Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft
File:                     nA6EGePLBsHaXiDY90VQWCUP1-0.mft (raw, json)
Hash identifier:          6aWSvNGpgH4rYjF+0ZiRR0p8u1qpP7W7nVd0yRg5XkY=
Subject key identifier:   DC:FB:CD:42:7A:C6:02:25:8B:39:92:D9:8F:84:CA:66:07:9F:4A:8C
Authority key identifier: 9C:0E:84:19:E3:CB:06:C1:DA:5E:20:D8:F7:45:50:58:25:0F:D7:ED
Certificate issuer:       /CN=A915B3AE/serialNumber=9C0E8419E3CB06C1DA5E20D8F7455058250FD7ED
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA6EGePLBsHaXiDY90VQWCUP1-0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft
Manifest number:          0114
Signing time:             Thu 07 Aug 2025 05:22:02 +0000
Manifest this update:     Thu 07 Aug 2025 05:22:01 +0000
Manifest next update:     Thu 14 Aug 2025 05:22:01 +0000
Files and hashes:         1: nA6EGePLBsHaXiDY90VQWCUP1-0.crl (hash: dP8cuJOUE4MIAm8jKogleLboqwJ2y2YomiYZ45d44go=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.crl
                          rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA6EGePLBsHaXiDY90VQWCUP1-0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:22:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B3AE, serialNumber=9C0E8419E3CB06C1DA5E20D8F7455058250FD7ED
        Validity
            Not Before: Aug  7 05:22:01 2025 GMT
            Not After : Aug 14 05:22:01 2025 GMT
        Subject: CN=689437f9-da8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:8f:cf:60:79:bb:20:c2:ac:7a:63:db:b8:
                    88:98:d2:ce:e9:21:aa:b5:9c:ae:4c:dc:cf:b6:49:
                    24:ae:c7:0a:f6:8e:30:eb:07:d5:a2:32:ce:bb:b8:
                    d9:33:56:ed:1c:d8:07:4d:d8:a3:ee:dc:f1:65:ed:
                    72:0a:66:ad:cb:2a:46:c1:47:27:4b:c5:89:49:27:
                    7c:3e:4c:a0:06:b5:95:8f:06:47:42:33:d5:94:10:
                    3a:68:1c:a0:38:bf:3f:0c:ab:c0:e9:cc:bf:09:2e:
                    ea:23:56:38:f4:d6:80:f3:37:56:9f:db:97:c9:c0:
                    3a:d7:59:b7:13:04:8b:c3:30:06:2c:77:c6:e7:74:
                    6f:69:de:ec:eb:9c:93:f0:96:54:7d:62:5a:44:4b:
                    32:88:ca:25:06:b2:e3:5b:ee:65:d7:e7:c4:1f:71:
                    49:68:52:c7:75:14:ac:ef:6a:b7:12:39:ba:f7:16:
                    ef:c0:da:c3:b9:80:1c:e9:00:24:b5:ab:a5:26:eb:
                    51:06:00:12:45:2c:c8:60:b8:00:c0:32:70:f3:c0:
                    9e:e1:cf:7b:5d:df:42:c6:e2:c7:1f:6b:03:e3:8b:
                    96:df:08:4b:15:c4:1b:f5:be:8f:12:3c:60:5a:87:
                    b8:ab:f5:10:7f:ed:e5:91:3c:02:04:24:87:8a:38:
                    c6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FB:CD:42:7A:C6:02:25:8B:39:92:D9:8F:84:CA:66:07:9F:4A:8C
            X509v3 Authority Key Identifier:
                keyid:9C:0E:84:19:E3:CB:06:C1:DA:5E:20:D8:F7:45:50:58:25:0F:D7:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA6EGePLBsHaXiDY90VQWCUP1-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:74:9e:f7:6c:72:56:08:36:37:56:21:26:43:77:3a:82:fd:
         6e:e8:7c:1a:6c:16:12:56:11:9e:be:d3:2e:f0:2f:a9:00:46:
         5e:fd:d6:ea:84:ad:be:d7:af:43:0f:3e:c3:37:ff:ac:a4:82:
         42:23:69:92:e6:80:59:24:f8:0b:8b:a0:51:2c:47:fa:94:e9:
         5a:89:ef:2b:7b:75:c9:33:87:77:1c:9c:be:bd:f1:4f:98:6a:
         48:5c:78:93:4c:13:fb:f1:8e:69:2f:4c:67:a3:8f:84:b4:e3:
         cc:db:b7:bb:7c:63:ab:b0:3d:7a:f6:e9:9c:eb:56:8a:0a:7b:
         e4:f0:98:10:d0:6a:6a:42:c2:5c:28:08:3b:23:64:52:4d:79:
         1c:f6:22:0a:9c:ef:84:43:7d:65:8a:e6:44:ac:89:8f:89:15:
         6e:e9:b9:91:d7:fb:1a:42:c8:71:98:c3:ee:44:17:fc:69:f8:
         f5:09:ab:77:9d:e6:8e:a2:47:9e:50:16:e1:5f:77:26:d7:00:
         ff:dc:ed:e3:f0:9b:0e:bd:78:ea:31:36:7c:c8:9f:41:35:21:
         f2:95:b0:34:ed:8a:52:96:c0:4f:28:c4:3a:b1:fa:9c:5b:c9:
         7d:10:01:f6:10:1d:05:33:05:bc:ce:b9:47:d2:0a:9a:72:18:
         29:6e:f2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:59:09 2025 by rpki-client