Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
File:                     xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft (raw, json)
Hash identifier:          MAo0f6OS3fQCll5tfO84NdkPiBsae0OHMWXBxUeLBgA=
Subject key identifier:   B7:9D:57:09:C6:26:13:C9:DE:AF:96:F9:76:EA:1E:85:C3:49:3D:A9
Authority key identifier: C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24
Certificate issuer:       /CN=A913EF9C/serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524
Certificate serial:       46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
Manifest number:          46
Signing time:             Sat 31 May 2025 06:58:36 +0000
Manifest this update:     Sat 31 May 2025 06:58:35 +0000
Manifest next update:     Sat 07 Jun 2025 06:58:35 +0000
Files and hashes:         1: xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl (hash: fAnOabpneBgA/lFT+zDozC9ZjAXGMKbu/5+xKTTvp4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl
                          rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF9C, serialNumber=C4439DC01E20D16CC5A0EF9817D41BF628976524
        Validity
            Not Before: May 31 06:58:35 2025 GMT
            Not After : Jun  7 06:58:35 2025 GMT
        Subject: CN=683aa89c-c871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:04:a3:92:2f:d5:07:f7:4b:58:b8:47:89:25:
                    18:38:c6:c7:e5:e9:35:0c:eb:41:43:3e:ea:05:34:
                    72:38:07:94:6a:8e:29:4c:b1:75:3e:3c:de:be:af:
                    fa:1a:cf:5d:54:68:92:e9:b2:75:65:f1:2d:f3:71:
                    ef:3d:6d:7e:96:6d:79:57:e0:54:1d:74:c4:1f:6f:
                    cc:1d:06:ae:80:46:53:a5:05:c4:3b:46:c1:f3:27:
                    ba:dd:89:08:b4:13:25:0a:f7:5d:7b:bf:4d:d1:cd:
                    03:af:45:94:83:e5:9e:8e:5f:68:b7:1d:bb:1f:90:
                    3b:bd:3b:13:2c:83:3d:1d:88:da:44:ae:e8:a4:a7:
                    f1:a2:6e:8d:c7:be:26:ff:63:40:17:fd:79:b8:d8:
                    e7:a9:dd:0b:bb:7f:ce:c8:f0:01:bb:9b:8e:a9:a8:
                    22:e5:2d:99:1e:0d:39:77:ee:ec:91:41:0d:e5:3e:
                    f7:8a:94:cf:20:8e:90:96:62:b3:f2:c8:3b:dd:05:
                    72:c2:87:16:09:51:89:8d:ef:6e:93:d6:2e:9b:cd:
                    c3:ee:85:63:86:10:ed:c4:47:02:88:6a:45:e9:e2:
                    dd:41:b1:57:d4:70:b7:db:69:7e:51:06:a6:6e:da:
                    00:d0:1b:17:35:de:b3:16:06:d7:d9:91:29:15:56:
                    98:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9D:57:09:C6:26:13:C9:DE:AF:96:F9:76:EA:1E:85:C3:49:3D:A9
            X509v3 Authority Key Identifier:
                keyid:C4:43:9D:C0:1E:20:D1:6C:C5:A0:EF:98:17:D4:1B:F6:28:97:65:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF9C/CD2CA8F8D3EA11EFA66C4760C4F9AE02/xEOdwB4g0WzFoO-YF9Qb9iiXZSQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:db:33:b2:fd:f6:ba:85:f9:de:41:dc:f0:b8:cd:3a:93:e9:
         11:bf:9c:1f:3c:68:c9:9c:6b:d2:b9:86:26:73:a8:f6:ba:73:
         b2:4d:00:b2:ac:66:73:20:01:53:8f:25:f4:b2:e0:25:6e:bc:
         8a:b0:5b:5c:06:d6:37:a3:3a:c6:fb:30:81:91:37:fd:16:12:
         17:d1:85:08:97:bb:d3:a6:95:c5:eb:ee:a8:5b:e0:4c:ab:38:
         c3:22:bf:c4:15:61:93:9f:6e:de:f5:64:ba:9f:e1:c5:f6:22:
         d1:f9:75:a4:26:16:81:b0:1b:6d:f7:94:b4:6b:1e:49:35:5c:
         64:c7:df:9e:5b:1f:c7:f8:13:c9:d9:ef:d8:b0:69:75:fc:c3:
         bc:4e:db:ac:00:35:71:7e:ef:03:31:2e:fd:47:6b:1f:3d:6b:
         3f:ae:05:2e:02:d0:11:f9:b5:f9:da:79:59:e3:da:0a:ae:2b:
         14:b5:c4:3c:92:2a:f9:3c:95:f0:c4:0b:16:1e:7e:d6:03:b3:
         f2:c4:79:7f:1f:a1:ca:48:9f:57:3f:0a:60:ba:64:c9:00:9f:
         c0:20:9c:94:31:77:69:d1:c1:bc:40:7f:7f:7b:e3:1d:31:62:
         8b:a9:61:a9:da:6a:3d:65:e2:7f:b4:16:13:69:bd:a8:84:8f:
         5a:19:28:2b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBRjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
RUY5QzExMC8GA1UEBRMoQzQ0MzlEQzAxRTIwRDE2Q0M1QTBFRjk4MTdENDFCRjYy
ODk3NjUyNDAeFw0yNTA1MzEwNjU4MzVaFw0yNTA2MDcwNjU4MzVaMBgxFjAUBgNV
BAMTDTY4M2FhODljLWM4NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDKBKOSL9UH90tYuEeJJRg4xsfl6TUM60FDPuoFNHI4B5RqjilMsXU+PN6+r/oa
z11UaJLpsnVl8S3zce89bX6WbXlX4FQddMQfb8wdBq6ARlOlBcQ7RsHzJ7rdiQi0
EyUK9117v03RzQOvRZSD5Z6OX2i3HbsfkDu9OxMsgz0diNpEruikp/Gibo3Hvib/
Y0AX/Xm42Oep3Qu7f87I8AG7m46pqCLlLZkeDTl37uyRQQ3lPveKlM8gjpCWYrPy
yDvdBXLChxYJUYmN726T1i6bzcPuhWOGEO3ERwKIakXp4t1BsVfUcLfbaX5RBqZu
2gDQGxc13rMWBtfZkSkVVpipAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUt51XCcYm
E8ner5b5duoehcNJPakwHwYDVR0jBBgwFoAUxEOdwB4g0WzFoO+YF9Qb9iiXZSQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFRjlDL0NEMkNBOEY4RDNF
QTExRUZBNjZDNDc2MEM0RjlBRTAyL3hFT2R3QjRnMFd6Rm9PLVlGOVFiOWlpWFpT
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIveEVPZHdCNGcwV3pGb08tWUY5UWI5aWlYWlNRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNF
RjlDL0NEMkNBOEY4RDNFQTExRUZBNjZDNDc2MEM0RjlBRTAyL3hFT2R3QjRnMFd6
Rm9PLVlGOVFiOWlpWFpTUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAG7bM7L99rqF+d5B3PC4zTqT6RG/nB88aMmca9K5hiZzqPa6c7JNALKs
ZnMgAVOPJfSy4CVuvIqwW1wG1jejOsb7MIGRN/0WEhfRhQiXu9OmlcXr7qhb4Eyr
OMMiv8QVYZOfbt71ZLqf4cX2ItH5daQmFoGwG233lLRrHkk1XGTH355bH8f4E8nZ
79iwaXX8w7xO26wANXF+7wMxLv1Hax89az+uBS4C0BH5tfnaeVnj2gquKxS1xDyS
Kvk8lfDECxYeftYDs/LEeX8focpIn1c/CmC6ZMkAn8AgnJQxd2nRwbxAf3974x0x
YoupYanaaj1l4n+0FhNpvaiEj1oZKCs=
-----END CERTIFICATE-----
Generated at Sat May 31 17:42:42 2025 by rpki-client