Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
File:                     E7lE6lgzzbdBH9TsaqHJYs87CIA.mft (raw, json)
Hash identifier:          lwYiB7dFe6ybwYI2rc9AsBXXVnP3q4HXdY54myS0iks=
Subject key identifier:   29:DB:93:A7:C3:1B:CB:57:F5:99:B3:AE:32:67:06:3E:86:AE:FF:37
Authority key identifier: 13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80
Certificate issuer:       /CN=A91FCF44/serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
Certificate serial:       60
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
Manifest number:          60
Signing time:             Tue 03 Jun 2025 06:11:58 +0000
Manifest this update:     Tue 03 Jun 2025 06:11:57 +0000
Manifest next update:     Tue 10 Jun 2025 06:11:57 +0000
Files and hashes:         1: E7lE6lgzzbdBH9TsaqHJYs87CIA.crl (hash: C+mKuYIZSOC+XBj+cc3a5AVelXdIpDoRI0yF8Vc9mKQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl
                          rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 06:11:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCF44, serialNumber=13B944EA5833CDB7411FD4EC6AA1C962CF3B0880
        Validity
            Not Before: Jun  3 06:11:57 2025 GMT
            Not After : Jun 10 06:11:57 2025 GMT
        Subject: CN=683e922d-f754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:37:6b:aa:9a:18:1f:73:15:81:97:98:80:e4:
                    67:c5:a8:c1:81:42:eb:d5:23:30:1b:f5:12:c1:00:
                    2c:4d:07:e3:5e:41:38:08:86:6c:51:67:3c:1e:e3:
                    a1:34:22:6f:92:93:d8:32:21:b7:2f:22:76:4b:f2:
                    91:30:e3:86:9c:b7:09:15:e5:79:dc:d3:02:dc:37:
                    3b:55:ec:2e:99:40:83:1d:48:13:e4:90:91:31:45:
                    9a:e1:d3:47:15:4c:b5:cc:a3:70:7d:2d:09:5d:35:
                    91:11:26:60:18:f4:ff:16:df:39:66:35:a7:61:54:
                    82:a0:d8:17:91:08:39:e4:2d:e3:9a:7c:3e:a2:08:
                    40:e9:a5:a8:d2:df:fe:3e:d6:cc:ed:2a:80:62:e3:
                    c0:38:38:bf:d0:78:7d:4d:67:00:fd:f3:64:db:e3:
                    52:ed:9b:0d:3f:bb:16:a0:6a:4b:4d:f9:25:ac:14:
                    bd:a7:bf:4a:74:8b:3d:e0:a3:09:0c:cd:7f:cd:43:
                    75:5b:78:59:ff:2f:e1:13:91:da:a9:32:af:ec:d2:
                    cc:d0:9e:18:cf:d2:b7:9f:9b:52:2d:5c:b0:54:9a:
                    01:8e:6f:24:d8:b1:9a:0d:f8:2c:37:f0:94:25:89:
                    2a:ca:8b:1a:17:1b:7b:0e:74:db:6b:3a:35:6a:2d:
                    25:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:DB:93:A7:C3:1B:CB:57:F5:99:B3:AE:32:67:06:3E:86:AE:FF:37
            X509v3 Authority Key Identifier:
