Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
File:                     A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json)
Hash identifier:          2y9CxXFcfG2s3/OdtahSusGcNrzeosZ1OGIEb63eKGc=
Subject key identifier:   6E:8E:91:29:C9:93:D4:91:26:BF:BA:BC:88:D1:8C:CB:27:85:A8:96
Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
Certificate issuer:       /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
Manifest number:          9A
Signing time:             Fri 13 Jun 2025 05:15:11 +0000
Manifest this update:     Fri 13 Jun 2025 05:15:11 +0000
Manifest next update:     Fri 20 Jun 2025 05:15:11 +0000
Files and hashes:         1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: TN72ZciypCwq/ROFe+Jdel2PiC0lCLQ6Up4xqrD+Bb4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
                          rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 05:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
        Validity
            Not Before: Jun 13 05:15:11 2025 GMT
            Not After : Jun 20 05:15:11 2025 GMT
        Subject: CN=684bb3df-8977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:bf:a1:39:80:51:e2:98:cd:91:38:76:ed:
                    88:18:fa:f4:b1:fa:9d:b8:ee:5d:75:0d:5a:9c:08:
                    fc:99:00:0b:fa:d1:e7:30:f0:04:e6:96:30:0c:28:
                    18:de:b6:ca:b7:95:6e:d5:9d:cf:f1:0a:58:4b:69:
                    f8:ab:54:ee:22:8f:50:98:7a:9f:c2:ca:b3:80:b5:
                    7b:03:6c:b2:fd:8f:ec:6e:22:b0:fa:78:35:3d:86:
                    6c:71:26:8d:f8:3a:7b:17:e6:0b:32:1c:07:94:2d:
                    ce:76:31:c0:26:3e:93:e5:97:d1:0b:21:21:0d:29:
                    2c:24:d3:5f:37:fb:7f:d0:cc:b5:ea:40:87:c5:c3:
                    32:7e:38:a6:b0:b8:5d:b9:b7:19:81:b1:2b:e7:34:
                    3d:5e:45:6a:30:80:2c:57:77:e0:36:4a:10:07:f5:
                    e1:13:29:10:a4:01:76:b2:1c:65:d9:cd:f4:d6:ac:
                    6f:55:2a:db:c4:68:ac:84:6c:9f:60:ca:e8:3c:5d:
                    3c:71:7c:18:43:90:8f:2c:f0:3d:8f:aa:99:7d:28:
                    d7:c7:9e:89:36:af:c0:3c:bc:8c:7f:2a:77:42:54:
                    a9:24:35:66:9b:e3:7a:1f:1e:fa:c7:db:18:72:13:
                    0c:66:de:c0:67:cc:c2:1a:dc:1b:25:11:6c:80:9e:
                    35:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8E:91:29:C9:93:D4:91:26:BF:BA:BC:88:D1:8C:CB:27:85:A8:96
            X509v3 Authority Key Identifier:
                keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d4:c3:e9:82:6e:e2:bd:7b:c1:05:80:00:8f:c3:ba:5d:f5:
         80:fd:1a:50:ed:35:e6:cd:7d:a4:b0:9e:a5:1d:9d:58:e4:24:
         28:eb:a0:97:9e:c2:f4:a6:e0:09:dd:bc:5d:36:68:3b:59:6d:
         7c:e6:a4:8a:0e:9b:68:6e:37:20:66:48:3a:fa:c2:a3:61:aa:
         2a:fa:85:f2:21:15:a9:9c:31:74:be:2c:54:40:de:89:1e:9d:
         4d:4c:c8:31:cf:d4:58:38:63:64:bf:6f:c2:e8:98:f0:51:3e:
         72:4a:83:97:27:dc:ce:c8:33:c6:de:9c:ec:bb:e1:af:c1:d0:
         b6:3e:a0:07:d1:d7:d8:b6:03:de:ef:ab:6f:26:a4:09:fc:da:
         26:58:10:f3:69:5f:18:03:24:8b:05:12:06:d7:d8:1a:3e:f0:
         21:ed:4e:49:da:cc:97:6d:ab:6a:a5:b2:11:44:f5:46:00:12:
         2c:c9:e4:0d:fc:de:de:74:7a:38:98:2c:cd:36:df:c9:3c:90:
         c2:d3:17:12:8a:9e:11:40:f1:9f:c3:69:0b:91:54:a7:1c:4b:
         d6:d8:95:5a:39:37:c7:aa:38:30:e5:7b:1a:8b:18:4c:f2:16:
         b7:be:bf:8d:f4:3f:bd:dc:bd:b4:07:68:ec:fd:5a:80:90:b9:
         e7:21:58:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM3Q0QxMTAvBgNVBAUTKDAzRjRERTAzQTFDOTg1QzM0REM2ODI3MkY5RDc3MzVC
MzNGQTZBREUwHhcNMjUwNjEzMDUxNTExWhcNMjUwNjIwMDUxNTExWjAYMRYwFAYD
VQQDEw02ODRiYjNkZi04OTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtFi/oTmAUeKYzZE4du2IGPr0sfqduO5ddQ1anAj8mQAL+tHnMPAE5pYwDCgY
3rbKt5Vu1Z3P8QpYS2n4q1TuIo9QmHqfwsqzgLV7A2yy/Y/sbiKw+ng1PYZscSaN
+Dp7F+YLMhwHlC3OdjHAJj6T5ZfRCyEhDSksJNNfN/t/0My16kCHxcMyfjimsLhd
ubcZgbEr5zQ9XkVqMIAsV3fgNkoQB/XhEykQpAF2shxl2c301qxvVSrbxGishGyf
YMroPF08cXwYQ5CPLPA9j6qZfSjXx56JNq/APLyMfyp3QlSpJDVmm+N6Hx76x9sY
chMMZt7AZ8zCGtwbJRFsgJ41LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG6OkSnJ
k9SRJr+6vIjRjMsnhaiWMB8GA1UdIwQYMBaAFAP03gOhyYXDTcaCcvnXc1sz+mre
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ERjBCNjg2QTVF
QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi9BX1RlQTZISmhjTk54b0p5LWRkeld6UDZh
dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FfVGVBNkhKaGNOTnhvSnktZGR6V3pQNmF0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzdDRC9ERjBCNjg2QTVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi9BX1RlQTZISmhj
Tk54b0p5LWRkeld6UDZhdDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBu1MPpgm7ivXvBBYAAj8O6XfWA/RpQ7TXmzX2ksJ6lHZ1Y5CQo66CX
nsL0puAJ3bxdNmg7WW185qSKDptobjcgZkg6+sKjYaoq+oXyIRWpnDF0vixUQN6J
Hp1NTMgxz9RYOGNkv2/C6JjwUT5ySoOXJ9zOyDPG3pzsu+GvwdC2PqAH0dfYtgPe
76tvJqQJ/NomWBDzaV8YAySLBRIG19gaPvAh7U5J2syXbatqpbIRRPVGABIsyeQN
/N7edHo4mCzNNt/JPJDC0xcSip4RQPGfw2kLkVSnHEvW2JVaOTfHqjgw5XsaixhM
8ha3vr+N9D+93L20B2js/VqAkLnnIVio
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:29:59 2025 by rpki-client