Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
File:                     FggPXxr0qlYST_cZXRPoW5OllSE.mft (raw, json)
Hash identifier:          TASLDUUxs6ua+Ruq52ZXY09V51HxOx5XOGHyJ8m6BCE=
Subject key identifier:   44:18:DA:E0:7B:1F:3E:F4:CB:F4:DF:7E:DF:3D:EB:5C:2B:72:A0:0C
Authority key identifier: 16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21
Certificate issuer:       /CN=A9193267/serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
Certificate serial:       01E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
Manifest number:          01E4
Signing time:             Sun 29 Jun 2025 01:49:07 +0000
Manifest this update:     Sun 29 Jun 2025 01:49:07 +0000
Manifest next update:     Sun 06 Jul 2025 01:49:07 +0000
Files and hashes:         1: FggPXxr0qlYST_cZXRPoW5OllSE.crl (hash: 3UlYyRPnuUh4DGIEqCtW/Gbp/Fm/NjCuP+e29d1QAig=)
                          2: F29D0E026EE311ED94338E61C4F9AE02.roa (hash: 33mYAJEejTIdphmOfEnKCIbd2zZ81lml8aEGejVT4Nk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl
                          rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 01:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193267, serialNumber=16080F5F1AF4AA56124FF7195D13E85B93A59521
        Validity
            Not Before: Jun 29 01:49:07 2025 GMT
            Not After : Jul  6 01:49:07 2025 GMT
        Subject: CN=68609b93-bc8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:da:6a:5a:77:7d:94:6f:50:33:06:95:b4:39:
                    63:d5:0e:2e:90:8b:1e:25:b9:5d:19:29:75:43:42:
                    67:7c:07:b4:97:09:37:5a:b5:83:df:8e:cb:20:96:
                    f1:61:6c:48:e0:fa:20:43:ad:6f:d1:e8:9b:c0:69:
                    0d:aa:77:fe:48:68:8b:da:48:b7:7b:1e:0f:28:26:
                    8a:bf:e9:9b:95:9a:fd:91:5a:ac:a5:d7:5f:3d:2c:
                    08:a2:c8:7f:e7:98:75:db:81:15:16:4c:43:ca:37:
                    a4:66:1f:c4:e7:45:94:fe:b0:9d:60:84:f2:c5:36:
                    5e:3d:bc:b2:8a:36:06:6a:91:7c:3e:e7:d1:b9:7f:
                    cc:e8:22:d6:9b:a3:0c:f6:7e:29:ef:57:99:71:c6:
                    40:4f:1e:00:cb:fc:f4:2f:05:fe:77:4b:de:ba:ed:
                    cd:cd:47:f7:2e:29:c8:74:67:7a:21:0c:ef:d2:1c:
                    02:fc:5c:ae:cf:71:5c:a7:47:93:d2:51:f0:07:8e:
                    6a:39:72:59:cd:87:b7:48:d3:98:d2:dc:cb:e3:d1:
                    28:c9:50:36:09:f7:a3:15:03:80:5a:7d:03:e9:cb:
                    39:a6:5c:01:6f:71:0c:0a:e0:5a:86:23:be:6c:34:
                    fa:65:fc:2c:1e:70:b4:5f:40:92:66:b6:bb:4a:7d:
                    e8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:18:DA:E0:7B:1F:3E:F4:CB:F4:DF:7E:DF:3D:EB:5C:2B:72:A0:0C
            X509v3 Authority Key Identifier:
