlSvt2Typg26qLoIMnU5PdKIxjIiPdXQB++0ps=)
                          3: BBBEDEF46C8211EE866F5A78C4F9AE02.roa (hash: rX9KVe2qszOUPjT1pbGC+LrjEbspt/xxl2Uq6dePAdc=)
                          4: B7FD006A50F411EEB2008729C4F9AE02.roa (hash: HsYr8OmdjYIdRArCv8NBd7tL5J9ojAyKHb00KhjW28U=)
                          5: 585745526BC111EEA163E774C4F9AE02.roa (hash: Ks2Urn2far+/DcyQBS8MOk0s9n2RR8VYAIzSipmPvMk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl
                          rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E623, serialNumber=DA7369B49722BA139B7B60F39C88B49BDBB35F3D
        Validity
            Not Before: Aug 23 03:57:21 2025 GMT
            Not After : Aug 30 03:57:21 2025 GMT
        Subject: CN=68a93c21-0672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:4a:59:dd:e1:96:da:d7:8f:b5:e2:93:d4:
                    43:80:ac:67:76:08:29:4e:a5:48:00:9a:8e:15:94:
                    ce:b3:23:a9:ee:df:7a:01:98:13:3a:b4:89:3c:16:
                    35:a3:46:43:06:37:25:b4:2e:62:e5:b4:5d:a2:f4:
                    7a:12:84:a4:5d:ac:0d:fc:f9:80:8c:a2:3f:d4:6d:
                    3c:18:b9:e1:3f:53:01:c6:40:58:71:08:a5:85:43:
                    99:fe:cc:47:f1:a9:8f:32:e2:66:ed:4d:51:00:c2:
                    92:03:6b:12:55:20:13:0d:5c:07:93:e9:04:f2:f0:
                    2d:80:34:26:cf:bf:62:c7:db:c7:e8:91:f0:54:ec:
                    5e:f9:02:9e:fb:37:23:93:a4:74:2b:d0:5f:9c:2e:
                    87:eb:4a:d8:36:ce:60:e4:e0:e9:41:fd:55:4f:46:
                    b8:c0:f5:2e:42:71:c2:fc:b8:fd:3c:c0:ca:b3:59:
                    14:82:4f:c5:e7:ad:20:3d:4c:83:d7:40:13:1b:86:
                    fb:c9:cc:2f:94:98:50:41:e3:0d:f8:67:db:f4:87:
                    ed:9a:25:a0:88:ed:87:1d:cc:0d:36:e1:80:ea:8c:
                    f2:b2:a2:27:49:a0:d9:f8:30:c7:17:ef:00:a9:5b:
                    44:3b:7f:9c:d7:f3:23:43:18:28:b5:71:e3:74:da:
                    28:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B0:1D:34:0A:B2:73:81:95:54:80:08:79:5A:77:8F:4F:61:8A:B9
            X509v3 Authority Key Identifier:
                keyid:DA:73:69:B4:97:22:BA:13:9B:7B:60:F3:9C:88:B4:9B:DB:B3:5F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nNptJciuhObe2DznIi0m9uzXz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E623/A25D489E504711EEB677365DC4F9AE02/2nNptJciuhObe2DznIi0m9uzXz0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:3a:2b:16:2b:68:3c:ca:c7:f0:50:be:d2:d5:95:4c:b5:ed:
         18:0a:ee:60:6f:a3:bc:7a:07:3c:2d:9f:50:4b:c4:ac:71:dd:
         8f:08:97:22:a1:79:85:3d:d0:9f:4c:cd:00:22:95:d6:9c:3c:
         4b:62:31:bc:e0:04:55:25:15:0b:ed:42:0f:08:2a:a2:5c:19:
         4f:69:af:ee:c1:ec:e6:c2:6a:d4:8b:a9:af:f1:f3:6b:9d:15:
         9b:6f:ad:d0:32:ff:26:fe:20:2e:20:cc:e3:52:8a:c2:fa:b3:
         fe:cb:e1:fc:ff:ff:a2:b4:aa:f3:91:a0:d0:c7:2b:0d:ed:dc:
         db:cd:b1:28:aa:fa:4f:ff:5a:3d:30:91:2d:2c:d8:15:ba:d3:
         7d:4c:56:13:b1:27:cb:59:dc:33:b7:e9:97:c3:80:20:a8:93:
         6b:84:03:e3:b2:92:17:cb:8a:36:52:ed:11:2b:9b:02:22:e9:
         20:47:2b:7d:cb:0f:a9:cb:7f:cd:dd:64:2f:47:73:64:e2:70:
         a7:04:35:27:ec:1a:9a:a0:35:9c:67:ca:0f:68:86:27:5c:b4:
         7c:12:08:d0:47:59:04:bf:f0:14:20:df:2f:84:97:3b:a6:c8:
         3e:72:99:37:df:fa:fe:25:ce:57:e8:ac:e8:14:21:5d:e8:b3:
         4d:6d:3d:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0U2MjMxMTAvBgNVBAUTKERBNzM2OUI0OTcyMkJBMTM5QjdCNjBGMzlDODhCNDlC
REJCMzVGM0QwHhcNMjUwODIzMDM1NzIxWhcNMjUwODMwMDM1NzIxWjAYMRYwFAYD
VQQDEw02OGE5M2MyMS0wNjcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvF1KWd3hltrXj7Xik9RDgKxndggpTqVIAJqOFZTOsyOp7t96AZgTOrSJPBY1
o0ZDBjcltC5i5bRdovR6EoSkXawN/PmAjKI/1G08GLnhP1MBxkBYcQilhUOZ/sxH
8amPMuJm7U1RAMKSA2sSVSATDVwHk+kE8vAtgDQmz79ix9vH6JHwVOxe+QKe+zcj
k6R0K9BfnC6H60rYNs5g5ODpQf1VT0a4wPUuQnHC/Lj9PMDKs1kUgk/F560gPUyD
10ATG4b7ycwvlJhQQeMN+Gfb9IftmiWgiO2HHcwNNuGA6ozysqInSaDZ+DDHF+8A
qVtEO3+c1/MjQxgotXHjdNoofQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGwHTQK
snOBlVSACHlad49PYYq5MB8GA1UdIwQYMBaAFNpzabSXIroTm3tg85yItJvbs189
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTYyMy9BMjVENDg5RTUw
NDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVoT2JlMkR6bklpMG05dXpY
ejAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJuTnB0SmNpdWhPYmUyRHpuSWkwbTl1elh6MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RTYyMy9BMjVENDg5RTUwNDcxMUVFQjY3NzM2NURDNEY5QUUwMi8ybk5wdEpjaXVo
T2JlMkR6bklpMG05dXpYejAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBWOisWK2g8ysfwUL7S1ZVMte0YCu5gb6O8egc8LZ9QS8Sscd2PCJci
oXmFPdCfTM0AIpXWnDxLYjG84ARVJRUL7UIPCCqiXBlPaa/uwezmwmrUi6mv8fNr
nRWbb63QMv8m/iAuIMzjUorC+rP+y+H8//+itKrzkaDQxysN7dzbzbEoqvpP/1o9
MJEtLNgVutN9TFYTsSfLWdwzt+mXw4AgqJNrhAPjspIXy4o2Uu0RK5sCIukgRyt9
yw+py3/N3WQvR3Nk4nCnBDUn7BqaoDWcZ8oPaIYnXLR8EgjQR1kEv/AUIN8vhJc7
psg+cpk33/r+Jc5X6KzoFCFd6LNNbT2y
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:15:06 2025 by rpki-client