Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft
File:                     sc_l-mpxIskE6xEO8agpgPw9-ko.mft (raw, json)
Hash identifier:          xsiqQCkEwkczY2GSDTkKqWDK7q2QAZyR4L+DB9pa2ZU=
Subject key identifier:   69:36:DD:5E:23:E3:B7:CC:34:07:04:41:B5:18:E5:B2:DB:B2:4A:FB
Authority key identifier: B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A
Certificate issuer:       /CN=A91E75B7/serialNumber=B1CFE5FA6A7122C904EB110EF1A82980FC3DFA4A
Certificate serial:       069D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft
Manifest number:          0697
Signing time:             Sun 20 Jul 2025 22:20:40 +0000
Manifest this update:     Sun 20 Jul 2025 22:20:40 +0000
Manifest next update:     Sun 27 Jul 2025 22:20:40 +0000
Files and hashes:         1: sc_l-mpxIskE6xEO8agpgPw9-ko.crl (hash: PNMfAwpXmmKr+Xsg0AOKG3OBhlFB7lES5wxSR+NXRuI=)
                          2: AD0B0E5E762711EBBD5D544FC4F9AE02.roa (hash: sRmBeQkX3ZH6lPD83kjqFke2bsVl1aLInDxD3kBzJvg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.crl
                          rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 22:20:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1693 (0x69d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E75B7, serialNumber=B1CFE5FA6A7122C904EB110EF1A82980FC3DFA4A
        Validity
            Not Before: Jul 20 22:20:40 2025 GMT
            Not After : Jul 27 22:20:40 2025 GMT
        Subject: CN=687d6bb8-47ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:39:dc:35:d9:04:31:08:c5:e8:2d:f0:42:
                    06:4a:a7:15:6e:bf:87:4f:e7:33:e7:b8:50:f2:b1:
                    ed:c3:ae:60:df:7a:ab:2e:0c:31:57:7c:46:93:2e:
                    98:ad:02:a2:17:e8:ec:e1:ad:e4:e7:1f:79:30:9a:
                    e0:4d:c4:74:37:d9:c3:0e:9d:1d:4e:36:fa:68:c6:
                    e0:f9:24:47:e0:7e:52:83:95:1c:34:d9:09:d3:39:
                    0a:6e:94:4f:7f:17:2a:b3:50:67:63:f5:98:7f:8b:
                    f9:4e:ea:f1:b4:f3:2f:f0:4f:dc:ce:bf:08:39:23:
                    d1:dd:79:9e:b3:d4:09:f3:a1:69:f3:34:5b:71:a6:
                    29:44:97:ce:19:52:75:75:71:2c:7a:8b:52:18:b0:
                    48:f2:73:d1:62:c8:d0:76:49:6d:f3:d0:e2:5b:75:
                    44:ce:93:61:be:80:e2:92:fc:69:4d:f3:9c:f6:66:
                    c7:a0:78:4a:4f:01:66:0c:f2:16:37:4a:b1:9e:6d:
                    b3:18:dd:09:19:ca:1f:ba:1b:81:c1:b6:b6:e0:ba:
                    dc:d1:4d:f6:b5:c2:08:cc:18:e7:12:b6:f3:03:9f:
                    3b:60:96:17:4e:95:45:5a:62:ca:0c:dd:84:7c:69:
                    00:ef:f2:fe:9d:d1:51:7b:73:fe:e7:82:13:48:fb:
                    0a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:36:DD:5E:23:E3:B7:CC:34:07:04:41:B5:18:E5:B2:DB:B2:4A:FB
            X509v3 Authority Key Identifier:
                keyid:B1:CF:E5:FA:6A:71:22:C9:04:EB:11:0E:F1:A8:29:80:FC:3D:FA:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sc_l-mpxIskE6xEO8agpgPw9-ko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E75B7/7FED5E1E762611EB8DFCE04EC4F9AE02/sc_l-mpxIskE6xEO8agpgPw9-ko.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:59:c9:53:6d:8b:97:d4:7c:b6:05:45:2b:b6:12:ef:9e:f5:
         be:a2:8e:de:0b:13:c0:24:0b:93:44:f9:d0:43:65:6c:af:68:
         80:a6:cd:1c:9f:cb:59:94:35:92:0c:dc:56:59:38:e4:13:76:
         1a:a1:93:37:cd:20:c2:0d:40:8b:13:ba:a3:12:5e:e7:c0:e1:
         ea:01:cc:e2:2d:88:e5:95:51:d3:ce:8f:a7:b6:d4:36:a9:c0:
         f9:f6:8b:ad:55:e2:05:66:a8:75:f2:1a:b5:0f:a5:ed:35:5e:
         a1:b8:d1:d0:0e:80:ab:de:96:c7:c2:df:a0:1e:55:08:66:9a:
         73:c0:f7:56:95:c5:86:14:01:4a:31:ea:6d:7f:87:f5:0a:12:
         35:99:0d:5e:84:23:1c:9c:d6:47:1c:64:cb:09:47:2c:a2:68:
         07:6d:8d:b7:12:b1:b5:e5:2b:ec:46:3c:94:df:4e:86:01:d5:
         9b:4f:58:b0:47:92:b0:a9:fa:cc:ad:4d:56:5d:fb:7b:39:ff:
         a8:47:cd:5b:cf:f7:f5:ac:1e:50:3f:4f:e8:dc:fa:70:36:d3:
         ac:f8:06:36:a1:43:a0:5e:b3:59:18:5f:87:52:50:26:f9:d5:
         e0:ba:b4:85:6e:49:25:45:d5:00:66:ee:af:ec:8e:9b:e7:14:
         65:4b:c1:80
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBp0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc1QjcxMTAvBgNVBAUTKEIxQ0ZFNUZBNkE3MTIyQzkwNEVCMTEwRUYxQTgyOTgw
RkMzREZBNEEwHhcNMjUwNzIwMjIyMDQwWhcNMjUwNzI3MjIyMDQwWjAYMRYwFAYD
VQQDEw02ODdkNmJiOC00N2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAveA53DXZBDEIxegt8EIGSqcVbr+HT+cz57hQ8rHtw65g33qrLgwxV3xGky6Y
rQKiF+js4a3k5x95MJrgTcR0N9nDDp0dTjb6aMbg+SRH4H5Sg5UcNNkJ0zkKbpRP
fxcqs1BnY/WYf4v5TurxtPMv8E/czr8IOSPR3Xmes9QJ86Fp8zRbcaYpRJfOGVJ1
dXEseotSGLBI8nPRYsjQdklt89DiW3VEzpNhvoDikvxpTfOc9mbHoHhKTwFmDPIW
N0qxnm2zGN0JGcofuhuBwba24Lrc0U32tcIIzBjnErbzA587YJYXTpVFWmLKDN2E
fGkA7/L+ndFRe3P+54ITSPsKTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGk23V4j
47fMNAcEQbUY5bLbskr7MB8GA1UdIwQYMBaAFLHP5fpqcSLJBOsRDvGoKYD8PfpK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzVCNy83RkVENUUxRTc2
MjYxMUVCOERGQ0UwNEVDNEY5QUUwMi9zY19sLW1weElza0U2eEVPOGFncGdQdzkt
a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NjX2wtbXB4SXNrRTZ4RU84YWdwZ1B3OS1rby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzVCNy83RkVENUUxRTc2MjYxMUVCOERGQ0UwNEVDNEY5QUUwMi9zY19sLW1weElz
a0U2eEVPOGFncGdQdzkta28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCTWclTbYuX1Hy2BUUrthLvnvW+oo7eCxPAJAuTRPnQQ2Vsr2iAps0c
n8tZlDWSDNxWWTjkE3YaoZM3zSDCDUCLE7qjEl7nwOHqAcziLYjllVHTzo+nttQ2
qcD59outVeIFZqh18hq1D6XtNV6huNHQDoCr3pbHwt+gHlUIZppzwPdWlcWGFAFK
Meptf4f1ChI1mQ1ehCMcnNZHHGTLCUcsomgHbY23ErG15SvsRjyU306GAdWbT1iw
R5KwqfrMrU1WXft7Of+oR81bz/f1rB5QP0/o3PpwNtOs+AY2oUOgXrNZGF+HUlAm
+dXgurSFbkklRdUAZu6v7I6b5xRlS8GA
-----END CERTIFICATE-----
Generated at Mon Jul 21 05:41:30 2025 by rpki-client