Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
File:                     zGryB1D43jn7dcCh0KRBmXytN7g.mft (raw, json)
Hash identifier:          ekhB09Abkx0xMZzjar7PB2mjDIrFrWRxTid/V05wdP4=
Subject key identifier:   99:D4:C2:13:FF:51:D0:C1:76:A8:40:E5:C3:33:ED:76:25:EA:99:11
Authority key identifier: CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8
Certificate issuer:       /CN=A915A9FD/serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8
Certificate serial:       0789
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
Manifest number:          0783
Signing time:             Thu 12 Jun 2025 21:08:07 +0000
Manifest this update:     Thu 12 Jun 2025 21:08:07 +0000
Manifest next update:     Thu 19 Jun 2025 21:08:07 +0000
Files and hashes:         1: zGryB1D43jn7dcCh0KRBmXytN7g.crl (hash: dHr52+6s7Gz55PXXFwFgwYL2qQ/O5E8miVo0eBImCAE=)
                          2: FEA470A4137911EBA3A5F233C4F9AE02.roa (hash: QjiKcxVrNmXXSljrmXhzSyRwgcgVY4JB5CT1DEPPeEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl
                          rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 21:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A9FD, serialNumber=CC6AF20750F8DE39FB75C0A1D0A441997CAD37B8
        Validity
            Not Before: Jun 12 21:08:07 2025 GMT
            Not After : Jun 19 21:08:07 2025 GMT
        Subject: CN=684b41b7-b5d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:e8:d9:f9:1e:f2:71:b3:4c:7b:42:9d:72:
                    cc:d5:a3:ad:b3:25:da:b4:88:b8:f7:47:e4:01:da:
                    5c:4b:d1:f3:31:92:15:7d:8d:3b:53:61:d9:08:5a:
                    36:d3:89:35:16:d6:82:60:d7:5d:b3:f2:b2:22:b9:
                    a2:88:ed:e8:43:95:1f:fc:ca:81:f9:7a:7b:4b:44:
                    e3:9a:d4:06:bb:6f:4f:7c:64:8a:60:e7:1f:cc:d8:
                    69:8d:0f:6a:90:90:bb:63:b7:5c:6c:5d:65:47:06:
                    22:e2:f4:5e:1d:8e:b9:9b:b5:8d:21:21:f2:e8:ab:
                    e5:72:24:19:3f:9c:b1:91:f8:c1:96:dc:4d:e7:a4:
                    15:21:c5:b0:fd:bd:0f:b9:1d:05:bd:9d:bd:4c:ab:
                    91:af:96:4e:35:ca:76:81:d6:5c:63:22:dc:5e:6a:
                    d2:9b:2e:2e:4b:12:c4:52:57:40:9b:20:75:ea:ca:
                    d5:b7:49:d6:f2:e1:71:47:ca:f1:70:57:38:e3:8b:
                    58:6f:e0:5f:2a:94:f8:d6:a1:2f:56:50:14:e4:47:
                    e3:f5:16:19:89:44:48:6f:49:ae:02:73:bd:fa:1e:
                    71:ed:3d:9d:72:6a:9c:b1:b0:4a:6a:ee:d0:c6:7c:
                    a7:b8:e0:ca:bf:04:cc:d1:7f:a1:f0:c6:60:7a:7f:
                    d0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D4:C2:13:FF:51:D0:C1:76:A8:40:E5:C3:33:ED:76:25:EA:99:11
            X509v3 Authority Key Identifier:
                keyid:CC:6A:F2:07:50:F8:DE:39:FB:75:C0:A1:D0:A4:41:99:7C:AD:37:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGryB1D43jn7dcCh0KRBmXytN7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A9FD/A95618B6137711EBA4436F30C4F9AE02/zGryB1D43jn7dcCh0KRBmXytN7g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:12:5a:7f:95:0b:ed:fd:7b:76:43:f6:75:66:bc:bf:59:88:
         81:18:a5:cf:25:eb:ec:5c:0e:c0:dc:7f:9d:dc:32:14:e2:0a:
         6f:71:96:a2:72:fe:fd:30:ce:af:22:bf:a2:e9:d9:1e:45:11:
         0d:c7:5c:e1:55:8b:b9:00:c0:2a:b8:f4:42:f3:d3:13:3f:9b:
         52:0e:ff:a1:a9:eb:52:ef:86:19:1c:d1:0c:4f:e1:e3:ac:26:
         91:a7:0b:3b:ac:c9:fc:38:a2:6b:9e:bd:94:ba:1c:80:c8:e5:
         62:22:0f:70:a3:09:f5:c7:8c:c8:ca:7b:18:f1:a8:8a:37:34:
         e9:4b:07:58:ce:6d:7c:45:d8:cd:de:b5:c0:85:cd:38:b8:a4:
         ff:50:13:0a:94:a0:d8:00:93:d8:35:99:fa:90:0d:61:bf:e0:
         03:89:c5:f5:04:22:b4:c4:62:38:70:c3:4c:5c:ee:85:0e:be:
         e6:a3:46:e0:50:cd:ec:06:09:dd:38:53:e8:8e:80:98:87:f3:
         d0:11:c4:06:1a:f0:ef:57:c8:a5:de:ab:ef:56:00:d3:93:13:
         63:ed:39:68:a3:2f:f2:f1:96:d1:48:6e:f9:1b:29:e3:ae:c5:
         00:1a:0b:55:bf:c0:88:30:4c:a1:06:39:43:a6:d7:82:e1:90:
         ff:56:34:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUE5RkQxMTAvBgNVBAUTKENDNkFGMjA3NTBGOERFMzlGQjc1QzBBMUQwQTQ0MTk5
N0NBRDM3QjgwHhcNMjUwNjEyMjEwODA3WhcNMjUwNjE5MjEwODA3WjAYMRYwFAYD
VQQDEw02ODRiNDFiNy1iNWQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq93o2fke8nGzTHtCnXLM1aOtsyXatIi490fkAdpcS9HzMZIVfY07U2HZCFo2
04k1FtaCYNdds/KyIrmiiO3oQ5Uf/MqB+Xp7S0TjmtQGu29PfGSKYOcfzNhpjQ9q
kJC7Y7dcbF1lRwYi4vReHY65m7WNISHy6KvlciQZP5yxkfjBltxN56QVIcWw/b0P
uR0FvZ29TKuRr5ZONcp2gdZcYyLcXmrSmy4uSxLEUldAmyB16srVt0nW8uFxR8rx
cFc444tYb+BfKpT41qEvVlAU5Efj9RYZiURIb0muAnO9+h5x7T2dcmqcsbBKau7Q
xnynuODKvwTM0X+h8MZgen/QUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJnUwhP/
UdDBdqhA5cMz7XYl6pkRMB8GA1UdIwQYMBaAFMxq8gdQ+N45+3XAodCkQZl8rTe4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTlGRC9BOTU2MThCNjEz
NzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNqbjdkY0NoMEtSQm1YeXRO
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pHcnlCMUQ0M2puN2RjQ2gwS1JCbVh5dE43Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTlGRC9BOTU2MThCNjEzNzcxMUVCQTQ0MzZGMzBDNEY5QUUwMi96R3J5QjFENDNq
bjdkY0NoMEtSQm1YeXRON2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBaElp/lQvt/Xt2Q/Z1Zry/WYiBGKXPJevsXA7A3H+d3DIU4gpvcZai
cv79MM6vIr+i6dkeRRENx1zhVYu5AMAquPRC89MTP5tSDv+hqetS74YZHNEMT+Hj
rCaRpws7rMn8OKJrnr2UuhyAyOViIg9wown1x4zIynsY8aiKNzTpSwdYzm18RdjN
3rXAhc04uKT/UBMKlKDYAJPYNZn6kA1hv+ADicX1BCK0xGI4cMNMXO6FDr7mo0bg
UM3sBgndOFPojoCYh/PQEcQGGvDvV8il3qvvVgDTkxNj7Tlooy/y8ZbRSG75Gynj
rsUAGgtVv8CIMEyhBjlDpteC4ZD/VjQ9
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:27:34 2025 by rpki-client