Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
File:                     -pTeOQiOw4pStpInmkLEr_tbc7E.mft (raw, json)
Hash identifier:          lapkeTUJGzqJNcOqi/v+RCUE+DwmPASryxRGznQzyww=
Subject key identifier:   DC:EF:29:62:9D:EC:80:2A:1B:4F:0D:DB:C9:33:FD:F4:04:A2:E3:48
Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1
Certificate issuer:       /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
Certificate serial:       0C66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
Manifest number:          0C53
Signing time:             Fri 22 Aug 2025 18:38:22 +0000
Manifest this update:     Fri 22 Aug 2025 18:38:21 +0000
Manifest next update:     Fri 29 Aug 2025 18:38:21 +0000
Files and hashes:         1: -pTeOQiOw4pStpInmkLEr_tbc7E.crl (hash: Y6M/qW/LFtD0ODm9Dgr+oN1FbGmJQWL7uFwuE1UJfHU=)
                          2: B74426C88AA711EB876EF84BC4F9AE02.roa (hash: I8xUhuaKZwm6lPAAKATroItwpWXb2vxsxqVz/BIgbyE=)
                          3: B69D3A2A8AA711EB876EF84BC4F9AE02.roa (hash: oiRTxf178GSVajMFJOV88czGN0g9LsEQwe3fVsmhNYs=)
                          4: 33B6385E09E911EAA0C05451C4F9AE02.roa (hash: MSG4IEJD21Lg46cXlyVsJXQNoEWSJs0ZdoCdo0HPe4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl
                          rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 18:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3174 (0xc66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1
        Validity
            Not Before: Aug 22 18:38:21 2025 GMT
            Not After : Aug 29 18:38:21 2025 GMT
        Subject: CN=68a8b91e-9fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:7a:49:24:4e:a9:ec:2f:b9:07:2c:f6:f3:
                    15:e0:90:8d:08:51:9a:8e:e1:27:18:37:75:13:e5:
                    5b:58:8b:24:1d:4c:7d:4a:00:60:0b:fc:60:8a:c5:
                    9a:ba:aa:ea:a6:df:e1:b3:5f:2f:99:0c:dc:37:29:
                    b7:7c:3c:b7:1b:00:e2:f4:74:f8:34:5c:40:4f:0b:
                    98:01:f8:a7:85:b5:49:6f:1c:a2:e0:c2:85:a8:e7:
                    2f:ff:9b:c3:57:e3:48:d1:8a:ac:f5:58:f8:7a:c5:
                    ee:89:80:e2:ca:b7:a4:77:18:aa:09:f1:90:d1:61:
                    72:3d:5f:ad:a5:fa:6d:85:30:10:24:f2:c8:af:3a:
                    85:9d:33:e5:8d:6e:7c:23:b5:52:fd:41:a8:0a:4c:
                    e8:00:b0:1d:66:d7:41:8d:5e:a9:da:ac:fd:7c:5a:
                    85:35:4f:74:53:c9:6d:f0:cb:c5:bc:50:45:b4:ea:
                    06:97:d6:24:5f:a7:25:56:ca:25:7e:33:07:1b:50:
                    69:44:04:09:be:f4:48:fe:d7:92:4b:c3:93:61:e8:
                    83:e5:6f:a6:c2:dd:ea:9a:57:83:52:66:19:84:18:
                    86:07:c3:6d:01:32:80:d5:cb:af:8b:ec:2c:8c:69:
                    70:2b:b4:27:ee:73:84:7c:1a:8d:a1:b0:5e:f6:93:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:29:62:9D:EC:80:2A:1B:4F:0D:DB:C9:33:FD:F4:04:A2:E3:48
            X509v3 Authority Key Identifier:
                keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:61:08:38:ee:9d:99:63:cc:7b:a6:8e:7f:28:af:8d:bd:80:
         a0:f1:e7:82:fa:60:87:d4:b7:c9:e5:7c:3a:f3:55:de:7c:c2:
         f0:81:f4:08:1b:74:af:56:3a:9f:93:df:46:76:57:3b:4b:00:
         6c:e1:f0:dc:9c:69:e4:90:e8:f2:75:58:a4:c2:02:2b:77:ff:
         58:a8:14:2c:8a:20:26:25:86:48:1e:6a:31:03:2f:22:e5:22:
         23:ca:8d:68:38:64:f7:54:46:5f:51:8b:7b:e4:ec:bd:d1:49:
         71:33:0e:70:6e:5b:64:95:23:91:0b:6b:39:5e:85:04:43:d3:
         93:81:a8:d5:7c:6c:99:68:0f:6e:c6:93:50:15:e3:b3:08:3d:
         91:cb:19:b7:a5:74:8a:8e:75:44:fc:37:59:1e:26:3f:66:07:
         ac:98:f4:a0:35:03:5b:2d:59:2f:cd:c6:54:48:34:b4:57:c6:
         4b:34:cb:cf:8e:dc:6c:32:cf:a8:ba:1c:a6:e6:34:33:f2:94:
         a8:da:62:99:6f:19:16:5b:d6:51:88:9d:86:69:1e:96:cb:4e:
         3b:de:ea:c2:30:1a:26:25:2e:ad:c6:03:b4:7f:4c:96:cc:0d:
         ed:ca:17:89:ef:f0:ab:89:42:b2:47:4e:ee:d2:00:64:fc:d3:
         57:16:90:b9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG
RkI1QjczQjEwHhcNMjUwODIyMTgzODIxWhcNMjUwODI5MTgzODIxWjAYMRYwFAYD
VQQDEw02OGE4YjkxZS05ZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsCd6SSROqewvuQcs9vMV4JCNCFGajuEnGDd1E+VbWIskHUx9SgBgC/xgisWa
uqrqpt/hs18vmQzcNym3fDy3GwDi9HT4NFxATwuYAfinhbVJbxyi4MKFqOcv/5vD
V+NI0Yqs9Vj4esXuiYDiyrekdxiqCfGQ0WFyPV+tpfpthTAQJPLIrzqFnTPljW58
I7VS/UGoCkzoALAdZtdBjV6p2qz9fFqFNU90U8lt8MvFvFBFtOoGl9YkX6clVsol
fjMHG1BpRAQJvvRI/teSS8OTYeiD5W+mwt3qmleDUmYZhBiGB8NtATKA1cuvi+ws
jGlwK7Qn7nOEfBqNobBe9pOWcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzvKWKd
7IAqG08N28kz/fQEouNIMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5
RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUU3MC8wOTEwRDFBMDA5RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0
cFN0cElubWtMRXJfdGJjN0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAoYQg47p2ZY8x7po5/KK+NvYCg8eeC+mCH1LfJ5Xw681XefMLwgfQI
G3SvVjqfk99Gdlc7SwBs4fDcnGnkkOjydVikwgIrd/9YqBQsiiAmJYZIHmoxAy8i
5SIjyo1oOGT3VEZfUYt75Oy90UlxMw5wbltklSORC2s5XoUEQ9OTgajVfGyZaA9u
xpNQFeOzCD2Ryxm3pXSKjnVE/DdZHiY/ZgesmPSgNQNbLVkvzcZUSDS0V8ZLNMvP
jtxsMs+ouhym5jQz8pSo2mKZbxkWW9ZRiJ2GaR6Wy0473urCMBomJS6txgO0f0yW
zA3tyheJ7/CriUKyR07u0gBk/NNXFpC5
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:25:30 2025 by rpki-client