Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
File:                     tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft (raw, json)
Hash identifier:          eKm19YVHHthAUbZmmxCuohs44j7wF6c/mBsdK+DboJQ=
Subject key identifier:   5F:A8:C4:EB:A3:92:F9:25:AE:8E:23:FB:E7:9C:D4:E9:10:DF:A5:39
Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9
Certificate issuer:       /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
Certificate serial:       0128
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
Manifest number:          011B
Signing time:             Sat 23 Aug 2025 05:07:49 +0000
Manifest this update:     Sat 23 Aug 2025 05:07:49 +0000
Manifest next update:     Sat 30 Aug 2025 05:07:49 +0000
Files and hashes:         1: tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl (hash: weI1F3nqxIWPgimWeX1s8+9qhzEEOS4s/+VIy/b6xmI=)
                          2: 4CF8923058BC11F09869AC87C4F9AE02.roa (hash: zY90zo/xojHjF1wecs/HwesdG3vMHXP6Ku/hhTPUGd8=)
                          3: 6D85335A58BC11F0983EE987C4F9AE02.roa (hash: hN0xUvCUkBl0EboCBMVqvJWCpE5CmPVA1aB8FayA0Ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl
                          rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9
        Validity
            Not Before: Aug 23 05:07:49 2025 GMT
            Not After : Aug 30 05:07:49 2025 GMT
        Subject: CN=68a94ca5-b68a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:49:d4:25:c2:00:39:a5:a8:e3:92:9c:cf:
                    cd:10:86:9c:44:44:b5:c8:c1:41:46:9f:7e:b3:84:
                    d1:a2:80:4d:56:23:95:ee:8a:1b:53:b5:bb:c7:fe:
                    e5:f7:5b:8c:13:12:52:f8:6d:80:a3:95:76:0b:3b:
                    55:8d:ea:4b:57:b2:8d:3d:51:1d:e2:a0:c3:27:0e:
                    2f:32:9a:65:41:a4:32:4a:90:91:4b:2f:52:87:d2:
                    b1:e7:57:fc:26:09:0a:22:4c:fe:ae:e8:98:da:3b:
                    46:b3:64:fa:6b:53:d9:c2:2e:23:7f:9f:b7:48:e2:
                    b9:16:44:fd:3d:59:2e:78:46:43:8a:d4:ff:c9:9e:
                    a6:64:ac:27:4d:33:ec:90:83:96:0f:e3:65:1a:55:
                    80:3f:21:71:41:f8:e9:2b:84:24:c8:c5:e0:a7:f2:
                    a5:02:4e:a1:17:0c:be:0f:a0:ce:7a:9e:eb:a4:82:
                    f4:fd:61:52:e4:ba:e8:84:72:eb:96:0e:72:d7:c8:
                    f6:97:5b:c9:77:df:91:80:7c:89:a6:5e:28:27:34:
                    26:a9:68:ab:e0:db:c1:56:5a:69:c9:0e:9b:ab:ff:
                    6b:23:c1:eb:d6:30:1e:0a:d4:a7:4c:ae:66:c8:d0:
                    89:fc:4f:85:61:d1:a0:9a:ad:2e:ea:c4:4b:80:6c:
                    3b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:A8:C4:EB:A3:92:F9:25:AE:8E:23:FB:E7:9C:D4:E9:10:DF:A5:39
