Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft
File:                     sG-Cllr-46vaGzofLWAX4AcnjOU.mft (raw, json)
Hash identifier:          45ZbTMmnucKniYTHM9FlI6EMjxtplDLBr8rd+MMWMbA=
Subject key identifier:   BF:02:5A:B6:DC:AA:3B:AD:57:BD:23:F5:70:C8:A9:9C:27:36:5E:06
Authority key identifier: B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5
Certificate issuer:       /CN=A91557F5/serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5
Certificate serial:       06D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft
Manifest number:          06D1
Signing time:             Thu 12 Jun 2025 21:44:57 +0000
Manifest this update:     Thu 12 Jun 2025 21:44:56 +0000
Manifest next update:     Thu 19 Jun 2025 21:44:56 +0000
Files and hashes:         1: sG-Cllr-46vaGzofLWAX4AcnjOU.crl (hash: ZcqWTqhF01c/LMTTRrQzmMzmfELuiqTLRUbhidQxKXA=)
                          2: 97D3AF84DCC611EDB75B695EC4F9AE02.roa (hash: rRipsWIPpFCqvwU6GU8CPWQ7Gw24E8Icdhb0XLzQIeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.crl
                          rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 21:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1753 (0x6d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557F5, serialNumber=B06F82965AFEE3ABDA1B3A1F2D6017E007278CE5
        Validity
            Not Before: Jun 12 21:44:56 2025 GMT
            Not After : Jun 19 21:44:56 2025 GMT
        Subject: CN=684b4a59-908a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:77:06:2d:b2:cb:8c:6f:42:14:bd:6c:ec:
                    e9:fc:8d:6e:28:59:1d:57:64:05:8e:c5:ae:87:8c:
                    19:21:50:8e:7a:f0:47:ca:29:35:93:55:15:06:17:
                    7b:b3:22:e5:55:83:cd:a9:be:ce:30:22:05:81:86:
                    c5:f1:f5:67:8e:b0:49:4a:1e:66:ae:17:ce:50:16:
                    10:30:b4:77:ef:30:f3:0b:ed:f9:e2:c6:66:b2:f3:
                    46:08:8f:d8:b5:8b:be:01:7e:f3:d3:5a:72:f8:48:
                    d8:fe:61:2a:e3:58:78:af:bb:5e:a1:e1:ac:ec:d1:
                    b3:bb:fa:65:01:0b:6e:58:10:ef:e3:e4:6a:8c:5e:
                    30:ce:8b:be:40:e5:d7:71:68:cd:1b:aa:a6:10:f2:
                    ac:69:f1:36:c0:f0:79:bc:65:aa:72:f0:70:65:e2:
                    46:5a:f1:f6:81:8d:72:d4:04:06:92:42:2f:3f:29:
                    3f:2c:46:6f:f9:d8:f3:4a:04:22:2d:70:dc:0a:b8:
                    a4:5c:47:77:77:cb:9a:1f:0f:65:5f:19:3d:9e:30:
                    c7:ee:9c:9d:a2:cc:59:04:c4:50:2e:3b:5e:61:e7:
                    da:b4:cf:da:cc:77:4b:e1:32:6b:3f:4d:e7:2e:e8:
                    2a:62:19:42:4d:9c:6d:99:21:39:d7:4e:67:bf:2b:
                    23:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:02:5A:B6:DC:AA:3B:AD:57:BD:23:F5:70:C8:A9:9C:27:36:5E:06
            X509v3 Authority Key Identifier:
