Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
File:                     AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft (raw, json)
Hash identifier:          9MNt5d3IFrZcMuL5OcVD4rTHEG2tSjer/0UCG4O79/o=
Subject key identifier:   53:13:55:FB:59:95:FB:A0:34:4A:00:F4:96:9D:33:6A:01:89:09:3D
Authority key identifier: 01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4
Certificate issuer:       /CN=A9147259/serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4
Certificate serial:       23EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
Manifest number:          23DE
Signing time:             Sat 14 Jun 2025 15:47:17 +0000
Manifest this update:     Sat 14 Jun 2025 15:47:16 +0000
Manifest next update:     Sat 21 Jun 2025 15:47:16 +0000
Files and hashes:         1: AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl (hash: 9KKUvvwYIg4c8UhIAcznIIL+QV7nhsVnwJmD965PwlU=)
                          2: F26DAE0AB10D11E5894F4D1CC4F9AE02.roa (hash: ynqxjgpY/LcV5YgALtE8f4Xl7ViuJV7AKID6+ElR2jc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl
                          rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9199 (0x23ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147259, serialNumber=013FB7B7A8C73E513F7698BCDA1DA3C45CC67FA4
        Validity
            Not Before: Jun 14 15:47:16 2025 GMT
            Not After : Jun 21 15:47:16 2025 GMT
        Subject: CN=684d9985-6732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:97:ec:94:40:9c:10:f5:e1:4d:92:1d:a7:
                    fa:73:9e:3b:d8:4b:27:88:e9:47:c0:c9:33:33:ff:
                    9b:f0:e2:1a:0f:de:37:ce:87:4d:5f:e2:cd:99:96:
                    7e:f2:41:79:cb:47:3c:6a:55:12:28:f6:11:fd:ae:
                    ce:df:6b:39:4b:fa:f4:23:4e:6d:7d:08:07:36:8a:
                    98:6a:f9:98:7f:0c:76:2c:15:15:67:07:ea:d9:51:
                    cd:51:7f:69:47:07:51:53:a7:17:f0:9f:c4:7c:5d:
                    63:53:27:82:11:d8:46:b0:47:3e:5a:11:a8:90:aa:
                    8a:d6:8c:c9:df:52:52:f1:4e:ee:b0:e9:43:67:5b:
                    ab:88:d3:32:b9:be:4a:88:87:36:6c:cc:36:7b:af:
                    16:89:7c:ee:71:49:0c:c6:6d:6f:3f:74:f9:36:dd:
                    58:f1:d3:3a:fc:ef:f1:60:1b:90:b4:c7:b1:12:1e:
                    ff:71:d2:d8:70:ce:4f:fd:22:15:d1:48:1c:86:26:
                    96:d7:df:ca:ab:93:f5:7d:71:d8:83:98:9f:0e:51:
                    6c:97:6f:40:3f:ea:3e:3d:02:72:c2:23:ca:a5:a8:
                    8c:e5:0d:a3:59:0f:89:43:ac:3c:14:62:f0:f5:33:
                    bf:79:c4:c1:c7:75:4f:2b:78:91:e0:c7:39:3d:ea:
                    87:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:13:55:FB:59:95:FB:A0:34:4A:00:F4:96:9D:33:6A:01:89:09:3D
            X509v3 Authority Key Identifier:
                keyid:01:3F:B7:B7:A8:C7:3E:51:3F:76:98:BC:DA:1D:A3:C4:5C:C6:7F:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AT-3t6jHPlE_dpi82h2jxFzGf6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147259/A88C1A8A675A11E599F3301FC4F9AE02/AT-3t6jHPlE_dpi82h2jxFzGf6Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:47:0d:83:14:1e:a8:d5:72:ef:20:2f:49:65:45:d6:4e:be:
         d7:45:99:ac:1a:f5:57:8c:03:10:08:05:7b:d3:9e:7c:8d:55:
         53:f1:de:92:d7:af:b6:01:30:5d:e8:c0:45:bb:13:dc:dc:8d:
         ca:4c:25:3d:ec:38:3b:bd:a9:f8:c7:5d:6c:85:4a:b0:3e:21:
         da:2c:73:64:d5:de:20:53:bb:aa:ba:a8:0f:72:d2:64:af:f8:
         59:8c:8b:5f:bc:82:fc:1b:d6:39:88:c2:49:6a:58:dc:9d:ee:
         25:a5:23:7e:fc:f3:87:06:70:28:9e:5c:6a:f8:c0:e3:bc:af:
         71:14:05:db:d1:40:72:fe:10:38:4b:7c:6b:e1:a3:4f:97:40:
         96:53:a9:31:94:d4:fd:d7:a4:62:32:6e:e3:95:e9:16:82:79:
         48:3c:8a:c2:ed:b3:c9:78:08:a4:64:5b:17:9d:59:dd:7a:c2:
         e7:45:09:38:3a:4a:16:42:54:d2:e9:56:ff:99:06:1f:26:96:
         f2:1f:cc:5b:3f:05:ea:0a:34:23:90:c1:b7:6b:b3:46:5f:33:
         83:db:ec:b8:90:e3:3d:c7:cf:ed:23:98:0e:85:85:4d:3d:26:
         bc:83:89:2b:99:f2:8c:f6:31:16:42:13:d7:a5:8f:0d:fa:11:
         95:f9:6f:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICI+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDcyNTkxMTAvBgNVBAUTKDAxM0ZCN0I3QThDNzNFNTEzRjc2OThCQ0RBMURBM0M0
NUNDNjdGQTQwHhcNMjUwNjE0MTU0NzE2WhcNMjUwNjIxMTU0NzE2WjAYMRYwFAYD
VQQDEw02ODRkOTk4NS02NzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoxiX7JRAnBD14U2SHaf6c5472EsniOlHwMkzM/+b8OIaD943zodNX+LNmZZ+
8kF5y0c8alUSKPYR/a7O32s5S/r0I05tfQgHNoqYavmYfwx2LBUVZwfq2VHNUX9p
RwdRU6cX8J/EfF1jUyeCEdhGsEc+WhGokKqK1ozJ31JS8U7usOlDZ1uriNMyub5K
iIc2bMw2e68WiXzucUkMxm1vP3T5Nt1Y8dM6/O/xYBuQtMexEh7/cdLYcM5P/SIV
0UgchiaW19/Kq5P1fXHYg5ifDlFsl29AP+o+PQJywiPKpaiM5Q2jWQ+JQ6w8FGLw
9TO/ecTBx3VPK3iR4Mc5PeqHBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFMTVftZ
lfugNEoA9JadM2oBiQk9MB8GA1UdIwQYMBaAFAE/t7eoxz5RP3aYvNodo8Rcxn+k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzI1OS9BODhDMUE4QTY3
NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBsRV9kcGk4MmgyanhGekdm
NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FULTN0NmpIUGxFX2RwaTgyaDJqeEZ6R2Y2US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzI1OS9BODhDMUE4QTY3NUExMUU1OTlGMzMwMUZDNEY5QUUwMi9BVC0zdDZqSFBs
RV9kcGk4MmgyanhGekdmNlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCORw2DFB6o1XLvIC9JZUXWTr7XRZmsGvVXjAMQCAV70558jVVT8d6S
16+2ATBd6MBFuxPc3I3KTCU97Dg7van4x11shUqwPiHaLHNk1d4gU7uquqgPctJk
r/hZjItfvIL8G9Y5iMJJaljcne4lpSN+/POHBnAonlxq+MDjvK9xFAXb0UBy/hA4
S3xr4aNPl0CWU6kxlNT916RiMm7jlekWgnlIPIrC7bPJeAikZFsXnVndesLnRQk4
OkoWQlTS6Vb/mQYfJpbyH8xbPwXqCjQjkMG3a7NGXzOD2+y4kOM9x8/tI5gOhYVN
PSa8g4krmfKM9jEWQhPXpY8N+hGV+W+/
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:35:14 2025 by rpki-client