Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
File:                     LViYkEjCGfAQiK5yv64JcN9dpjY.mft (raw, json)
Hash identifier:          bviFJCHLsvZYmGrsALa+pLv4zNTPhcpm8AsKgl2iAEw=
Subject key identifier:   37:60:7C:9A:1F:F6:BC:8E:E5:7C:39:73:7D:4A:78:69:9A:FF:5D:25
Authority key identifier: 2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36
Certificate issuer:       /CN=A919690C/serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
Certificate serial:       09BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
Manifest number:          09AC
Signing time:             Fri 22 Aug 2025 20:11:28 +0000
Manifest this update:     Fri 22 Aug 2025 20:11:28 +0000
Manifest next update:     Fri 29 Aug 2025 20:11:28 +0000
Files and hashes:         1: LViYkEjCGfAQiK5yv64JcN9dpjY.crl (hash: kz+U20x/hIsnOT1P8vq67z3Tt/4dHu74UDok74iUBoQ=)
                          2: 87818166020D11EF916F0D65C4F9AE02.roa (hash: 4GMMhSURpIBkWAvEdhOIay2AAC4Jz1BwpUEUv1geigk=)
                          3: B0EE80B28FBB11EAA0855C73C4F9AE02.roa (hash: H4bAXJJ+0ihkBBeD63YdMNR3q/0ZrnIacu1H+UbOy6o=)
                          4: E5E0FAAC020D11EF9DEBCD65C4F9AE02.roa (hash: DwD2XfQzkUEDcTcYe00tSnenB6ZWlHETqrcMuPPWI98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl
                          rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2492 (0x9bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919690C, serialNumber=2D58989048C219F01088AE72BFAE0970DF5DA636
        Validity
            Not Before: Aug 22 20:11:28 2025 GMT
            Not After : Aug 29 20:11:28 2025 GMT
        Subject: CN=68a8cef0-dd07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:2f:87:42:b7:5c:af:fd:69:36:c3:2f:d5:
                    0b:de:23:05:80:34:e7:54:46:46:0b:63:59:1e:31:
                    8a:0f:d6:5f:8b:3a:77:2f:aa:91:4d:24:1f:a7:de:
                    81:9d:c0:f3:db:cc:3d:ed:cc:9b:0a:a3:ca:70:ac:
                    8b:f6:3d:71:b0:46:2b:95:33:09:58:ce:29:31:c8:
                    6f:11:ec:62:21:18:92:d4:f5:2e:d9:fc:40:f4:9d:
                    5d:15:54:a0:f1:7d:85:90:db:a9:fa:74:79:89:eb:
                    86:22:24:aa:f3:1a:de:0c:72:fe:40:8a:3f:a6:6f:
                    f2:06:4f:22:54:20:89:47:ac:c9:bd:83:7b:b7:32:
                    b1:6b:08:a4:70:fc:7a:54:6a:21:71:52:9a:29:06:
                    be:1e:15:b3:15:a5:cc:9f:d5:ab:59:c1:b2:05:12:
                    6e:1d:79:e7:f0:f5:15:6b:5d:48:c9:b7:8f:07:73:
                    92:d2:46:df:c8:35:b7:55:9f:41:46:7f:bc:34:6b:
                    f4:4a:a6:70:9c:da:83:61:28:b0:19:7f:07:f0:ce:
                    c4:13:92:97:02:a0:5d:bf:3f:06:f1:a4:cd:5c:bd:
                    75:e0:6f:1f:d9:4c:12:90:05:bf:4b:84:ed:4c:14:
                    19:af:1f:55:b2:c1:a3:5a:4f:5e:42:fa:55:08:3d:
                    63:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:60:7C:9A:1F:F6:BC:8E:E5:7C:39:73:7D:4A:78:69:9A:FF:5D:25
