Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
File:                     eLB7yieVuFKmVslAPke8uKvgelo.mft (raw, json)
Hash identifier:          M64dJ/mkxnhfI7o/0r3QzGq4Az/NlJ/xFavZCGwR/eQ=
Subject key identifier:   11:33:50:B5:BD:5D:AD:5E:7E:2A:71:F2:6D:3A:9D:D8:39:06:EF:37
Authority key identifier: 78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A
Certificate issuer:       /CN=A91B0380/serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
Manifest number:          9A
Signing time:             Mon 21 Jul 2025 06:29:55 +0000
Manifest this update:     Mon 21 Jul 2025 06:29:55 +0000
Manifest next update:     Mon 28 Jul 2025 06:29:55 +0000
Files and hashes:         1: eLB7yieVuFKmVslAPke8uKvgelo.crl (hash: slbOhfKHhRu06iGLHQXu/UxBr+AVNYwkfuHOJnh5/1c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl
                          rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 06:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0380, serialNumber=78B07BCA2795B852A656C9403E47BCB8ABE07A5A
        Validity
            Not Before: Jul 21 06:29:55 2025 GMT
            Not After : Jul 28 06:29:55 2025 GMT
        Subject: CN=687dde63-5ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:23:eb:5b:86:41:ae:ed:48:7e:e9:bc:29:65:
                    8b:a9:4f:14:59:e8:2e:4b:9e:07:03:64:95:17:ad:
                    4d:41:a6:20:ff:60:c3:06:11:8a:60:79:55:32:c8:
                    d1:26:d2:bf:da:89:a9:e1:af:63:1a:1e:9b:b8:e9:
                    48:db:dc:f9:46:75:fe:5f:ce:99:ee:1d:99:0c:40:
                    ea:f5:02:08:da:3c:af:46:8c:1c:06:6b:13:b1:39:
                    b3:81:7e:29:6b:ba:96:90:ae:d4:61:bf:ef:5c:a0:
                    05:a7:43:64:bf:50:3e:21:ba:bb:06:b0:87:fd:a9:
                    7f:2c:6d:1c:4c:bb:c7:4b:80:88:69:a0:05:55:1a:
                    d4:d2:da:c2:40:86:2e:ce:0c:ee:5e:c4:8a:ab:e0:
                    3b:82:33:ee:89:e9:8f:9b:ae:50:5c:78:0a:bf:82:
                    2a:5d:95:c9:04:34:71:44:16:cb:b0:b5:75:e4:c9:
                    d4:2f:b6:94:9d:b0:11:cb:b7:f3:26:bf:3a:08:52:
                    eb:6a:16:00:48:32:fd:d3:e1:47:ee:5a:8a:ee:c1:
                    96:4c:f7:46:77:20:bd:52:99:71:b9:d7:04:16:67:
                    f3:1b:2d:a6:c2:a4:b6:60:df:0e:c5:07:2a:05:ee:
                    d0:2b:f9:3b:52:a4:4a:8b:78:50:58:fe:b2:1c:32:
                    dd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:33:50:B5:BD:5D:AD:5E:7E:2A:71:F2:6D:3A:9D:D8:39:06:EF:37
            X509v3 Authority Key Identifier:
