Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
File:                     RW7qBpLGpPJvU9LSN9HLTc14MwU.mft (raw, json)
Hash identifier:          Qzs0wDPUQzYtVegiouz1ztvawWLsdGt0Png2eJBEWRY=
Subject key identifier:   68:1C:F6:61:BD:89:54:AC:04:B6:9A:73:26:DF:80:21:DC:B4:AF:EA
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       0294
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
Manifest number:          0227
Signing time:             Sat 23 Aug 2025 03:06:20 +0000
Manifest this update:     Sat 23 Aug 2025 03:06:20 +0000
Manifest next update:     Sat 30 Aug 2025 03:06:20 +0000
Files and hashes:         1: RW7qBpLGpPJvU9LSN9HLTc14MwU.crl (hash: zZmbdyopkhA38VXR/7hPvOUwGh5kH4xUQ5LkhS6j8rE=)
                          2: 4E18D51C40F211F09CFBD641C4F9AE02.roa (hash: FkElb4DzhTSYipziJhzQfy939UGrt2VbKugFp5a4qR0=)
                          3: 99D9487EEAFE11EE9EFB1977C4F9AE02.roa (hash: 8Xumr370JTWhp5Hg1rlZKTI/Noutl6B2DH8kHzYSO0U=)
                          4: E4788F02DB4511EE89BB2666C4F9AE02.roa (hash: bdMpqweGHQ8qYmb9RO8i4UuvSp3euKlaooXxG9piwDc=)
                          5: 63FFD6349A6611EEA0301E57C4F9AE02.roa (hash: OMXt5cwDpuTWEaY7/B3Qmvuufr9QMT9qpc3zvIWwq8E=)
                          6: EFF7C8FC3C8A11EE9A01501FC4F9AE02.roa (hash: VnmTHaDUGNJwft48dbCNehvnHHWUdIH5CaEstRHifCc=)
                          7: 6B95D6A4739311EE8FDD5549C4F9AE02.roa (hash: IyfqGEP+yJeBSIvB0K7+tpsiptQXQxTq9nFV+jeCCyk=)
                          8: 005C56227B2411EEBB6FC444C4F9AE02.roa (hash: CU1eAGsMx6RBXgQiGyjyh8LzUYQ2aW60OCXtvFpuRVA=)
                          9: 9D86A1047D6211F0888C2E65C4F9AE02.roa (hash: rWvp1lxk0ctUZw3/kQW3cE/9bG6JfhLj2nU0jXnes1E=)
                          10: 399302423C8B11EE83400D20C4F9AE02.roa (hash: IlGB+dov71FtP5nALRkttH4GO5VJu+WrQj6+879n27o=)
                          11: 340190F8465911F096DBFB74C4F9AE02.roa (hash: nKsQveWFFMV7LI445POLRkTyLozvNsB7LhZewvB4Y3s=)
                          12: F9350C3C326B11EEA39EA051C4F9AE02.roa (hash: 5GKu+8Gy/DolWm/nMsNF2FQJ9fv35qaBBqaGrDOVLdo=)
                          13: 4435207C62B311F0A9203C48C4F9AE02.roa (hash: qF6LLppmzlX6UDZ/efg5JijGsRdlRNotr0lSe7O9lcE=)
                          14: EABEFD16232E11EFA6F6B887C4F9AE02.roa (hash: UGcxK0Lihe7mEfICtyeys56xPkQ+n/RCZiC/GAO61FI=)
                          15: 8A5017E27C3C11EE90BF4044C4F9AE02.roa (hash: 5pY2tHCbKRsYExC6tRXkk3dJPihvImm9ck01MU6UVTk=)
                          16: A52438CC4D7B11EE9DA62A3BC4F9AE02.roa (hash: 11LoPdlCQwQzfirTo9g4etvp4+K/4Sl7bcNuvgUnk/M=)
                          17: 68C24072EAA611EE8F2E643CC4F9AE02.roa (hash: Sd/F6iDqdYutvcek8wnC8MIPl24l8+jwKRnTt8joH5I=)
                          18: 281775F671A711EE85493C7BC4F9AE02.roa (hash: p/FqVNyhS/puK0HknPtTfV4KkikQGF+k1PBpoHryldE=)
                          19: 16C1510E310711EE8328F181C4F9AE02.roa (hash: a/Qb0r5LFHPQhrER6CLUoKL3Sgp58qWIvcRiyPkGVe0=)
                          20: 5F5C646C7AE911EFBEF40A3AC4F9AE02.roa (hash: I6AhxznJblwyqir/Z/ow2KKenotP65qFaj3KqFmd0eE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 03:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Aug 23 03:06:20 2025 GMT
            Not After : Aug 30 03:06:20 2025 GMT
        Subject: CN=68a9302c-3aab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:3e:4e:23:bf:da:2e:b8:60:b8:15:6e:99:
                    83:79:31:ea:87:cb:5a:c0:21:2f:8e:d4:99:08:ee:
                    5e:b0:f4:6b:ab:8f:46:db:b3:a7:4d:7b:11:8d:c6:
                    31:1b:b1:5b:15:1a:f1:b3:f1:da:ee:f2:5f:c6:98:
