Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
File:                     f_x8VcpIXDdqYe_sDlN3ZToEw70.mft (raw, json)
Hash identifier:          LU99wW4NOHKwGcFSSq9bvIpyFksBHKaJ0QNJ66hTt68=
Subject key identifier:   99:DA:6F:98:B8:38:10:BC:58:61:69:FA:A4:7E:FC:7B:DF:20:03:BD
Authority key identifier: 7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD
Certificate issuer:       /CN=A91ABD25/serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD
Certificate serial:       022B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
Manifest number:          0220
Signing time:             Sat 23 Aug 2025 02:15:06 +0000
Manifest this update:     Sat 23 Aug 2025 02:15:06 +0000
Manifest next update:     Sat 30 Aug 2025 02:15:06 +0000
Files and hashes:         1: f_x8VcpIXDdqYe_sDlN3ZToEw70.crl (hash: Qt4DFkP8mS/xIFRVCBu+CEkIVj84VxYlLv8AKCNTgI0=)
                          2: 9535628E5C0D11EDA7191A0AC4F9AE02.roa (hash: /cbaTktdW8E1yuwyyLv6euCmC3kworQWAZraDFOpKP8=)
                          3: E7FC6A1A4EAE11EDBF0D8256C4F9AE02.roa (hash: 2mKwnMpgR04h28Vp1kCMChznHcUKBjq3JV55A80+RxM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl
                          rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 02:15:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABD25, serialNumber=7FFC7C55CA485C376A61EFEC0E5377653A04C3BD
        Validity
            Not Before: Aug 23 02:15:06 2025 GMT
            Not After : Aug 30 02:15:06 2025 GMT
        Subject: CN=68a9242a-7372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f1:2d:da:5b:c0:96:2c:83:1c:36:cc:1c:e6:
                    c5:4f:35:dc:36:94:be:68:64:a6:22:e7:7b:64:04:
                    50:0a:8b:a4:26:3d:d9:23:7d:4f:64:cb:54:d7:69:
                    aa:f0:18:eb:f8:e6:dd:5e:31:e8:1c:29:47:90:78:
                    39:87:26:0c:cf:f0:87:50:6f:15:68:61:40:17:9a:
                    b1:10:1b:a5:06:58:f8:6f:23:ff:bd:bd:47:e8:ab:
                    7a:16:54:5a:f2:3c:82:d7:a1:41:62:c6:1b:21:78:
                    c0:06:50:9d:21:7e:ba:7a:da:5b:b7:31:f6:c9:6a:
                    c9:23:c8:a1:6e:a9:46:ce:26:8a:61:ef:26:24:2e:
                    02:99:78:f1:47:9c:10:b2:ec:56:c5:2c:b0:54:c8:
                    cf:20:ce:9d:80:88:56:4f:cf:1f:32:ae:45:b1:41:
                    ec:d6:57:d4:ed:8d:79:53:35:7c:0c:ab:7f:7a:7e:
                    62:dc:a0:08:b5:fb:fb:57:d7:d7:60:56:33:da:28:
                    08:99:8d:c7:a8:bd:7e:06:58:dc:b3:c8:d6:d3:cf:
                    f3:6f:0a:61:5c:7a:ce:65:25:16:e4:69:2b:bb:3e:
                    e6:fd:20:d1:26:29:5b:1a:88:58:fc:51:4e:96:0f:
                    a9:07:40:df:b8:cb:9b:d2:61:a7:fe:28:33:16:6e:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DA:6F:98:B8:38:10:BC:58:61:69:FA:A4:7E:FC:7B:DF:20:03:BD
            X509v3 Authority Key Identifier:
                keyid:7F:FC:7C:55:CA:48:5C:37:6A:61:EF:EC:0E:53:77:65:3A:04:C3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_x8VcpIXDdqYe_sDlN3ZToEw70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABD25/527DD25A4EAC11EDB4F71E38C4F9AE02/f_x8VcpIXDdqYe_sDlN3ZToEw70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:04:8d:09:4e:06:40:b8:da:4c:5f:d2:87:f5:2d:ad:c1:fb:
         00:69:51:e3:79:17:4a:23:d0:58:66:56:86:39:06:18:cc:03:
         b0:79:c2:f1:6c:99:ee:56:67:9a:d8:dd:cc:f4:bb:c1:7a:16:
         fd:35:d7:21:e3:cb:b6:a5:a9:98:cd:6d:5a:1b:a9:69:db:a8:
         94:c5:0d:35:e2:69:62:17:66:9a:4d:8f:02:56:9a:44:43:16:
         62:8a:25:ea:94:5d:c9:79:05:76:eb:37:51:b2:03:5f:ca:f2:
         ea:1a:03:3e:0a:7b:ea:94:cc:dd:b1:7c:42:2f:25:3d:e5:0c:
         2f:31:2d:df:01:16:44:ec:4c:60:6e:de:61:15:d4:55:f7:0f:
         80:23:bd:ff:cb:00:3f:42:cb:fa:3b:d4:f3:ac:66:04:37:28:
         d1:4a:37:5f:09:6e:a4:22:55:20:0d:a6:f2:01:e9:fe:d4:20:
         c7:74:df:6e:56:d7:66:94:43:a6:6b:cb:50:af:44:ee:f9:52:
         ee:47:c7:ff:d0:14:af:59:e3:03:01:a3:72:49:55:1c:0f:59:
         0c:82:3b:17:ca:1f:e2:ea:7a:13:88:00:31:4f:8d:ad:9a:50:
         b9:1a:62:e9:0e:68:e9:7f:f2:70:d7:2e:dc:6c:b5:41:0f:26:
         e3:1c:13:7f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUJEMjUxMTAvBgNVBAUTKDdGRkM3QzU1Q0E0ODVDMzc2QTYxRUZFQzBFNTM3NzY1
M0EwNEMzQkQwHhcNMjUwODIzMDIxNTA2WhcNMjUwODMwMDIxNTA2WjAYMRYwFAYD
VQQDEw02OGE5MjQyYS03MzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0/Et2lvAliyDHDbMHObFTzXcNpS+aGSmIud7ZARQCoukJj3ZI31PZMtU12mq
8Bjr+ObdXjHoHClHkHg5hyYMz/CHUG8VaGFAF5qxEBulBlj4byP/vb1H6Kt6FlRa
8jyC16FBYsYbIXjABlCdIX66etpbtzH2yWrJI8ihbqlGziaKYe8mJC4CmXjxR5wQ
suxWxSywVMjPIM6dgIhWT88fMq5FsUHs1lfU7Y15UzV8DKt/en5i3KAItfv7V9fX
YFYz2igImY3HqL1+Bljcs8jW08/zbwphXHrOZSUW5Gkruz7m/SDRJilbGohY/FFO
lg+pB0DfuMub0mGn/igzFm5ygQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnab5i4
OBC8WGFp+qR+/HvfIAO9MB8GA1UdIwQYMBaAFH/8fFXKSFw3amHv7A5Td2U6BMO9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkQyNS81MjdERDI1QTRF
QUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhEZHFZZV9zRGxOM1pUb0V3
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZfeDhWY3BJWERkcVllX3NEbE4zWlRvRXc3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QkQyNS81MjdERDI1QTRFQUMxMUVEQjRGNzFFMzhDNEY5QUUwMi9mX3g4VmNwSVhE
ZHFZZV9zRGxOM1pUb0V3NzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJBI0JTgZAuNpMX9KH9S2twfsAaVHjeRdKI9BYZlaGOQYYzAOwecLx
bJnuVmea2N3M9LvBehb9Ndch48u2pamYzW1aG6lp26iUxQ014mliF2aaTY8CVppE
QxZiiiXqlF3JeQV26zdRsgNfyvLqGgM+CnvqlMzdsXxCLyU95QwvMS3fARZE7Exg
bt5hFdRV9w+AI73/ywA/Qsv6O9TzrGYENyjRSjdfCW6kIlUgDabyAen+1CDHdN9u
VtdmlEOma8tQr0Tu+VLuR8f/0BSvWeMDAaNySVUcD1kMgjsXyh/i6noTiAAxT42t
mlC5GmLpDmjpf/Jw1y7cbLVBDybjHBN/
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:15:13 2025 by rpki-client