Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File:                     Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier:          d9ZSnLUZmrJEvkrrgBZtHtZS8YG/z90+CdaFE5TiMZI=
Subject key identifier:   80:D1:EE:3D:44:04:14:C6:43:FD:C0:66:65:DB:3C:41:C2:06:AB:DF
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer:       /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial:       0600
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number:          05EB
Signing time:             Wed 02 Jul 2025 23:18:16 +0000
Manifest this update:     Wed 02 Jul 2025 23:18:15 +0000
Manifest next update:     Wed 09 Jul 2025 23:18:15 +0000
Files and hashes:         1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: 8hwd/YWPqgmxYzzAwzoy4M+oz/liR/usbHa46cSF5LY=)
                          2: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: sbTShmIKKL0T6wr1tqxxOL+QE1luTX7NDd7NnR8wp7g=)
                          3: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: krevIMI6IUNw/+chMIBio+O1qxsYHBvCeuqJ7cXD7Gc=)
                          4: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: WXJDLjhJd3w6bj++/nA2IppIGCY5Tdg8yehmeKyxNgI=)
                          5: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: 1NiFRWSUDBEKjygUm/VPv7UX405Nm7i1bZRm8rES/iU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
                          rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1536 (0x600)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
        Validity
            Not Before: Jul  2 23:18:15 2025 GMT
            Not After : Jul  9 23:18:15 2025 GMT
        Subject: CN=6865be38-2f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:85:ea:17:10:85:9b:84:74:b9:2c:ef:67:
                    31:d5:ae:e1:46:3b:88:65:9a:74:b5:89:97:7d:8f:
                    76:8c:42:2b:8e:1c:47:4d:6f:77:b3:86:17:c1:9f:
                    af:12:98:7a:c5:f5:c0:60:16:7e:d7:48:43:d3:2c:
                    72:33:9d:13:b5:d4:b7:08:fe:25:7f:3d:64:66:7f:
                    1e:01:ae:a1:29:14:98:b9:76:88:f4:13:d2:8c:ba:
                    86:0b:d6:f1:e1:c4:8b:86:2e:56:c2:50:66:a8:bf:
                    8d:c1:90:a4:b6:9a:a8:a7:40:c3:15:04:5e:79:cc:
                    f5:de:ab:57:4c:b5:a8:73:67:49:d2:e6:31:c4:0a:
                    78:db:02:0a:23:54:48:a0:ac:2a:66:ff:e1:c5:3d:
                    bf:71:f8:a3:ae:66:c2:5f:c9:84:a2:fc:11:76:6b:
                    d2:da:dd:65:0b:e9:1b:eb:6e:d5:f3:6b:2b:b0:31:
                    c0:36:88:f1:8c:65:3a:3a:b3:e1:c6:55:3c:cb:6f:
                    82:34:97:d9:4b:02:e3:02:fa:2f:69:58:60:9f:67:
                    45:b7:39:b0:e8:69:3d:b5:dd:a6:54:39:c8:64:59:
                    da:15:2e:22:ce:9c:6c:5f:a8:d9:16:46:43:4c:12:
                    46:94:3a:21:6f:a2:61:ae:b3:9d:66:59:1c:0b:55:
                    e1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D1:EE:3D:44:04:14:C6:43:FD:C0:66:65:DB:3C:41:C2:06:AB:DF
            X509v3 Authority Key Identifier:
                keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:db:5c:7f:ef:ed:23:b3:0e:13:2c:ea:40:de:13:67:e9:55:
         6d:a0:14:2a:9b:1e:3f:0e:b8:a0:a5:67:7b:c1:b5:a5:b1:67:
         f4:12:68:44:46:b8:76:53:cc:9a:ca:e9:73:95:7f:95:4e:03:
         dd:a9:4c:59:c3:b2:c6:db:a4:05:36:8e:c3:c7:54:46:0b:52:
         b0:91:58:95:f3:cc:b6:d5:1b:47:c9:d6:46:aa:9e:52:8f:1c:
         c1:8c:a2:fc:a8:63:c7:d1:b9:99:f4:83:7b:77:08:05:2c:4d:
         33:5c:40:f2:59:3a:90:40:b4:52:99:2c:a3:af:1f:45:55:df:
         02:e1:29:90:6c:38:a9:d0:1c:37:0f:f5:37:2f:36:e9:0a:d3:
         4a:53:e3:6c:73:10:3a:6d:a6:4f:9b:bf:c9:42:21:c6:ba:da:
         22:d3:10:fc:20:e9:75:dc:1a:d8:fe:9d:c9:0a:81:4d:60:0f:
         2a:d9:42:70:0e:e8:fd:ec:2c:c7:d2:cf:4e:1d:2a:31:33:99:
         c1:09:62:fc:28:63:65:e6:ed:af:d7:ed:0c:14:3a:e2:ee:d5:
         85:81:a3:b6:09:63:4c:f0:f8:41:46:1e:c0:9d:4a:0a:9a:19:
         c8:1f:bc:00:4b:d6:95:fe:dd:8d:b7:d2:40:72:ca:2b:54:2f:
         e3:d8:55:76
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw
NzZFODhDMDgwHhcNMjUwNzAyMjMxODE1WhcNMjUwNzA5MjMxODE1WjAYMRYwFAYD
VQQDEw02ODY1YmUzOC0yZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvMyF6hcQhZuEdLks72cx1a7hRjuIZZp0tYmXfY92jEIrjhxHTW93s4YXwZ+v
Eph6xfXAYBZ+10hD0yxyM50TtdS3CP4lfz1kZn8eAa6hKRSYuXaI9BPSjLqGC9bx
4cSLhi5WwlBmqL+NwZCktpqop0DDFQReecz13qtXTLWoc2dJ0uYxxAp42wIKI1RI
oKwqZv/hxT2/cfijrmbCX8mEovwRdmvS2t1lC+kb627V82srsDHANojxjGU6OrPh
xlU8y2+CNJfZSwLjAvovaVhgn2dFtzmw6Gk9td2mVDnIZFnaFS4izpxsX6jZFkZD
TBJGlDohb6JhrrOdZlkcC1XhRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIDR7j1E
BBTGQ/3AZmXbPEHCBqvfMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE
MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q
QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RTE0Ni9FNDFBQjQyQUJEMzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVho
OHMxb1FSWkVvRndIYm9qQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDI21x/7+0jsw4TLOpA3hNn6VVtoBQqmx4/DrigpWd7wbWlsWf0EmhE
Rrh2U8yayulzlX+VTgPdqUxZw7LG26QFNo7Dx1RGC1KwkViV88y21RtHydZGqp5S
jxzBjKL8qGPH0bmZ9IN7dwgFLE0zXEDyWTqQQLRSmSyjrx9FVd8C4SmQbDip0Bw3
D/U3LzbpCtNKU+NscxA6baZPm7/JQiHGutoi0xD8IOl13BrY/p3JCoFNYA8q2UJw
Duj97CzH0s9OHSoxM5nBCWL8KGNl5u2v1+0MFDri7tWFgaO2CWNM8PhBRh7AnUoK
mhnIH7wAS9aV/t2Nt9JAcsorVC/j2FV2
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:10:23 2025 by rpki-client