Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
File:                     a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft (raw, json)
Hash identifier:          QEmgVf4MpdgK/7yg/NdztijkilbYPYEwicPJtLqknSs=
Subject key identifier:   19:36:67:56:19:99:03:B0:72:69:15:DB:93:02:5F:39:57:56:D8:59
Authority key identifier: 6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F
Certificate issuer:       /CN=A91F522D/serialNumber=6B6CDDEB7139A9D936676D83A53EC567F1D6F19F
Certificate serial:       07A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
Manifest number:          079D
Signing time:             Sun 06 Apr 2025 20:55:11 +0000
Manifest this update:     Sun 06 Apr 2025 20:55:10 +0000
Manifest next update:     Sun 13 Apr 2025 20:55:10 +0000
Files and hashes:         1: a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl (hash: VSLLAV8SCkCOgSqb+if2iezEbyr1zU6+ZP/wZS27dHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl
                          rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Apr 2025 20:55:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F522D
        Validity
            Not Before: Apr  6 20:55:10 2025 GMT
            Not After : Apr 13 20:55:10 2025 GMT
        Subject: CN=67f2ea2e-02dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d2:55:22:47:43:29:e2:45:cd:2d:2f:c8:09:
                    6e:f7:36:19:8d:ef:3a:a9:2c:0a:1a:54:ef:af:2f:
                    f5:25:4e:59:de:2d:24:df:a1:fb:e0:0c:bd:61:8e:
                    9e:d9:94:53:4f:5d:b0:71:f4:b0:f9:71:b2:f4:e6:
                    ac:f1:c8:f0:50:12:49:b5:bd:42:2e:11:db:fe:e0:
                    68:a0:69:bf:da:54:69:81:45:26:88:65:e8:f1:94:
                    42:51:7f:60:ae:7f:f7:78:cc:92:61:05:9e:6a:64:
                    29:21:d1:9c:fa:4d:1a:6e:9b:15:3c:4e:b1:91:d7:
                    45:3f:05:3c:e6:52:3a:8b:2b:ce:95:f1:96:8a:af:
                    a3:6c:1c:10:df:f9:b4:81:c6:76:51:c6:d5:30:d6:
                    8b:22:1c:62:a6:e4:c0:2a:4c:3d:db:4e:ff:47:7f:
                    72:82:57:f4:49:af:fd:80:72:6a:29:fe:3e:ac:df:
                    23:8e:9d:45:4a:c5:c6:90:d4:99:b9:39:b3:0e:dc:
                    95:3a:c5:15:e3:c2:f3:3f:e1:61:1b:31:62:c9:24:
                    72:a8:7e:2e:14:cf:9f:ad:80:e3:c1:d4:94:bf:fe:
                    8e:88:0f:e7:68:fe:66:98:ac:ce:37:ef:8d:6f:f1:
                    d6:e9:ee:54:a5:97:c0:da:d9:f9:12:45:42:b0:2b:
                    b8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:36:67:56:19:99:03:B0:72:69:15:DB:93:02:5F:39:57:56:D8:59
            X509v3 Authority Key Identifier:
