Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
File:                     8bt55W0rCYaSzH0fIm91bHlh4Zs.mft (raw, json)
Hash identifier:          +e3XYYa0mH4CUpO+/bPW3UbnFCWCNdB3/gnrKOqPmDo=
Subject key identifier:   EA:C7:5B:DD:0F:45:62:BE:95:A9:DA:FA:06:9D:53:66:4F:4A:5B:31
Authority key identifier: F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B
Certificate issuer:       /CN=A91A29A1/serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B
Certificate serial:       0778
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
Manifest number:          0773
Signing time:             Wed 02 Jul 2025 21:49:35 +0000
Manifest this update:     Wed 02 Jul 2025 21:49:35 +0000
Manifest next update:     Wed 09 Jul 2025 21:49:35 +0000
Files and hashes:         1: 8bt55W0rCYaSzH0fIm91bHlh4Zs.crl (hash: IKllvkvaLGMJzM1GPO70N+g72C0WpC0AgUJg0jMbtbA=)
                          2: FD33BACA1E5211EBA055EE2BC4F9AE02.roa (hash: rp0zrUH9UGHjL2DLYngSyvnoyMj95GbsV1MCoTzBwJ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl
                          rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 21:49:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1912 (0x778)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29A1, serialNumber=F1BB79E56D2B098692CC7D1F226F756C7961E19B
        Validity
            Not Before: Jul  2 21:49:35 2025 GMT
            Not After : Jul  9 21:49:35 2025 GMT
        Subject: CN=6865a96f-b3f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:ed:6c:1d:4c:da:22:96:b0:50:4d:8c:94:
                    b2:58:19:16:ad:6b:1e:83:1e:e9:59:ad:48:c9:74:
                    dd:6f:57:8e:86:e0:97:28:8b:a7:f1:b1:08:94:b7:
                    64:2d:65:b1:15:be:08:aa:80:5e:b0:83:61:f9:51:
                    24:e7:06:f8:6b:74:7d:20:d3:c6:83:5c:38:64:89:
                    8f:92:60:c0:e6:56:0b:c5:53:ac:39:6a:7b:03:37:
                    99:fb:5d:97:91:5b:45:38:9a:b4:4d:c1:d5:43:12:
                    a7:15:99:c1:8c:a7:f3:b9:07:e0:5c:02:e1:75:5b:
                    ec:20:8c:17:aa:84:81:ed:b9:b3:21:73:52:6e:75:
                    fb:21:32:0c:ca:47:a1:66:cf:ac:bb:7e:6a:5f:07:
                    36:1a:69:f6:18:c3:5e:cb:65:68:45:21:24:f9:01:
                    71:ea:a3:f8:ce:4a:62:34:ee:54:5d:75:a0:a2:2d:
                    dd:4c:b7:a2:bf:9d:2c:82:e5:60:23:f5:9c:ad:73:
                    04:23:c6:92:60:1f:15:cf:7f:98:da:55:03:ef:f3:
                    31:66:23:14:e6:d9:38:11:85:37:60:44:4e:a6:83:
                    62:45:2e:33:cd:ec:a2:4d:cf:ab:68:69:4d:be:b3:
                    c5:39:8c:df:5a:1e:ed:0f:6b:6f:b7:97:e1:ac:6d:
                    d7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C7:5B:DD:0F:45:62:BE:95:A9:DA:FA:06:9D:53:66:4F:4A:5B:31
            X509v3 Authority Key Identifier:
