Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
File:                     mvCw748-tT8U2E-jphBr5kvXgnI.mft (raw, json)
Hash identifier:          Zdb0tUtB9NiAiDu6hG5ux18WwdvqlDFHF41owSZ1Auk=
Subject key identifier:   ED:59:D2:C3:87:8E:0C:13:B9:92:B7:59:7A:9D:E7:A0:43:33:6D:35
Authority key identifier: 9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72
Certificate issuer:       /CN=A91B06CA/serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272
Certificate serial:       0425
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
Manifest number:          0421
Signing time:             Sat 23 Aug 2025 00:33:45 +0000
Manifest this update:     Sat 23 Aug 2025 00:33:44 +0000
Manifest next update:     Sat 30 Aug 2025 00:33:44 +0000
Files and hashes:         1: mvCw748-tT8U2E-jphBr5kvXgnI.crl (hash: 1xCGTcWKldFKX0XF3XdGsFGQ8yjbjI+PKcvUxKR4MHs=)
                          2: 8EB98374776E11ECA05F7133C4F9AE02.roa (hash: 0odSjBqkbrai7nHTuGPVDMCVhidqU26/lOEVMrtNDiQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl
                          rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 00:33:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B06CA, serialNumber=9AF0B0EF8F3EB53F14D84FA3A6106BE64BD78272
        Validity
            Not Before: Aug 23 00:33:44 2025 GMT
            Not After : Aug 30 00:33:44 2025 GMT
        Subject: CN=68a90c69-0191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8e:9f:43:a0:66:6b:d7:bf:ca:8b:e0:68:c3:
                    37:e7:d3:50:76:fc:97:06:a4:0b:ff:a8:80:28:ad:
                    79:11:b6:23:0f:60:34:cd:a6:0f:37:6b:6f:3e:48:
                    e0:2d:2f:9b:f7:2c:ec:19:04:78:8d:5c:36:f3:cd:
                    18:41:6c:15:df:ea:a2:1e:96:9d:e2:83:a4:05:80:
                    4d:63:97:a7:06:e5:58:9b:90:f1:15:a5:1a:b6:36:
                    7c:b9:e5:f3:ae:6a:84:0c:00:b7:ae:06:65:64:ef:
                    55:d3:0a:c4:03:fd:cb:5f:69:dd:46:80:d6:5f:2e:
                    a9:60:ba:5a:74:18:8e:31:d6:3e:0c:e4:2a:d8:ab:
                    0d:c7:00:4f:71:7c:53:c7:0f:54:93:a7:d2:bc:20:
                    00:91:7b:79:4a:ce:39:ae:2b:5d:60:b5:87:fd:22:
                    42:c7:b4:76:d9:9c:f3:84:2f:57:5f:c5:6b:dc:cf:
                    d4:6d:37:bb:0c:a6:07:97:44:e7:53:3c:69:a5:a5:
                    e5:3b:73:a0:ca:be:bb:b1:88:d0:5a:9a:3b:a3:a5:
                    b9:7e:58:8b:e6:57:cf:39:c8:57:6e:fe:a0:de:5d:
                    20:d3:4f:78:0e:7f:99:3a:03:c1:6e:c7:87:b8:d3:
                    2d:74:9f:9f:31:60:b1:4d:05:1b:f4:ec:c1:79:cd:
                    95:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:59:D2:C3:87:8E:0C:13:B9:92:B7:59:7A:9D:E7:A0:43:33:6D:35
            X509v3 Authority Key Identifier:
