Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
File:                     reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json)
Hash identifier:          bFtKCicazzrItij9VdL2cRTArWlvNvFEtjUavO4jjHA=
Subject key identifier:   C5:F6:7E:46:6A:A8:68:70:36:68:F6:C7:CC:6E:5F:26:4D:C8:01:DC
Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF
Certificate issuer:       /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
Certificate serial:       12D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
Manifest number:          12C6
Signing time:             Fri 22 Aug 2025 17:25:52 +0000
Manifest this update:     Fri 22 Aug 2025 17:25:52 +0000
Manifest next update:     Fri 29 Aug 2025 17:25:52 +0000
Files and hashes:         1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: xOTLNzHQ5KINVj3QIaAs/X5mU3sVIjPCbC4E1iQQLI4=)
                          2: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: u9nxVTI/r7lzehBnkG/r0mQCumereCzRN9vx0cIP9pw=)
                          3: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: 19aOOHsZIBgvBeUs9wb25z5uEUWs4WLEIR4d7F8bWpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4824 (0x12d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
        Validity
            Not Before: Aug 22 17:25:52 2025 GMT
            Not After : Aug 29 17:25:52 2025 GMT
        Subject: CN=68a8a820-ec42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:48:3a:81:0c:6a:1c:6d:8f:5a:4f:06:8b:32:
                    5d:f5:f6:d0:6c:12:d3:42:56:b0:c1:56:55:43:46:
                    34:e7:fc:ed:7b:76:b0:25:c5:fc:7d:e1:5a:9a:47:
                    80:97:09:b1:97:c6:3b:ef:de:1d:fb:4b:bd:3c:d5:
                    86:c3:49:aa:65:36:d2:97:5d:d8:21:33:e1:eb:4a:
                    df:20:20:8d:42:b6:af:ea:2e:3c:4f:25:db:a3:64:
                    5c:ed:0e:1d:d4:22:3e:ea:f1:c9:a4:22:8e:c4:1e:
                    bb:c9:c3:bc:74:b5:17:34:f0:8d:ee:53:93:df:84:
                    b9:53:f5:19:95:92:27:4e:1e:bc:fa:cc:0c:04:cd:
                    22:8c:aa:f3:c2:26:db:7f:85:fd:2e:dd:94:35:ed:
                    05:0e:ef:4e:10:c5:40:81:32:99:2e:2c:2f:33:2c:
                    96:c9:2c:fa:1b:58:0c:d3:7d:35:fd:d2:90:28:60:
                    9e:20:6b:ca:fc:a5:63:61:b5:1b:4b:87:5c:b0:e4:
                    8f:61:38:46:36:fe:ec:80:3c:bc:b8:0a:0a:62:af:
                    fc:07:13:05:67:aa:12:95:a5:ad:31:0d:bc:63:03:
                    16:69:20:94:22:e9:0b:ed:55:1c:80:02:1f:5f:2e:
                    ab:9d:a1:d2:2a:5f:16:dd:2c:dc:be:01:8d:38:10:
                    1d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F6:7E:46:6A:A8:68:70:36:68:F6:C7:CC:6E:5F:26:4D:C8:01:DC
            X509v3 Authority Key Identifier:
                keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:7e:3a:15:ba:54:da:36:56:e0:c8:6b:1c:c0:e0:f2:02:1a:
         92:b2:53:44:93:62:c8:82:71:93:c8:7a:89:cf:05:8a:c2:83:
         f6:f7:80:bf:5e:6c:d4:f8:a7:ae:92:5a:ba:a8:7e:c5:82:25:
         57:a4:75:4b:db:65:3e:7a:f4:66:be:a8:fd:0d:a5:88:ba:9e:
         8b:83:ef:8c:05:48:83:d4:cc:49:2b:88:b8:54:43:17:d9:77:
         57:4e:c8:41:68:19:5f:74:15:32:3f:59:8f:a0:4a:56:f7:18:
         a5:9c:b2:f6:70:82:d0:63:6a:72:99:18:e3:81:2f:c4:f1:b9:
         20:6c:ea:cb:e5:94:d7:b2:71:b1:16:56:65:0b:05:64:d0:45:
         de:c1:2e:fb:42:fa:f9:1d:9b:7f:4f:0e:7b:75:b6:0e:0e:96:
         5a:01:40:15:fa:f1:38:c8:73:58:37:61:ce:ef:76:06:e8:bf:
         80:ce:09:31:92:60:e0:85:08:e2:3d:6c:94:be:95:6d:01:21:
         af:ef:e3:ba:6d:bb:17:8e:4d:0f:0f:27:19:f0:50:62:cd:aa:
         9e:97:d2:20:67:3e:2e:25:16:6d:11:33:fa:41:c2:a2:e6:47:
         4a:41:aa:a0:e4:50:46:ea:23:8c:69:f7:88:c9:9f:73:d0:1e:
         00:14:f7:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdBMDYxMTAvBgNVBAUTKEFERTEzNUQ1RTA0RDQ5NjM3MDlCM0NBNkJGQzAxMEI2
RDBGOTdDQUYwHhcNMjUwODIyMTcyNTUyWhcNMjUwODI5MTcyNTUyWjAYMRYwFAYD
VQQDEw02OGE4YTgyMC1lYzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwkg6gQxqHG2PWk8GizJd9fbQbBLTQlawwVZVQ0Y05/zte3awJcX8feFamkeA
lwmxl8Y7794d+0u9PNWGw0mqZTbSl13YITPh60rfICCNQrav6i48TyXbo2Rc7Q4d
1CI+6vHJpCKOxB67ycO8dLUXNPCN7lOT34S5U/UZlZInTh68+swMBM0ijKrzwibb
f4X9Lt2UNe0FDu9OEMVAgTKZLiwvMyyWySz6G1gM0301/dKQKGCeIGvK/KVjYbUb
S4dcsOSPYThGNv7sgDy8uAoKYq/8BxMFZ6oSlaWtMQ28YwMWaSCUIukL7VUcgAIf
Xy6rnaHSKl8W3SzcvgGNOBAd5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMX2fkZq
qGhwNmj2x8xuXyZNyAHcMB8GA1UdIwQYMBaAFK3hNdXgTUljcJs8pr/AELbQ+Xyv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EwNi80OEY0RENEQUM2
QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNXTndtenltdjhBUXR0RDVm
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JlRTExZUJOU1dOd216eW12OEFRdHRENWZLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0EwNi80OEY0RENEQUM2QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNX
TndtenltdjhBUXR0RDVmSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCNfjoVulTaNlbgyGscwODyAhqSslNEk2LIgnGTyHqJzwWKwoP294C/
XmzU+Keuklq6qH7FgiVXpHVL22U+evRmvqj9DaWIup6Lg++MBUiD1MxJK4i4VEMX
2XdXTshBaBlfdBUyP1mPoEpW9xilnLL2cILQY2pymRjjgS/E8bkgbOrL5ZTXsnGx
FlZlCwVk0EXewS77Qvr5HZt/Tw57dbYODpZaAUAV+vE4yHNYN2HO73YG6L+Azgkx
kmDghQjiPWyUvpVtASGv7+O6bbsXjk0PDycZ8FBizaqel9IgZz4uJRZtETP6QcKi
5kdKQaqg5FBG6iOMafeIyZ9z0B4AFPdK
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:36:15 2025 by rpki-client