Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
File:                     2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft (raw, json)
Hash identifier:          uDc0iEc01hMkdbRk/ZnqLPM/wb3T/cdHP1AShYWnveU=
Subject key identifier:   90:2F:1C:DF:F7:65:3D:70:BF:7E:D6:2C:9F:60:6E:2D:52:B6:F6:10
Authority key identifier: D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4
Certificate issuer:       /CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4
Certificate serial:       044F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
Manifest number:          044E
Signing time:             Sat 19 Jul 2025 00:36:52 +0000
Manifest this update:     Sat 19 Jul 2025 00:36:51 +0000
Manifest next update:     Sat 26 Jul 2025 00:36:51 +0000
Files and hashes:         1: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl (hash: 6m7A2Qq+Fm8nOcFMWvOLwmuzpCy0rtf/vg8eGTnWiW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 00:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1103 (0x44f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91487B2, serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4
        Validity
            Not Before: Jul 19 00:36:51 2025 GMT
            Not After : Jul 26 00:36:51 2025 GMT
        Subject: CN=687ae8a4-a15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:e4:84:d5:53:5d:40:4c:0b:76:2c:fa:e1:
                    ae:de:97:77:2f:38:94:a2:f0:eb:8f:63:2d:b1:92:
                    49:8c:7b:26:28:f7:a3:ca:a1:17:56:67:70:43:a9:
                    58:e1:42:f6:43:e0:97:45:80:d9:81:92:34:d0:06:
                    88:fc:7c:5c:7a:c5:87:98:3c:6e:af:5e:b9:d4:f2:
                    21:ca:bc:51:ff:cb:f6:ef:88:48:6d:50:a5:e3:a2:
                    5f:ae:22:07:89:54:0f:d9:6e:16:7c:4b:e5:6c:5a:
                    3d:78:77:61:36:ed:04:8e:c2:00:2b:2b:b8:11:1c:
                    b2:cb:7d:b9:e0:39:e6:f3:d9:04:d3:c8:8e:fd:b0:
                    97:f8:17:8e:7b:17:75:68:85:79:65:40:d6:9e:43:
                    f6:66:66:86:8c:76:f0:fa:ef:87:dc:4f:ad:fa:bb:
                    33:82:b8:d6:db:ff:ff:36:1f:82:34:ec:4f:ea:61:
                    5a:a7:bb:96:ba:c4:3c:8d:70:8b:30:e2:bb:c4:be:
                    92:3a:56:9d:ce:b9:68:8d:6f:63:1b:0c:32:61:cd:
                    83:f0:e0:56:3b:60:1a:d5:ef:93:bd:da:b5:45:6c:
                    53:87:a7:3e:62:15:34:fa:bc:21:27:18:ca:00:f3:
                    7a:1c:40:fa:10:8e:78:5f:38:39:ed:1e:6a:f8:fc:
                    ae:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2F:1C:DF:F7:65:3D:70:BF:7E:D6:2C:9F:60:6E:2D:52:B6:F6:10
            X509v3 Authority Key Identifier:
                keyid:D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c6:9c:4e:09:bf:52:14:8d:79:8b:b2:a9:22:e9:6e:40:a6:
         bf:66:5e:00:8e:e7:4f:d5:b4:f4:d0:5f:95:85:18:79:83:d0:
         63:ef:c0:6b:cb:0d:5a:6e:0e:26:2b:7d:02:a7:df:68:4e:37:
         9f:cf:5a:3f:11:4f:ff:d5:82:63:4d:04:57:06:a0:70:d8:e0:
         f7:43:58:07:40:82:3a:8e:d8:3e:ed:b7:87:7d:8e:d3:57:07:
         0e:6f:c1:8e:dd:9c:46:25:3d:33:57:c7:79:85:e5:08:71:db:
         cd:19:87:e0:0b:2b:2c:04:bf:d2:71:c0:1f:94:12:33:cf:35:
         d9:1e:71:7c:ff:3f:fa:ee:eb:bb:8a:12:1d:6c:fc:b6:12:7e:
         67:8a:cd:2f:4a:38:03:a7:53:30:21:57:b4:39:9d:72:d8:c0:
         0c:2e:79:46:89:87:51:1d:92:d7:2c:79:cc:f4:f1:bc:08:aa:
         13:a5:34:19:94:4e:09:fe:3c:db:9e:22:4c:c4:c2:2c:b8:51:
         45:84:c1:44:47:64:42:f6:a3:15:07:3c:e8:b5:bc:1d:3b:7c:
         df:cb:df:da:98:78:2b:60:ab:67:71:67:3f:47:20:37:4c:88:
         a1:fb:dd:34:3e:83:67:69:3a:05:81:c2:a4:ca:06:95:32:7f:
         6c:71:41:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDg3QjIxMTAvBgNVBAUTKEQ5NkJGNTZBQjYzRkFFRjAxNjlDMEQyOUQ2NEE1NDc4
MUMwNkIyRTQwHhcNMjUwNzE5MDAzNjUxWhcNMjUwNzI2MDAzNjUxWjAYMRYwFAYD
VQQDEw02ODdhZThhNC1hMTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAowbkhNVTXUBMC3Ys+uGu3pd3LziUovDrj2MtsZJJjHsmKPejyqEXVmdwQ6lY
4UL2Q+CXRYDZgZI00AaI/HxcesWHmDxur1651PIhyrxR/8v274hIbVCl46JfriIH
iVQP2W4WfEvlbFo9eHdhNu0EjsIAKyu4ERyyy3254Dnm89kE08iO/bCX+BeOexd1
aIV5ZUDWnkP2ZmaGjHbw+u+H3E+t+rszgrjW2///Nh+CNOxP6mFap7uWusQ8jXCL
MOK7xL6SOladzrlojW9jGwwyYc2D8OBWO2Aa1e+Tvdq1RWxTh6c+YhU0+rwhJxjK
APN6HED6EI54Xzg57R5q+PyuLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJAvHN/3
ZT1wv37WLJ9gbi1StvYQMB8GA1UdIwQYMBaAFNlr9Wq2P67wFpwNKdZKVHgcBrLk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODdCMi83NDZEQjZGMjVE
NjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2QVduQTBwMWtwVWVCd0dz
dVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJXdjFhcllfcnZBV25BMHAxa3BVZUJ3R3N1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
ODdCMi83NDZEQjZGMjVENjUxMUVDQkI0MEQxMzVDNEY5QUUwMi8yV3YxYXJZX3J2
QVduQTBwMWtwVWVCd0dzdVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQxpxOCb9SFI15i7KpIuluQKa/Zl4AjudP1bT00F+VhRh5g9Bj78Br
yw1abg4mK30Cp99oTjefz1o/EU//1YJjTQRXBqBw2OD3Q1gHQII6jtg+7beHfY7T
VwcOb8GO3ZxGJT0zV8d5heUIcdvNGYfgCyssBL/SccAflBIzzzXZHnF8/z/67uu7
ihIdbPy2En5nis0vSjgDp1MwIVe0OZ1y2MAMLnlGiYdRHZLXLHnM9PG8CKoTpTQZ
lE4J/jzbniJMxMIsuFFFhMFER2RC9qMVBzzotbwdO3zfy9/amHgrYKtncWc/RyA3
TIih+900PoNnaToFgcKkygaVMn9scUHZ
-----END CERTIFICATE-----
Generated at Sun Jul 20 07:39:31 2025 by rpki-client