Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
File:                     PM59J4idCNUwg0kqqJygm2jw5fA.mft (raw, json)
Hash identifier:          XNfDCeXuUBzrtI6XggQEc3KfL1/M920I+Soe6kxdpxU=
Subject key identifier:   05:6E:FA:73:CC:D0:30:D8:11:94:72:27:E2:F7:5A:28:54:F8:AD:10
Authority key identifier: 3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0
Certificate issuer:       /CN=A9173161/serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
Manifest number:          64
Signing time:             Tue 05 Aug 2025 07:38:09 +0000
Manifest this update:     Tue 05 Aug 2025 07:38:09 +0000
Manifest next update:     Tue 12 Aug 2025 07:38:09 +0000
Files and hashes:         1: PM59J4idCNUwg0kqqJygm2jw5fA.crl (hash: knvIelSTKCVo49B7+TPUQGKB+OnVTcforRDl3MOk/E8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl
                          rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 12 Aug 2025 07:38:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173161, serialNumber=3CCE7D27889D08D53083492AA89CA09B68F0E5F0
        Validity
            Not Before: Aug  5 07:38:09 2025 GMT
            Not After : Aug 12 07:38:09 2025 GMT
        Subject: CN=6891b4e1-6fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:48:a3:1e:6c:2d:e5:97:36:35:95:f7:35:
                    2d:bc:74:3d:ec:6f:7f:5d:88:9a:b7:f8:6f:39:97:
                    00:6a:93:1b:80:ea:77:7b:a4:14:07:58:20:c9:a3:
                    f2:b8:58:f7:f8:37:9d:84:2e:70:50:c7:1c:cd:8e:
                    b4:45:6f:23:d9:0d:9b:0f:b8:8b:db:36:ef:ef:97:
                    32:6d:9f:17:09:80:e2:2d:ef:ce:b2:ea:6a:5f:a0:
                    97:31:83:11:dd:69:91:59:27:7c:df:c2:b2:dd:5e:
                    a1:bb:13:66:9e:ff:25:a1:06:01:59:f9:eb:db:55:
                    e8:8f:8f:e3:a1:6e:bd:53:5d:e3:c7:43:df:ff:0c:
                    b7:10:38:85:76:cc:70:3e:f5:52:55:5b:8d:3d:1c:
                    6a:70:8f:c7:06:46:79:c9:f6:f3:17:e1:85:3d:4d:
                    15:60:93:62:ee:36:8b:0b:3c:e9:66:30:97:16:71:
                    8f:84:64:05:d5:07:77:91:51:c2:49:d7:43:92:80:
                    44:d0:7a:fc:f9:35:4c:77:b9:39:e8:30:7a:fc:31:
                    45:1e:20:70:46:77:d9:86:81:e9:84:83:80:06:67:
                    98:cb:11:53:8f:78:9b:98:d2:11:20:cc:df:fb:49:
                    0f:34:f3:be:55:68:af:f2:0a:13:3c:e1:cd:f1:dd:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6E:FA:73:CC:D0:30:D8:11:94:72:27:E2:F7:5A:28:54:F8:AD:10
            X509v3 Authority Key Identifier:
                keyid:3C:CE:7D:27:88:9D:08:D5:30:83:49:2A:A8:9C:A0:9B:68:F0:E5:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PM59J4idCNUwg0kqqJygm2jw5fA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173161/79B5FCD4D90711EFB27F7857C4F9AE02/PM59J4idCNUwg0kqqJygm2jw5fA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:58:e5:03:23:27:22:d5:d2:c5:86:fa:41:fd:01:1d:24:f6:
         62:d0:f9:2f:4e:8b:cc:77:4a:72:f4:5d:1a:74:31:6d:10:16:
         e1:0a:04:3f:11:7f:be:e6:88:1f:01:fd:e7:87:1f:b1:c7:d1:
         24:5f:28:8a:6a:1c:cf:a8:71:d0:07:bd:f6:7d:fa:5b:a2:06:
         ab:65:d2:95:8d:a1:b1:2f:87:df:8a:73:09:fe:e4:58:e4:9e:
         dc:90:00:09:ac:e4:d0:0f:bf:b2:14:02:ef:4d:4a:76:86:97:
         8e:d1:e9:3d:6f:77:79:be:d6:1f:d7:3b:05:2d:e7:5a:78:0b:
         3a:d4:c8:0a:ba:61:2e:e4:93:13:47:82:ab:93:bb:df:2f:01:
         99:6d:cc:be:3f:aa:36:db:74:91:fc:40:11:8e:8a:ba:28:79:
         cc:bc:98:d1:0a:72:b2:fa:7f:b1:b1:07:73:06:75:b9:70:a4:
         9a:ad:36:7d:7f:6c:f5:15:15:aa:d7:94:33:d0:21:d9:51:55:
         b5:5e:c7:df:8b:c8:6a:08:fa:f6:29:bb:63:68:0c:d0:d6:b9:
         d3:b8:97:de:4d:89:a3:71:23:10:c8:3f:69:5f:e9:f7:61:e7:
         a6:02:8e:a2:05:1b:4f:58:c2:51:4e:24:82:bf:02:18:69:5e:
         0f:65:c8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:52:42 2025 by rpki-client