Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
File:                     JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft (raw, json)
Hash identifier:          Pihmr8d/7+CnAgcC+FbHq0ktlqwT4pMs1lnd+IYarGA=
Subject key identifier:   FD:9D:5F:A5:E2:E8:F1:0A:64:7E:92:CA:69:7D:07:B1:19:71:28:EB
Authority key identifier: 24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F
Certificate issuer:       /CN=A91B58FF/serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
Certificate serial:       0764
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
Manifest number:          074A
Signing time:             Fri 22 Aug 2025 21:53:36 +0000
Manifest this update:     Fri 22 Aug 2025 21:53:35 +0000
Manifest next update:     Fri 29 Aug 2025 21:53:35 +0000
Files and hashes:         1: JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl (hash: 3qOV+xb46lnANBUjfqrnwWnkMSxkDRJ+/iLume5Cv5A=)
                          2: A46317803F5211EBB1B1701FC4F9AE02.roa (hash: FMNZ9SsPDMaBsxCn7D6dqqqWjFTqP/F+Fz8blXpHCbk=)
                          3: C74B01CA3C3E11EBA08CAC72C4F9AE02.roa (hash: IWEwNMzAHK/ef+4K/t2BfxtQJgKm9A+qNvlUUfJjqyg=)
                          4: A50523F43F5211EBB1B1701FC4F9AE02.roa (hash: MXwTZ0HTMZgGNdBLgLlhrgI3zl9svxesevJasfZECFs=)
                          5: 65DA620C798111EBBD22251CC4F9AE02.roa (hash: /RISfiBtXbfKLP2ghs+Yyw4wfbS03k7nxtHus8aqX1g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl
                          rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:53:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1892 (0x764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B58FF, serialNumber=24443AE83EDF96AF1942DBFF0ED4F8C17DD6796F
        Validity
            Not Before: Aug 22 21:53:35 2025 GMT
            Not After : Aug 29 21:53:35 2025 GMT
        Subject: CN=68a8e6e0-3775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f7:e5:b7:50:98:60:b3:68:69:f6:f1:3d:a4:
                    84:e5:7b:eb:df:22:f3:ef:37:c1:0c:8b:c2:39:60:
                    9a:50:b2:03:a0:11:60:01:29:f8:f2:05:b0:bf:72:
                    3d:0b:e2:8e:67:73:36:56:cb:ec:51:ef:cd:51:7d:
                    db:f4:af:5a:40:7e:4d:74:57:ea:05:11:12:cf:18:
                    97:9e:fd:58:f9:e5:26:88:98:cd:31:2c:88:a7:a8:
                    28:7b:3e:f8:9e:2b:fa:e1:34:7a:ac:a6:71:3e:78:
                    c2:c4:c4:0b:39:3a:2e:71:d0:3d:d2:7b:75:89:e2:
                    2f:cc:31:91:82:64:13:3d:e7:cf:3f:56:9e:a8:ef:
                    33:68:bd:35:ab:e3:30:3a:38:4f:ba:55:36:3a:0e:
                    12:8a:57:26:02:af:d0:18:33:59:54:08:bb:99:d6:
                    5c:03:4f:d4:e6:32:9b:35:dc:36:04:71:79:a4:51:
                    ca:45:b7:81:73:83:09:b6:02:bc:f8:ec:cf:4b:af:
                    d2:4e:27:2b:c8:6a:8f:89:b7:3d:1b:6f:80:d6:f6:
                    f0:72:3c:02:b0:6c:83:7c:c3:b0:0c:88:07:d8:8c:
                    87:42:8e:21:ad:04:fe:58:b6:d9:c0:00:28:3c:73:
                    8e:8f:7e:be:25:41:0e:6f:20:3a:41:4d:f5:7e:ee:
