Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft
File:                     m505clsn1CAoE4UWNJL_dfFRE9o.mft (raw, json)
Hash identifier:          i7MJVnlZ6hKYkDO1zEhOY1tmzNp4MiteYkXNqrF1MHI=
Subject key identifier:   DE:F6:D5:95:92:DD:6A:46:A2:63:D1:4F:9F:6B:39:62:5B:10:16:FF
Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA
Certificate issuer:       /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA
Certificate serial:       16
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft
Manifest number:          15
Signing time:             Sat 23 Aug 2025 08:15:39 +0000
Manifest this update:     Sat 23 Aug 2025 08:15:38 +0000
Manifest next update:     Sat 30 Aug 2025 08:15:38 +0000
Files and hashes:         1: m505clsn1CAoE4UWNJL_dfFRE9o.crl (hash: kSdQ+wbY6wH6I8qZeoR6xIXKoQlDMd51HbbqDIUX3CU=)
                          2: D24370A6638211F087594469C4F9AE02.roa (hash: BC9hUQT1LjynnO8EIFYzWbutVI812gfFy3AK+b9ATvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl
                          rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 08:15:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA
        Validity
            Not Before: Aug 23 08:15:38 2025 GMT
            Not After : Aug 30 08:15:38 2025 GMT
        Subject: CN=68a978ab-e557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:63:69:29:29:58:6f:9d:0b:03:22:86:61:
                    33:6a:9c:0a:75:01:14:47:7c:95:43:b1:bb:8f:55:
                    d7:3d:ce:4b:59:54:9b:f2:00:73:52:1e:f6:b7:8c:
                    66:49:ff:0c:35:0a:d1:7f:f8:ee:02:a5:ce:64:cb:
                    c8:c9:09:3d:c4:8b:87:da:da:df:07:f6:68:b1:56:
                    dc:ef:0f:02:2e:9b:f2:0e:47:63:1c:6c:2b:5d:95:
                    63:8e:33:1d:60:9b:1a:9f:17:54:c4:be:1f:33:53:
                    18:e6:20:52:5b:27:12:f0:6c:bc:22:ed:5c:89:74:
                    da:4b:52:dc:50:27:3e:9b:9b:3c:5d:15:f4:28:29:
                    95:60:93:b9:7a:d9:71:d1:90:e2:b0:47:bb:34:cd:
                    1e:f8:52:14:33:89:e4:6c:c8:e6:bd:9f:28:de:a6:
                    d2:1e:68:fc:07:6b:25:fd:58:7e:cf:78:98:cd:fe:
                    77:18:71:51:7a:66:ec:94:31:04:f4:28:09:5f:e4:
                    29:37:66:5e:6c:e0:57:0e:8d:e6:e8:86:08:74:bb:
                    e6:02:db:5d:00:c0:d1:cf:4a:32:ef:ef:72:4f:88:
                    67:65:91:f7:07:d2:41:82:77:34:3e:aa:d6:6f:7b:
                    a7:36:06:44:da:f9:85:c5:00:29:61:4e:5a:e3:b6:
                    4d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F6:D5:95:92:DD:6A:46:A2:63:D1:4F:9F:6B:39:62:5B:10:16:FF
            X509v3 Authority Key Identifier:
                keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:7e:41:dd:e5:45:28:40:11:e8:9a:1d:57:07:df:1b:4c:af:
         7e:7a:7f:cf:1c:62:66:39:c7:3f:ba:9d:2d:d1:38:6a:bf:80:
         07:1f:72:af:68:80:6b:40:8a:7b:4a:3b:be:ff:46:b3:4f:43:
         ed:52:44:00:88:f6:d9:b9:3e:ef:37:b0:e5:af:ac:09:ce:31:
         e3:69:e1:c1:3a:39:b8:90:17:8d:e9:91:7c:b8:57:74:bd:c2:
         8f:9c:ad:f4:90:4e:e2:40:e2:61:6d:ee:25:a6:ff:69:25:c0:
         4e:d9:ee:1c:51:9c:56:44:fd:82:7e:84:3f:69:e3:80:fe:b3:
         1f:8b:88:0b:14:cd:b7:6d:33:06:9c:5a:51:dd:fe:56:f7:3c:
         eb:35:db:a6:2a:80:0a:f8:2a:46:a4:ea:33:95:09:24:07:38:
         a1:5f:3c:93:10:66:25:0c:9b:54:76:35:bf:be:cf:78:c8:8b:
         97:4a:86:64:36:e8:d1:4b:5a:94:f6:a3:93:8d:76:ff:08:67:
         ce:84:c2:d8:68:24:17:4f:6b:54:2d:66:4b:12:27:40:f6:89:
         b7:b1:c2:95:7f:d4:19:69:e0:0a:44:af:ef:d2:38:8c:54:d1:
         ce:b7:46:d5:2a:d8:74:97:05:c6:4e:81:9b:04:e4:9a:fd:37:
         f5:0b:cc:6f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
N0VGMjExMC8GA1UEBRMoOUI5RDM5NzI1QjI3RDQyMDI4MTM4NTE2MzQ5MkZGNzVG
MTUxMTNEQTAeFw0yNTA4MjMwODE1MzhaFw0yNTA4MzAwODE1MzhaMBgxFjAUBgNV
BAMTDTY4YTk3OGFiLWU1NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/OWNpKSlYb50LAyKGYTNqnAp1ARRHfJVDsbuPVdc9zktZVJvyAHNSHva3jGZJ
/ww1CtF/+O4Cpc5ky8jJCT3Ei4fa2t8H9mixVtzvDwIum/IOR2McbCtdlWOOMx1g
mxqfF1TEvh8zUxjmIFJbJxLwbLwi7VyJdNpLUtxQJz6bmzxdFfQoKZVgk7l62XHR
kOKwR7s0zR74UhQzieRsyOa9nyjeptIeaPwHayX9WH7PeJjN/ncYcVF6ZuyUMQT0
KAlf5Ck3Zl5s4FcOjebohgh0u+YC210AwNHPSjLv73JPiGdlkfcH0kGCdzQ+qtZv
e6c2BkTa+YXFAClhTlrjtk2NAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3vbVlZLd
akaiY9FPn2s5YlsQFv8wHwYDVR0jBBgwFoAUm505clsn1CAoE4UWNJL/dfFRE9ow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzYyMjZDOTM2NjM4
MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNBb0U0VVdOSkxfZGZGUkU5
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvbTUwNWNsc24xQ0FvRTRVV05KTF9kZkZSRTlvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3
RUYyLzYyMjZDOTM2NjM4MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNB
b0U0VVdOSkxfZGZGUkU5by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIJ+Qd3lRShAEeiaHVcH3xtMr356f88cYmY5xz+6nS3ROGq/gAcfcq9o
gGtAintKO77/RrNPQ+1SRACI9tm5Pu83sOWvrAnOMeNp4cE6ObiQF43pkXy4V3S9
wo+crfSQTuJA4mFt7iWm/2klwE7Z7hxRnFZE/YJ+hD9p44D+sx+LiAsUzbdtMwac
WlHd/lb3POs126YqgAr4Kkak6jOVCSQHOKFfPJMQZiUMm1R2Nb++z3jIi5dKhmQ2
6NFLWpT2o5ONdv8IZ86EwthoJBdPa1QtZksSJ0D2ibexwpV/1Blp4ApEr+/SOIxU
0c63RtUq2HSXBcZOgZsE5Jr9N/ULzG8=
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:17 2025 by rpki-client