Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
File:                     c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json)
Hash identifier:          ih6t2XQTLzAtWtaAUxHa4eCCYmHYj+md76gnHMO3Nhk=
Subject key identifier:   77:2B:B5:BE:FD:0D:D4:2C:E8:16:F4:B2:D3:6F:CB:58:6C:FB:4A:30
Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30
Certificate issuer:       /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
Manifest number:          0126
Signing time:             Sun 29 Jun 2025 03:51:22 +0000
Manifest this update:     Sun 29 Jun 2025 03:51:21 +0000
Manifest next update:     Sun 06 Jul 2025 03:51:21 +0000
Files and hashes:         1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: FLUaDwfRMcP4h0t7WivYUuuj4N3bYtss+QZd/LKcLcc=)
                          2: D4F8CEB8FE4211EF958ABE3BC4F9AE02.roa (hash: e+itOOHa2GS7haggfAySbnRHvgH3I9TscI3l9ZgslXk=)
                          3: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: pCYjff74rDvqaSSHh6b2YJXJxIU8kNQvxw7uQ6aFFQ8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl
                          rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 03:51:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730
        Validity
            Not Before: Jun 29 03:51:21 2025 GMT
            Not After : Jul  6 03:51:21 2025 GMT
        Subject: CN=6860b83a-8d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:09:50:7d:97:c8:49:78:5f:e4:53:0f:71:
                    a5:93:ac:cb:83:f6:12:4a:66:96:61:cf:02:b9:1a:
                    d2:90:44:de:8e:10:a3:2e:28:66:5e:14:ad:17:c6:
                    91:77:08:16:10:83:8b:6e:ec:ac:4e:2a:4a:c8:d1:
                    00:d6:9b:8a:89:6c:11:82:51:d0:78:83:dd:31:4e:
                    3b:14:ed:23:fb:72:01:f8:5b:b6:99:c7:42:33:ec:
                    df:4a:44:ae:b1:bf:72:3f:7b:cd:b9:79:42:73:f7:
                    8e:20:3a:fc:75:f4:d3:af:7f:2a:a4:80:d2:4f:80:
                    f2:45:29:42:b3:85:7c:82:de:c6:35:66:c4:25:b7:
                    9d:21:5b:79:e6:2f:0e:13:99:9c:5b:12:d5:f4:70:
                    49:1e:23:24:1a:e9:6d:b3:b3:20:6b:f7:c1:f4:66:
                    13:32:33:46:c3:ef:0e:1f:d9:89:fd:ba:ae:c2:85:
                    0d:4e:09:90:f4:f8:02:6c:c8:09:d7:bc:98:cd:e9:
                    87:07:56:00:ca:59:70:72:18:a2:72:bf:3f:ea:3d:
                    34:6c:e5:6b:98:3e:99:03:58:e4:91:ea:2c:3e:f8:
                    d3:a3:b4:2a:20:b6:5c:d9:a3:eb:cc:bd:22:66:37:
                    df:b9:47:73:65:93:97:e7:3a:1a:57:e2:a7:1f:a9:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2B:B5:BE:FD:0D:D4:2C:E8:16:F4:B2:D3:6F:CB:58:6C:FB:4A:30
            X509v3 Authority Key Identifier:
                keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:0f:88:eb:8c:6e:80:c6:64:2a:9a:08:9c:e5:fd:f6:ae:c9:
         16:03:00:7e:fd:f4:7a:88:60:5f:0e:2d:22:1f:cb:68:a4:e0:
         42:38:a9:6e:63:6e:ef:0c:bd:74:d2:95:7b:af:78:c7:9b:cc:
         cd:90:e0:40:af:ce:8e:f0:c0:8a:04:fc:7a:cc:b8:d9:ee:b2:
         f3:78:41:c4:f7:9e:da:c1:c5:56:d8:c1:c4:9a:c9:7c:ef:8a:
         ff:a0:4c:8d:66:f0:3f:d2:5a:51:33:25:b2:8e:fc:70:8c:37:
         c3:90:29:f4:90:93:7b:22:f0:fc:f8:7b:bc:c7:5c:5b:cf:b7:
         07:8d:87:74:8e:64:f0:53:bc:f9:c3:02:fb:8e:b7:b3:e1:c0:
         40:0f:4a:36:fb:a1:4b:00:e9:b1:bd:f1:fd:36:06:5c:30:b9:
         18:c4:21:42:b1:69:7e:2e:88:65:90:2f:9d:65:53:e3:73:3c:
         7c:39:1e:f4:c9:c9:ce:7a:ae:14:47:0d:13:9e:a9:ce:56:1e:
         19:a6:e5:cd:0d:ff:66:91:01:62:a3:19:be:f4:39:e8:a5:e5:
         91:43:a0:dd:b5:5e:e2:53:73:82:ec:3f:12:1d:5b:91:5a:bf:
         18:f1:52:6b:60:c4:1a:4b:f7:76:d6:fa:98:b1:4e:15:f0:fa:
         91:4b:63:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM0QkYxMTAvBgNVBAUTKDczQkRCMkEwMkJDQkVDM0M5MDAwRjY1RjcwNUM5NkU4
MDgwRTk3MzAwHhcNMjUwNjI5MDM1MTIxWhcNMjUwNzA2MDM1MTIxWjAYMRYwFAYD
VQQDEw02ODYwYjgzYS04ZDYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqGMJUH2XyEl4X+RTD3Glk6zLg/YSSmaWYc8CuRrSkETejhCjLihmXhStF8aR
dwgWEIOLbuysTipKyNEA1puKiWwRglHQeIPdMU47FO0j+3IB+Fu2mcdCM+zfSkSu
sb9yP3vNuXlCc/eOIDr8dfTTr38qpIDST4DyRSlCs4V8gt7GNWbEJbedIVt55i8O
E5mcWxLV9HBJHiMkGults7Mga/fB9GYTMjNGw+8OH9mJ/bquwoUNTgmQ9PgCbMgJ
17yYzemHB1YAyllwchiicr8/6j00bOVrmD6ZA1jkkeosPvjTo7QqILZc2aPrzL0i
ZjffuUdzZZOX5zoaV+KnH6lZ/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHcrtb79
DdQs6Bb0stNvy1hs+0owMB8GA1UdIwQYMBaAFHO9sqAry+w8kAD2X3BclugIDpcw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRCRi80RjAzM0Q4NDlD
RjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdEeVFBUFpmY0Z5VzZBZ09s
ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2M3MnlvQ3ZMN0R5UUFQWmZjRnlXNkFnT2x6QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzRCRi80RjAzM0Q4NDlDRjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdE
eVFBUFpmY0Z5VzZBZ09sekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC0D4jrjG6AxmQqmgic5f32rskWAwB+/fR6iGBfDi0iH8topOBCOKlu
Y27vDL100pV7r3jHm8zNkOBAr86O8MCKBPx6zLjZ7rLzeEHE957awcVW2MHEmsl8
74r/oEyNZvA/0lpRMyWyjvxwjDfDkCn0kJN7IvD8+Hu8x1xbz7cHjYd0jmTwU7z5
wwL7jrez4cBAD0o2+6FLAOmxvfH9NgZcMLkYxCFCsWl+LohlkC+dZVPjczx8OR70
ycnOeq4URw0TnqnOVh4ZpuXNDf9mkQFioxm+9DnopeWRQ6DdtV7iU3OC7D8SHVuR
Wr8Y8VJrYMQaS/d21vqYsU4V8PqRS2NO
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:33:54 2025 by rpki-client