Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
File:                     Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft (raw, json)
Hash identifier:          mszm76pkJNRFcSbIZunEhdYrl+qGDGmX5mca2eI08Tg=
Subject key identifier:   BA:2A:3A:79:EF:33:86:6C:C6:5B:BB:B2:9E:13:86:4B:91:45:45:9F
Authority key identifier: 66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74
Certificate issuer:       /CN=A911C812/serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
Certificate serial:       0391
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
Manifest number:          0391
Signing time:             Sat 06 Sep 2025 21:04:35 +0000
Manifest this update:     Sat 06 Sep 2025 21:04:35 +0000
Manifest next update:     Sat 13 Sep 2025 21:04:35 +0000
Files and hashes:         1: Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl (hash: fJDKLbOP2ROcF8kUkaZdST7QsuZZ3oo6URHRgxfUJzM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 21:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C812, serialNumber=669FB3A8CA2A20EA3B81A63A7F6DBB159FBBD574
        Validity
            Not Before: Sep  6 21:04:35 2025 GMT
            Not After : Sep 13 21:04:35 2025 GMT
        Subject: CN=68bca1e3-c8e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:bb:ca:84:fe:1d:2c:fb:eb:50:d3:a8:1f:
                    7c:89:2f:59:81:35:d5:a2:8c:95:39:df:33:6b:6d:
                    a7:8a:ea:15:e5:4e:b8:8b:f6:3a:7c:3e:21:f2:c5:
                    77:ec:34:dd:3d:ed:8b:2c:2c:f9:a3:3d:86:a5:3b:
                    72:a4:29:1b:41:a8:cf:1a:41:ac:3a:9b:7f:cc:e5:
                    cc:d2:17:cf:fa:66:57:79:bd:0b:02:02:6d:2d:95:
                    c2:c2:53:0c:5c:9f:c7:af:b1:9d:7a:0a:b5:65:29:
                    56:e1:a4:36:a3:66:92:e7:68:38:81:44:5d:77:9a:
                    fa:d9:56:5b:39:66:63:9c:3e:bb:0e:d5:40:5c:af:
                    c8:55:1e:7b:d5:6d:28:ba:42:e5:83:8a:5a:57:ae:
                    d0:2d:73:53:4e:85:c8:83:2b:35:3b:8a:30:fc:31:
                    66:e7:9e:05:95:fb:b7:33:b3:01:f2:19:f5:c8:4b:
                    39:da:04:e5:6d:87:8e:c9:29:48:fe:bc:f5:d3:62:
                    ff:ea:9b:b4:23:22:cd:b0:a5:6a:cd:ab:ba:30:88:
                    02:62:41:80:ac:ff:58:15:2d:3d:60:65:06:e1:0e:
                    c4:4b:b5:cc:a0:61:e1:01:50:25:04:b2:c6:f5:07:
                    fc:7c:5f:38:91:f3:76:f1:60:b8:af:71:7d:ac:e4:
                    e0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2A:3A:79:EF:33:86:6C:C6:5B:BB:B2:9E:13:86:4B:91:45:45:9F
            X509v3 Authority Key Identifier:
                keyid:66:9F:B3:A8:CA:2A:20:EA:3B:81:A6:3A:7F:6D:BB:15:9F:BB:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Zp-zqMoqIOo7gaY6f227FZ-71XQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/6ABC5B32B3D111EC91BF3C22C4F9AE02/Zp-zqMoqIOo7gaY6f227FZ-71XQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:34:b0:a2:f7:bf:56:5e:9a:1a:07:39:77:c8:99:ab:70:17:
         fc:c2:07:21:9b:65:f1:cf:26:af:82:d3:3a:01:c5:be:92:82:
         95:17:ea:9c:2c:c7:6e:c5:3e:8e:70:f4:43:62:cc:b0:4c:f5:
         b3:c8:53:0d:6b:d5:12:f4:26:f4:29:50:60:c2:18:ec:3d:35:
         69:d1:f5:c4:32:a2:33:df:d6:6e:7b:77:f2:ed:9d:32:42:a4:
         5b:94:74:b8:a6:0b:0c:10:55:e9:a7:33:e8:ab:08:d0:19:33:
         ec:79:46:e7:71:22:ce:a6:af:06:bb:bb:fb:6f:60:c2:cb:cf:
         89:30:48:9b:80:1d:3e:50:bb:cb:c0:f0:f9:42:4f:87:bc:a6:
         33:4e:4d:db:00:b2:5f:cb:1d:6d:af:d6:30:db:ca:08:ac:f1:
         d4:fe:8a:b7:cc:0f:9f:e0:78:d4:4d:7c:5a:0b:0d:9d:94:03:
         fb:73:26:83:57:8b:4a:16:1f:49:97:c6:35:8c:51:40:12:e0:
         36:57:15:4c:28:d6:da:e0:34:71:2d:ea:4e:cd:ee:db:4e:c3:
         e9:c1:b7:02:7d:a7:fb:74:10:fd:d0:21:dc:81:f1:50:f8:15:
         88:07:40:14:36:89:78:c9:9e:8a:6d:2c:c6:15:6a:86:e9:ed:
         b9:08:e4:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM4MTIxMTAvBgNVBAUTKDY2OUZCM0E4Q0EyQTIwRUEzQjgxQTYzQTdGNkRCQjE1
OUZCQkQ1NzQwHhcNMjUwOTA2MjEwNDM1WhcNMjUwOTEzMjEwNDM1WjAYMRYwFAYD
VQQDEw02OGJjYTFlMy1jOGUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvZe7yoT+HSz761DTqB98iS9ZgTXVooyVOd8za22niuoV5U64i/Y6fD4h8sV3
7DTdPe2LLCz5oz2GpTtypCkbQajPGkGsOpt/zOXM0hfP+mZXeb0LAgJtLZXCwlMM
XJ/Hr7Gdegq1ZSlW4aQ2o2aS52g4gURdd5r62VZbOWZjnD67DtVAXK/IVR571W0o
ukLlg4paV67QLXNTToXIgys1O4ow/DFm554Flfu3M7MB8hn1yEs52gTlbYeOySlI
/rz102L/6pu0IyLNsKVqzau6MIgCYkGArP9YFS09YGUG4Q7ES7XMoGHhAVAlBLLG
9Qf8fF84kfN28WC4r3F9rOTgrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLoqOnnv
M4Zsxlu7sp4ThkuRRUWfMB8GA1UdIwQYMBaAFGafs6jKKiDqO4GmOn9tuxWfu9V0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi82QUJDNUIzMkIz
RDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlPbzdnYVk2ZjIyN0ZaLTcx
WFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL1pwLXpxTW9xSU9vN2dhWTZmMjI3RlotNzFYUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzgxMi82QUJDNUIzMkIzRDExMUVDOTFCRjNDMjJDNEY5QUUwMi9acC16cU1vcUlP
bzdnYVk2ZjIyN0ZaLTcxWFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQALNLCi979WXpoaBzl3yJmrcBf8wgchm2XxzyavgtM6AcW+koKVF+qc
LMduxT6OcPRDYsywTPWzyFMNa9US9Cb0KVBgwhjsPTVp0fXEMqIz39Zue3fy7Z0y
QqRblHS4pgsMEFXppzPoqwjQGTPseUbncSLOpq8Gu7v7b2DCy8+JMEibgB0+ULvL
wPD5Qk+HvKYzTk3bALJfyx1tr9Yw28oIrPHU/oq3zA+f4HjUTXxaCw2dlAP7cyaD
V4tKFh9Jl8Y1jFFAEuA2VxVMKNba4DRxLepOze7bTsPpwbcCfaf7dBD90CHcgfFQ
+BWIB0AUNol4yZ6KbSzGFWqG6e25COTo
-----END CERTIFICATE-----
Generated at Mon Sep 8 10:50:38 2025 by rpki-client