                keyid:9A:F0:B0:EF:8F:3E:B5:3F:14:D8:4F:A3:A6:10:6B:E6:4B:D7:82:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mvCw748-tT8U2E-jphBr5kvXgnI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B06CA/D2E00872776C11EC8ECA4633C4F9AE02/mvCw748-tT8U2E-jphBr5kvXgnI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:0a:3c:a6:8f:91:7d:c7:84:4f:15:a7:5f:0b:f2:36:38:71:
         0c:90:6b:2a:61:a9:c6:e2:58:5d:da:6c:dc:b5:27:2e:18:00:
         0d:8a:16:ae:18:f4:17:1e:e7:1e:8b:c0:e0:c8:fb:fa:75:34:
         0e:1c:d2:14:2f:d5:48:1b:aa:67:71:d9:94:d7:0c:c6:a7:29:
         98:e1:0d:19:d9:06:07:91:2d:15:0d:c7:ad:4d:ef:99:9e:34:
         93:3a:c3:93:15:9d:5c:2a:13:d4:b1:63:fd:c7:f7:c0:ba:af:
         9d:10:33:41:d1:16:34:60:4a:bb:2f:26:40:01:1c:ab:eb:8d:
         74:5e:0d:45:84:92:0e:a0:ea:41:f2:ac:ae:f3:57:7a:ee:6e:
         1b:0a:8f:a6:44:17:ef:9a:a4:42:95:38:f2:58:c7:b5:0a:40:
         ed:a3:65:3b:4c:be:93:a3:09:3a:aa:ec:18:51:6a:c2:9f:16:
         cf:a6:da:6d:c3:c9:44:c2:1d:dd:1d:71:8a:74:61:67:29:a8:
         eb:64:49:20:fd:2f:d0:98:6b:26:0f:98:74:fb:cc:0b:14:3f:
         7c:9d:45:c6:e4:f3:37:ae:b3:4d:2c:a7:0d:71:26:87:da:de:
         49:50:6e:ce:59:e1:08:64:72:6b:9f:e5:7c:d7:72:2b:00:dc:
         ab:4a:89:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjA2Q0ExMTAvBgNVBAUTKDlBRjBCMEVGOEYzRUI1M0YxNEQ4NEZBM0E2MTA2QkU2
NEJENzgyNzIwHhcNMjUwODIzMDAzMzQ0WhcNMjUwODMwMDAzMzQ0WjAYMRYwFAYD
VQQDEw02OGE5MGM2OS0wMTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9Y6fQ6Bma9e/yovgaMM359NQdvyXBqQL/6iAKK15EbYjD2A0zaYPN2tvPkjg
LS+b9yzsGQR4jVw2880YQWwV3+qiHpad4oOkBYBNY5enBuVYm5DxFaUatjZ8ueXz
rmqEDAC3rgZlZO9V0wrEA/3LX2ndRoDWXy6pYLpadBiOMdY+DOQq2KsNxwBPcXxT
xw9Uk6fSvCAAkXt5Ss45ritdYLWH/SJCx7R22ZzzhC9XX8Vr3M/UbTe7DKYHl0Tn
UzxppaXlO3Ogyr67sYjQWpo7o6W5fliL5lfPOchXbv6g3l0g0094Dn+ZOgPBbseH
uNMtdJ+fMWCxTQUb9OzBec2VzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1Z0sOH
jgwTuZK3WXqd56BDM201MB8GA1UdIwQYMBaAFJrwsO+PPrU/FNhPo6YQa+ZL14Jy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDZDQS9EMkUwMDg3Mjc3
NkMxMUVDOEVDQTQ2MzNDNEY5QUUwMi9tdkN3NzQ4LXRUOFUyRS1qcGhCcjVrdlhn
bkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL212Q3c3NDgtdFQ4VTJFLWpwaEJyNWt2WGduSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDZDQS9EMkUwMDg3Mjc3NkMxMUVDOEVDQTQ2MzNDNEY5QUUwMi9tdkN3NzQ4LXRU
OFUyRS1qcGhCcjVrdlhnbkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKCjymj5F9x4RPFadfC/I2OHEMkGsqYanG4lhd2mzctScuGAANihau
GPQXHucei8DgyPv6dTQOHNIUL9VIG6pncdmU1wzGpymY4Q0Z2QYHkS0VDcetTe+Z
njSTOsOTFZ1cKhPUsWP9x/fAuq+dEDNB0RY0YEq7LyZAARyr6410Xg1FhJIOoOpB
8qyu81d67m4bCo+mRBfvmqRClTjyWMe1CkDto2U7TL6Towk6quwYUWrCnxbPptpt
w8lEwh3dHXGKdGFnKajrZEkg/S/QmGsmD5h0+8wLFD98nUXG5PM3rrNNLKcNcSaH
2t5JUG7OWeEIZHJrn+V813IrANyrSom+
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:16:42 2025 by rpki-client