Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
File:                     8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft (raw, json)
Hash identifier:          JedC1/Ma0XPs54M/TvFcahKpkVjehgyEiZGpJ2d5ZnI=
Subject key identifier:   F7:5C:9C:5A:77:E4:AB:F3:66:C8:DE:7F:61:4F:2D:E8:EA:B0:8C:15
Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F
Certificate issuer:       /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
Certificate serial:       0230
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
Manifest number:          0223
Signing time:             Sat 23 Aug 2025 02:12:38 +0000
Manifest this update:     Sat 23 Aug 2025 02:12:38 +0000
Manifest next update:     Sat 30 Aug 2025 02:12:38 +0000
Files and hashes:         1: 8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl (hash: e866KFtMPvw1+qmEcWbWTU9LlKeFWtG0wpR24IzFMTA=)
                          2: E7312F4C5DE211ED9D5E6613C4F9AE02.roa (hash: rc/VDMjkPbB4X1/rw349yGgl9pIXGG2Nvyj57rr+IWw=)
                          3: 50C409A4591811EDA0DEE335C4F9AE02.roa (hash: 1pnwFpSmR4EBTHjCO/gvMKBX3b/KZHcHGgKDB9usLIo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl
                          rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:12:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93BB, serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
        Validity
            Not Before: Aug 23 02:12:38 2025 GMT
            Not After : Aug 30 02:12:38 2025 GMT
        Subject: CN=68a92396-881d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:7f:ea:51:0c:a5:96:ff:80:00:9e:dc:48:
                    bc:f6:2d:28:80:84:06:32:36:8a:e7:99:29:1c:a5:
                    a4:d1:33:97:5f:0e:85:6d:e3:39:4e:76:dd:25:70:
                    58:dc:c8:18:93:a3:48:31:36:42:be:e3:aa:ba:8a:
                    ea:c5:15:d3:24:62:58:ff:cd:7a:bd:23:ea:f6:16:
                    a1:ab:0c:f1:92:f2:b4:19:dc:67:e3:80:0f:a1:8e:
                    e6:7d:92:62:66:13:7c:bf:56:76:9b:41:13:e6:73:
                    16:e9:5f:b2:19:3b:c8:f6:16:e3:4f:5f:de:cf:09:
                    3e:6a:d9:f9:fa:c3:22:90:5c:6e:88:ad:2b:6d:70:
                    6a:03:17:04:e1:16:14:b7:d5:58:12:e3:54:39:bc:
                    21:07:43:31:3c:e3:2a:78:c8:89:69:3c:a7:ab:f8:
                    85:1c:b4:45:a6:af:96:3c:af:72:da:2c:4d:23:5f:
                    27:c7:23:86:35:ff:45:fa:17:22:93:43:c7:79:06:
                    8c:a4:f4:8b:9a:3a:cb:ac:40:af:91:9d:56:3f:87:
                    93:86:6c:71:e9:d1:13:30:04:f1:ce:e8:2a:99:b7:
                    61:4f:f8:d8:92:9b:69:b8:22:25:2d:55:40:12:05:
                    68:70:4f:69:6d:10:47:47:47:4a:c0:22:8b:c9:e2:
                    e8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5C:9C:5A:77:E4:AB:F3:66:C8:DE:7F:61:4F:2D:E8:EA:B0:8C:15
            X509v3 Authority Key Identifier:
                keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:25:f7:0c:31:7c:81:5d:4f:c1:19:19:8d:db:47:0a:a4:ff:
         6b:e1:4f:1f:5d:ef:9b:9c:51:1b:36:a1:fc:5b:c5:34:d2:16:
         64:7f:09:09:60:b8:a5:7b:e5:22:fc:a0:43:48:bb:65:17:5e:
         2a:b4:5e:a9:25:3c:fd:d1:3f:84:d4:5d:85:40:0f:83:96:f0:
         b3:79:7e:ee:b9:1a:ee:3a:06:1f:30:e8:a8:69:15:d0:3d:86:
         8f:cc:5d:d3:27:be:c5:89:11:dc:6f:21:33:02:98:f5:2f:dd:
         61:23:3f:98:49:19:fe:cd:94:78:a3:d2:5b:49:4b:2c:8f:3f:
         0e:80:ad:d0:90:7d:17:0b:05:44:b7:4a:ee:b5:9a:90:d5:6c:
         ee:26:f3:91:27:c7:7f:0a:e7:c8:1d:26:4c:33:88:00:46:fb:
         4d:2d:d0:f8:c6:e5:24:5d:7c:a2:16:9e:84:cb:d0:c7:84:c2:
         36:4e:35:c7:79:b8:65:c7:34:03:3a:ef:b9:4c:2a:68:45:2c:
         54:8f:8d:82:a4:5f:54:10:d8:c0:ed:48:66:1f:00:f0:bf:34:
         c2:4d:b2:18:a5:47:e7:e5:3c:71:e8:31:7a:46:30:3c:c8:7b:
         1f:34:c4:6a:93:65:a9:5c:1c:09:4c:34:34:dc:7d:75:ef:20:
         f3:2c:cc:2a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTkzQkIxMTAvBgNVBAUTKEYzRTVFMjU2RDJFQzVDQTY3RjhBMTlCRTVBMUIyODI5
QjEzNzU4MUYwHhcNMjUwODIzMDIxMjM4WhcNMjUwODMwMDIxMjM4WjAYMRYwFAYD
VQQDEw02OGE5MjM5Ni04ODFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvBd/6lEMpZb/gACe3Ei89i0ogIQGMjaK55kpHKWk0TOXXw6FbeM5TnbdJXBY
3MgYk6NIMTZCvuOquorqxRXTJGJY/816vSPq9hahqwzxkvK0Gdxn44APoY7mfZJi
ZhN8v1Z2m0ET5nMW6V+yGTvI9hbjT1/ezwk+atn5+sMikFxuiK0rbXBqAxcE4RYU
t9VYEuNUObwhB0MxPOMqeMiJaTynq/iFHLRFpq+WPK9y2ixNI18nxyOGNf9F+hci
k0PHeQaMpPSLmjrLrECvkZ1WP4eThmxx6dETMATxzugqmbdhT/jYkptpuCIlLVVA
EgVocE9pbRBHR0dKwCKLyeLohQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdcnFp3
5KvzZsjef2FPLejqsIwVMB8GA1UdIwQYMBaAFPPl4lbS7Fymf4oZvlobKCmxN1gf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTNCQi85NDUxRDM3MjRB
MDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hLWl9paG0tV2hzb0tiRTNX
QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzgtWGlWdExzWEtaX2lobS1XaHNvS2JFM1dCOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTNCQi85NDUxRDM3MjRBMDQxMUVEQjZFQTk1NzZDNEY5QUUwMi84LVhpVnRMc1hL
Wl9paG0tV2hzb0tiRTNXQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUJfcMMXyBXU/BGRmN20cKpP9r4U8fXe+bnFEbNqH8W8U00hZkfwkJ
YLile+Ui/KBDSLtlF14qtF6pJTz90T+E1F2FQA+DlvCzeX7uuRruOgYfMOioaRXQ
PYaPzF3TJ77FiRHcbyEzApj1L91hIz+YSRn+zZR4o9JbSUssjz8OgK3QkH0XCwVE
t0rutZqQ1WzuJvORJ8d/CufIHSZMM4gARvtNLdD4xuUkXXyiFp6Ey9DHhMI2TjXH
ebhlxzQDOu+5TCpoRSxUj42CpF9UENjA7UhmHwDwvzTCTbIYpUfn5Txx6DF6RjA8
yHsfNMRqk2WpXBwJTDQ03H117yDzLMwq
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:37:26 2025 by rpki-client