Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
File:                     8wm0k6ku58YpXgCQYwolGh0TZRc.mft (raw, json)
Hash identifier:          +E4iLV+IaB91oEGb5xylxxml009cRjLq10qFD9TxUak=
Subject key identifier:   EA:3D:4D:8D:13:06:2C:77:45:DD:FA:89:A7:21:CC:E5:9C:6C:6A:73
Authority key identifier: F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17
Certificate issuer:       /CN=A913D756/serialNumber=F309B493A92EE7C6295E0090630A251A1D136517
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
Manifest number:          62
Signing time:             Mon 09 Jun 2025 06:01:01 +0000
Manifest this update:     Mon 09 Jun 2025 06:01:01 +0000
Manifest next update:     Mon 16 Jun 2025 06:01:01 +0000
Files and hashes:         1: 8wm0k6ku58YpXgCQYwolGh0TZRc.crl (hash: XENV+PKtBawu+Dct7Ms0/oWFlcD2lqAZalx6fJnCs28=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl
                          rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D756, serialNumber=F309B493A92EE7C6295E0090630A251A1D136517
        Validity
            Not Before: Jun  9 06:01:01 2025 GMT
            Not After : Jun 16 06:01:01 2025 GMT
        Subject: CN=6846789d-1a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1a:ca:02:72:ef:1d:22:7c:47:66:f1:65:35:
                    c8:74:8c:e4:de:36:1e:d3:2c:69:0e:4d:12:44:0f:
                    f3:c4:47:2e:a7:29:4b:16:e8:39:49:59:ac:46:e3:
                    87:c7:53:de:50:22:e6:e2:01:ad:19:33:b3:53:29:
                    ab:eb:db:30:a0:31:32:5a:05:cb:50:43:bb:d9:f6:
                    1a:5f:ba:0c:57:28:35:da:c1:f6:57:9f:3e:01:e3:
                    aa:cb:18:cf:0d:8c:38:c4:23:ba:c0:ab:04:13:e2:
                    ca:3a:c9:f9:dd:5f:cf:f7:1c:6e:cf:4c:e8:92:9b:
                    ca:c7:45:62:8e:66:c4:fe:2a:9d:10:e3:82:64:bf:
                    49:6a:75:d0:64:f3:d0:27:4d:93:ef:cf:de:ff:0d:
                    00:4b:8e:ae:84:04:26:b4:92:e9:b7:c4:d7:63:c8:
                    4c:12:fc:36:25:60:50:30:bb:c1:46:ba:b3:1f:dc:
                    d9:f2:89:e2:29:de:16:f7:28:04:b6:5c:04:c1:71:
                    e1:ba:e6:29:7c:3e:e4:f1:b0:af:3c:ba:ec:88:bc:
                    2a:56:fd:56:69:7c:fa:6b:de:de:79:da:94:45:c9:
                    2d:f9:04:65:87:48:b1:2d:23:3f:6e:08:6e:ed:9c:
                    5a:83:15:4c:47:94:37:40:1e:26:af:f6:c7:80:b0:
                    d8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:3D:4D:8D:13:06:2C:77:45:DD:FA:89:A7:21:CC:E5:9C:6C:6A:73
            X509v3 Authority Key Identifier:
                keyid:F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ae:83:a0:38:cf:97:53:36:cc:7e:2e:73:e8:df:35:10:fc:
         2a:34:b9:fa:14:50:73:b7:65:a4:6a:bc:0c:41:40:c2:d3:f7:
         be:07:cd:24:cb:d2:c7:ab:64:6a:90:4a:5f:3f:0a:59:68:e4:
         80:be:3a:63:47:09:74:36:99:c0:c4:2c:ad:3d:3e:b1:c0:ee:
         0d:56:01:cb:cf:b1:38:ef:2c:e4:e6:46:8e:ef:54:ea:93:e9:
         ed:e8:56:2b:2b:c0:9a:e0:63:c6:bf:ed:d7:94:c9:74:56:d6:
         4a:9b:31:20:0f:ba:19:42:5f:18:89:0a:22:27:4d:ed:3a:15:
         ac:f8:0a:c6:4c:c3:d8:ef:b1:4f:2a:e5:bc:9f:c6:54:97:99:
         d0:ec:d6:f3:2d:43:4b:c6:91:b1:19:4c:3d:2d:8f:2e:26:2f:
         5d:e8:1d:5f:03:e7:43:8b:12:65:94:98:d8:1e:5c:61:dc:0e:
         14:2f:06:da:f4:ce:47:25:22:46:bc:b2:67:6a:5b:7a:8d:8c:
         1d:aa:cf:b5:59:2a:75:25:7a:f5:f3:e5:27:f1:92:99:4f:97:
         a4:ea:49:a4:53:cd:a2:40:8d:a3:47:65:f0:2e:31:a0:cc:d2:
         0e:dc:97:bf:f1:8a:79:7f:e9:1c:bc:c1:70:65:18:ea:ba:07:
         2e:0b:59:cc
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RDc1NjExMC8GA1UEBRMoRjMwOUI0OTNBOTJFRTdDNjI5NUUwMDkwNjMwQTI1MUEx
RDEzNjUxNzAeFw0yNTA2MDkwNjAxMDFaFw0yNTA2MTYwNjAxMDFaMBgxFjAUBgNV
BAMTDTY4NDY3ODlkLTFhODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDGsoCcu8dInxHZvFlNch0jOTeNh7TLGkOTRJED/PERy6nKUsW6DlJWaxG44fH
U95QIubiAa0ZM7NTKavr2zCgMTJaBctQQ7vZ9hpfugxXKDXawfZXnz4B46rLGM8N
jDjEI7rAqwQT4so6yfndX8/3HG7PTOiSm8rHRWKOZsT+Kp0Q44Jkv0lqddBk89An
TZPvz97/DQBLjq6EBCa0kum3xNdjyEwS/DYlYFAwu8FGurMf3NnyieIp3hb3KAS2
XATBceG65il8PuTxsK88uuyIvCpW/VZpfPpr3t552pRFyS35BGWHSLEtIz9uCG7t
nFqDFUxHlDdAHiav9seAsNiRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6j1NjRMG
LHdF3fqJpyHM5ZxsanMwHwYDVR0jBBgwFoAU8wm0k6ku58YpXgCQYwolGh0TZRcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNENzU2LzZBNDIxQTgwQjA2
NzExRUY4MjE0RDQ2OUM0RjlBRTAyLzh3bTBrNmt1NThZcFhnQ1FZd29sR2gwVFpS
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOHdtMGs2a3U1OFlwWGdDUVl3b2xHaDBUWlJjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNE
NzU2LzZBNDIxQTgwQjA2NzExRUY4MjE0RDQ2OUM0RjlBRTAyLzh3bTBrNmt1NThZ
cFhnQ1FZd29sR2gwVFpSYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABCug6A4z5dTNsx+LnPo3zUQ/Co0ufoUUHO3ZaRqvAxBQMLT974HzSTL
0serZGqQSl8/Cllo5IC+OmNHCXQ2mcDELK09PrHA7g1WAcvPsTjvLOTmRo7vVOqT
6e3oVisrwJrgY8a/7deUyXRW1kqbMSAPuhlCXxiJCiInTe06Faz4CsZMw9jvsU8q
5byfxlSXmdDs1vMtQ0vGkbEZTD0tjy4mL13oHV8D50OLEmWUmNgeXGHcDhQvBtr0
zkclIka8smdqW3qNjB2qz7VZKnUlevXz5SfxkplPl6TqSaRTzaJAjaNHZfAuMaDM
0g7cl7/xinl/6Ry8wXBlGOq6By4LWcw=
-----END CERTIFICATE-----
Generated at Tue Jun 10 06:31:04 2025 by rpki-client