            X509v3 Authority Key Identifier:
                keyid:2D:58:98:90:48:C2:19:F0:10:88:AE:72:BF:AE:09:70:DF:5D:A6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LViYkEjCGfAQiK5yv64JcN9dpjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919690C/D3D5848C8FBA11EAA34AC072C4F9AE02/LViYkEjCGfAQiK5yv64JcN9dpjY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:8b:df:87:08:8d:7d:3f:b9:93:02:39:f4:a2:22:6a:ff:29:
         93:4e:3a:f2:20:df:2c:ad:74:e5:82:1e:f7:b3:15:dc:98:9d:
         8f:21:19:09:6d:ec:45:33:06:73:0b:6a:9c:98:ce:6c:6f:57:
         f2:f2:c6:2a:86:1a:d9:5b:fd:85:a2:14:2f:c0:5c:13:fc:fd:
         b6:40:74:21:71:4f:dd:08:28:aa:41:17:d1:7c:86:ad:09:68:
         63:75:ed:aa:89:cc:ff:05:72:69:c8:1c:5e:c0:f3:ea:ed:8a:
         19:71:f7:90:79:5c:2f:93:b0:8f:39:1a:53:c9:2f:45:45:3b:
         77:ce:16:f7:96:91:e4:d5:be:7d:64:87:c8:98:d7:92:b5:22:
         c6:7b:af:1c:39:b1:ee:f1:87:74:68:dc:02:3a:5a:b4:eb:11:
         c8:2d:f3:f0:cf:ab:1d:26:b1:e4:26:9d:33:14:e8:ef:ba:cf:
         7b:80:ee:e3:f9:98:74:dd:d5:38:cd:d9:af:79:3d:ee:17:01:
         ec:7f:7c:c6:51:00:3e:7f:ea:ce:3d:41:6d:58:3d:e5:34:a3:
         6b:60:5b:a5:b0:95:02:b9:73:48:22:b8:d3:fd:e3:ae:66:f5:
         0c:00:14:aa:37:31:06:3b:d0:6d:9b:af:5e:e1:ae:9a:be:7c:
         2f:cd:c5:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTY5MEMxMTAvBgNVBAUTKDJENTg5ODkwNDhDMjE5RjAxMDg4QUU3MkJGQUUwOTcw
REY1REE2MzYwHhcNMjUwODIyMjAxMTI4WhcNMjUwODI5MjAxMTI4WjAYMRYwFAYD
VQQDEw02OGE4Y2VmMC1kZDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtQQvh0K3XK/9aTbDL9UL3iMFgDTnVEZGC2NZHjGKD9Zfizp3L6qRTSQfp96B
ncDz28w97cybCqPKcKyL9j1xsEYrlTMJWM4pMchvEexiIRiS1PUu2fxA9J1dFVSg
8X2FkNup+nR5ieuGIiSq8xreDHL+QIo/pm/yBk8iVCCJR6zJvYN7tzKxawikcPx6
VGohcVKaKQa+HhWzFaXMn9WrWcGyBRJuHXnn8PUVa11IybePB3OS0kbfyDW3VZ9B
Rn+8NGv0SqZwnNqDYSiwGX8H8M7EE5KXAqBdvz8G8aTNXL114G8f2UwSkAW/S4Tt
TBQZrx9VssGjWk9eQvpVCD1jswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdgfJof
9ryO5Xw5c31KeGma/10lMB8GA1UdIwQYMBaAFC1YmJBIwhnwEIiucr+uCXDfXaY2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NjkwQy9EM0Q1ODQ4QzhG
QkExMUVBQTM0QUMwNzJDNEY5QUUwMi9MVmlZa0VqQ0dmQVFpSzV5djY0SmNOOWRw
alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xWaVlrRWpDR2ZBUWlLNXl2NjRKY045ZHBqWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NjkwQy9EM0Q1ODQ4QzhGQkExMUVBQTM0QUMwNzJDNEY5QUUwMi9MVmlZa0VqQ0dm
QVFpSzV5djY0SmNOOWRwalkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCTi9+HCI19P7mTAjn0oiJq/ymTTjryIN8srXTlgh73sxXcmJ2PIRkJ
bexFMwZzC2qcmM5sb1fy8sYqhhrZW/2FohQvwFwT/P22QHQhcU/dCCiqQRfRfIat
CWhjde2qicz/BXJpyBxewPPq7YoZcfeQeVwvk7CPORpTyS9FRTt3zhb3lpHk1b59
ZIfImNeStSLGe68cObHu8Yd0aNwCOlq06xHILfPwz6sdJrHkJp0zFOjvus97gO7j
+Zh03dU4zdmveT3uFwHsf3zGUQA+f+rOPUFtWD3lNKNrYFulsJUCuXNIIrjT/eOu
ZvUMABSqNzEGO9Btm69e4a6avnwvzcUI
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:37:33 2025 by rpki-client