Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
File:                     ZjJswGhaN2NqRbxwlHwhnQtczGA.mft (raw, json)
Hash identifier:          N3bucdJwOutvPGBKwoT8PbrWiiq5bjjibFdctocD4bI=
Subject key identifier:   4F:5E:3D:16:C2:93:5F:E7:0A:DE:2F:7D:C6:18:BE:EF:14:ED:CB:F4
Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
Certificate issuer:       /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
Manifest number:          06
Signing time:             Mon 21 Jul 2025 08:22:44 +0000
Manifest this update:     Mon 21 Jul 2025 08:22:43 +0000
Manifest next update:     Mon 28 Jul 2025 08:22:43 +0000
Files and hashes:         1: ZjJswGhaN2NqRbxwlHwhnQtczGA.crl (hash: cbP7hJa8OcG50UMWbE5cxgw/oR1dNPLYxgon5N5XDKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
                          rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 08:22:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
        Validity
            Not Before: Jul 21 08:22:43 2025 GMT
            Not After : Jul 28 08:22:43 2025 GMT
        Subject: CN=687df8d3-2509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b1:cd:46:62:f9:47:82:c1:ad:40:fc:c7:09:
                    60:85:d6:4d:d6:21:71:30:fe:11:9e:86:e0:12:3b:
                    08:89:a5:e6:b3:1e:b0:1f:6d:f3:04:9a:bc:19:ea:
                    fa:ad:b2:eb:bc:e6:2f:80:6d:a8:2a:87:87:65:8c:
                    0e:a7:99:0b:b9:43:dd:12:92:78:54:9b:c9:ca:aa:
                    8e:33:2f:3b:46:70:81:5e:d1:9f:a0:fe:0e:c3:e0:
                    53:bb:ac:e2:d9:f5:ad:a8:17:05:a1:d2:25:13:6d:
                    e3:4b:89:67:d1:a9:29:cb:7e:7b:9d:43:c1:aa:c5:
                    b3:aa:d7:8a:56:a2:8b:cd:6a:67:18:aa:f2:39:e8:
                    0f:d8:62:3e:5a:1e:67:4a:2d:ec:49:64:d8:93:81:
                    00:98:0a:d7:17:30:56:40:5c:12:0b:9e:4a:48:9b:
                    2b:85:a0:b5:c2:6a:eb:96:fd:45:86:8e:1d:f8:a0:
                    e6:2d:a0:f8:37:aa:fa:68:10:f2:b2:7f:71:4e:cc:
                    39:0f:16:e2:7c:6b:33:3d:cd:4f:d3:64:8e:35:42:
                    82:58:2a:fc:fa:7f:6d:8a:15:46:ce:f4:d3:ac:0e:
                    76:cf:54:2c:fa:d7:d7:63:c9:8b:3e:f1:60:e7:8e:
                    6a:a5:7e:5c:47:29:10:70:ad:a0:42:0f:0d:e4:b7:
                    1a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5E:3D:16:C2:93:5F:E7:0A:DE:2F:7D:C6:18:BE:EF:14:ED:CB:F4
            X509v3 Authority Key Identifier:
                keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:41:13:0a:03:e6:86:54:9b:46:20:da:ad:a0:d9:73:e5:b6:
         4c:6c:67:0d:0c:ab:ef:be:2e:97:2d:23:06:44:d0:30:c4:ff:
         43:31:d1:0a:89:31:3b:8a:8f:86:c2:79:ab:45:57:68:b0:2f:
         03:f8:8e:2b:e4:b7:1a:65:5e:ca:f7:f9:dd:82:88:e2:9a:a0:
         f1:b3:8e:65:ef:59:c1:b5:79:e9:27:2f:89:9d:45:2b:c8:8c:
         ac:1b:ab:a5:18:3d:6c:a8:bf:cb:ee:3a:61:89:44:29:ab:b6:
         28:01:63:22:d3:38:2c:c4:61:f5:a7:0d:fe:a9:78:98:2b:aa:
         d3:4e:ec:2f:12:9c:77:d1:fe:19:18:18:f4:c6:4b:03:54:68:
         95:90:44:6d:16:bc:e4:db:6b:d3:72:c4:5e:13:41:21:37:67:
         d9:18:96:0f:4e:04:7d:e6:d7:01:fe:93:f1:03:94:bd:df:0f:
         ab:51:84:2d:a4:bc:51:80:ff:5e:54:21:ac:ea:59:bb:ba:90:
         3d:25:0d:c4:55:bc:7a:61:78:0d:ce:c2:22:82:e9:54:fe:fb:
         25:fa:2a:29:79:d4:f7:39:b2:0c:f8:01:16:f8:ab:27:4c:94:
         84:26:d8:5d:1b:a6:c8:16:40:c1:ee:be:14:00:b0:36:b8:cb:
         4d:38:d6:b5
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
MDk2MTExMC8GA1UEBRMoNjYzMjZDQzA2ODVBMzc2MzZBNDVCQzcwOTQ3QzIxOUQw
QjVDQ0M2MDAeFw0yNTA3MjEwODIyNDNaFw0yNTA3MjgwODIyNDNaMBgxFjAUBgNV
BAMTDTY4N2RmOGQzLTI1MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC0sc1GYvlHgsGtQPzHCWCF1k3WIXEw/hGehuASOwiJpeazHrAfbfMEmrwZ6vqt
suu85i+Abagqh4dljA6nmQu5Q90SknhUm8nKqo4zLztGcIFe0Z+g/g7D4FO7rOLZ
9a2oFwWh0iUTbeNLiWfRqSnLfnudQ8GqxbOq14pWoovNamcYqvI56A/YYj5aHmdK
LexJZNiTgQCYCtcXMFZAXBILnkpImyuFoLXCauuW/UWGjh34oOYtoPg3qvpoEPKy
f3FOzDkPFuJ8azM9zU/TZI41QoJYKvz6f22KFUbO9NOsDnbPVCz619djyYs+8WDn
jmqlflxHKRBwraBCDw3ktxr9AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUT149FsKT
X+cK3i99xhi+7xTty/QwHwYDVR0jBBgwFoAUZjJswGhaN2NqRbxwlHwhnQtczGAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUwOTYxLzhFNTk5NkM0NjAz
RDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJOcVJieHdsSHdoblF0Y3pH
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWmpKc3dHaGFOMk5xUmJ4d2xId2huUXRjekdBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUw
OTYxLzhFNTk5NkM0NjAzRDExRjBCMTUwNUIyMUM0RjlBRTAyL1pqSnN3R2hhTjJO
cVJieHdsSHdoblF0Y3pHQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEpBEwoD5oZUm0Yg2q2g2XPltkxsZw0Mq+++LpctIwZE0DDE/0Mx0QqJ
MTuKj4bCeatFV2iwLwP4jivktxplXsr3+d2CiOKaoPGzjmXvWcG1eeknL4mdRSvI
jKwbq6UYPWyov8vuOmGJRCmrtigBYyLTOCzEYfWnDf6peJgrqtNO7C8SnHfR/hkY
GPTGSwNUaJWQRG0WvOTba9NyxF4TQSE3Z9kYlg9OBH3m1wH+k/EDlL3fD6tRhC2k
vFGA/15UIazqWbu6kD0lDcRVvHpheA3OwiKC6VT++yX6Kil51Pc5sgz4ARb4qydM
lIQm2F0bpsgWQMHuvhQAsDa4y0041rU=
-----END CERTIFICATE-----
Generated at Tue Jul 22 00:22:06 2025 by rpki-client