Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
File:                     ajK9E9_Nd-8bXAUr427YmtIScNs.mft (raw, json)
Hash identifier:          sXGy629Dem2yP8YhM69tZXKBQCVyU/PC4Z4WY8eYAhQ=
Subject key identifier:   78:36:A4:21:79:C1:00:68:B4:24:0A:3B:24:A8:36:97:D7:6D:49:7D
Authority key identifier: 6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB
Certificate issuer:       /CN=A911C812/serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
Certificate serial:       07FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
Manifest number:          07F7
Signing time:             Thu 12 Jun 2025 20:58:28 +0000
Manifest this update:     Thu 12 Jun 2025 20:58:27 +0000
Manifest next update:     Thu 19 Jun 2025 20:58:27 +0000
Files and hashes:         1: ajK9E9_Nd-8bXAUr427YmtIScNs.crl (hash: Bg9OB5elKH3Eso886V2lqqxGoym9EtzVlPw4h1TqK58=)
                          2: 477192ACF3FA11EAB9D11D26C4F9AE02.roa (hash: fA68vPB23i/OAo2Tlmrq8T3cX2gqQgOTyj+Ul9pJg/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl
                          rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 20:58:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2046 (0x7fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C812, serialNumber=6A32BD13DFCD77EF1B5C052BE36ED89AD21270DB
        Validity
            Not Before: Jun 12 20:58:27 2025 GMT
            Not After : Jun 19 20:58:27 2025 GMT
        Subject: CN=684b3f74-3e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:45:b0:b4:a5:00:00:6d:a6:98:6c:8e:92:df:
                    c3:ad:53:17:dc:df:db:32:13:f4:ea:97:be:b0:0e:
                    35:d0:b6:de:61:2c:b9:78:88:c6:fb:80:77:86:49:
                    28:5d:73:7a:25:03:e2:b8:16:d6:b6:9c:40:72:70:
                    b8:0d:fd:3c:7b:96:57:ca:bb:2a:3b:10:07:7e:9e:
                    b9:6e:93:27:24:d3:56:0b:ec:0c:ec:37:e6:13:03:
                    79:cf:22:24:e9:aa:3b:0c:06:96:a6:4c:41:49:e2:
                    36:7f:b3:1f:72:6b:df:28:32:61:db:75:52:23:f6:
                    28:92:7d:48:3f:99:da:63:e1:dd:87:b6:e1:4c:e6:
                    47:d7:31:4b:b1:9f:26:54:e6:6f:b2:2d:29:16:71:
                    b7:51:cf:a0:2e:d8:e1:18:06:30:9e:4f:a8:06:bc:
                    c3:4a:f6:93:64:3e:13:63:ed:56:06:aa:13:89:ae:
                    8a:87:08:2f:55:76:a9:b1:c7:33:65:88:ae:b5:90:
                    87:30:60:03:17:81:f7:13:11:1a:05:52:03:19:aa:
                    fc:56:8b:4f:01:69:b3:35:48:ea:df:ba:22:c6:62:
                    ad:89:0d:fb:3d:df:66:2a:c5:3f:3f:10:99:22:29:
                    f1:4c:7d:c8:eb:86:e6:a6:8f:45:3d:24:7b:f9:82:
                    07:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:36:A4:21:79:C1:00:68:B4:24:0A:3B:24:A8:36:97:D7:6D:49:7D
            X509v3 Authority Key Identifier:
                keyid:6A:32:BD:13:DF:CD:77:EF:1B:5C:05:2B:E3:6E:D8:9A:D2:12:70:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ajK9E9_Nd-8bXAUr427YmtIScNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C812/B25EF990E91611EAA705D84FC4F9AE02/ajK9E9_Nd-8bXAUr427YmtIScNs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:4c:8e:f0:31:07:d9:f6:26:84:da:a7:47:a3:e1:7d:0c:0d:
         7f:ba:dc:63:0c:c1:ef:f1:e8:26:d7:80:d9:7c:49:81:7f:55:
         48:cf:c8:96:4a:8f:7c:a8:90:9a:0e:35:6e:8f:7d:d0:38:30:
         92:cc:cb:0c:ad:12:b5:cc:99:b9:9e:6c:1e:a6:4a:e5:1e:37:
         2f:38:72:1b:a6:7b:aa:be:33:49:68:e9:17:67:33:06:88:a0:
         64:ad:e2:3f:02:34:58:cf:08:eb:d6:bc:9c:d2:7e:a3:ca:59:
         4b:f8:95:96:df:92:32:bf:13:62:58:33:4c:72:58:df:e1:49:
         a3:51:fb:e8:af:20:01:28:dc:82:06:e3:6a:35:b2:de:94:25:
         29:5a:d5:32:80:44:fd:ff:a0:b2:b0:9b:77:d2:20:6c:89:7a:
         3a:5b:98:52:1e:1a:8c:27:f8:8c:19:e0:02:40:79:b9:cc:53:
         7b:fc:eb:df:0a:b0:48:57:a0:bc:ca:7a:9d:4c:44:ba:4f:25:
         90:8b:c2:05:bb:70:63:1d:03:20:48:c7:58:95:82:ae:11:63:
         1e:b7:08:a2:5b:4f:7a:cc:c6:9e:bc:17:6e:d5:b9:f8:39:24:
         c4:4c:1b:77:aa:4e:7e:b7:a0:72:60:40:26:df:4f:83:1c:0e:
         48:7f:32:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM4MTIxMTAvBgNVBAUTKDZBMzJCRDEzREZDRDc3RUYxQjVDMDUyQkUzNkVEODlB
RDIxMjcwREIwHhcNMjUwNjEyMjA1ODI3WhcNMjUwNjE5MjA1ODI3WjAYMRYwFAYD
VQQDEw02ODRiM2Y3NC0zZTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6kWwtKUAAG2mmGyOkt/DrVMX3N/bMhP06pe+sA410LbeYSy5eIjG+4B3hkko
XXN6JQPiuBbWtpxAcnC4Df08e5ZXyrsqOxAHfp65bpMnJNNWC+wM7DfmEwN5zyIk
6ao7DAaWpkxBSeI2f7MfcmvfKDJh23VSI/Yokn1IP5naY+Hdh7bhTOZH1zFLsZ8m
VOZvsi0pFnG3Uc+gLtjhGAYwnk+oBrzDSvaTZD4TY+1WBqoTia6KhwgvVXapsccz
ZYiutZCHMGADF4H3ExEaBVIDGar8VotPAWmzNUjq37oixmKtiQ37Pd9mKsU/PxCZ
IinxTH3I64bmpo9FPSR7+YIHnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHg2pCF5
wQBotCQKOySoNpfXbUl9MB8GA1UdIwQYMBaAFGoyvRPfzXfvG1wFK+Nu2JrSEnDb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzgxMi9CMjVFRjk5MEU5
MTYxMUVBQTcwNUQ4NEZDNEY5QUUwMi9haks5RTlfTmQtOGJYQVVyNDI3WW10SVNj
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FqSzlFOV9OZC04YlhBVXI0MjdZbXRJU2NOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzgxMi9CMjVFRjk5MEU5MTYxMUVBQTcwNUQ4NEZDNEY5QUUwMi9haks5RTlfTmQt
OGJYQVVyNDI3WW10SVNjTnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCwTI7wMQfZ9iaE2qdHo+F9DA1/utxjDMHv8egm14DZfEmBf1VIz8iW
So98qJCaDjVuj33QODCSzMsMrRK1zJm5nmwepkrlHjcvOHIbpnuqvjNJaOkXZzMG
iKBkreI/AjRYzwjr1ryc0n6jyllL+JWW35IyvxNiWDNMcljf4UmjUfvoryABKNyC
BuNqNbLelCUpWtUygET9/6CysJt30iBsiXo6W5hSHhqMJ/iMGeACQHm5zFN7/Ovf
CrBIV6C8ynqdTES6TyWQi8IFu3BjHQMgSMdYlYKuEWMetwiiW096zMaevBdu1bn4
OSTETBt3qk5+t6ByYEAm30+DHA5IfzLw
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:07:50 2025 by rpki-client