Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
File:                     vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft (raw, json)
Hash identifier:          Pu+z1M0+xgGDEhHNDoERnFrdomcrGL5Jk3ZWfY8vOdo=
Subject key identifier:   48:4A:80:0B:BD:65:C8:17:B5:D6:A2:8B:17:36:32:6E:1D:B2:D6:1E
Authority key identifier: BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37
Certificate issuer:       /CN=A91943F0/serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37
Certificate serial:       83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
Manifest number:          83
Signing time:             Sat 31 May 2025 06:10:23 +0000
Manifest this update:     Sat 31 May 2025 06:10:23 +0000
Manifest next update:     Sat 07 Jun 2025 06:10:23 +0000
Files and hashes:         1: vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl (hash: utNx+yqxeMk4neq4rw2dsbj0JOV2SVNAlk3bs/+Dano=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl
                          rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:10:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91943F0, serialNumber=BD92626B400BB14DE41A50539D960FC5DD61DC37
        Validity
            Not Before: May 31 06:10:23 2025 GMT
            Not After : Jun  7 06:10:23 2025 GMT
        Subject: CN=683a9d4f-b797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:45:30:2e:a1:d7:6b:b4:73:45:1e:b3:25:
                    03:c1:ff:6a:3d:ff:32:1b:8d:b5:7a:db:66:a3:5b:
                    1f:f3:79:ef:88:ad:4d:1c:85:2b:d1:66:4a:35:0a:
                    07:6d:0b:43:5b:76:54:22:06:02:cd:f2:a2:e5:6c:
                    7f:13:41:47:4f:e2:25:ac:62:15:58:4f:ea:ca:62:
                    1a:3f:7d:62:23:bc:3f:14:53:d5:fe:bb:14:9b:ae:
                    f4:4f:2e:d1:ff:09:ae:08:f3:93:de:50:35:b3:9d:
                    eb:22:f5:01:ce:09:86:d7:2e:a7:3f:d2:b1:64:1d:
                    c2:e5:52:04:1c:fa:d7:34:08:6c:a9:42:49:88:af:
                    2d:9c:7f:09:bc:2a:ce:ce:3e:37:9f:c9:b2:31:04:
                    7a:c9:07:7a:06:d3:3a:09:4e:25:cf:a2:fa:0b:af:
                    36:76:07:30:c3:23:58:6f:7b:c9:9c:92:6f:b9:d7:
                    e8:61:50:5f:12:d4:5a:65:5c:90:92:74:20:20:23:
                    7a:ad:b6:c6:98:ba:1d:06:eb:90:cd:02:fe:c7:30:
                    19:63:e0:88:a9:fa:d3:28:77:32:12:c0:dc:12:b0:
                    2d:77:63:8e:59:e7:7f:44:09:ce:27:30:fc:4b:76:
                    1c:37:82:c0:27:f6:c7:52:22:64:51:56:82:da:dc:
                    c0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:4A:80:0B:BD:65:C8:17:B5:D6:A2:8B:17:36:32:6E:1D:B2:D6:1E
            X509v3 Authority Key Identifier:
