Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft
File:                     _HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft (raw, json)
Hash identifier:          NmPrCtEe68hZrXj58VYwI82jfYqb+UsNkyuAMCcD/DE=
Subject key identifier:   2D:04:D5:E7:52:D4:91:6B:40:A3:78:33:A6:EB:83:02:70:FD:3D:D2
Authority key identifier: FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89
Certificate issuer:       /CN=A91316B0/serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589
Certificate serial:       0460
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft
Manifest number:          0522
Signing time:             Thu 12 Jun 2025 23:52:20 +0000
Manifest this update:     Thu 12 Jun 2025 23:52:20 +0000
Manifest next update:     Thu 19 Jun 2025 23:52:20 +0000
Files and hashes:         1: _HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl (hash: pQV6eGVpDwAJC7lg+pZc62eilN4cwY3iG4pNHvMSTBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl
                          rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91316B0, serialNumber=FC74B25C0DAD893E19E522DAD9D9C012EB82F589
        Validity
            Not Before: Jun 12 23:52:20 2025 GMT
            Not After : Jun 19 23:52:20 2025 GMT
        Subject: CN=684b6834-12e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:50:e7:86:2c:5b:d5:5d:c2:6b:db:85:0d:ed:
                    fc:e8:6a:d1:27:fa:27:09:74:f6:53:0b:9f:39:fa:
                    6d:a8:c6:c9:88:6c:c0:12:66:b4:68:b3:99:f1:b4:
                    76:7a:df:9d:9f:f8:44:9f:5c:c8:c2:8f:04:7a:3a:
                    24:09:5b:65:21:3d:54:f0:24:9b:d3:cb:33:b0:18:
                    ac:4a:d3:90:9a:0d:dc:16:70:8a:c1:98:42:c7:4a:
                    06:91:21:7c:3e:37:54:3c:bd:95:0a:c2:01:67:e7:
                    0d:8b:5f:a6:b8:af:26:c8:7e:10:21:eb:9b:94:4e:
                    43:c8:a9:23:b8:b9:f0:67:56:7d:7d:1b:af:be:d6:
                    4f:db:5d:ff:59:ff:f0:65:9c:4b:70:16:1b:83:8c:
                    e0:0c:e9:b8:5d:b6:c1:fa:8e:b7:f8:7a:f2:27:7c:
                    20:e2:f2:76:c5:57:0b:88:c6:67:6b:17:ad:90:4a:
                    ad:90:c8:c4:f0:d7:2a:6d:c0:57:f2:e1:ec:03:fc:
                    ba:a5:56:bf:17:7d:50:50:04:ca:77:ef:ef:ff:0c:
                    0c:8e:09:5c:bf:eb:61:43:95:93:a7:19:bc:cc:e8:
                    45:6e:6b:7e:24:ac:88:37:68:12:55:7c:43:6d:85:
                    a8:b5:99:8f:53:a1:45:8c:af:38:13:12:e9:aa:bd:
                    11:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:04:D5:E7:52:D4:91:6B:40:A3:78:33:A6:EB:83:02:70:FD:3D:D2
            X509v3 Authority Key Identifier:
                keyid:FC:74:B2:5C:0D:AD:89:3E:19:E5:22:DA:D9:D9:C0:12:EB:82:F5:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91316B0/2337F2325E3E11ECA1FFEB4CC4F9AE02/_HSyXA2tiT4Z5SLa2dnAEuuC9Yk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:87:6d:ab:0a:33:99:91:b4:e4:54:c4:2b:49:7e:a7:88:fd:
         6d:73:63:89:e8:ca:16:bb:73:fd:2c:8a:f2:68:6e:55:8d:3c:
         ff:10:a7:46:55:29:5a:e2:61:11:06:d0:2c:7f:b3:8e:8c:06:
         c8:0f:0f:fa:5d:61:23:92:7f:cf:33:20:23:b2:75:b4:fd:24:
         48:d7:1b:c5:f0:02:82:ef:b5:63:ba:d4:84:ad:47:43:3b:68:
         23:0d:3f:56:f3:f0:82:40:3f:af:ea:5a:9e:c4:56:86:54:3b:
         9a:fc:81:9e:4e:bb:6a:55:b9:f7:17:9f:22:19:61:65:20:1f:
         5a:90:b6:95:59:2d:39:72:64:b2:f2:1e:43:a3:ab:69:f3:8c:
         0f:a6:8a:c0:fb:c5:54:de:8e:51:83:8c:ee:b2:98:9b:c2:fb:
         51:07:7b:2b:25:5d:38:4a:34:8e:39:fc:c4:51:18:94:43:b9:
         c3:f5:8a:fc:72:dd:03:63:44:de:29:f2:3b:15:14:c2:e4:75:
         bd:e2:45:12:75:4e:5f:ee:c2:b4:81:44:84:d4:d1:2e:93:62:
         ff:8b:04:de:e9:2b:0a:12:5c:61:f9:83:da:bd:fc:ed:5d:08:
         9b:66:5a:b6:ac:36:da:af:50:64:9b:fc:4e:75:3a:79:12:27:
         0b:d6:b5:62
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzE2QjAxMTAvBgNVBAUTKEZDNzRCMjVDMERBRDg5M0UxOUU1MjJEQUQ5RDlDMDEy
RUI4MkY1ODkwHhcNMjUwNjEyMjM1MjIwWhcNMjUwNjE5MjM1MjIwWjAYMRYwFAYD
VQQDEw02ODRiNjgzNC0xMmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwlDnhixb1V3Ca9uFDe386GrRJ/onCXT2UwufOfptqMbJiGzAEma0aLOZ8bR2
et+dn/hEn1zIwo8EejokCVtlIT1U8CSb08szsBisStOQmg3cFnCKwZhCx0oGkSF8
PjdUPL2VCsIBZ+cNi1+muK8myH4QIeublE5DyKkjuLnwZ1Z9fRuvvtZP213/Wf/w
ZZxLcBYbg4zgDOm4XbbB+o63+HryJ3wg4vJ2xVcLiMZnaxetkEqtkMjE8NcqbcBX
8uHsA/y6pVa/F31QUATKd+/v/wwMjglcv+thQ5WTpxm8zOhFbmt+JKyIN2gSVXxD
bYWotZmPU6FFjK84ExLpqr0RRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC0E1edS
1JFrQKN4M6brgwJw/T3SMB8GA1UdIwQYMBaAFPx0slwNrYk+GeUi2tnZwBLrgvWJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMTZCMC8yMzM3RjIzMjVF
M0UxMUVDQTFGRkVCNENDNEY5QUUwMi9fSFN5WEEydGlUNFo1U0xhMmRuQUV1dUM5
WWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19IU3lYQTJ0aVQ0WjVTTGEyZG5BRXV1QzlZay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MTZCMC8yMzM3RjIzMjVFM0UxMUVDQTFGRkVCNENDNEY5QUUwMi9fSFN5WEEydGlU
NFo1U0xhMmRuQUV1dUM5WWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBMh22rCjOZkbTkVMQrSX6niP1tc2OJ6MoWu3P9LIryaG5VjTz/EKdG
VSla4mERBtAsf7OOjAbIDw/6XWEjkn/PMyAjsnW0/SRI1xvF8AKC77VjutSErUdD
O2gjDT9W8/CCQD+v6lqexFaGVDua/IGeTrtqVbn3F58iGWFlIB9akLaVWS05cmSy
8h5Do6tp84wPporA+8VU3o5Rg4zuspibwvtRB3srJV04SjSOOfzEURiUQ7nD9Yr8
ct0DY0TeKfI7FRTC5HW94kUSdU5f7sK0gUSE1NEuk2L/iwTe6SsKElxh+YPavfzt
XQibZlq2rDbar1Bkm/xOdTp5EicL1rVi
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:37:09 2025 by rpki-client