Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
File:                     4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft (raw, json)
Hash identifier:          yUEc4d1YESUgt1uqi+JnGAlk/T6iiCFqfqvmXK87SpQ=
Subject key identifier:   42:ED:93:6A:4A:74:D7:70:8B:87:6D:58:0D:0D:E4:C6:32:73:77:BB
Authority key identifier: E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E
Certificate issuer:       /CN=A91F9FCC/serialNumber=E01002B37C26B9709915267666F44900C0131E2E
Certificate serial:       07A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
Manifest number:          079C
Signing time:             Sat 28 Jun 2025 20:59:36 +0000
Manifest this update:     Sat 28 Jun 2025 20:59:35 +0000
Manifest next update:     Sat 05 Jul 2025 20:59:35 +0000
Files and hashes:         1: 4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl (hash: hNE+eGoc7Iw/Bqt3TYi+4k/mq5gdctoTFVzSw8JoB38=)
                          2: 009FA5F0397C11EF9EC42850C4F9AE02.roa (hash: BUdadXM84LZqg6dcPh4b0sJ5Cd4Jg9PJnJrm+wRnwP8=)
                          3: E1C6B9720DCC11EBAB25BC31C4F9AE02.roa (hash: GwT8wJjuiJq3ptd4ORrNmt479yde0NY4ozRqZ/YvpGw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl
                          rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 20:59:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1958 (0x7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9FCC, serialNumber=E01002B37C26B9709915267666F44900C0131E2E
        Validity
            Not Before: Jun 28 20:59:35 2025 GMT
            Not After : Jul  5 20:59:35 2025 GMT
        Subject: CN=686057b7-0610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:83:bf:16:d9:d0:28:cd:14:68:e6:4c:c5:a9:
                    c3:32:ea:2e:c7:53:0c:f7:0c:46:19:47:45:4e:c7:
                    34:64:83:61:e2:c3:da:8a:a8:a6:24:c5:35:f5:dd:
                    18:0e:ed:84:bf:4f:bd:c7:df:45:22:d7:9b:dd:f9:
                    0d:27:b9:2e:99:73:1d:5b:50:13:c9:85:c7:aa:0e:
                    7d:7a:a2:b4:50:88:16:54:e2:ea:82:9d:e2:85:d7:
                    2b:0c:ea:2c:a2:7d:df:e1:0a:5b:1f:a5:4a:56:93:
                    82:03:00:aa:3c:4a:36:bb:d3:77:4b:ba:87:8e:88:
                    de:1f:b4:73:8a:a7:31:dc:3f:ea:d7:8b:cc:f5:31:
                    73:0b:29:ad:c9:bd:3f:47:55:fb:d9:ab:4e:23:7e:
                    5a:2b:54:07:75:b1:21:f8:e6:f7:7e:99:80:d8:78:
                    f3:8b:8c:c3:73:63:37:9e:8a:00:f0:49:d0:6d:87:
                    91:f3:93:a9:66:ae:e5:35:55:6b:c2:f2:bc:f8:af:
                    7d:34:4f:2c:bd:56:96:e2:3a:97:ad:bf:cc:0d:8e:
                    27:ba:53:cc:9a:82:85:55:61:10:e5:c8:08:96:cc:
                    57:f4:05:5e:9e:b4:97:48:17:5f:44:2c:22:1d:20:
                    6b:ad:04:c6:8c:25:98:8c:e3:0e:eb:ac:97:f3:93:
                    7b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:ED:93:6A:4A:74:D7:70:8B:87:6D:58:0D:0D:E4:C6:32:73:77:BB
