Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
File:                     MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json)
Hash identifier:          JAAtArSGXgLmBUKwW0a5VRrFlVAaPd5Gn4kpt2FDcTw=
Subject key identifier:   AE:D6:DC:03:3C:86:FA:CA:DE:72:CD:22:09:66:69:27:AA:A6:EA:C0
Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
Certificate issuer:       /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Certificate serial:       3490
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
Manifest number:          3490
Signing time:             Wed 18 Jun 2025 14:33:02 +0000
Manifest this update:     Wed 18 Jun 2025 14:33:02 +0000
Manifest next update:     Wed 25 Jun 2025 14:33:02 +0000
Files and hashes:         1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: 8c3131NgZukQ0GRPzFak0oQaujebAc48qEbfd4Pc0fQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
                          rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 14:33:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13456 (0x3490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
        Validity
            Not Before: Jun 18 14:33:02 2025 GMT
            Not After : Jun 25 14:33:02 2025 GMT
        Subject: CN=6852ce1e-df1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:fc:cb:5f:1d:cf:ff:41:0c:70:db:9e:28:
                    a7:15:5e:97:0e:f8:81:54:e8:14:c1:bc:42:46:9d:
                    f9:36:5a:b9:a6:db:28:69:5f:ed:a1:52:d3:11:96:
                    8f:a4:79:9f:8c:d0:0d:4b:26:f1:ae:40:34:32:c9:
                    f7:09:df:a7:78:98:56:66:e8:5d:ed:1c:b5:4b:5f:
                    c3:1c:a7:cc:93:5c:ae:5f:e5:8b:3d:74:6b:ca:7e:
                    67:cf:4a:09:15:70:f0:cc:7f:1c:ae:10:d0:87:fa:
                    d3:a3:8e:07:77:04:c1:f7:49:39:e5:21:29:b3:c8:
                    06:9f:a2:3b:5d:d3:e6:87:5c:07:46:12:d2:f5:cf:
                    d2:e8:f3:e8:93:31:dd:c7:60:ef:27:16:65:ac:0d:
                    a9:b6:b9:69:a5:12:8a:04:9e:08:b8:51:aa:14:20:
                    79:65:f4:03:9d:a8:8e:fd:38:d6:6f:5b:6d:4a:83:
                    a4:3c:39:b4:17:6d:ff:a8:00:3a:ea:ef:fc:67:86:
                    91:be:61:1e:ec:3c:03:a1:17:34:2b:66:5e:79:88:
                    14:74:a4:c5:a4:9e:96:f9:6c:99:6f:bf:00:66:d8:
                    cb:a0:46:46:a2:47:f9:d1:96:17:a3:88:e6:10:d2:
                    18:41:50:30:e7:4a:31:76:c0:ed:a0:60:31:19:85:
                    87:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D6:DC:03:3C:86:FA:CA:DE:72:CD:22:09:66:69:27:AA:A6:EA:C0
            X509v3 Authority Key Identifier:
                keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:79:33:b0:f7:f3:53:c0:7d:0c:7a:6f:e1:39:dc:47:11:bf:
         27:90:6f:46:66:e3:0c:a7:50:ee:9e:84:7d:07:d2:3c:d6:01:
         df:f3:d1:b9:10:27:de:ec:5f:31:e8:57:25:ff:db:03:29:d5:
         25:a2:7b:31:90:98:04:48:84:81:76:b2:5f:de:d2:46:73:b7:
         df:96:70:3b:b5:50:91:05:e5:81:a2:f7:84:66:a7:63:97:52:
         c2:fa:cb:8f:c0:f7:17:40:f3:92:8e:8b:fe:2d:34:8b:3b:e1:
         c8:b8:e7:00:24:80:46:f4:a7:fc:0a:21:dd:7e:ca:23:eb:fa:
         33:48:10:9d:85:10:b1:ee:41:82:e6:a6:c9:4b:d4:f0:41:85:
         74:33:f2:8c:bf:0d:0a:b3:ef:b8:1c:5e:75:ee:d5:da:40:e3:
         9b:f6:77:70:c3:bd:d2:39:ee:98:71:0d:4f:91:7b:fe:e0:c3:
         cc:30:09:95:1f:4d:4f:7d:64:e8:19:b7:08:28:09:a4:2e:d7:
         4f:9d:43:ce:cc:81:c5:12:7c:2d:9a:62:96:dc:83:df:04:53:
         99:87:1c:69:a6:62:a1:a4:7d:45:72:3a:7f:51:84:8b:89:b5:
         89:c5:ed:3a:da:2b:d3:be:ea:9d:ab:a2:01:ae:ea:82:e2:ea:
         34:62:26:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY0QUExMTAvBgNVBAUTKDMxRjVCQzk0NzI3MTAyNEFGNDc5RjYxMzY0NjZEQUNC
RjE0Mzg2QzIwHhcNMjUwNjE4MTQzMzAyWhcNMjUwNjI1MTQzMzAyWjAYMRYwFAYD
VQQDEw02ODUyY2UxZS1kZjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApOr8y18dz/9BDHDbniinFV6XDviBVOgUwbxCRp35Nlq5ptsoaV/toVLTEZaP
pHmfjNANSybxrkA0Msn3Cd+neJhWZuhd7Ry1S1/DHKfMk1yuX+WLPXRryn5nz0oJ
FXDwzH8crhDQh/rTo44HdwTB90k55SEps8gGn6I7XdPmh1wHRhLS9c/S6PPokzHd
x2DvJxZlrA2ptrlppRKKBJ4IuFGqFCB5ZfQDnaiO/TjWb1ttSoOkPDm0F23/qAA6
6u/8Z4aRvmEe7DwDoRc0K2ZeeYgUdKTFpJ6W+WyZb78AZtjLoEZGokf50ZYXo4jm
ENIYQVAw50oxdsDtoGAxGYWHLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7W3AM8
hvrK3nLNIglmaSeqpurAMB8GA1UdIwQYMBaAFDH1vJRycQJK9Hn2E2Rm2svxQ4bC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjRBQS9FOUYyQ0E0MDFE
OEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFrcjBlZllUWkdiYXlfRkRo
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01mVzhsSEp4QWtyMGVmWVRaR2JheV9GRGhzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjRBQS9FOUYyQ0E0MDFEOEExMUUyODM0RDNFRTUwOEIwMkNEMi9NZlc4bEhKeEFr
cjBlZllUWkdiYXlfRkRoc0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAXeTOw9/NTwH0Mem/hOdxHEb8nkG9GZuMMp1DunoR9B9I81gHf89G5
ECfe7F8x6Fcl/9sDKdUlonsxkJgESISBdrJf3tJGc7fflnA7tVCRBeWBoveEZqdj
l1LC+suPwPcXQPOSjov+LTSLO+HIuOcAJIBG9Kf8CiHdfsoj6/ozSBCdhRCx7kGC
5qbJS9TwQYV0M/KMvw0Ks++4HF517tXaQOOb9ndww73SOe6YcQ1PkXv+4MPMMAmV
H01PfWToGbcIKAmkLtdPnUPOzIHFEnwtmmKW3IPfBFOZhxxppmKhpH1Fcjp/UYSL
ibWJxe062ivTvuqdq6IBruqC4uo0YiaY
-----END CERTIFICATE-----
Generated at Thu Jun 19 02:26:18 2025 by rpki-client