                keyid:B0:6F:82:96:5A:FE:E3:AB:DA:1B:3A:1F:2D:60:17:E0:07:27:8C:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sG-Cllr-46vaGzofLWAX4AcnjOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F5/EC405E165C6F11EBAC3A8856C4F9AE02/sG-Cllr-46vaGzofLWAX4AcnjOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:03:5f:18:cc:dc:aa:29:28:33:05:68:48:ca:19:de:64:01:
         54:f2:0a:27:dc:36:69:65:30:c1:01:18:3e:ed:ce:d3:d7:a0:
         e3:b9:36:dc:ab:df:b0:19:81:a0:75:5a:dc:4a:02:aa:6f:48:
         f6:cc:3e:60:d5:0e:c1:3c:26:8f:b6:79:1d:b5:d4:db:81:14:
         f4:7c:d2:cb:0b:e1:c7:75:e2:c9:ba:6d:16:a8:8e:35:2f:b6:
         c0:6d:f5:21:6c:12:07:12:81:89:3a:51:5e:b7:d6:9c:a6:c4:
         87:aa:db:88:96:7f:02:bd:47:63:df:f3:1e:ee:45:b5:2b:d0:
         d5:18:04:34:21:4e:0d:25:9a:a8:ce:d9:fe:41:7d:86:d5:ef:
         c0:90:71:b4:1d:0d:df:ff:e2:c7:a9:bc:bb:1e:63:91:11:d9:
         82:45:d8:4b:2a:42:33:ad:2e:58:77:22:fc:61:92:82:64:83:
         20:a3:0b:a4:ef:be:97:7a:e4:e1:fd:52:30:53:ff:8e:38:d4:
         73:d4:c7:75:84:65:3c:80:35:1b:8b:0d:49:f5:6a:d5:f5:80:
         57:94:61:37:d1:3c:08:5f:e8:49:66:4b:a1:e8:cc:94:d1:e3:
         17:78:0b:24:9e:54:a3:96:78:ed:f4:93:61:c4:e3:14:5a:a4:
         fe:8c:26:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU3RjUxMTAvBgNVBAUTKEIwNkY4Mjk2NUFGRUUzQUJEQTFCM0ExRjJENjAxN0Uw
MDcyNzhDRTUwHhcNMjUwNjEyMjE0NDU2WhcNMjUwNjE5MjE0NDU2WjAYMRYwFAYD
VQQDEw02ODRiNGE1OS05MDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyC53Bi2yy4xvQhS9bOzp/I1uKFkdV2QFjsWuh4wZIVCOevBHyik1k1UVBhd7
syLlVYPNqb7OMCIFgYbF8fVnjrBJSh5mrhfOUBYQMLR37zDzC+354sZmsvNGCI/Y
tYu+AX7z01py+EjY/mEq41h4r7teoeGs7NGzu/plAQtuWBDv4+RqjF4wzou+QOXX
cWjNG6qmEPKsafE2wPB5vGWqcvBwZeJGWvH2gY1y1AQGkkIvPyk/LEZv+djzSgQi
LXDcCrikXEd3d8uaHw9lXxk9njDH7pydosxZBMRQLjteYefatM/azHdL4TJrP03n
LugqYhlCTZxtmSE5105nvysjGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8CWrbc
qjutV70j9XDIqZwnNl4GMB8GA1UdIwQYMBaAFLBvgpZa/uOr2hs6Hy1gF+AHJ4zl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGNS9FQzQwNUUxNjVD
NkYxMUVCQUMzQTg4NTZDNEY5QUUwMi9zRy1DbGxyLTQ2dmFHem9mTFdBWDRBY25q
T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NHLUNsbHItNDZ2YUd6b2ZMV0FYNEFjbmpPVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTdGNS9FQzQwNUUxNjVDNkYxMUVCQUMzQTg4NTZDNEY5QUUwMi9zRy1DbGxyLTQ2
dmFHem9mTFdBWDRBY25qT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCoA18YzNyqKSgzBWhIyhneZAFU8gon3DZpZTDBARg+7c7T16DjuTbc
q9+wGYGgdVrcSgKqb0j2zD5g1Q7BPCaPtnkdtdTbgRT0fNLLC+HHdeLJum0WqI41
L7bAbfUhbBIHEoGJOlFet9acpsSHqtuIln8CvUdj3/Me7kW1K9DVGAQ0IU4NJZqo
ztn+QX2G1e/AkHG0HQ3f/+LHqby7HmOREdmCRdhLKkIzrS5YdyL8YZKCZIMgowuk
776XeuTh/VIwU/+OONRz1Md1hGU8gDUbiw1J9WrV9YBXlGE30TwIX+hJZkuh6MyU
0eMXeAsknlSjlnjt9JNhxOMUWqT+jCYG
-----END CERTIFICATE-----
Generated at Fri Jun 13 01:46:41 2025 by rpki-client