Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
File:                     8wm0k6ku58YpXgCQYwolGh0TZRc.mft (raw, json)
Hash identifier:          iQwhX66MzcKtsf/3BYHLTNBz78PuJQOoAJDT85+dXk0=
Subject key identifier:   0F:31:9C:BC:B5:BF:C6:4D:BA:D2:F6:3B:2B:2F:52:4E:5A:B9:8F:B0
Authority key identifier: F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17
Certificate issuer:       /CN=A913D756/serialNumber=F309B493A92EE7C6295E0090630A251A1D136517
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
Manifest number:          64
Signing time:             Fri 13 Jun 2025 05:56:59 +0000
Manifest this update:     Fri 13 Jun 2025 05:56:59 +0000
Manifest next update:     Fri 20 Jun 2025 05:56:59 +0000
Files and hashes:         1: 8wm0k6ku58YpXgCQYwolGh0TZRc.crl (hash: vUHJzT1ZW0xjCQhgjJoGnFBjXOIdy09MFp40p+uliXk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl
                          rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 05:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D756, serialNumber=F309B493A92EE7C6295E0090630A251A1D136517
        Validity
            Not Before: Jun 13 05:56:59 2025 GMT
            Not After : Jun 20 05:56:59 2025 GMT
        Subject: CN=684bbdab-2d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:f8:ad:19:a2:6b:ef:f1:42:ea:fa:dd:a9:
                    bb:59:29:f6:13:e7:68:89:39:a1:12:f7:5a:c5:8c:
                    67:01:b0:83:75:bf:7d:00:38:65:5e:c5:47:b5:0b:
                    45:75:14:28:ed:a6:30:46:19:15:51:17:77:ad:2e:
                    9b:a3:69:67:39:a5:b2:75:63:12:e2:d3:4b:4d:25:
                    77:b2:ed:25:2b:e8:f7:9e:e3:40:42:1e:c3:af:fe:
                    4b:ea:88:4b:54:00:07:6c:69:69:7b:e2:34:3d:38:
                    b9:65:06:6c:66:4c:81:cf:b2:ae:6b:c5:94:de:5e:
                    a2:dc:1d:94:d8:33:22:c1:ea:2a:12:90:f9:01:f0:
                    71:37:5d:f5:5e:ac:56:4d:4b:48:3e:ec:0d:9b:af:
                    e3:96:2b:75:c6:b8:91:a1:ac:eb:7a:ea:23:9f:42:
                    1c:1e:8b:cf:9d:9c:50:bc:d4:90:6e:95:bc:4e:d7:
                    9f:a1:9a:d2:10:b9:b9:25:35:a4:51:90:5e:20:4e:
                    5c:17:dc:dd:be:4d:dc:cb:22:29:1e:3c:45:53:3b:
                    81:a1:21:fb:29:b2:b3:dc:48:54:0f:f6:57:4f:c4:
                    37:01:48:da:ce:15:59:e5:14:c8:31:63:c9:ff:c1:
                    40:2b:89:5e:12:7d:2c:12:05:29:3d:54:12:4b:af:
                    d9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:31:9C:BC:B5:BF:C6:4D:BA:D2:F6:3B:2B:2F:52:4E:5A:B9:8F:B0
            X509v3 Authority Key Identifier:
                keyid:F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:2b:0e:e3:41:36:29:d1:10:dc:b8:e6:0d:22:4a:ff:5e:5a:
         7a:a3:e8:27:93:a2:cb:4f:7a:5e:45:33:6f:2b:ab:eb:5e:38:
         a0:e6:af:e1:18:3d:34:8c:55:4e:8c:9a:15:56:02:b0:d9:34:
         b5:98:79:26:f5:02:81:36:72:c8:fd:1d:95:b6:74:5a:e4:41:
         a8:e6:b1:b9:0b:ef:d1:b4:c8:b1:f6:a0:a8:43:25:16:69:8c:
         cf:65:fc:31:b4:d7:15:ea:5a:69:49:df:1a:eb:37:b5:f1:d7:
         9f:a6:61:af:48:56:b3:16:89:32:97:6c:b2:55:80:31:22:ab:
         71:16:86:91:c0:dd:c4:b5:af:5c:07:10:25:7e:1d:39:18:c2:
         4a:ef:4f:5e:41:df:06:25:1b:20:f7:8d:ca:bd:d0:ce:b2:b7:
         e3:f0:2e:7e:74:ca:ec:94:24:9c:0a:ca:8e:e5:3d:08:23:45:
         75:cb:a8:14:01:97:d6:22:59:6b:54:bf:b7:0a:d3:f5:f1:93:
         ed:54:0d:4f:1a:c6:bb:b8:ee:bd:a9:23:71:b8:b5:01:f3:a0:
         a8:0b:36:18:26:32:0b:25:d0:24:fa:55:7e:ad:e8:e6:1a:6c:
         6a:b3:f2:28:ef:63:cf:3d:5e:56:83:9a:8d:3d:24:68:d8:b0:
         3e:0d:2f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 07:52:51 2025 by rpki-client