            X509v3 Authority Key Identifier:
                keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:40:a7:a4:a9:b6:c8:da:f1:7f:ca:7f:08:79:52:14:b5:dc:
         9f:7d:10:df:be:65:06:f2:b5:16:06:ec:e0:ac:49:cb:d8:f7:
         c6:dd:a2:5c:60:6a:14:ec:eb:fb:e9:d8:a4:25:65:d8:97:e1:
         e3:d6:67:2c:4f:c6:a1:51:c8:7d:cb:ec:65:be:15:19:91:36:
         6f:1e:48:b1:39:7f:b6:98:b2:7e:a2:e0:3a:06:5e:9b:39:c0:
         da:fc:d9:be:d1:a4:e8:a1:4b:f1:3e:b7:ad:13:9f:9e:e7:18:
         8c:45:89:3e:cb:f7:2f:cc:a6:0d:32:10:45:8e:c7:74:61:53:
         75:77:5a:a6:9c:ff:6c:9c:27:83:73:5d:89:e1:64:17:bf:88:
         86:5f:dd:cc:3a:81:e8:a3:bd:4a:35:0e:52:31:87:bf:bb:9b:
         0c:37:ee:59:d6:8f:ae:a8:47:8f:4a:2f:34:59:c5:7f:74:de:
         ae:be:d1:35:fd:f0:f6:5b:aa:5f:3a:8b:a1:a6:fd:2c:67:44:
         90:f6:64:ee:0b:80:ef:06:f2:0a:c8:eb:ca:5c:ec:e2:0e:ac:
         2a:14:94:e0:35:8f:43:b1:60:2f:ad:b7:1a:91:f5:4e:01:99:
         b7:f0:80:09:b1:41:3b:71:58:c2:45:11:ba:6b:40:38:79:f2:
         78:42:93:ed
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTQ4NDkxMTAvBgNVBAUTKEI2Q0MwMkE3REI4QTREQjUzMEYxMTJCNjIyNEYxOTA4
MDg2OEZCRDkwHhcNMjUwODIzMDUwNzQ5WhcNMjUwODMwMDUwNzQ5WjAYMRYwFAYD
VQQDEw02OGE5NGNhNS1iNjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvvxJ1CXCADmlqOOSnM/NEIacRES1yMFBRp9+s4TRooBNViOV7oobU7W7x/7l
91uMExJS+G2Ao5V2CztVjepLV7KNPVEd4qDDJw4vMpplQaQySpCRSy9Sh9Kx51f8
JgkKIkz+ruiY2jtGs2T6a1PZwi4jf5+3SOK5FkT9PVkueEZDitT/yZ6mZKwnTTPs
kIOWD+NlGlWAPyFxQfjpK4QkyMXgp/KlAk6hFwy+D6DOep7rpIL0/WFS5LrohHLr
lg5y18j2l1vJd9+RgHyJpl4oJzQmqWir4NvBVlppyQ6bq/9rI8Hr1jAeCtSnTK5m
yNCJ/E+FYdGgmq0u6sRLgGw7oQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+oxOuj
kvklro4j++ec1OkQ36U5MB8GA1UdIwQYMBaAFLbMAqfbik21MPEStiJPGQgIaPvZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDg0OS8wODdEM0VFOEU2
NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1RiVXc4UksySWs4WkNBaG8t
OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Rzd0NwOXVLVGJVdzhSSzJJazhaQ0Foby05ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NDg0OS8wODdEM0VFOEU2NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1Ri
VXc4UksySWs4WkNBaG8tOWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCqQKekqbbI2vF/yn8IeVIUtdyffRDfvmUG8rUWBuzgrEnL2PfG3aJc
YGoU7Ov76dikJWXYl+Hj1mcsT8ahUch9y+xlvhUZkTZvHkixOX+2mLJ+ouA6Bl6b
OcDa/Nm+0aTooUvxPretE5+e5xiMRYk+y/cvzKYNMhBFjsd0YVN1d1qmnP9snCeD
c12J4WQXv4iGX93MOoHoo71KNQ5SMYe/u5sMN+5Z1o+uqEePSi80WcV/dN6uvtE1
/fD2W6pfOouhpv0sZ0SQ9mTuC4DvBvIKyOvKXOziDqwqFJTgNY9DsWAvrbcakfVO
AZm38IAJsUE7cVjCRRG6a0A4efJ4QpPt
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:38:41 2025 by rpki-client