                keyid:16:08:0F:5F:1A:F4:AA:56:12:4F:F7:19:5D:13:E8:5B:93:A5:95:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FggPXxr0qlYST_cZXRPoW5OllSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193267/8966D6FE6EE111EDB45FF360C4F9AE02/FggPXxr0qlYST_cZXRPoW5OllSE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5e:ab:6c:2f:ca:56:1c:74:1c:cc:07:81:33:bb:93:1e:c0:
         56:a8:ac:f9:e2:2e:2a:de:e0:12:3e:21:73:06:8b:56:22:76:
         e5:a3:f8:9b:23:56:7a:61:46:6c:4a:b7:ce:1b:88:bf:68:b8:
         c8:fe:df:f2:72:81:3b:38:9e:b9:9a:c7:be:c1:cf:f4:b0:6a:
         d0:d3:33:71:85:01:1f:22:f4:88:d2:88:aa:68:f6:7d:ca:29:
         0b:f7:c4:85:77:31:f7:06:7d:fe:be:11:7d:44:df:b2:13:ac:
         50:3a:0c:b4:36:fc:ed:50:2c:83:be:63:e9:02:bb:5c:2e:45:
         32:5a:67:ff:fb:31:b3:60:43:70:b4:cc:49:cb:b9:a2:3e:f4:
         6c:b1:e4:58:78:87:8b:08:83:cc:d7:8b:e3:47:bc:96:0a:74:
         84:11:7f:e3:d8:9b:2e:34:41:44:68:1a:28:b1:41:c5:d6:f0:
         3d:c7:da:dc:7f:8b:25:bd:74:95:ea:78:f9:af:09:48:6b:fa:
         26:8f:4f:9f:d5:9e:09:d9:42:ab:15:b2:c2:4a:91:1e:5d:f4:
         63:a1:8b:06:ed:e9:08:82:c4:e7:b1:d0:38:e7:30:ae:47:d4:
         9c:45:72:84:93:72:90:23:9c:62:b7:a4:d7:48:85:3d:82:a6:
         43:76:8f:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTMyNjcxMTAvBgNVBAUTKDE2MDgwRjVGMUFGNEFBNTYxMjRGRjcxOTVEMTNFODVC
OTNBNTk1MjEwHhcNMjUwNjI5MDE0OTA3WhcNMjUwNzA2MDE0OTA3WjAYMRYwFAYD
VQQDEw02ODYwOWI5My1iYzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApNpqWnd9lG9QMwaVtDlj1Q4ukIseJbldGSl1Q0JnfAe0lwk3WrWD347LIJbx
YWxI4PogQ61v0eibwGkNqnf+SGiL2ki3ex4PKCaKv+mblZr9kVqspddfPSwIosh/
55h124EVFkxDyjekZh/E50WU/rCdYITyxTZePbyyijYGapF8PufRuX/M6CLWm6MM
9n4p71eZccZATx4Ay/z0LwX+d0veuu3NzUf3LinIdGd6IQzv0hwC/Fyuz3Fcp0eT
0lHwB45qOXJZzYe3SNOY0tzL49EoyVA2CfejFQOAWn0D6cs5plwBb3EMCuBahiO+
bDT6ZfwsHnC0X0CSZra7Sn3oCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEQY2uB7
Hz70y/Tfft8961wrcqAMMB8GA1UdIwQYMBaAFBYID18a9KpWEk/3GV0T6FuTpZUh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzI2Ny84OTY2RDZGRTZF
RTExMUVEQjQ1RkYzNjBDNEY5QUUwMi9GZ2dQWHhyMHFsWVNUX2NaWFJQb1c1T2xs
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZnZ1BYeHIwcWxZU1RfY1pYUlBvVzVPbGxTRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MzI2Ny84OTY2RDZGRTZFRTExMUVEQjQ1RkYzNjBDNEY5QUUwMi9GZ2dQWHhyMHFs
WVNUX2NaWFJQb1c1T2xsU0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCjXqtsL8pWHHQczAeBM7uTHsBWqKz54i4q3uASPiFzBotWInblo/ib
I1Z6YUZsSrfOG4i/aLjI/t/ycoE7OJ65mse+wc/0sGrQ0zNxhQEfIvSI0oiqaPZ9
yikL98SFdzH3Bn3+vhF9RN+yE6xQOgy0NvztUCyDvmPpArtcLkUyWmf/+zGzYENw
tMxJy7miPvRsseRYeIeLCIPM14vjR7yWCnSEEX/j2JsuNEFEaBoosUHF1vA9x9rc
f4slvXSV6nj5rwlIa/omj0+f1Z4J2UKrFbLCSpEeXfRjoYsG7ekIgsTnsdA45zCu
R9ScRXKEk3KQI5xit6TXSIU9gqZDdo+F
-----END CERTIFICATE-----
Generated at Sun Jun 29 21:04:03 2025 by rpki-client