                    db:33:96:2f:6d:95:a9:41:7a:bd:97:ef:19:ac:55:
                    3f:f7:a4:b8:12:05:0d:48:c2:b1:61:df:ce:8a:4c:
                    55:8e:47:45:90:8b:68:cc:60:01:7d:e8:ae:55:cf:
                    f0:09:97:ff:77:bc:ee:28:08:5f:37:51:1e:53:3a:
                    d7:96:97:56:52:3e:cd:0d:fb:91:12:36:a3:33:2e:
                    8b:ae:2b:00:8e:6b:60:f5:a6:ed:93:41:dd:ad:9b:
                    42:19:b3:0a:b9:31:fb:a7:a8:00:fc:58:3f:15:34:
                    42:2e:a7:1f:94:68:d4:82:44:85:6c:ed:ca:1f:25:
                    00:32:0d:05:73:fe:8b:6a:8d:1e:9a:73:3f:20:a1:
                    12:ee:5c:55:38:e7:35:06:1c:92:55:20:47:96:53:
                    ce:1f:93:87:82:dc:dd:a6:23:c0:9d:58:e0:59:a8:
                    3d:2c:82:14:93:dd:6e:33:44:fa:c3:cc:eb:22:d5:
                    a3:74:39:54:ea:10:9a:06:28:25:a7:9c:28:a4:1f:
                    a6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:1C:F6:61:BD:89:54:AC:04:B6:9A:73:26:DF:80:21:DC:B4:AF:EA
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:88:44:74:a0:b4:c0:64:42:bd:69:37:56:60:46:eb:c0:e4:
         aa:57:d3:d0:80:07:9c:3e:a4:ad:07:70:70:61:ac:0f:34:8d:
         d2:13:b0:58:d8:8b:17:c0:3d:35:5d:0e:a1:08:20:1d:b3:c6:
         bc:bd:b4:ee:2a:eb:7e:88:8a:fd:2d:88:a1:c2:95:09:8b:6e:
         8a:6f:42:ea:02:d0:c1:85:af:8d:0d:85:71:aa:80:19:3b:62:
         3a:bd:de:b0:6d:f2:3e:87:f9:a4:a3:6e:15:a4:f2:38:71:b7:
         4c:fe:11:04:e8:66:87:ac:a7:bc:0f:49:a5:43:3e:f4:88:0c:
         1f:63:fe:d8:77:33:23:cc:80:1c:c3:49:09:ee:3a:a3:c2:fd:
         e8:6e:4b:b9:e4:a6:f2:35:04:63:4b:6d:92:a8:05:00:48:bf:
         e9:2b:cf:0b:3b:45:a5:a4:76:c3:c2:ed:43:95:0d:f8:c4:36:
         4f:1a:78:31:87:a7:de:f2:70:46:f5:15:ed:4e:ac:89:55:40:
         15:ef:6b:16:99:55:3d:b2:d3:5c:90:db:cc:19:50:3b:4d:10:
         b3:3a:f9:e2:b1:05:2d:a4:c8:2c:81:c5:0b:bf:5c:5a:77:4f:
         14:08:d4:83:0d:17:89:56:0d:3f:d8:1d:c9:69:a0:da:f6:a7:
         2c:f8:7b:14
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICApQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1NTAxMTAvBgNVBAUTKDQ1NkVFQTA2OTJDNkE0RjI2RjUzRDJEMjM3RDFDQjRE
Q0Q3ODMzMDUwHhcNMjUwODIzMDMwNjIwWhcNMjUwODMwMDMwNjIwWjAYMRYwFAYD
VQQDEw02OGE5MzAyYy0zYWFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuG8+TiO/2i64YLgVbpmDeTHqh8tawCEvjtSZCO5esPRrq49G27OnTXsRjcYx
G7FbFRrxs/Ha7vJfxpjbM5YvbZWpQXq9l+8ZrFU/96S4EgUNSMKxYd/OikxVjkdF
kItozGABfeiuVc/wCZf/d7zuKAhfN1EeUzrXlpdWUj7NDfuREjajMy6LrisAjmtg
9abtk0HdrZtCGbMKuTH7p6gA/Fg/FTRCLqcflGjUgkSFbO3KHyUAMg0Fc/6Lao0e
mnM/IKES7lxVOOc1BhySVSBHllPOH5OHgtzdpiPAnVjgWag9LIIUk91uM0T6w8zr
ItWjdDlU6hCaBiglp5wopB+mlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgc9mG9
iVSsBLaacybfgCHctK/qMB8GA1UdIwQYMBaAFEVu6gaSxqTyb1PS0jfRy03NeDMF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU1MC84NDAwOTU0QUNF
QzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQSnZVOUxTTjlITFRjMTRN
d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjU1MC84NDAwOTU0QUNFQzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQ
SnZVOUxTTjlITFRjMTRNd1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBAiER0oLTAZEK9aTdWYEbrwOSqV9PQgAecPqStB3BwYawPNI3SE7BY
2IsXwD01XQ6hCCAds8a8vbTuKut+iIr9LYihwpUJi26Kb0LqAtDBha+NDYVxqoAZ
O2I6vd6wbfI+h/mko24VpPI4cbdM/hEE6GaHrKe8D0mlQz70iAwfY/7YdzMjzIAc
w0kJ7jqjwv3obku55KbyNQRjS22SqAUASL/pK88LO0WlpHbDwu1DlQ34xDZPGngx
h6fe8nBG9RXtTqyJVUAV72sWmVU9stNckNvMGVA7TRCzOvnisQUtpMgsgcULv1xa
d08UCNSDDReJVg0/2B3JaaDa9qcs+HsU
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:16:47 2025 by rpki-client