Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
File:                     7uxT6tF_v4myIdm6WvzQEHkMmU0.mft (raw, json)
Hash identifier:          9yJtYr6hw01JMKpNGE7aa89G3RGk4p7TfUCVVlFAVbY=
Subject key identifier:   7E:CF:87:E5:9C:D1:92:09:C7:B1:15:5E:5C:77:16:89:68:39:5D:B4
Authority key identifier: EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D
Certificate issuer:       /CN=A91CFF62/serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D
Certificate serial:       0160
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
Manifest number:          0160
Signing time:             Sat 23 Aug 2025 04:06:44 +0000
Manifest this update:     Sat 23 Aug 2025 04:06:44 +0000
Manifest next update:     Sat 30 Aug 2025 04:06:44 +0000
Files and hashes:         1: 7uxT6tF_v4myIdm6WvzQEHkMmU0.crl (hash: 0ven5hT1q/htTcKMMq6+0Rsd7Ns44iYrEq56Rv4dto0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:06:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFF62, serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D
        Validity
            Not Before: Aug 23 04:06:44 2025 GMT
            Not After : Aug 30 04:06:44 2025 GMT
        Subject: CN=68a93e54-083c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:ee:93:be:aa:f4:b5:19:7a:bc:f0:1b:61:
                    57:b8:13:f9:a9:63:ed:d1:a5:f8:02:81:d8:c8:c5:
                    5f:98:8d:15:17:43:63:ca:30:e8:ad:41:73:81:ce:
                    4a:6f:2a:d5:ca:e6:bf:ab:98:9d:1f:e7:87:e0:00:
                    5a:05:63:67:af:b7:8c:92:3e:c0:99:18:17:cb:e4:
                    a7:69:c6:ef:3e:21:bd:cb:61:02:12:5c:4a:8f:ad:
                    1b:aa:e7:8f:34:e3:77:c4:e1:25:1c:12:97:b9:87:
                    83:ab:86:49:e3:27:34:59:d2:cc:0f:6c:57:30:35:
                    72:17:8c:1e:f3:89:53:cd:08:3a:0e:e7:ca:53:ec:
                    4f:e5:da:35:fc:25:b7:82:81:29:4c:cc:cf:34:1f:
                    27:cc:a6:d3:c0:f2:c7:28:f0:4b:c8:67:47:47:fc:
                    24:6d:c9:5a:6f:bb:c8:1c:e3:90:25:3f:7a:46:67:
                    98:15:ed:bb:18:76:2e:55:dd:17:a7:bf:b5:97:a8:
                    24:fa:56:7f:57:c6:b4:fc:42:1c:e6:fa:28:74:7d:
                    bc:c8:e2:ee:94:b0:9d:de:18:35:17:1b:d7:6c:7f:
                    8c:0b:90:65:15:1d:2c:08:cf:ba:5f:e9:9f:96:03:
                    67:4d:35:6a:79:5a:cc:16:d3:1d:02:cf:ef:6e:31:
                    ba:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CF:87:E5:9C:D1:92:09:C7:B1:15:5E:5C:77:16:89:68:39:5D:B4
            X509v3 Authority Key Identifier:
                keyid:EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:40:86:d9:5c:a9:bc:65:0f:ad:76:07:5e:c3:a4:ad:1b:1c:
         0b:3a:f7:8f:34:ab:70:b6:84:50:9b:80:b8:96:dd:f9:f4:03:
         7c:bc:75:cb:66:f9:82:c9:8e:d1:fd:b6:f5:6b:53:13:74:2a:
         5a:ac:3f:5d:96:13:e7:74:09:37:62:b8:60:cc:4b:bd:1f:94:
         38:51:38:f5:61:91:f1:2b:db:29:2a:df:7e:41:91:e3:4c:72:
         6e:30:b6:cc:bf:7d:dc:d5:1c:05:d7:54:f2:19:d5:f0:62:e7:
         d6:f7:1c:03:d5:ac:c7:d4:21:52:93:58:0f:48:a9:d2:c5:4e:
         26:20:31:4a:9e:eb:06:9d:61:96:01:72:52:95:f2:a4:37:dd:
         4d:b3:e3:41:4b:15:82:74:57:df:e3:7a:3a:78:1f:a2:b6:91:
         98:16:c1:ca:62:aa:ce:c6:3c:eb:6a:13:5b:39:dc:de:24:1f:
         27:fb:4f:96:a7:b4:96:54:30:14:d4:78:d2:1e:ef:55:cb:8a:
         20:e4:78:c3:a6:82:c0:c8:ed:7b:fd:43:45:bd:8c:f8:54:de:
         2c:0f:22:1c:13:2f:47:ce:a6:94:d0:f7:19:d5:48:f6:ac:3c:
         3d:72:81:d6:48:96:40:46:fd:22:36:1c:f7:ed:76:c8:d6:2c:
         bc:79:d4:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0ZGNjIxMTAvBgNVBAUTKEVFRUM1M0VBRDE3RkJGODlCMjIxRDlCQTVBRkNEMDEw
NzkwQzk5NEQwHhcNMjUwODIzMDQwNjQ0WhcNMjUwODMwMDQwNjQ0WjAYMRYwFAYD
VQQDEw02OGE5M2U1NC0wODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApeTuk76q9LUZerzwG2FXuBP5qWPt0aX4AoHYyMVfmI0VF0NjyjDorUFzgc5K
byrVyua/q5idH+eH4ABaBWNnr7eMkj7AmRgXy+SnacbvPiG9y2ECElxKj60bqueP
NON3xOElHBKXuYeDq4ZJ4yc0WdLMD2xXMDVyF4we84lTzQg6DufKU+xP5do1/CW3
goEpTMzPNB8nzKbTwPLHKPBLyGdHR/wkbclab7vIHOOQJT96RmeYFe27GHYuVd0X
p7+1l6gk+lZ/V8a0/EIc5voodH28yOLulLCd3hg1FxvXbH+MC5BlFR0sCM+6X+mf
lgNnTTVqeVrMFtMdAs/vbjG6uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7Ph+Wc
0ZIJx7EVXlx3FoloOV20MB8GA1UdIwQYMBaAFO7sU+rRf7+JsiHZulr80BB5DJlN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xQThBMDY2NDYy
NjIxMUVFODBCQzg1NURDNEY5QUUwMi83dXhUNnRGX3Y0bXlJZG02V3Z6UUVIa01t
VTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzd1eFQ2dEZfdjRteUlkbTZXdnpRRUhrTW1VMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
RkY2Mi8xQThBMDY2NDYyNjIxMUVFODBCQzg1NURDNEY5QUUwMi83dXhUNnRGX3Y0
bXlJZG02V3Z6UUVIa01tVTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCFQIbZXKm8ZQ+tdgdew6StGxwLOvePNKtwtoRQm4C4lt359AN8vHXL
ZvmCyY7R/bb1a1MTdCparD9dlhPndAk3YrhgzEu9H5Q4UTj1YZHxK9spKt9+QZHj
THJuMLbMv33c1RwF11TyGdXwYufW9xwD1azH1CFSk1gPSKnSxU4mIDFKnusGnWGW
AXJSlfKkN91Ns+NBSxWCdFff43o6eB+itpGYFsHKYqrOxjzrahNbOdzeJB8n+0+W
p7SWVDAU1HjSHu9Vy4og5HjDpoLAyO17/UNFvYz4VN4sDyIcEy9HzqaU0PcZ1Uj2
rDw9coHWSJZARv0iNhz37XbI1iy8edRo
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:40:43 2025 by rpki-client