                keyid:13:B9:44:EA:58:33:CD:B7:41:1F:D4:EC:6A:A1:C9:62:CF:3B:08:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/E7lE6lgzzbdBH9TsaqHJYs87CIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/E219C638AE1511EFB302983EC4F9AE02/E7lE6lgzzbdBH9TsaqHJYs87CIA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:cc:94:19:13:ac:e3:19:c1:de:4a:2e:73:76:99:b1:ce:c9:
         e7:9d:18:92:84:3e:1e:b9:16:2f:f1:fb:b8:6c:8f:40:a7:ae:
         1d:6a:29:81:0c:6c:ea:da:74:a2:d4:b3:38:4a:9e:3b:87:a0:
         16:a6:7a:7d:96:60:48:7b:e8:b5:0b:f5:2b:68:8c:15:f0:2a:
         fb:85:0c:71:32:81:68:93:bd:95:03:d1:1c:86:11:50:1a:11:
         93:f7:37:60:f9:a7:78:6f:15:12:e3:80:84:67:49:44:45:97:
         b4:f6:69:4d:f1:04:07:f1:00:57:81:7e:5f:e0:aa:98:cc:47:
         ca:5e:f4:2e:42:37:25:ef:4e:19:4e:de:99:0b:68:76:6a:83:
         61:08:24:80:ce:4d:7b:20:ba:2f:df:ed:a5:3c:36:f8:5a:a7:
         09:12:ba:de:ad:c2:23:bc:d7:f3:db:e4:97:4e:97:75:cb:32:
         ed:11:a1:05:b3:99:d0:45:5f:ec:7c:b2:84:cf:c6:8e:10:84:
         c9:bc:50:07:b2:92:4d:69:52:97:06:71:06:4c:63:5a:0d:68:
         6e:47:ca:da:d1:20:d7:19:21:ae:91:7a:f2:67:c0:2f:da:7b:
         c9:99:02:cd:82:bf:4b:6d:ae:c7:ac:d4:68:b9:09:4a:28:18:
         09:54:71:9b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
Q0Y0NDExMC8GA1UEBRMoMTNCOTQ0RUE1ODMzQ0RCNzQxMUZENEVDNkFBMUM5NjJD
RjNCMDg4MDAeFw0yNTA2MDMwNjExNTdaFw0yNTA2MTAwNjExNTdaMBgxFjAUBgNV
BAMTDTY4M2U5MjJkLWY3NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDyN2uqmhgfcxWBl5iA5GfFqMGBQuvVIzAb9RLBACxNB+NeQTgIhmxRZzwe46E0
Im+Sk9gyIbcvInZL8pEw44actwkV5Xnc0wLcNztV7C6ZQIMdSBPkkJExRZrh00cV
TLXMo3B9LQldNZERJmAY9P8W3zlmNadhVIKg2BeRCDnkLeOafD6iCEDppajS3/4+
1sztKoBi48A4OL/QeH1NZwD982Tb41Ltmw0/uxagaktN+SWsFL2nv0p0iz3gowkM
zX/NQ3VbeFn/L+ETkdqpMq/s0szQnhjP0refm1ItXLBUmgGObyTYsZoN+Cw38JQl
iSrKixoXG3sOdNtrOjVqLSVtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKduTp8Mb
y1f1mbOuMmcGPoau/zcwHwYDVR0jBBgwFoAUE7lE6lgzzbdBH9TsaqHJYs87CIAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDRjQ0L0UyMTlDNjM4QUUx
NTExRUZCMzAyOTgzRUM0RjlBRTAyL0U3bEU2bGd6emJkQkg5VHNhcUhKWXM4N0NJ
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG
RDFGRjIvRTdsRTZsZ3p6YmRCSDlUc2FxSEpZczg3Q0lBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD
RjQ0L0UyMTlDNjM4QUUxNTExRUZCMzAyOTgzRUM0RjlBRTAyL0U3bEU2bGd6emJk
Qkg5VHNhcUhKWXM4N0NJQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAInMlBkTrOMZwd5KLnN2mbHOyeedGJKEPh65Fi/x+7hsj0Cnrh1qKYEM
bOradKLUszhKnjuHoBamen2WYEh76LUL9StojBXwKvuFDHEygWiTvZUD0RyGEVAa
EZP3N2D5p3hvFRLjgIRnSURFl7T2aU3xBAfxAFeBfl/gqpjMR8pe9C5CNyXvThlO
3pkLaHZqg2EIJIDOTXsgui/f7aU8NvhapwkSut6twiO81/Pb5JdOl3XLMu0RoQWz
mdBFX+x8soTPxo4QhMm8UAeykk1pUpcGcQZMY1oNaG5HytrRINcZIa6RevJnwC/a
e8mZAs2Cv0ttrses1Gi5CUooGAlUcZs=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:04:05 2025 by rpki-client