Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
File:                     mMpJTfad7fYW5B0FmhTn9oec37M.mft (raw, json)
Hash identifier:          3HI3TjCnREzmQggpj3jM4q+vkGt2REiTGl0XL5Dc/LA=
Subject key identifier:   8B:C1:25:32:1E:E8:00:0D:F1:1D:99:DD:F8:40:11:C4:EE:F6:8A:EA
Authority key identifier: 98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3
Certificate issuer:       /CN=A91879AC/serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
Manifest number:          8F
Signing time:             Sat 23 Aug 2025 06:45:12 +0000
Manifest this update:     Sat 23 Aug 2025 06:45:11 +0000
Manifest next update:     Sat 30 Aug 2025 06:45:11 +0000
Files and hashes:         1: mMpJTfad7fYW5B0FmhTn9oec37M.crl (hash: vlRNrD9qgr6jLy9ScB5LBw+ZRT4QmyCkd2MfbSeB3YQ=)
                          2: 01D7E35CBC8411EFA72EDB72C4F9AE02.roa (hash: Q2O3UQQcNoLM1v/zHql7wsFe9RZlWk5/+eqvd3Q27EE=)
                          3: F5BB256ECE9611EF97EBCF65C4F9AE02.roa (hash: RrU3CkYFdXPh/xjxUTbpuTN6rb1MmkQpXUXbfG9JUVQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl
                          rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91879AC, serialNumber=98CA494DF69DEDF616E41D059A14E7F6879CDFB3
        Validity
            Not Before: Aug 23 06:45:11 2025 GMT
            Not After : Aug 30 06:45:11 2025 GMT
        Subject: CN=68a96377-3e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:be:e7:4f:c5:d2:27:9f:ca:bf:13:3d:fb:
                    59:ec:71:f2:12:7f:82:38:ae:f7:0c:cb:f4:a1:33:
                    38:ba:c5:40:c7:96:76:55:16:f8:45:73:92:6e:ff:
                    7b:0c:cd:0b:8b:31:99:5f:96:7b:b8:89:e7:e0:dd:
                    bc:24:4d:77:15:ad:49:8f:b9:15:a2:1a:7b:9b:df:
                    d9:9c:3f:13:14:bc:50:f1:01:a2:9f:e7:33:4f:48:
                    6e:4d:a1:ee:e5:84:61:29:9b:7a:68:8d:08:9e:9a:
                    1a:13:bf:62:79:1f:a9:03:42:b0:9c:92:cd:35:02:
                    bd:ab:2f:fa:c8:b8:18:5b:a7:77:65:1b:2c:56:99:
                    77:e7:c0:2e:74:e1:3e:ff:f9:9c:74:fa:8a:f0:77:
                    7d:30:7d:a7:9d:35:88:77:74:cc:b4:f3:50:d5:01:
                    25:be:b3:39:60:33:ea:ac:4f:ac:2c:f0:61:49:21:
                    39:25:fb:59:60:f3:3f:c0:fa:07:8a:48:16:4a:64:
                    bc:54:0f:cf:f3:cb:44:e5:e9:71:30:c3:c9:1e:78:
                    61:09:6e:75:0b:b9:8b:09:79:f3:97:31:38:df:ee:
                    a3:4c:4e:56:1f:62:67:43:d8:27:e8:4a:b4:fb:56:
                    73:6b:7d:27:ba:05:32:05:89:47:23:9f:02:52:5e:
                    1b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C1:25:32:1E:E8:00:0D:F1:1D:99:DD:F8:40:11:C4:EE:F6:8A:EA
            X509v3 Authority Key Identifier:
                keyid:98:CA:49:4D:F6:9D:ED:F6:16:E4:1D:05:9A:14:E7:F6:87:9C:DF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mMpJTfad7fYW5B0FmhTn9oec37M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91879AC/60946CD6A80111EFA406753BC4F9AE02/mMpJTfad7fYW5B0FmhTn9oec37M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2b:6a:f0:fa:d4:ac:df:2b:59:1d:8c:65:d2:34:f9:aa:b0:
         70:9c:fb:3d:8a:5f:63:03:a7:b4:84:2d:94:49:77:8e:9c:fc:
         13:7c:de:30:47:59:f4:25:c2:55:d4:8b:21:9d:0f:8d:01:74:
         1b:4f:ea:b4:ff:56:6d:4a:9f:7e:c0:05:31:b0:44:d6:e9:47:
         de:47:a5:50:e8:ce:d8:75:58:fe:a3:4b:c2:a2:b7:2a:d2:f9:
         06:86:de:b8:c5:43:14:1f:11:c4:1d:75:84:f0:7c:c1:c9:2e:
         d3:9d:80:86:bc:78:13:b4:bf:44:fd:11:86:88:66:7c:10:5d:
         91:a7:8c:1b:3d:29:f8:96:5a:5c:6f:2d:dd:1d:c9:d7:dc:d1:
         a1:e1:f8:88:7f:18:c1:7b:88:c1:89:6b:c1:be:5e:67:70:52:
         00:dc:e4:76:72:d1:59:15:f2:09:0b:30:01:69:d2:45:ab:9c:
         da:7d:67:09:63:ce:a7:39:df:97:78:2a:f6:95:74:15:b5:16:
         94:3f:79:0f:da:91:8a:58:c0:a8:8e:0d:4a:21:26:65:ab:bc:
         af:f8:95:27:99:16:24:2e:61:be:75:1d:73:56:b6:65:fa:e7:
         ed:b2:f2:32:77:a9:17:1c:bd:a6:cd:d7:9b:35:35:f6:b2:fb:
         6f:ee:a4:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODc5QUMxMTAvBgNVBAUTKDk4Q0E0OTRERjY5REVERjYxNkU0MUQwNTlBMTRFN0Y2
ODc5Q0RGQjMwHhcNMjUwODIzMDY0NTExWhcNMjUwODMwMDY0NTExWjAYMRYwFAYD
VQQDEw02OGE5NjM3Ny0zZTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxZ++50/F0iefyr8TPftZ7HHyEn+COK73DMv0oTM4usVAx5Z2VRb4RXOSbv97
DM0LizGZX5Z7uInn4N28JE13Fa1Jj7kVohp7m9/ZnD8TFLxQ8QGin+czT0huTaHu
5YRhKZt6aI0InpoaE79ieR+pA0KwnJLNNQK9qy/6yLgYW6d3ZRssVpl358AudOE+
//mcdPqK8Hd9MH2nnTWId3TMtPNQ1QElvrM5YDPqrE+sLPBhSSE5JftZYPM/wPoH
ikgWSmS8VA/P88tE5elxMMPJHnhhCW51C7mLCXnzlzE43+6jTE5WH2JnQ9gn6Eq0
+1Zza30nugUyBYlHI58CUl4b7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIvBJTIe
6AAN8R2Z3fhAEcTu9orqMB8GA1UdIwQYMBaAFJjKSU32ne32FuQdBZoU5/aHnN+z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzlBQy82MDk0NkNENkE4
MDExMUVGQTQwNjc1M0JDNEY5QUUwMi9tTXBKVGZhZDdmWVc1QjBGbWhUbjlvZWMz
N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21NcEpUZmFkN2ZZVzVCMEZtaFRuOW9lYzM3TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NzlBQy82MDk0NkNENkE4MDExMUVGQTQwNjc1M0JDNEY5QUUwMi9tTXBKVGZhZDdm
WVc1QjBGbWhUbjlvZWMzN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBTK2rw+tSs3ytZHYxl0jT5qrBwnPs9il9jA6e0hC2USXeOnPwTfN4w
R1n0JcJV1IshnQ+NAXQbT+q0/1ZtSp9+wAUxsETW6UfeR6VQ6M7YdVj+o0vCorcq
0vkGht64xUMUHxHEHXWE8HzByS7TnYCGvHgTtL9E/RGGiGZ8EF2Rp4wbPSn4llpc
by3dHcnX3NGh4fiIfxjBe4jBiWvBvl5ncFIA3OR2ctFZFfIJCzABadJFq5zafWcJ
Y86nOd+XeCr2lXQVtRaUP3kP2pGKWMCojg1KISZlq7yv+JUnmRYkLmG+dR1zVrZl
+uftsvIyd6kXHL2mzdebNTX2svtv7qQG
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:50:21 2025 by rpki-client