                keyid:78:B0:7B:CA:27:95:B8:52:A6:56:C9:40:3E:47:BC:B8:AB:E0:7A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/eLB7yieVuFKmVslAPke8uKvgelo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0380/6E6E36007BCB11EFA2489211C4F9AE02/eLB7yieVuFKmVslAPke8uKvgelo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5d:8c:3e:8e:0d:4a:85:1e:b5:24:5c:19:bf:a2:e7:ea:87:
         96:1a:8c:df:ec:84:11:87:99:d3:8c:4d:45:5f:98:68:bf:11:
         dd:b5:a9:a3:c9:b0:99:e6:11:42:4a:4b:3c:03:7b:a6:be:0f:
         3d:88:7d:ff:b3:c9:eb:66:10:ad:8e:79:af:7b:de:63:8d:27:
         a0:f4:40:e3:6b:79:d6:ab:35:9d:8a:6e:d8:eb:1b:4c:07:b0:
         0c:e7:2e:9e:ce:3a:82:99:e1:82:15:8b:90:7f:b9:48:80:48:
         00:71:45:0e:74:0f:be:c4:a4:40:6f:b1:ce:15:e7:77:14:d4:
         2b:65:c9:25:2e:ed:7b:45:bf:7d:e2:01:50:91:7a:1c:f0:df:
         35:ba:28:f5:30:70:9a:cd:c6:d7:a8:a1:62:35:bb:86:fc:cc:
         f5:5f:bc:66:8a:76:ed:0b:7a:bc:3c:42:fe:fe:f1:44:20:09:
         a9:73:3c:17:67:90:e9:ae:ef:22:90:dd:9c:22:6d:1b:20:d8:
         66:67:05:c7:fc:cc:7a:4b:ea:80:5d:a0:83:3f:08:eb:03:4f:
         e3:e6:99:3a:93:28:63:85:c6:7d:0c:ac:7b:ea:a1:40:ae:04:
         16:32:26:27:cb:95:ce:18:40:d7:5c:ff:45:7b:f8:12:15:0b:
         cd:c5:8f:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAzODAxMTAvBgNVBAUTKDc4QjA3QkNBMjc5NUI4NTJBNjU2Qzk0MDNFNDdCQ0I4
QUJFMDdBNUEwHhcNMjUwNzIxMDYyOTU1WhcNMjUwNzI4MDYyOTU1WjAYMRYwFAYD
VQQDEw02ODdkZGU2My01YWQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwiPrW4ZBru1Ifum8KWWLqU8UWeguS54HA2SVF61NQaYg/2DDBhGKYHlVMsjR
JtK/2omp4a9jGh6buOlI29z5RnX+X86Z7h2ZDEDq9QII2jyvRowcBmsTsTmzgX4p
a7qWkK7UYb/vXKAFp0Nkv1A+Ibq7BrCH/al/LG0cTLvHS4CIaaAFVRrU0trCQIYu
zgzuXsSKq+A7gjPuiemPm65QXHgKv4IqXZXJBDRxRBbLsLV15MnUL7aUnbARy7fz
Jr86CFLrahYASDL90+FH7lqK7sGWTPdGdyC9UplxudcEFmfzGy2mwqS2YN8OxQcq
Be7QK/k7UqRKi3hQWP6yHDLdTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBEzULW9
Xa1efipx8m06ndg5Bu83MB8GA1UdIwQYMBaAFHiwe8onlbhSplbJQD5HvLir4Hpa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDM4MC82RTZFMzYwMDdC
Q0IxMUVGQTI0ODkyMTFDNEY5QUUwMi9lTEI3eWllVnVGS21Wc2xBUGtlOHVLdmdl
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2VMQjd5aWVWdUZLbVZzbEFQa2U4dUt2Z2Vsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDM4MC82RTZFMzYwMDdCQ0IxMUVGQTI0ODkyMTFDNEY5QUUwMi9lTEI3eWllVnVG
S21Wc2xBUGtlOHVLdmdlbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA1XYw+jg1KhR61JFwZv6Ln6oeWGozf7IQRh5nTjE1FX5hovxHdtamj
ybCZ5hFCSks8A3umvg89iH3/s8nrZhCtjnmve95jjSeg9EDja3nWqzWdim7Y6xtM
B7AM5y6ezjqCmeGCFYuQf7lIgEgAcUUOdA++xKRAb7HOFed3FNQrZcklLu17Rb99
4gFQkXoc8N81uij1MHCazcbXqKFiNbuG/Mz1X7xminbtC3q8PEL+/vFEIAmpczwX
Z5Dpru8ikN2cIm0bINhmZwXH/Mx6S+qAXaCDPwjrA0/j5pk6kyhjhcZ9DKx76qFA
rgQWMiYny5XOGEDXXP9Fe/gSFQvNxY8D
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:46:16 2025 by rpki-client