Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft
File:                     _Vx4mxrWjgh0PYbOoMmfx4dr25M.mft (raw, json)
Hash identifier:          Vzs/I3HWOj7u9bRmDB83dvhgStpcoAN5xAm4QNcjl/k=
Subject key identifier:   89:89:5C:8C:AA:45:94:9A:60:40:51:92:55:07:BE:84:1E:36:B2:3E
Authority key identifier: FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93
Certificate issuer:       /CN=A9190B27/serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93
Certificate serial:       069E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft
Manifest number:          0699
Signing time:             Fri 22 Aug 2025 22:22:57 +0000
Manifest this update:     Fri 22 Aug 2025 22:22:57 +0000
Manifest next update:     Fri 29 Aug 2025 22:22:57 +0000
Files and hashes:         1: _Vx4mxrWjgh0PYbOoMmfx4dr25M.crl (hash: W5xOC1sBOY4o8176hf8fVsZVSfmGe+imzgFomdmjE0M=)
                          2: C014EDF67CB911EBBB4E2D1CC4F9AE02.roa (hash: aQZNfhiseoXahMcYa1mO4OhpMyMyYPdZKpX7ChBPpY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.crl
                          rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 22:22:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1694 (0x69e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190B27, serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93
        Validity
            Not Before: Aug 22 22:22:57 2025 GMT
            Not After : Aug 29 22:22:57 2025 GMT
        Subject: CN=68a8edc1-2110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:eb:ba:92:e9:b7:3c:ed:e6:78:4f:14:eb:
                    27:02:45:3d:36:d9:35:01:9a:3a:31:b7:8d:a1:f8:
                    af:24:9c:05:14:c8:ef:10:83:1f:93:f1:29:2d:e5:
                    35:af:42:aa:1f:99:eb:42:29:3a:fd:31:f7:0e:e4:
                    2f:8f:76:2f:60:ec:82:d2:56:2a:e7:95:23:b3:39:
                    8b:0f:6c:15:c5:11:07:81:49:fa:86:f2:ea:74:62:
                    a1:15:83:16:3e:8f:b0:66:6f:04:b1:a5:fa:8d:d1:
                    d5:e0:9e:71:41:dd:41:e3:be:c8:a2:b2:2a:5a:b4:
                    78:e7:d2:ed:6d:34:81:83:ad:27:5f:3a:e4:bf:92:
                    b6:92:ef:ee:8c:36:05:08:cd:2c:8d:38:97:8f:8a:
                    34:b3:89:52:a6:a8:fb:07:0e:8f:a8:43:29:cc:71:
                    cf:d7:f7:b8:05:f2:79:3b:c7:75:e8:ab:36:b9:c5:
                    16:e7:d2:a6:14:9f:b0:cf:46:1f:76:a6:e0:9d:53:
                    6d:8f:64:00:5e:33:1a:8a:ca:de:39:85:99:9d:5d:
                    94:93:7d:23:89:39:7f:97:73:f3:f0:98:3d:30:0f:
                    71:c4:18:1d:40:fc:90:61:54:2d:75:6a:d4:d7:23:
                    30:f3:9b:5c:1c:a6:74:17:37:46:85:99:d9:f4:6b:
                    07:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:89:5C:8C:AA:45:94:9A:60:40:51:92:55:07:BE:84:1E:36:B2:3E
            X509v3 Authority Key Identifier:
                keyid:FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:56:d6:b2:fc:2d:94:ce:c4:04:ee:dd:22:9e:e6:e9:3e:cb:
         53:d1:00:fc:90:79:b5:f7:e2:1a:77:00:48:6c:ba:93:24:b6:
         50:93:0d:7d:1d:08:bd:b9:29:9e:04:80:e8:9f:0b:fd:2c:58:
         73:f0:67:c7:76:e6:2c:2d:aa:e9:f1:42:03:39:c7:97:34:2f:
         b0:b3:a1:64:81:7c:95:73:6f:8b:da:db:23:de:19:47:f7:7b:
         72:88:51:99:e5:48:fc:5e:18:ae:04:4d:de:dd:81:d1:88:ac:
         ed:a8:f4:1a:60:23:fa:ac:41:fe:95:71:8b:56:e0:ae:17:1b:
         43:6b:64:eb:d4:d8:f4:00:58:fb:3e:02:ce:c1:4c:45:83:57:
         00:45:4f:1b:e4:ff:3c:34:ae:48:b7:69:3c:f2:b6:33:4d:fc:
         74:3e:f6:cf:14:f7:9c:72:cc:ee:92:2a:45:b3:78:54:bc:cd:
         a0:b1:a5:c4:77:73:9b:11:dd:a6:59:f0:43:8b:bd:65:ad:1b:
         01:88:8c:3f:91:c1:87:39:87:c1:93:6b:d7:87:f1:7e:a0:c1:
         7a:40:60:18:3d:fa:85:3f:47:96:ac:7d:00:d7:75:5e:0a:cf:
         c3:85:88:c7:5f:08:ff:2f:15:ab:be:3c:85:09:59:01:4e:14:
         8b:68:e7:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBCMjcxMTAvBgNVBAUTKEZENUM3ODlCMUFENjhFMDg3NDNEODZDRUEwQzk5RkM3
ODc2QkRCOTMwHhcNMjUwODIyMjIyMjU3WhcNMjUwODI5MjIyMjU3WjAYMRYwFAYD
VQQDEw02OGE4ZWRjMS0yMTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAslLrupLptzzt5nhPFOsnAkU9Ntk1AZo6MbeNofivJJwFFMjvEIMfk/EpLeU1
r0KqH5nrQik6/TH3DuQvj3YvYOyC0lYq55UjszmLD2wVxREHgUn6hvLqdGKhFYMW
Po+wZm8EsaX6jdHV4J5xQd1B477IorIqWrR459LtbTSBg60nXzrkv5K2ku/ujDYF
CM0sjTiXj4o0s4lSpqj7Bw6PqEMpzHHP1/e4BfJ5O8d16Ks2ucUW59KmFJ+wz0Yf
dqbgnVNtj2QAXjMaisreOYWZnV2Uk30jiTl/l3Pz8Jg9MA9xxBgdQPyQYVQtdWrU
1yMw85tcHKZ0FzdGhZnZ9GsHdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImJXIyq
RZSaYEBRklUHvoQeNrI+MB8GA1UdIwQYMBaAFP1ceJsa1o4IdD2GzqDJn8eHa9uT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEIyNy85RTI0MjkxMDdD
QjgxMUVCQTIwRTAxMUNDNEY5QUUwMi9fVng0bXhyV2pnaDBQWWJPb01tZng0ZHIy
NU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19WeDRteHJXamdoMFBZYk9vTW1meDRkcjI1TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEIyNy85RTI0MjkxMDdDQjgxMUVCQTIwRTAxMUNDNEY5QUUwMi9fVng0bXhyV2pn
aDBQWWJPb01tZng0ZHIyNU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBEVtay/C2UzsQE7t0inubpPstT0QD8kHm19+IadwBIbLqTJLZQkw19
HQi9uSmeBIDonwv9LFhz8GfHduYsLarp8UIDOceXNC+ws6FkgXyVc2+L2tsj3hlH
93tyiFGZ5Uj8XhiuBE3e3YHRiKztqPQaYCP6rEH+lXGLVuCuFxtDa2Tr1Nj0AFj7
PgLOwUxFg1cARU8b5P88NK5It2k88rYzTfx0PvbPFPeccszukipFs3hUvM2gsaXE
d3ObEd2mWfBDi71lrRsBiIw/kcGHOYfBk2vXh/F+oMF6QGAYPfqFP0eWrH0A13Ve
Cs/DhYjHXwj/LxWrvjyFCVkBThSLaOfC
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:12:35 2025 by rpki-client