Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
File:                     Xs7vXyjy82UFPfuM780W4cPehK4.mft (raw, json)
Hash identifier:          dlpFbU2w55/V3iC46huQEvkUzf1K0AhE+58Hw6zlmpY=
Subject key identifier:   96:85:44:18:AD:10:EC:19:00:D0:11:55:08:B6:0C:FB:37:1B:F4:E2
Authority key identifier: 5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE
Certificate issuer:       /CN=A91DB8D9/serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
Certificate serial:       03BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
Manifest number:          03B4
Signing time:             Thu 03 Jul 2025 01:03:59 +0000
Manifest this update:     Thu 03 Jul 2025 01:03:59 +0000
Manifest next update:     Thu 10 Jul 2025 01:03:59 +0000
Files and hashes:         1: Xs7vXyjy82UFPfuM780W4cPehK4.crl (hash: 5YMcfeJU+zTkfPVLj4KO+VYn7NbCObi39OcOomRdp2Y=)
                          2: 728139D62FA311F0A9129814C4F9AE02.roa (hash: guIJtqQN+EFa/f6cWPw4iUlLONR7odnIq46PWDEQXBE=)
                          3: F31E86967B2311EF93801A72C4F9AE02.roa (hash: Um+5nEX9UGWaeunNGOXHeeYETiEJM95laBvW70lUPDE=)
                          4: 7E044E58A06B11ECBF29B644C4F9AE02.roa (hash: EglzY5P8gEG+IosP670+janTnu12u5QYgDoCSiDyeR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl
                          rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 957 (0x3bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB8D9, serialNumber=5ECEEF5F28F2F365053DFB8CEFCD16E1C3DE84AE
        Validity
            Not Before: Jul  3 01:03:59 2025 GMT
            Not After : Jul 10 01:03:59 2025 GMT
        Subject: CN=6865d6ff-2538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:80:2f:1e:76:12:0c:15:0b:cb:8d:65:a6:e7:
                    2f:ff:54:ce:12:e5:f0:50:62:bc:54:20:98:92:42:
                    44:9b:ab:84:16:e4:0e:73:fb:46:cc:91:38:7d:71:
                    a6:55:ad:7b:1d:c1:f8:21:a3:a5:f1:53:7b:d1:21:
                    be:25:e7:ea:d1:ac:6f:9c:b7:9b:ca:5c:37:9a:eb:
                    8f:09:26:52:a5:4a:a7:fd:c1:0c:76:14:96:9f:75:
                    ce:c1:a6:83:5c:b9:f8:db:e3:3c:6c:dd:b8:bc:18:
                    2b:10:47:64:0f:16:2a:48:51:cb:86:c9:64:3a:c8:
                    62:de:da:cf:24:5b:c1:44:82:7c:94:0a:48:12:8d:
                    75:8c:2e:b6:f9:d4:18:dc:fd:92:9b:dc:1f:9d:48:
                    47:dd:97:5b:55:a9:6c:d6:9a:4a:7e:7b:97:9b:7a:
                    21:a0:32:84:c2:cb:bf:44:e1:4d:b0:fc:46:c7:5b:
                    c3:1a:af:8a:84:4b:6c:9a:7e:59:51:bc:8a:34:4d:
                    86:f9:f7:dc:08:6f:71:83:27:7d:93:ab:6e:71:dc:
                    bd:63:d4:63:27:ce:c8:8e:6e:53:74:73:86:f7:40:
                    41:57:35:6c:65:4d:3c:64:c4:eb:71:bd:a3:0a:64:
                    0a:14:17:8b:2f:9c:6a:1f:d9:fe:ba:b3:79:12:dc:
                    df:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:85:44:18:AD:10:EC:19:00:D0:11:55:08:B6:0C:FB:37:1B:F4:E2
