Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
File:                     Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft (raw, json)
Hash identifier:          4MGDrBfsR64RYKcLh8cEgnCa3rShyjwa9CRaUf6Jhkg=
Subject key identifier:   34:4A:76:FE:38:FC:19:35:0C:B8:91:43:97:A4:84:D8:F2:19:85:CE
Authority key identifier: 37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58
Certificate issuer:       /CN=A91C9D5D/serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
Certificate serial:       0C3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
Manifest number:          0C35
Signing time:             Wed 02 Jul 2025 18:47:08 +0000
Manifest this update:     Wed 02 Jul 2025 18:47:07 +0000
Manifest next update:     Wed 09 Jul 2025 18:47:07 +0000
Files and hashes:         1: Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl (hash: Gtbwzah9A91JKpVBSzL0VFiPlw7T10CP7c0GdOvDrZo=)
                          2: A0E062260A8C11EAB25FD253C4F9AE02.roa (hash: 7xX6rH7i12z21iTWC8vTwBT7bsP1fB8No9Xtvt+ZVCA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl
                          rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:47:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3133 (0xc3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9D5D, serialNumber=372D936E38D8B9CB1F7012219FF82172B90BEE58
        Validity
            Not Before: Jul  2 18:47:07 2025 GMT
            Not After : Jul  9 18:47:07 2025 GMT
        Subject: CN=68657eac-61cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4f:e9:92:57:c0:09:d6:5e:e7:85:b8:d7:37:
                    95:69:2c:1c:01:da:fc:65:25:55:6b:dc:3c:fe:2a:
                    4d:b8:f8:de:6e:b3:b9:f8:98:5d:c3:8e:fa:09:2f:
                    b7:17:33:99:c6:2b:8b:dd:a5:8f:9f:6a:be:f9:5d:
                    91:6e:e1:14:08:58:0a:17:1e:4e:9c:7e:4f:ad:bd:
                    50:cf:f9:9d:67:99:fb:b0:e7:dd:28:a9:62:a6:27:
                    4a:a7:dd:37:19:a1:37:3f:e4:2b:02:18:a4:97:07:
                    ef:c3:7c:91:09:6c:95:c8:42:e0:69:54:6a:5f:02:
                    f5:2e:f0:19:c8:8f:ab:3d:6b:bd:d6:6b:ee:6a:f8:
                    0d:f7:bb:b3:bc:41:ea:76:22:1e:7c:f2:2d:3d:06:
                    f5:23:d9:a8:74:01:19:b7:b6:5c:13:51:ec:e6:06:
                    92:b3:4c:1c:f3:0b:6e:12:61:96:85:2c:b7:b9:0e:
                    c3:76:fa:01:77:51:62:9a:7b:a6:2a:98:b6:2d:5d:
                    fc:b1:65:0e:74:a8:26:d0:be:58:b3:f6:7b:1f:5d:
                    9a:e0:dc:24:dc:7c:59:86:30:3a:6f:f0:ac:10:8d:
                    da:b0:68:6d:3a:38:37:7d:ce:6a:7b:39:25:24:1e:
                    05:61:31:c7:ff:8f:da:61:91:84:bf:7c:87:19:8e:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4A:76:FE:38:FC:19:35:0C:B8:91:43:97:A4:84:D8:F2:19:85:CE
            X509v3 Authority Key Identifier:
                keyid:37:2D:93:6E:38:D8:B9:CB:1F:70:12:21:9F:F8:21:72:B9:0B:EE:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ny2TbjjYucsfcBIhn_ghcrkL7lg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9D5D/DD6F28720A8B11EABCF9CE52C4F9AE02/Ny2TbjjYucsfcBIhn_ghcrkL7lg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:22:8e:86:c7:4c:64:8f:58:5c:a3:09:f2:2b:b4:f5:fb:ed:
         f9:e4:76:cb:0a:cf:84:85:40:d6:f7:6b:b4:89:b5:f1:7f:1f:
         46:25:a3:b1:35:84:0e:6f:55:6a:4b:ed:82:b3:37:ce:5f:2f:
         7e:40:75:94:b7:a0:0a:2e:01:19:06:f3:56:2d:95:e2:75:92:
         07:d6:66:90:b4:21:24:17:f3:c6:af:ef:2b:f1:c7:b4:fa:ae:
         4d:c3:de:94:9c:a2:58:3c:a4:5a:2b:5d:3c:71:27:69:03:fe:
         b1:00:3d:65:a9:b1:d0:19:57:6f:86:04:12:34:12:ad:40:ae:
         c9:20:48:44:fa:2f:6d:4c:06:7b:85:f2:32:1a:2b:37:f8:7a:
         d1:6f:c9:4e:33:d7:9b:8a:e4:3d:2a:5b:53:17:9f:69:4b:e1:
         22:93:7e:4b:09:77:4b:1f:34:71:cb:1d:5a:79:c5:f2:12:31:
         9f:2d:72:05:72:ac:51:b9:05:11:da:9a:d9:a3:65:4b:27:67:
         fb:0e:19:8d:09:14:46:42:7d:af:89:11:04:6e:2d:f8:27:4b:
         ec:9d:4e:5f:59:77:12:df:c8:1c:d7:ac:42:30:e8:dd:4e:51:
         6b:d6:57:b4:f4:62:b1:ae:f9:46:4c:e2:3e:80:1c:d4:cd:a0:
         a4:d7:ee:0b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDD0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzlENUQxMTAvBgNVBAUTKDM3MkQ5MzZFMzhEOEI5Q0IxRjcwMTIyMTlGRjgyMTcy
QjkwQkVFNTgwHhcNMjUwNzAyMTg0NzA3WhcNMjUwNzA5MTg0NzA3WjAYMRYwFAYD
VQQDEw02ODY1N2VhYy02MWNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs0/pklfACdZe54W41zeVaSwcAdr8ZSVVa9w8/ipNuPjebrO5+Jhdw476CS+3
FzOZxiuL3aWPn2q++V2RbuEUCFgKFx5OnH5Prb1Qz/mdZ5n7sOfdKKlipidKp903
GaE3P+QrAhiklwfvw3yRCWyVyELgaVRqXwL1LvAZyI+rPWu91mvuavgN97uzvEHq
diIefPItPQb1I9modAEZt7ZcE1Hs5gaSs0wc8wtuEmGWhSy3uQ7DdvoBd1Fimnum
Kpi2LV38sWUOdKgm0L5Ys/Z7H12a4Nwk3HxZhjA6b/CsEI3asGhtOjg3fc5qezkl
JB4FYTHH/4/aYZGEv3yHGY66GQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRKdv44
/Bk1DLiRQ5ekhNjyGYXOMB8GA1UdIwQYMBaAFDctk2442LnLH3ASIZ/4IXK5C+5Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUQ1RC9ERDZGMjg3MjBB
OEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVjc2ZjQklobl9naGNya0w3
bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL055MlRiampZdWNzZmNCSWhuX2doY3JrTDdsZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OUQ1RC9ERDZGMjg3MjBBOEIxMUVBQkNGOUNFNTJDNEY5QUUwMi9OeTJUYmpqWXVj
c2ZjQklobl9naGNya0w3bGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCjIo6Gx0xkj1hcownyK7T1++355HbLCs+EhUDW92u0ibXxfx9GJaOx
NYQOb1VqS+2CszfOXy9+QHWUt6AKLgEZBvNWLZXidZIH1maQtCEkF/PGr+8r8ce0
+q5Nw96UnKJYPKRaK108cSdpA/6xAD1lqbHQGVdvhgQSNBKtQK7JIEhE+i9tTAZ7
hfIyGis3+HrRb8lOM9ebiuQ9KltTF59pS+Eik35LCXdLHzRxyx1aecXyEjGfLXIF
cqxRuQUR2prZo2VLJ2f7DhmNCRRGQn2viREEbi34J0vsnU5fWXcS38gc16xCMOjd
TlFr1le09GKxrvlGTOI+gBzUzaCk1+4L
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:37:49 2025 by rpki-client