Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
File:                     6_FxbSSrM1DAvAcLRejf29D88b8.mft (raw, json)
Hash identifier:          zVlyQfTcDWAyBPJZ8SGRWY9GxAfuogFDYBuEtpVaMvE=
Subject key identifier:   22:F3:1F:43:BB:68:75:F2:40:A2:2B:7F:B4:29:5B:4B:89:26:03:31
Authority key identifier: EB:F1:71:6D:24:AB:33:50:C0:BC:07:0B:45:E8:DF:DB:D0:FC:F1:BF
Certificate issuer:       /CN=A914E4C3/serialNumber=EBF1716D24AB3350C0BC070B45E8DFDBD0FCF1BF
Certificate serial:       2723
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_FxbSSrM1DAvAcLRejf29D88b8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
Manifest number:          2723
Signing time:             Sun 06 Apr 2025 15:36:28 +0000
Manifest this update:     Sun 06 Apr 2025 15:36:28 +0000
Manifest next update:     Sun 13 Apr 2025 15:36:28 +0000
Files and hashes:         1: 6_FxbSSrM1DAvAcLRejf29D88b8.crl (hash: R7tubVrdbX6iDowxjoeaf2rSqwgwJozRw51N/FBXUIQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.crl
                          rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_FxbSSrM1DAvAcLRejf29D88b8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Apr 2025 15:36:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10019 (0x2723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4C3
        Validity
            Not Before: Apr  6 15:36:28 2025 GMT
            Not After : Apr 13 15:36:28 2025 GMT
        Subject: CN=67f29f7c-7a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:b4:4c:a3:3a:bd:58:19:42:f5:a3:e4:ef:
                    aa:4e:20:ff:d4:af:ea:aa:80:1a:e1:43:5f:ae:3f:
                    db:92:54:d6:1d:01:fd:75:aa:f6:b8:72:be:13:9a:
                    4a:ed:61:fe:4d:98:6c:b3:32:63:1c:8e:31:b1:ae:
                    69:c2:03:ab:1c:87:ca:be:98:77:4a:dd:03:11:19:
                    d6:96:0b:87:cf:aa:1d:16:6a:e9:3d:c2:4d:cb:d9:
                    ca:36:d2:e2:6f:75:78:64:0e:06:7f:94:bb:0d:77:
                    ec:9a:19:b4:b4:c1:15:a1:32:8e:1a:33:6f:07:72:
                    a2:35:07:3a:ef:25:93:17:68:27:c8:d6:6a:7d:88:
                    20:18:37:32:92:0f:fd:eb:8b:ea:35:04:2e:dc:27:
                    cc:84:db:1b:a8:e2:54:10:9d:c2:ad:34:83:bd:d6:
                    bb:a1:3e:05:00:69:a9:e1:3c:58:ea:d0:63:53:f7:
                    f9:35:a6:c2:24:96:bd:41:1c:0e:cc:2d:87:71:a8:
                    36:6a:22:3d:82:58:ca:2f:cd:d1:48:3d:75:4d:95:
                    1a:da:82:35:ac:3a:c9:3c:e6:dd:9a:39:16:60:a5:
                    ca:49:27:7d:a2:f9:51:aa:3e:03:f7:de:50:46:27:
                    1a:97:03:60:7f:83:5c:f5:2d:e6:3f:78:36:74:27:
                    b9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F3:1F:43:BB:68:75:F2:40:A2:2B:7F:B4:29:5B:4B:89:26:03:31
            X509v3 Authority Key Identifier:
                keyid:EB:F1:71:6D:24:AB:33:50:C0:BC:07:0B:45:E8:DF:DB:D0:FC:F1:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_FxbSSrM1DAvAcLRejf29D88b8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4C3/2780280AB8B911E4901A6848C4F9AE02/6_FxbSSrM1DAvAcLRejf29D88b8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:f2:12:0c:db:da:3a:97:1b:25:23:71:79:d4:5f:43:cf:70:
         10:f7:4d:a5:2f:30:f4:4f:e6:ce:18:d6:b4:a9:fb:04:62:d7:
         85:a5:98:26:fd:50:06:26:83:27:0e:79:f9:0c:c8:0b:cc:ca:
         17:b1:71:91:9f:5a:5d:47:4c:87:59:45:df:27:df:b5:86:00:
         d1:6f:91:4c:62:b3:bf:f0:0d:c2:18:f1:ef:ab:8b:06:a2:a6:
         1e:d6:a8:1a:da:1f:53:b5:df:64:13:95:b3:ac:0b:b5:37:79:
         b4:ef:da:9a:a0:87:f7:78:d4:e3:ba:12:04:12:54:85:96:e2:
         05:d6:2e:f4:dc:51:e5:f3:fb:b8:94:d7:ed:db:e8:30:44:c5:
         53:cd:c0:c8:96:b8:36:a8:a1:5c:55:5b:30:c1:64:19:58:20:
         33:aa:cc:a6:84:07:3a:c6:8f:68:3a:da:c7:29:41:a7:c6:a7:
         fb:57:70:88:21:17:db:52:74:1c:59:05:8f:5d:65:63:2e:31:
         8f:c9:f6:3f:09:e0:ef:cc:42:84:63:47:4b:fa:79:c1:df:03:
         2e:f2:de:3b:ce:b9:7a:05:ba:4b:c8:4e:35:90:22:e0:bf:7b:
         0b:f5:2d:d9:60:85:8d:5f:89:4d:98:03:12:62:86:07:5b:70:
         35:71:d1:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU0QzMxMTAvBgNVBAUTKEVCRjE3MTZEMjRBQjMzNTBDMEJDMDcwQjQ1RThERkRC
RDBGQ0YxQkYwHhcNMjUwNDA2MTUzNjI4WhcNMjUwNDEzMTUzNjI4WjAYMRYwFAYD
VQQDEw02N2YyOWY3Yy03YTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl4i0TKM6vVgZQvWj5O+qTiD/1K/qqoAa4UNfrj/bklTWHQH9dar2uHK+E5pK
7WH+TZhsszJjHI4xsa5pwgOrHIfKvph3St0DERnWlguHz6odFmrpPcJNy9nKNtLi
b3V4ZA4Gf5S7DXfsmhm0tMEVoTKOGjNvB3KiNQc67yWTF2gnyNZqfYggGDcykg/9
64vqNQQu3CfMhNsbqOJUEJ3CrTSDvda7oT4FAGmp4TxY6tBjU/f5NabCJJa9QRwO
zC2Hcag2aiI9gljKL83RSD11TZUa2oI1rDrJPObdmjkWYKXKSSd9ovlRqj4D995Q
RicalwNgf4Nc9S3mP3g2dCe5yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCLzH0O7
aHXyQKIrf7QpW0uJJgMxMB8GA1UdIwQYMBaAFOvxcW0kqzNQwLwHC0Xo39vQ/PG/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RTRDMy8yNzgwMjgwQUI4
QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi82X0Z4YlNTck0xREF2QWNMUmVqZjI5RDg4
YjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZfRnhiU1NyTTFEQXZBY0xSZWpmMjlEODhiOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RTRDMy8yNzgwMjgwQUI4QjkxMUU0OTAxQTY4NDhDNEY5QUUwMi82X0Z4YlNTck0x
REF2QWNMUmVqZjI5RDg4YjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC68hIM29o6lxslI3F51F9Dz3AQ902lLzD0T+bOGNa0qfsEYteFpZgm
/VAGJoMnDnn5DMgLzMoXsXGRn1pdR0yHWUXfJ9+1hgDRb5FMYrO/8A3CGPHvq4sG
oqYe1qga2h9Ttd9kE5WzrAu1N3m079qaoIf3eNTjuhIEElSFluIF1i703FHl8/u4
lNft2+gwRMVTzcDIlrg2qKFcVVswwWQZWCAzqsymhAc6xo9oOtrHKUGnxqf7V3CI
IRfbUnQcWQWPXWVjLjGPyfY/CeDvzEKEY0dL+nnB3wMu8t47zrl6BbpLyE41kCLg
v3sL9S3ZYIWNX4lNmAMSYoYHW3A1cdFr
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:01:13 2025 by rpki-client