            X509v3 Authority Key Identifier:
                keyid:5E:CE:EF:5F:28:F2:F3:65:05:3D:FB:8C:EF:CD:16:E1:C3:DE:84:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xs7vXyjy82UFPfuM780W4cPehK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB8D9/8B0023769A0211EC8B817785C4F9AE02/Xs7vXyjy82UFPfuM780W4cPehK4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:d7:2a:38:73:71:0a:91:21:aa:f2:fc:57:30:38:4f:7b:
         b5:7b:d7:1c:4c:a7:60:d5:93:bc:db:3e:73:1b:0a:c6:cb:1f:
         f2:44:39:9b:1e:4b:76:41:a5:92:86:d8:79:3f:ea:ff:98:47:
         73:8a:4c:0b:c8:1b:47:18:4b:ea:41:f5:68:97:6a:85:0c:8e:
         81:41:9f:48:83:80:60:13:91:da:2c:c1:9a:f0:ff:17:d3:29:
         6f:04:13:d1:1e:8b:ba:f3:29:29:2b:ea:f3:2f:ec:4f:3a:e1:
         41:fa:6e:72:6a:e9:9f:0f:02:b6:4e:3f:98:b4:f1:46:5f:54:
         43:08:bd:d2:00:78:a1:8a:1d:80:36:91:bd:5f:ae:bd:12:ff:
         2a:54:0e:9d:08:86:f6:d2:f3:b5:2c:7d:8e:83:74:bd:9d:32:
         c7:66:5a:38:5d:43:89:98:30:9c:62:21:0f:11:0b:8c:8c:cf:
         3f:fc:15:73:4d:99:2b:6c:22:b3:a6:1d:27:6c:a5:64:e6:9e:
         a8:ac:7c:f9:c7:d6:a8:b9:8f:56:f2:34:b5:bb:d9:75:f1:c8:
         76:d9:b1:af:f7:4d:15:3a:2d:61:8c:8d:ca:09:ca:1e:53:7a:
         1c:5c:20:4c:16:a6:98:45:e8:57:8f:a5:52:ab:aa:14:65:01:
         95:00:ae:e1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI4RDkxMTAvBgNVBAUTKDVFQ0VFRjVGMjhGMkYzNjUwNTNERkI4Q0VGQ0QxNkUx
QzNERTg0QUUwHhcNMjUwNzAzMDEwMzU5WhcNMjUwNzEwMDEwMzU5WjAYMRYwFAYD
VQQDEw02ODY1ZDZmZi0yNTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuYAvHnYSDBULy41lpucv/1TOEuXwUGK8VCCYkkJEm6uEFuQOc/tGzJE4fXGm
Va17HcH4IaOl8VN70SG+Jefq0axvnLebylw3muuPCSZSpUqn/cEMdhSWn3XOwaaD
XLn42+M8bN24vBgrEEdkDxYqSFHLhslkOshi3trPJFvBRIJ8lApIEo11jC62+dQY
3P2Sm9wfnUhH3ZdbVals1ppKfnuXm3ohoDKEwsu/ROFNsPxGx1vDGq+KhEtsmn5Z
UbyKNE2G+ffcCG9xgyd9k6tucdy9Y9RjJ87Ijm5TdHOG90BBVzVsZU08ZMTrcb2j
CmQKFBeLL5xqH9n+urN5EtzfowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJaFRBit
EOwZANARVQi2DPs3G/TiMB8GA1UdIwQYMBaAFF7O718o8vNlBT37jO/NFuHD3oSu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjhEOS84QjAwMjM3NjlB
MDIxMUVDOEI4MTc3ODVDNEY5QUUwMi9Yczd2WHlqeTgyVUZQZnVNNzgwVzRjUGVo
SzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hzN3ZYeWp5ODJVRlBmdU03ODBXNGNQZWhLNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjhEOS84QjAwMjM3NjlBMDIxMUVDOEI4MTc3ODVDNEY5QUUwMi9Yczd2WHlqeTgy
VUZQZnVNNzgwVzRjUGVoSzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCYptcqOHNxCpEhqvL8VzA4T3u1e9ccTKdg1ZO82z5zGwrGyx/yRDmb
Hkt2QaWShth5P+r/mEdzikwLyBtHGEvqQfVol2qFDI6BQZ9Ig4BgE5HaLMGa8P8X
0ylvBBPRHou68ykpK+rzL+xPOuFB+m5yaumfDwK2Tj+YtPFGX1RDCL3SAHihih2A
NpG9X669Ev8qVA6dCIb20vO1LH2Og3S9nTLHZlo4XUOJmDCcYiEPEQuMjM8//BVz
TZkrbCKzph0nbKVk5p6orHz5x9aouY9W8jS1u9l18ch22bGv900VOi1hjI3KCcoe
U3ocXCBMFqaYRehXj6VSq6oUZQGVAK7h
-----END CERTIFICATE-----
Generated at Thu Jul 3 21:42:13 2025 by rpki-client