                keyid:6B:6C:DD:EB:71:39:A9:D9:36:67:6D:83:A5:3E:C5:67:F1:D6:F1:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F522D/6C0AD092FCB511EA88BF130FC4F9AE02/a2zd63E5qdk2Z22DpT7FZ_HW8Z8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ab:b1:25:01:fa:55:e4:2a:4e:05:c4:9e:77:ae:97:9c:de:
         3f:01:38:7e:3f:1b:85:cb:35:a1:27:80:95:c7:f5:09:9a:6e:
         2f:c3:2a:0d:e1:9a:5e:3b:87:ad:37:67:fd:64:bc:e0:d7:ca:
         88:10:7d:f0:f1:72:5c:fd:5f:f9:44:26:c4:95:28:86:b1:aa:
         38:54:7b:3e:79:6a:0d:64:ea:f1:86:59:eb:42:8a:fd:2f:db:
         d2:6c:48:40:0b:76:e4:2a:73:c7:53:53:e1:71:8b:ae:35:37:
         34:b6:1f:93:cc:b1:22:e6:45:5c:e3:58:68:d2:46:0a:54:02:
         18:44:96:a6:44:63:fe:5a:4a:0b:85:66:c9:9c:5c:00:27:77:
         03:db:db:7e:b7:2a:0e:14:5b:cd:76:d3:bb:a4:a8:27:f9:25:
         72:27:f8:7d:1e:db:76:60:aa:ef:1b:81:f3:9f:c0:2b:ca:1d:
         8c:53:d6:a1:df:90:0a:e2:f9:fe:95:d7:ab:19:88:d5:36:ee:
         7f:3a:69:8f:0b:1f:f4:48:32:40:32:83:95:83:51:a5:d5:4b:
         ac:f5:59:73:78:02:71:0c:ed:f8:ae:1b:12:86:8d:e9:56:ea:
         a1:96:c3:ee:3d:5a:49:53:56:a5:26:18:e1:58:fe:d1:c0:fd:
         2e:71:66:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUyMkQxMTAvBgNVBAUTKDZCNkNEREVCNzEzOUE5RDkzNjY3NkQ4M0E1M0VDNTY3
RjFENkYxOUYwHhcNMjUwNDA2MjA1NTEwWhcNMjUwNDEzMjA1NTEwWjAYMRYwFAYD
VQQDEw02N2YyZWEyZS0wMmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5tJVIkdDKeJFzS0vyAlu9zYZje86qSwKGlTvry/1JU5Z3i0k36H74Ay9YY6e
2ZRTT12wcfSw+XGy9Oas8cjwUBJJtb1CLhHb/uBooGm/2lRpgUUmiGXo8ZRCUX9g
rn/3eMySYQWeamQpIdGc+k0abpsVPE6xkddFPwU85lI6iyvOlfGWiq+jbBwQ3/m0
gcZ2UcbVMNaLIhxipuTAKkw9207/R39yglf0Sa/9gHJqKf4+rN8jjp1FSsXGkNSZ
uTmzDtyVOsUV48LzP+FhGzFiySRyqH4uFM+frYDjwdSUv/6OiA/naP5mmKzON++N
b/HW6e5UpZfA2tn5EkVCsCu48QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBk2Z1YZ
mQOwcmkV25MCXzlXVthZMB8GA1UdIwQYMBaAFGts3etxOanZNmdtg6U+xWfx1vGf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIyRC82QzBBRDA5MkZD
QjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFkazJaMjJEcFQ3RlpfSFc4
WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2EyemQ2M0U1cWRrMloyMkRwVDdGWl9IVzhaOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTIyRC82QzBBRDA5MkZDQjUxMUVBODhCRjEzMEZDNEY5QUUwMi9hMnpkNjNFNXFk
azJaMjJEcFQ3RlpfSFc4WjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCrq7ElAfpV5CpOBcSed66XnN4/ATh+PxuFyzWhJ4CVx/UJmm4vwyoN
4ZpeO4etN2f9ZLzg18qIEH3w8XJc/V/5RCbElSiGsao4VHs+eWoNZOrxhlnrQor9
L9vSbEhAC3bkKnPHU1PhcYuuNTc0th+TzLEi5kVc41ho0kYKVAIYRJamRGP+WkoL
hWbJnFwAJ3cD29t+tyoOFFvNdtO7pKgn+SVyJ/h9Htt2YKrvG4Hzn8Aryh2MU9ah
35AK4vn+lderGYjVNu5/OmmPCx/0SDJAMoOVg1Gl1Uus9VlzeAJxDO34rhsSho3p
VuqhlsPuPVpJU1alJhjhWP7RwP0ucWZm
-----END CERTIFICATE-----
Generated at Mon Apr 7 05:57:13 2025 by rpki-client