                keyid:BD:92:62:6B:40:0B:B1:4D:E4:1A:50:53:9D:96:0F:C5:DD:61:DC:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vZJia0ALsU3kGlBTnZYPxd1h3Dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91943F0/CA6B94CC74F811EFB3427984C4F9AE02/vZJia0ALsU3kGlBTnZYPxd1h3Dc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ad:cb:ff:95:b3:6e:d7:63:2d:ca:00:ee:09:47:4d:68:ee:
         80:20:30:6f:75:fd:47:37:91:9c:29:d2:3a:78:72:52:64:ab:
         59:ef:f6:88:65:53:16:99:5b:36:62:01:65:4b:f4:0d:73:04:
         38:0d:a7:87:90:02:73:87:2f:ea:37:13:61:2a:93:49:d1:15:
         43:bd:c3:3c:47:87:1f:5e:a1:12:dc:15:74:d7:83:b2:5e:61:
         ef:ee:72:f6:66:84:96:83:18:be:01:11:2a:b3:88:cd:e1:55:
         eb:4a:a5:e0:48:82:9c:eb:84:0f:02:df:fd:13:27:f0:dc:5b:
         e8:0a:be:50:17:6b:34:4c:bb:29:f8:17:98:ef:3b:16:eb:2f:
         c4:87:2c:b7:ea:c4:49:21:69:8c:97:38:e5:76:36:95:79:bc:
         5b:3e:62:fe:a6:03:2c:f2:e4:24:68:0e:9b:76:ec:af:cc:73:
         39:ec:dc:3f:39:39:ef:37:02:5a:5f:aa:54:b0:bc:90:a2:73:
         46:d3:0c:b3:83:a7:e3:17:93:76:f8:10:2b:3d:5b:8f:8e:55:
         c0:48:e5:bb:ef:b9:19:27:54:37:17:4b:64:eb:31:ec:1e:80:
         b9:b8:ca:87:fa:18:99:a0:18:ee:f1:29:09:83:9d:ca:de:b8:
         af:10:14:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTQzRjAxMTAvBgNVBAUTKEJEOTI2MjZCNDAwQkIxNERFNDFBNTA1MzlEOTYwRkM1
REQ2MURDMzcwHhcNMjUwNTMxMDYxMDIzWhcNMjUwNjA3MDYxMDIzWjAYMRYwFAYD
VQQDEw02ODNhOWQ0Zi1iNzk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwg9FMC6h12u0c0UesyUDwf9qPf8yG421ettmo1sf83nviK1NHIUr0WZKNQoH
bQtDW3ZUIgYCzfKi5Wx/E0FHT+IlrGIVWE/qymIaP31iI7w/FFPV/rsUm670Ty7R
/wmuCPOT3lA1s53rIvUBzgmG1y6nP9KxZB3C5VIEHPrXNAhsqUJJiK8tnH8JvCrO
zj43n8myMQR6yQd6BtM6CU4lz6L6C682dgcwwyNYb3vJnJJvudfoYVBfEtRaZVyQ
knQgICN6rbbGmLodBuuQzQL+xzAZY+CIqfrTKHcyEsDcErAtd2OOWed/RAnOJzD8
S3YcN4LAJ/bHUiJkUVaC2tzATwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhKgAu9
ZcgXtdaiixc2Mm4dstYeMB8GA1UdIwQYMBaAFL2SYmtAC7FN5BpQU52WD8XdYdw3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NDNGMC9DQTZCOTRDQzc0
RjgxMUVGQjM0Mjc5ODRDNEY5QUUwMi92WkppYTBBTHNVM2tHbEJUblpZUHhkMWgz
RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZaSmlhMEFMc1Uza0dsQlRuWllQeGQxaDNEYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NDNGMC9DQTZCOTRDQzc0RjgxMUVGQjM0Mjc5ODRDNEY5QUUwMi92WkppYTBBTHNV
M2tHbEJUblpZUHhkMWgzRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdrcv/lbNu12MtygDuCUdNaO6AIDBvdf1HN5GcKdI6eHJSZKtZ7/aI
ZVMWmVs2YgFlS/QNcwQ4DaeHkAJzhy/qNxNhKpNJ0RVDvcM8R4cfXqES3BV014Oy
XmHv7nL2ZoSWgxi+AREqs4jN4VXrSqXgSIKc64QPAt/9Eyfw3FvoCr5QF2s0TLsp
+BeY7zsW6y/Ehyy36sRJIWmMlzjldjaVebxbPmL+pgMs8uQkaA6bduyvzHM57Nw/
OTnvNwJaX6pUsLyQonNG0wyzg6fjF5N2+BArPVuPjlXASOW777kZJ1Q3F0tk6zHs
HoC5uMqH+hiZoBju8SkJg53K3rivEBRm
-----END CERTIFICATE-----
Generated at Sat May 31 15:28:22 2025 by rpki-client