            X509v3 Authority Key Identifier:
                keyid:E0:10:02:B3:7C:26:B9:70:99:15:26:76:66:F4:49:00:C0:13:1E:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BACs3wmuXCZFSZ2ZvRJAMATHi4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9FCC/22CD79DE0DCC11EBB81BA431C4F9AE02/4BACs3wmuXCZFSZ2ZvRJAMATHi4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8c:1d:30:00:74:dd:57:e7:cd:32:81:fe:47:98:10:84:22:
         96:df:11:7b:bb:34:db:ce:d7:ff:e9:59:af:39:e2:62:62:bd:
         9b:96:88:75:ec:e9:c2:14:39:b1:a1:74:3b:9a:4b:08:2d:1d:
         07:a3:ce:13:6b:39:f6:7a:66:56:39:3c:65:93:cf:4f:38:cf:
         08:6a:b4:23:56:75:a2:ef:20:c8:be:0e:d4:b2:b7:4b:22:a2:
         86:bd:09:76:a2:24:fb:49:87:ef:6c:9e:e6:fa:32:21:e1:78:
         78:0d:c5:af:d9:23:9a:56:42:c7:ff:10:af:70:e0:60:40:3c:
         04:69:b0:e5:55:83:e7:97:4d:d9:f0:0a:2b:5a:1a:79:9a:8b:
         65:75:39:62:ba:f6:4a:ac:0c:00:11:7d:31:d4:23:dc:83:10:
         dc:5a:b2:ce:bf:ed:6c:ab:78:7d:e4:57:69:ca:74:a9:8a:08:
         b2:11:20:e5:71:ba:54:cf:66:5d:35:16:9f:d2:dd:12:70:c1:
         52:58:ea:b1:f8:b0:85:69:9f:bd:9c:12:a6:96:ab:81:d8:21:
         c0:84:70:21:f5:f9:0b:7e:62:b0:f8:42:8a:7b:b4:fe:49:3e:
         50:c9:ac:ec:d0:9d:7e:8b:62:81:ce:56:84:04:48:83:ce:6a:
         d5:62:ff:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjlGQ0MxMTAvBgNVBAUTKEUwMTAwMkIzN0MyNkI5NzA5OTE1MjY3NjY2RjQ0OTAw
QzAxMzFFMkUwHhcNMjUwNjI4MjA1OTM1WhcNMjUwNzA1MjA1OTM1WjAYMRYwFAYD
VQQDEw02ODYwNTdiNy0wNjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1oO/FtnQKM0UaOZMxanDMuoux1MM9wxGGUdFTsc0ZINh4sPaiqimJMU19d0Y
Du2Ev0+9x99FIteb3fkNJ7kumXMdW1ATyYXHqg59eqK0UIgWVOLqgp3ihdcrDOos
on3f4QpbH6VKVpOCAwCqPEo2u9N3S7qHjojeH7Rziqcx3D/q14vM9TFzCymtyb0/
R1X72atOI35aK1QHdbEh+Ob3fpmA2Hjzi4zDc2M3nooA8EnQbYeR85OpZq7lNVVr
wvK8+K99NE8svVaW4jqXrb/MDY4nulPMmoKFVWEQ5cgIlsxX9AVenrSXSBdfRCwi
HSBrrQTGjCWYjOMO66yX85N79QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFELtk2pK
dNdwi4dtWA0N5MYyc3e7MB8GA1UdIwQYMBaAFOAQArN8JrlwmRUmdmb0SQDAEx4u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUZDQy8yMkNENzlERTBE
Q0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVYQ1pGU1oyWnZSSkFNQVRI
aTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRCQUNzM3dtdVhDWkZTWjJadlJKQU1BVEhpNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OUZDQy8yMkNENzlERTBEQ0MxMUVCQjgxQkE0MzFDNEY5QUUwMi80QkFDczN3bXVY
Q1pGU1oyWnZSSkFNQVRIaTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcjB0wAHTdV+fNMoH+R5gQhCKW3xF7uzTbztf/6VmvOeJiYr2bloh1
7OnCFDmxoXQ7mksILR0Ho84Tazn2emZWOTxlk89POM8IarQjVnWi7yDIvg7UsrdL
IqKGvQl2oiT7SYfvbJ7m+jIh4Xh4DcWv2SOaVkLH/xCvcOBgQDwEabDlVYPnl03Z
8AorWhp5motldTliuvZKrAwAEX0x1CPcgxDcWrLOv+1sq3h95FdpynSpigiyESDl
cbpUz2ZdNRaf0t0ScMFSWOqx+LCFaZ+9nBKmlquB2CHAhHAh9fkLfmKw+EKKe7T+
ST5Qyazs0J1+i2KBzlaEBEiDzmrVYv/2
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:35:16 2025 by rpki-client