                    b6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9D:5F:A5:E2:E8:F1:0A:64:7E:92:CA:69:7D:07:B1:19:71:28:EB
            X509v3 Authority Key Identifier:
                keyid:24:44:3A:E8:3E:DF:96:AF:19:42:DB:FF:0E:D4:F8:C1:7D:D6:79:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JEQ66D7flq8ZQtv_DtT4wX3WeW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B58FF/1204AB3C3C3D11EBB9381F71C4F9AE02/JEQ66D7flq8ZQtv_DtT4wX3WeW8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:2a:fe:68:c5:1f:29:0e:fc:3c:e1:51:ea:bd:0e:eb:79:33:
         0d:24:47:9a:fa:d6:3e:f3:9f:31:cc:4e:5f:6f:24:48:d2:56:
         63:f8:a3:d5:ee:bc:32:be:f1:4a:bc:b8:26:29:05:30:99:9e:
         48:e7:e1:f6:e9:59:9d:99:06:20:98:19:c6:7b:33:ed:8c:92:
         b8:88:cf:92:b3:d9:6f:73:c1:28:94:40:41:86:4a:45:bd:5f:
         2d:58:f0:69:64:5f:e4:a7:29:b7:fd:13:1f:b5:b8:36:06:1c:
         3f:58:4b:99:5c:0b:5b:db:9a:99:b0:c4:e8:4b:11:9b:07:26:
         ab:ae:fb:44:06:31:61:eb:43:9f:9b:b4:13:50:79:2b:23:41:
         53:22:51:b0:ed:14:16:33:17:88:95:6e:30:31:76:ba:23:64:
         b9:c1:86:99:84:d5:d4:d1:67:9b:52:8e:14:32:ce:42:b7:01:
         09:f4:3a:4f:dd:28:88:82:9a:70:48:8a:6f:ef:1f:74:0d:ab:
         7d:a9:ad:83:05:25:a4:13:df:34:d4:83:80:7b:8c:60:f7:8c:
         0f:8b:72:58:4d:9c:19:c2:b8:52:13:86:db:9d:36:0e:7e:dd:
         ab:7f:f1:08:b9:23:95:88:4d:d1:bd:be:52:bc:75:0c:88:dc:
         6f:f3:b8:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjU4RkYxMTAvBgNVBAUTKDI0NDQzQUU4M0VERjk2QUYxOTQyREJGRjBFRDRGOEMx
N0RENjc5NkYwHhcNMjUwODIyMjE1MzM1WhcNMjUwODI5MjE1MzM1WjAYMRYwFAYD
VQQDEw02OGE4ZTZlMC0zNzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwvflt1CYYLNoafbxPaSE5Xvr3yLz7zfBDIvCOWCaULIDoBFgASn48gWwv3I9
C+KOZ3M2VsvsUe/NUX3b9K9aQH5NdFfqBRESzxiXnv1Y+eUmiJjNMSyIp6goez74
niv64TR6rKZxPnjCxMQLOToucdA90nt1ieIvzDGRgmQTPefPP1aeqO8zaL01q+Mw
OjhPulU2Og4SilcmAq/QGDNZVAi7mdZcA0/U5jKbNdw2BHF5pFHKRbeBc4MJtgK8
+OzPS6/STicryGqPibc9G2+A1vbwcjwCsGyDfMOwDIgH2IyHQo4hrQT+WLbZwAAo
PHOOj36+JUEObyA6QU31fu62RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2dX6Xi
6PEKZH6Syml9B7EZcSjrMB8GA1UdIwQYMBaAFCREOug+35avGULb/w7U+MF91nlv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNThGRi8xMjA0QUIzQzND
M0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3ZmxxOFpRdHZfRHRUNHdYM1dl
VzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pFUTY2RDdmbHE4WlF0dl9EdFQ0d1gzV2VXOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NThGRi8xMjA0QUIzQzNDM0QxMUVCQjkzODFGNzFDNEY5QUUwMi9KRVE2NkQ3Zmxx
OFpRdHZfRHRUNHdYM1dlVzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAVKv5oxR8pDvw84VHqvQ7reTMNJEea+tY+858xzE5fbyRI0lZj+KPV
7rwyvvFKvLgmKQUwmZ5I5+H26VmdmQYgmBnGezPtjJK4iM+Ss9lvc8EolEBBhkpF
vV8tWPBpZF/kpym3/RMftbg2Bhw/WEuZXAtb25qZsMToSxGbByarrvtEBjFh60Of
m7QTUHkrI0FTIlGw7RQWMxeIlW4wMXa6I2S5wYaZhNXU0WebUo4UMs5CtwEJ9DpP
3SiIgppwSIpv7x90Dat9qa2DBSWkE9801IOAe4xg94wPi3JYTZwZwrhSE4bbnTYO
ft2rf/EIuSOViE3Rvb5SvHUMiNxv87jZ
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:19:47 2025 by rpki-client