Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
File:                     rKkepAl9np8x9W76xr1I8Ba-mNM.mft (raw, json)
Hash identifier:          wZi2kIOJCD3J86QLlq8XI51qXXZHymyOCjCN3cwlRck=
Subject key identifier:   5A:61:A3:3E:B0:4B:8A:92:E9:62:D6:CE:68:32:07:1B:40:60:B4:60
Authority key identifier: AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3
Certificate issuer:       /CN=A919905B/serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
Certificate serial:       05C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
Manifest number:          05BE
Signing time:             Fri 22 Aug 2025 23:16:45 +0000
Manifest this update:     Fri 22 Aug 2025 23:16:45 +0000
Manifest next update:     Fri 29 Aug 2025 23:16:45 +0000
Files and hashes:         1: rKkepAl9np8x9W76xr1I8Ba-mNM.crl (hash: 9XQnUXmD0Eh+KFylfWyOLVCJC+BN80t3PZ2TJWFgjUg=)
                          2: 7B16F590D3EA11EB99BAC229C4F9AE02.roa (hash: fgnyTe5aBHpvAstEwjQrp1aBpknZRHuqjkJbh+yJFsc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl
                          rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475 (0x5c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919905B, serialNumber=ACA91EA4097D9E9F31F56EFAC6BD48F016BE98D3
        Validity
            Not Before: Aug 22 23:16:45 2025 GMT
            Not After : Aug 29 23:16:45 2025 GMT
        Subject: CN=68a8fa5d-014c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:47:48:5b:2e:a5:fc:f7:72:8f:7f:f8:ed:
                    29:24:51:61:f8:5b:7e:48:07:10:7f:61:63:3c:bb:
                    5e:76:07:b5:52:fc:79:46:51:f8:12:2f:30:90:b1:
                    48:16:0a:8b:53:91:88:97:ff:66:02:7c:5b:31:c2:
                    10:3d:a7:6d:28:dc:ae:58:f6:b6:9b:06:63:c2:85:
                    fa:07:98:b7:7a:46:c1:ba:c0:a0:39:e7:37:24:71:
                    31:22:1f:8e:30:e8:5d:ea:f5:b8:23:6b:96:3f:34:
                    ea:10:2d:75:f6:83:49:37:35:4e:62:64:80:ae:c5:
                    4c:4b:89:bf:99:70:9c:ec:15:f4:25:19:ec:cd:e9:
                    a2:79:c6:6b:94:91:fc:fe:04:14:e4:5b:fb:12:71:
                    45:72:bd:ec:8d:23:07:d0:7d:c5:26:e4:c9:66:20:
                    28:f6:e4:7a:70:29:a6:26:95:1d:00:4f:d7:03:22:
                    75:73:e2:b1:e6:1a:22:58:b2:e4:70:c1:e9:23:f6:
                    ac:09:64:39:3d:6b:c8:84:d8:83:89:3e:71:d3:cc:
                    99:a7:f5:2f:a4:6a:77:c3:01:dc:d5:3b:b5:0d:1e:
                    90:fe:22:67:74:7b:b2:f1:a7:4f:ca:aa:87:d7:6b:
                    bb:3d:b9:dc:35:da:e7:02:c1:0d:f9:4d:e3:cf:86:
                    90:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:61:A3:3E:B0:4B:8A:92:E9:62:D6:CE:68:32:07:1B:40:60:B4:60
            X509v3 Authority Key Identifier:
                keyid:AC:A9:1E:A4:09:7D:9E:9F:31:F5:6E:FA:C6:BD:48:F0:16:BE:98:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKkepAl9np8x9W76xr1I8Ba-mNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919905B/166FC886D3E711EB99501D24C4F9AE02/rKkepAl9np8x9W76xr1I8Ba-mNM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:23:52:4f:bb:df:bd:db:82:bb:3a:c7:3d:ad:1e:ff:82:84:
         98:6e:19:62:7e:53:7e:d0:ac:21:e6:4a:41:ab:f3:ce:94:35:
         45:26:15:22:1f:3a:66:99:75:f9:7a:0b:c6:15:92:d9:24:bb:
         7d:c6:50:b6:4e:cc:a0:ec:7b:b7:4b:ec:69:34:b1:1e:f1:d4:
         09:c4:22:68:7a:5d:40:93:0e:d4:20:32:a5:28:55:c4:c7:7f:
         ce:cd:ea:a9:d7:91:67:5a:b2:4c:4b:d6:4b:8b:ff:c9:b7:6d:
         40:af:d6:cc:45:eb:d7:8e:54:a3:5c:d1:15:8c:a6:cb:55:73:
         3b:46:46:27:6b:82:77:06:9f:a8:87:8c:e3:2e:cb:13:27:2d:
         eb:d4:51:33:e8:28:69:55:b1:5a:10:ec:ac:13:ab:16:b2:ec:
         82:61:fd:47:b9:d1:9c:9b:0a:3b:d5:92:04:f6:f5:63:49:19:
         53:78:9d:55:2f:d8:5a:19:10:15:17:2b:be:37:30:2f:72:16:
         c5:01:fb:26:46:e9:30:99:79:e1:13:61:2d:04:65:cd:b1:52:
         c7:81:11:ee:70:ef:95:0d:c8:4f:04:37:e9:19:94:7e:ba:3b:
         f0:c7:f0:b4:08:51:ea:52:d5:d4:b3:f6:99:8c:c4:3a:f1:ed:
         77:8f:51:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkwNUIxMTAvBgNVBAUTKEFDQTkxRUE0MDk3RDlFOUYzMUY1NkVGQUM2QkQ0OEYw
MTZCRTk4RDMwHhcNMjUwODIyMjMxNjQ1WhcNMjUwODI5MjMxNjQ1WjAYMRYwFAYD
VQQDEw02OGE4ZmE1ZC0wMTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0ulHSFsupfz3co9/+O0pJFFh+Ft+SAcQf2FjPLtedge1Uvx5RlH4Ei8wkLFI
FgqLU5GIl/9mAnxbMcIQPadtKNyuWPa2mwZjwoX6B5i3ekbBusCgOec3JHExIh+O
MOhd6vW4I2uWPzTqEC119oNJNzVOYmSArsVMS4m/mXCc7BX0JRnszemiecZrlJH8
/gQU5Fv7EnFFcr3sjSMH0H3FJuTJZiAo9uR6cCmmJpUdAE/XAyJ1c+Kx5hoiWLLk
cMHpI/asCWQ5PWvIhNiDiT5x08yZp/UvpGp3wwHc1Tu1DR6Q/iJndHuy8adPyqqH
12u7PbncNdrnAsEN+U3jz4aQvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFphoz6w
S4qS6WLWzmgyBxtAYLRgMB8GA1UdIwQYMBaAFKypHqQJfZ6fMfVu+sa9SPAWvpjT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTA1Qi8xNjZGQzg4NkQz
RTcxMUVCOTk1MDFEMjRDNEY5QUUwMi9yS2tlcEFsOW5wOHg5Vzc2eHIxSThCYS1t
Tk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JLa2VwQWw5bnA4eDlXNzZ4cjFJOEJhLW1OTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTA1Qi8xNjZGQzg4NkQzRTcxMUVCOTk1MDFEMjRDNEY5QUUwMi9yS2tlcEFsOW5w
OHg5Vzc2eHIxSThCYS1tTk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBiI1JPu9+924K7Osc9rR7/goSYbhliflN+0Kwh5kpBq/POlDVFJhUi
HzpmmXX5egvGFZLZJLt9xlC2Tsyg7Hu3S+xpNLEe8dQJxCJoel1Akw7UIDKlKFXE
x3/Ozeqp15FnWrJMS9ZLi//Jt21Ar9bMRevXjlSjXNEVjKbLVXM7RkYna4J3Bp+o
h4zjLssTJy3r1FEz6ChpVbFaEOysE6sWsuyCYf1HudGcmwo71ZIE9vVjSRlTeJ1V
L9haGRAVFyu+NzAvchbFAfsmRukwmXnhE2EtBGXNsVLHgRHucO+VDchPBDfpGZR+
ujvwx/C0CFHqUtXUs/aZjMQ68e13j1Gg
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:01:16 2025 by rpki-client