Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
File:                     mPTtHqVu_jfKE0-HapZfKsb6N0g.mft (raw, json)
Hash identifier:          WrnViRtjFvmbBqRR9fJP6ywTBOZUayB838Td+uO5cic=
Subject key identifier:   9B:31:73:9D:F7:02:69:A5:DF:9A:87:12:07:9E:45:CD:BB:83:F4:6B
Authority key identifier: 98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48
Certificate issuer:       /CN=A9190EF5/serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
Manifest number:          014D
Signing time:             Thu 03 Jul 2025 04:17:08 +0000
Manifest this update:     Thu 03 Jul 2025 04:17:07 +0000
Manifest next update:     Thu 10 Jul 2025 04:17:07 +0000
Files and hashes:         1: mPTtHqVu_jfKE0-HapZfKsb6N0g.crl (hash: 1JXlVUzb/O36soh7cw5kFx4WHdUHycAOWJCnbMeSZPA=)
                          2: 688DBA84577911EE8A10F47BC4F9AE02.roa (hash: Fm4uHiAUi3X+9CLHzcIf57OhsNaBKsN/1TP2wSaWGkE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl
                          rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190EF5, serialNumber=98F4ED1EA56EFE37CA134F876A965F2AC6FA3748
        Validity
            Not Before: Jul  3 04:17:07 2025 GMT
            Not After : Jul 10 04:17:07 2025 GMT
        Subject: CN=68660444-e0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:e9:0f:d3:b9:ae:25:14:34:61:4f:aa:db:
                    a4:fa:0e:af:56:68:2a:54:e0:ec:49:5c:4b:89:25:
                    c9:f1:ae:03:13:a7:40:aa:d6:aa:e5:eb:ca:55:63:
                    23:c5:70:a0:bc:46:79:a8:5e:94:d8:f9:b5:e9:50:
                    f7:3a:9e:ba:9f:64:f1:1b:60:5f:07:7b:ff:bf:84:
                    ee:4e:6c:d9:c3:36:08:c1:ca:9c:a6:05:18:4c:aa:
                    e8:a8:ad:49:51:d6:8b:c9:4f:f3:8d:0b:81:ec:75:
                    30:ab:2a:a7:9f:4b:3b:31:bd:6d:46:8d:76:30:7a:
                    38:6e:e2:19:ea:21:f6:88:7a:07:c6:59:c8:81:97:
                    17:9d:42:fc:4b:5e:97:b5:52:d6:9c:6f:0a:46:b3:
                    23:c4:d8:fc:70:c3:cf:c8:fd:e7:44:64:1b:5a:d7:
                    ca:61:42:5c:7b:08:3f:f1:13:f0:97:15:b0:68:11:
                    e0:7a:c3:fc:8b:01:09:19:61:2f:17:95:01:a7:0f:
                    b1:94:3e:1a:0a:fb:a9:4d:db:85:28:cb:14:7b:21:
                    3e:5d:1d:70:13:dc:95:8d:aa:87:c4:67:41:b8:b4:
                    15:2e:6e:7d:29:8b:42:91:8b:8c:0c:ff:ff:43:31:
                    24:4f:e4:64:63:6d:18:67:dd:26:d4:9a:ee:2e:34:
                    35:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:31:73:9D:F7:02:69:A5:DF:9A:87:12:07:9E:45:CD:BB:83:F4:6B
            X509v3 Authority Key Identifier:
                keyid:98:F4:ED:1E:A5:6E:FE:37:CA:13:4F:87:6A:96:5F:2A:C6:FA:37:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mPTtHqVu_jfKE0-HapZfKsb6N0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190EF5/9406628E577811EE8CDF857AC4F9AE02/mPTtHqVu_jfKE0-HapZfKsb6N0g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f1:94:03:21:73:e3:e1:00:a7:18:ec:33:fc:c8:8c:6d:0c:
         e2:d0:d6:e1:72:ee:1b:d2:22:be:a1:9c:dd:ce:cf:f3:3e:4c:
         76:83:b7:38:e1:6b:0f:6c:ba:a6:62:70:c5:da:88:d1:cf:14:
         76:8a:83:a4:3a:22:d7:14:75:f2:6c:a8:d0:d8:e0:b8:b5:c5:
         68:93:36:66:60:15:dc:3a:63:9c:90:bf:e8:ab:75:0f:00:7a:
         1d:cf:ba:f3:b6:82:c1:28:56:3c:d9:33:c8:21:c9:3b:a2:0f:
         2a:31:7d:d3:ca:e9:95:e5:c8:c2:bd:85:2b:fa:fc:46:fd:52:
         df:67:20:cd:fd:3c:41:9e:4d:03:83:0d:d9:65:d1:08:1a:c3:
         39:b6:98:59:eb:d1:53:e6:8e:ea:1d:27:7d:54:09:7b:f8:2e:
         9a:43:f4:81:2b:ee:a0:92:fc:4e:a5:a6:9e:9c:f4:ff:f4:6e:
         71:2b:47:2f:99:37:cf:f5:eb:44:8e:f7:19:f0:d9:6e:1e:fd:
         ef:9a:44:b9:a5:5f:e7:19:0f:9c:ac:75:6e:41:0b:09:9e:c2:
         19:5a:fb:67:2c:4a:9f:00:4a:36:e1:3d:0e:9d:9a:c7:92:a7:
         6f:1e:e8:ac:57:84:0e:90:95:d4:5d:78:e0:25:d1:a8:50:31:
         b2:1b:4a:1f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTBFRjUxMTAvBgNVBAUTKDk4RjRFRDFFQTU2RUZFMzdDQTEzNEY4NzZBOTY1RjJB
QzZGQTM3NDgwHhcNMjUwNzAzMDQxNzA3WhcNMjUwNzEwMDQxNzA3WjAYMRYwFAYD
VQQDEw02ODY2MDQ0NC1lMGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuWHpD9O5riUUNGFPqtuk+g6vVmgqVODsSVxLiSXJ8a4DE6dAqtaq5evKVWMj
xXCgvEZ5qF6U2Pm16VD3Op66n2TxG2BfB3v/v4TuTmzZwzYIwcqcpgUYTKroqK1J
UdaLyU/zjQuB7HUwqyqnn0s7Mb1tRo12MHo4buIZ6iH2iHoHxlnIgZcXnUL8S16X
tVLWnG8KRrMjxNj8cMPPyP3nRGQbWtfKYUJcewg/8RPwlxWwaBHgesP8iwEJGWEv
F5UBpw+xlD4aCvupTduFKMsUeyE+XR1wE9yVjaqHxGdBuLQVLm59KYtCkYuMDP//
QzEkT+RkY20YZ90m1JruLjQ1QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJsxc533
Amml35qHEgeeRc27g/RrMB8GA1UdIwQYMBaAFJj07R6lbv43yhNPh2qWXyrG+jdI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MEVGNS85NDA2NjI4RTU3
NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9qZktFMC1IYXBaZktzYjZO
MGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21QVHRIcVZ1X2pmS0UwLUhhcFpmS3NiNk4wZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MEVGNS85NDA2NjI4RTU3NzgxMUVFOENERjg1N0FDNEY5QUUwMi9tUFR0SHFWdV9q
ZktFMC1IYXBaZktzYjZOMGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA08ZQDIXPj4QCnGOwz/MiMbQzi0Nbhcu4b0iK+oZzdzs/zPkx2g7c4
4WsPbLqmYnDF2ojRzxR2ioOkOiLXFHXybKjQ2OC4tcVokzZmYBXcOmOckL/oq3UP
AHodz7rztoLBKFY82TPIIck7og8qMX3TyumV5cjCvYUr+vxG/VLfZyDN/TxBnk0D
gw3ZZdEIGsM5tphZ69FT5o7qHSd9VAl7+C6aQ/SBK+6gkvxOpaaenPT/9G5xK0cv
mTfP9etEjvcZ8NluHv3vmkS5pV/nGQ+crHVuQQsJnsIZWvtnLEqfAEo24T0OnZrH
kqdvHuisV4QOkJXUXXjgJdGoUDGyG0of
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:12:39 2025 by rpki-client