Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File:                     mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier:          cir1FN35SIBC2JvdI2GaIfUIwmlgNSVH8e//2yC4+6U=
Subject key identifier:   24:FB:71:C3:7F:66:B4:4A:EE:AC:A2:E4:07:5E:AD:A0:15:7A:D6:85
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0ABA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number:          0A89
Signing time:             Fri 22 Aug 2025 19:45:59 +0000
Manifest this update:     Fri 22 Aug 2025 19:45:58 +0000
Manifest next update:     Fri 29 Aug 2025 19:45:58 +0000
Files and hashes:         1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: IHVjvG4tfcLHVjmAXYi9uEEqraPgqiGZlilFm6cdkQ4=)
                          2: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: b0jHLruEtRzyhGWKnuBBIEAeyGPvSkQqNURAHY7x5fE=)
                          3: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: gbSrDMCrPI8A3+3d0sfCicNLcWdleMd0w7YOfrmP/TI=)
                          4: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: Zd7NoechSfahxSRsj2v3JsOwSTFCMebH21LUprHvV20=)
                          5: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: SFbvxZ2XG8g69o3YZw4mocDKsXgtaeblyR+TN86Ur60=)
                          6: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: y31kJqG82XvEmO9/QRkcWiRFKFh5zoKjaSnnJfP7MyE=)
                          7: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: GMZ//QDkBiynojhpbrl7EytSa00iqEIB/AB0/Z7GlXI=)
                          8: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: mvVRFtNTY10bq4ZO+LKEMEdrzCb/tsvmp6na5wzt45Q=)
                          9: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: yd/SOlvp9mrxaUSwn8FcZ74+WiXfNeapwvKAhRJ4Sx8=)
                          10: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: 4HveBCpHvV1swaBGF9e6bY77B+cKbG0JrVqTZsmASrs=)
                          11: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 2GC7KAVMhvV+YXc4GAZ/vzQonWiNlY6zwWOHBpULon8=)
                          12: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: Mm2/BkteGaDDz+jKCOQ2/1mPEBu0lMlfQI/ZFwneEPA=)
                          13: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: MEzvVgdoK3WuLUFmv9SwilQrCS7SZE01USmJAX6/Oss=)
                          14: 8B8856F4C9DC11EE8B24C55EC4F9AE02.roa (hash: 9pxxuNY/fuCdOuU7dA3COe6L1OGNmS3muKknh0X0O9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2746 (0xaba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: Aug 22 19:45:58 2025 GMT
            Not After : Aug 29 19:45:58 2025 GMT
        Subject: CN=68a8c8f7-ebb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fc:56:f8:62:a1:a2:21:49:d6:49:26:c6:f3:
                    72:f3:a8:a4:7f:5c:35:c5:a3:00:3e:68:b7:84:ff:
                    c0:c7:2f:7a:89:d0:5a:d6:95:3e:7b:61:44:a1:66:
                    24:bd:4d:d3:15:e2:4e:3a:a9:a9:4f:54:29:82:15:
                    7d:5e:77:b2:3a:3d:22:c9:3f:11:33:75:06:2b:a7:
                    40:ba:a0:42:7f:8c:4c:1f:21:72:44:39:bd:21:e6:
                    4c:16:73:15:d9:24:5b:20:d6:83:dd:6c:d7:17:61:
                    43:3e:09:6c:85:1a:2f:55:2e:80:41:5d:d5:4b:de:
                    fc:c8:cc:3a:d5:04:25:b0:03:f1:c1:a3:64:ef:58:
                    58:30:ed:90:61:fb:db:b0:4f:cc:04:7b:15:ac:9e:
                    f7:bc:20:95:79:31:ab:85:d2:3f:4e:1a:2c:2a:e7:
                    0e:38:ab:a9:e2:1b:59:70:7c:db:82:ad:f8:b3:8a:
                    16:71:c1:18:00:cd:29:c4:ac:f2:ab:50:f4:3f:96:
                    c6:0b:2a:c9:91:7a:98:b4:d4:f5:92:71:2d:17:55:
                    ba:d7:83:39:9d:9d:7a:01:a4:24:62:93:48:30:e2:
                    aa:54:b6:7a:42:78:88:a4:6b:56:50:a2:12:b2:da:
                    b9:ae:df:ec:1e:b6:46:ae:58:bb:7a:21:28:ce:51:
                    a6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FB:71:C3:7F:66:B4:4A:EE:AC:A2:E4:07:5E:AD:A0:15:7A:D6:85
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:be:08:c9:fb:d5:aa:4b:31:d3:cd:78:22:aa:0c:cf:08:ee:
         d0:c5:e3:5a:ea:db:77:de:28:fb:f7:35:b8:60:01:22:3c:dd:
         fe:93:07:47:59:c3:84:f0:71:a9:36:85:bf:25:85:e0:64:10:
         6c:eb:53:b7:58:d6:3d:09:6e:d1:b9:d9:3f:02:eb:34:21:b5:
         b4:10:3f:62:88:04:90:12:56:0b:19:a0:a0:66:ff:68:82:02:
         41:26:54:5b:27:9f:af:16:d3:e5:31:49:78:41:54:88:2a:33:
         e3:96:97:0d:fa:5b:dd:c6:b5:72:52:c1:a1:53:63:0c:8a:e4:
         3d:50:a4:36:79:12:fb:2a:91:42:22:3a:f5:35:c9:0a:46:46:
         71:0a:ee:09:2e:72:83:de:b6:37:6d:d4:13:90:a1:a9:47:f0:
         37:2e:5c:f6:f2:00:99:d6:f7:31:8b:70:7b:77:a2:2d:70:7e:
         35:62:2d:df:35:bc:15:cd:8e:f4:3f:62:d8:40:65:a5:60:42:
         3a:9a:9c:5c:a4:b5:4a:2d:c3:9e:db:2b:a3:54:45:d6:52:7f:
         ab:5b:7b:bc:88:a8:2a:ae:9f:09:1d:11:17:35:0c:d0:a5:95:
         96:36:65:9b:e3:49:32:f7:2c:37:ea:f1:19:24:0d:59:dc:fd:
         dc:b0:d1:29
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCrowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4
M0NCRTE4NjcwHhcNMjUwODIyMTk0NTU4WhcNMjUwODI5MTk0NTU4WjAYMRYwFAYD
VQQDEw02OGE4YzhmNy1lYmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2PxW+GKhoiFJ1kkmxvNy86ikf1w1xaMAPmi3hP/Axy96idBa1pU+e2FEoWYk
vU3TFeJOOqmpT1QpghV9XneyOj0iyT8RM3UGK6dAuqBCf4xMHyFyRDm9IeZMFnMV
2SRbINaD3WzXF2FDPglshRovVS6AQV3VS978yMw61QQlsAPxwaNk71hYMO2QYfvb
sE/MBHsVrJ73vCCVeTGrhdI/ThosKucOOKup4htZcHzbgq34s4oWccEYAM0pxKzy
q1D0P5bGCyrJkXqYtNT1knEtF1W614M5nZ16AaQkYpNIMOKqVLZ6QniIpGtWUKIS
stq5rt/sHrZGrli7eiEozlGmlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCT7ccN/
ZrRK7qyi5AderaAVetaFMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4
RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QjQ5My81RkNBQjY3MjY4RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENX
MC0zWWdHRHRUWkdEeS1HR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA8vgjJ+9WqSzHTzXgiqgzPCO7QxeNa6tt33ij79zW4YAEiPN3+kwdH
WcOE8HGpNoW/JYXgZBBs61O3WNY9CW7Rudk/Aus0IbW0ED9iiASQElYLGaCgZv9o
ggJBJlRbJ5+vFtPlMUl4QVSIKjPjlpcN+lvdxrVyUsGhU2MMiuQ9UKQ2eRL7KpFC
Ijr1NckKRkZxCu4JLnKD3rY3bdQTkKGpR/A3Llz28gCZ1vcxi3B7d6ItcH41Yi3f
NbwVzY70P2LYQGWlYEI6mpxcpLVKLcOe2yujVEXWUn+rW3u8iKgqrp8JHREXNQzQ
pZWWNmWb40ky9yw36vEZJA1Z3P3csNEp
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:15:43 2025 by rpki-client