Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
File:                     9US5wrG96hw7N0NIuNFeNn5qD0I.mft (raw, json)
Hash identifier:          BBfF/Ib54GGSHOtDplE9uERF8TlbMIQHCQuyUbSKb70=
Subject key identifier:   7F:05:45:06:4D:54:E9:EF:BE:66:54:29:78:8A:44:59:C9:1B:92:06
Authority key identifier: F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42
Certificate issuer:       /CN=A91139AB/serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42
Certificate serial:       0758
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
Manifest number:          0885
Signing time:             Sat 14 Jun 2025 21:23:07 +0000
Manifest this update:     Sat 14 Jun 2025 21:23:07 +0000
Manifest next update:     Sat 21 Jun 2025 21:23:07 +0000
Files and hashes:         1: 9US5wrG96hw7N0NIuNFeNn5qD0I.crl (hash: jgLWL/S5ATXCybclvyIRS1PiKFXMl4QMg9i3qP5fbnE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl
                          rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 21:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1880 (0x758)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91139AB, serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42
        Validity
            Not Before: Jun 14 21:23:07 2025 GMT
            Not After : Jun 21 21:23:07 2025 GMT
        Subject: CN=684de83b-5177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:0f:02:6b:74:a8:93:f6:09:57:f7:a9:d2:
                    1a:4a:eb:54:e3:09:58:f6:dc:c2:1c:9d:18:f0:30:
                    27:55:26:ff:83:55:d0:58:08:d8:b8:e3:1c:66:ed:
                    a6:80:1d:db:aa:2f:38:65:f1:ab:bd:30:eb:7f:bc:
                    fa:65:ac:03:3d:36:d1:44:b9:27:20:34:a0:c6:eb:
                    90:65:25:ba:c5:18:89:ce:ad:d0:74:fe:2b:4e:bd:
                    46:bd:b8:56:f2:31:42:26:c6:c1:78:78:eb:0b:ec:
                    4d:3f:2a:7f:e3:51:da:70:e9:00:3d:df:a1:3c:75:
                    72:c6:f5:e6:28:d0:b8:5a:63:d3:a5:fb:64:65:8c:
                    b5:f5:f7:75:16:7f:6a:84:57:91:78:ed:d5:82:32:
                    50:1e:96:4a:a4:e0:75:90:15:dd:2a:b6:26:ec:b0:
                    b9:eb:42:b3:34:22:45:43:05:4c:14:8d:6f:70:a8:
                    17:8b:e4:ee:76:4f:b1:85:50:92:08:ae:5d:ca:41:
                    ea:6a:82:46:dc:85:f7:87:f9:49:72:ab:b5:21:2b:
                    a5:4d:36:c4:e1:f9:ac:a7:4f:64:99:57:e3:69:eb:
                    34:3e:11:3f:35:65:29:41:17:8c:f4:be:dd:29:9b:
                    71:f8:14:3d:18:8c:0a:aa:28:b7:2b:8f:6d:31:d3:
                    65:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:05:45:06:4D:54:E9:EF:BE:66:54:29:78:8A:44:59:C9:1B:92:06
            X509v3 Authority Key Identifier:
                keyid:F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:49:d5:46:3f:c8:47:f4:e8:4f:6e:02:06:93:1e:ad:28:80:
         fe:58:60:4b:3c:8c:69:38:45:b0:07:42:be:ea:56:45:93:fa:
         32:36:f8:6f:ad:fb:99:1e:e2:c9:c7:72:3b:47:f5:f4:a6:ab:
         15:a7:c5:1d:30:9d:6f:03:e1:a1:44:29:ca:22:e3:ef:38:82:
         6d:83:4e:5b:90:05:03:f4:d9:f7:3a:75:f3:a4:3f:41:b2:df:
         a7:d0:a7:fa:83:1f:d6:29:cc:da:2b:59:e2:08:71:c1:a7:d2:
         02:00:53:4c:c1:6b:9a:d1:2e:18:df:ce:e1:80:98:95:e4:3b:
         b4:35:f9:3b:66:53:45:16:da:77:b1:01:48:fd:3c:ce:ad:60:
         67:3c:b5:17:4d:df:1a:7b:e0:75:d1:61:f2:b6:01:21:47:e0:
         4a:01:5c:55:bb:08:78:d3:87:87:6a:7c:b1:02:bb:e8:c3:8f:
         46:25:bb:9b:1f:d1:68:0c:ca:a5:a0:a3:af:80:d9:e2:c3:61:
         60:02:f5:2c:fe:89:af:c8:b4:88:24:d9:8d:6a:ee:22:c3:55:
         dd:25:e8:31:f7:6e:d3:84:de:43:9a:23:f8:0e:45:f7:63:3d:
         de:25:e9:f1:c4:8e:92:51:3d:99:4f:88:9f:c4:67:8b:20:d5:
         a7:81:52:cb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB1gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTM5QUIxMTAvBgNVBAUTKEY1NDRCOUMyQjFCREVBMUMzQjM3NDM0OEI4RDE1RTM2
N0U2QTBGNDIwHhcNMjUwNjE0MjEyMzA3WhcNMjUwNjIxMjEyMzA3WjAYMRYwFAYD
VQQDEw02ODRkZTgzYi01MTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxWYPAmt0qJP2CVf3qdIaSutU4wlY9tzCHJ0Y8DAnVSb/g1XQWAjYuOMcZu2m
gB3bqi84ZfGrvTDrf7z6ZawDPTbRRLknIDSgxuuQZSW6xRiJzq3QdP4rTr1GvbhW
8jFCJsbBeHjrC+xNPyp/41HacOkAPd+hPHVyxvXmKNC4WmPTpftkZYy19fd1Fn9q
hFeReO3VgjJQHpZKpOB1kBXdKrYm7LC560KzNCJFQwVMFI1vcKgXi+Tudk+xhVCS
CK5dykHqaoJG3IX3h/lJcqu1ISulTTbE4fmsp09kmVfjaes0PhE/NWUpQReM9L7d
KZtx+BQ9GIwKqii3K49tMdNlpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH8FRQZN
VOnvvmZUKXiKRFnJG5IGMB8GA1UdIwQYMBaAFPVEucKxveocOzdDSLjRXjZ+ag9C
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMzlBQi8xNThENDkwNjI1
NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi85VVM1d3JHOTZodzdOME5JdU5GZU5uNXFE
MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlVUzV3ckc5Nmh3N04wTkl1TkZlTm41cUQwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MzlBQi8xNThENDkwNjI1NUIxMUVCQTlGNTYwMUFDNEY5QUUwMi85VVM1d3JHOTZo
dzdOME5JdU5GZU5uNXFEMEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCaSdVGP8hH9OhPbgIGkx6tKID+WGBLPIxpOEWwB0K+6lZFk/oyNvhv
rfuZHuLJx3I7R/X0pqsVp8UdMJ1vA+GhRCnKIuPvOIJtg05bkAUD9Nn3OnXzpD9B
st+n0Kf6gx/WKczaK1niCHHBp9ICAFNMwWua0S4Y387hgJiV5Du0Nfk7ZlNFFtp3
sQFI/TzOrWBnPLUXTd8ae+B10WHytgEhR+BKAVxVuwh404eHanyxArvow49GJbub
H9FoDMqloKOvgNniw2FgAvUs/omvyLSIJNmNau4iw1XdJegx927ThN5DmiP4DkX3
Yz3eJenxxI6SUT2ZT4ifxGeLINWngVLL
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:51:43 2025 by rpki-client