                keyid:F1:BB:79:E5:6D:2B:09:86:92:CC:7D:1F:22:6F:75:6C:79:61:E1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8bt55W0rCYaSzH0fIm91bHlh4Zs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29A1/F8F0EC961E5011EB82078626C4F9AE02/8bt55W0rCYaSzH0fIm91bHlh4Zs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:7e:db:7c:3b:b0:9f:fd:69:70:18:1d:d8:90:0b:de:44:6b:
         a9:a2:97:e6:8c:49:21:48:fb:19:ce:97:d2:17:01:0c:ff:50:
         26:de:a4:a2:ec:bc:5e:08:a0:fa:eb:6e:8b:3f:80:a1:a5:b6:
         92:03:5b:84:41:0b:f8:41:d8:12:5e:5e:e3:3e:f6:20:61:63:
         06:35:c4:72:c6:9b:31:97:41:8d:7c:11:81:02:3d:3c:75:dc:
         16:66:4b:64:ab:f4:44:82:ba:72:24:8a:70:e7:38:be:7e:0c:
         a5:5e:a9:5f:67:f7:17:0b:3c:a1:8f:be:0d:ad:14:23:31:f8:
         23:49:28:d1:df:d2:30:f1:a6:dd:7b:92:50:2d:24:38:95:86:
         13:02:a0:36:06:29:f3:1e:2c:3c:c0:1a:64:c7:0d:fd:01:17:
         6a:76:00:72:10:70:ca:4b:6d:07:94:1e:7b:a2:8d:25:9c:c8:
         c1:9b:6a:a1:47:fe:a6:7b:8b:75:b2:fc:aa:89:d4:5a:38:87:
         67:a7:61:40:14:f0:2c:12:3d:52:a4:c8:81:5a:fa:4e:b7:1e:
         d7:dc:d6:ed:5b:18:e3:4a:8a:a4:4c:02:f6:6c:cb:90:10:1a:
         28:ff:0a:c3:ab:e7:40:03:6a:3c:b9:33:8b:db:02:0c:ea:ea:
         e0:9a:be:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTI5QTExMTAvBgNVBAUTKEYxQkI3OUU1NkQyQjA5ODY5MkNDN0QxRjIyNkY3NTZD
Nzk2MUUxOUIwHhcNMjUwNzAyMjE0OTM1WhcNMjUwNzA5MjE0OTM1WjAYMRYwFAYD
VQQDEw02ODY1YTk2Zi1iM2Y0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu/ztbB1M2iKWsFBNjJSyWBkWrWsegx7pWa1IyXTdb1eOhuCXKIun8bEIlLdk
LWWxFb4IqoBesINh+VEk5wb4a3R9INPGg1w4ZImPkmDA5lYLxVOsOWp7AzeZ+12X
kVtFOJq0TcHVQxKnFZnBjKfzuQfgXALhdVvsIIwXqoSB7bmzIXNSbnX7ITIMykeh
Zs+su35qXwc2Gmn2GMNey2VoRSEk+QFx6qP4zkpiNO5UXXWgoi3dTLeiv50sguVg
I/WcrXMEI8aSYB8Vz3+Y2lUD7/MxZiMU5tk4EYU3YEROpoNiRS4zzeyiTc+raGlN
vrPFOYzfWh7tD2tvt5fhrG3XEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOrHW90P
RWK+lana+gadU2ZPSlsxMB8GA1UdIwQYMBaAFPG7eeVtKwmGksx9HyJvdWx5YeGb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjlBMS9GOEYwRUM5NjFF
NTAxMUVCODIwNzg2MjZDNEY5QUUwMi84YnQ1NVcwckNZYVN6SDBmSW05MWJIbGg0
WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhidDU1VzByQ1lhU3pIMGZJbTkxYkhsaDRacy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MjlBMS9GOEYwRUM5NjFFNTAxMUVCODIwNzg2MjZDNEY5QUUwMi84YnQ1NVcwckNZ
YVN6SDBmSW05MWJIbGg0WnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDfftt8O7Cf/WlwGB3YkAveRGupopfmjEkhSPsZzpfSFwEM/1Am3qSi
7LxeCKD6626LP4ChpbaSA1uEQQv4QdgSXl7jPvYgYWMGNcRyxpsxl0GNfBGBAj08
ddwWZktkq/REgrpyJIpw5zi+fgylXqlfZ/cXCzyhj74NrRQjMfgjSSjR39Iw8abd
e5JQLSQ4lYYTAqA2BinzHiw8wBpkxw39ARdqdgByEHDKS20HlB57oo0lnMjBm2qh
R/6me4t1svyqidRaOIdnp2FAFPAsEj1SpMiBWvpOtx7X3NbtWxjjSoqkTAL2bMuQ
EBoo/wrDq+dAA2o8uTOL2wIM6urgmr6k
-----END CERTIFICATE-----
Generated at Fri Jul 4 06:33:22 2025 by rpki-client