Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
File:                     aBR3td5WajjZsBVtqHq6-p-vhb0.mft (raw, json)
Hash identifier:          inS8INevdTZhYouQCAE7jc43N8N9Ej4sc0ZYFP9Yzdg=
Subject key identifier:   E5:0F:79:C2:34:8F:F1:A6:22:06:70:6B:6B:44:CC:49:8B:F4:82:D3
Authority key identifier: 68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD
Certificate issuer:       /CN=A91972DF/serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
Manifest number:          AB
Signing time:             Sat 09 Aug 2025 06:39:51 +0000
Manifest this update:     Sat 09 Aug 2025 06:39:51 +0000
Manifest next update:     Sat 16 Aug 2025 06:39:50 +0000
Files and hashes:         1: aBR3td5WajjZsBVtqHq6-p-vhb0.crl (hash: G5oHeoB11kRn90MHjBgj9+rrsZAi9uS5iBR01q65Y5I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl
                          rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91972DF, serialNumber=681477B5DE566A38D9B0156DA87ABAFA9FAF85BD
        Validity
            Not Before: Aug  9 06:39:51 2025 GMT
            Not After : Aug 16 06:39:50 2025 GMT
        Subject: CN=6896ed37-c862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e7:c9:f5:13:a6:2d:70:91:bf:0e:1e:fd:c9:
                    17:7a:66:0f:79:4c:2d:a4:95:2f:5d:77:ee:6d:73:
                    ee:c4:fb:31:fa:06:c4:58:8b:8e:06:e5:d3:ed:fe:
                    47:b5:00:e9:40:82:4f:3b:0d:20:a1:69:39:07:96:
                    a4:13:6c:9a:81:b4:da:d2:cd:fa:5c:ab:c5:55:47:
                    64:c9:ed:b9:a8:2c:83:41:6c:a7:84:ec:8c:81:df:
                    a4:b5:06:5f:0a:c3:d7:93:dd:f5:09:63:ee:7c:cf:
                    81:d8:c4:86:fc:6a:41:d0:68:30:7a:5b:33:da:ce:
                    95:92:70:4d:82:4d:84:96:6c:92:24:1a:c9:4f:9c:
                    2c:c4:14:d2:85:97:5c:24:aa:79:99:58:0b:be:58:
                    5e:23:1b:0d:89:8a:0f:48:3c:5f:d8:94:74:26:fa:
                    ab:d0:cc:bc:e8:de:61:77:fb:50:aa:82:0d:5f:df:
                    c9:6b:7d:62:bc:9b:80:5f:a2:e9:4a:6a:26:91:a0:
                    15:1b:43:66:b5:c3:6f:08:58:09:a7:5d:b4:0a:65:
                    84:a0:e1:3d:1f:c8:ec:bf:26:0e:f7:fc:07:b3:b5:
                    fc:6f:42:d6:74:22:6d:38:6b:0e:3f:a9:83:76:a3:
                    a0:47:5d:a0:66:ef:dd:f3:86:94:62:94:55:a7:93:
                    f4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:0F:79:C2:34:8F:F1:A6:22:06:70:6B:6B:44:CC:49:8B:F4:82:D3
            X509v3 Authority Key Identifier:
                keyid:68:14:77:B5:DE:56:6A:38:D9:B0:15:6D:A8:7A:BA:FA:9F:AF:85:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBR3td5WajjZsBVtqHq6-p-vhb0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/CC78B7627C0B11EF894A2919C4F9AE02/aBR3td5WajjZsBVtqHq6-p-vhb0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:7b:55:06:97:b6:e4:3f:a8:fb:5d:f7:39:6c:2c:0d:7a:f6:
         f8:76:64:0c:84:37:1b:e5:d1:88:3f:16:bb:a1:15:a7:0b:74:
         80:8b:66:7b:f7:05:1a:9d:2e:b3:b1:67:a8:a6:bf:83:74:f3:
         3d:1b:26:e6:ab:0d:a2:81:84:80:26:fd:1f:bc:5f:03:8c:f9:
         38:2b:e6:76:9e:d0:b9:c5:65:8c:3e:63:da:db:79:f7:ec:3c:
         06:61:11:a8:f2:4a:ea:21:ed:01:d6:db:00:d0:af:e5:94:14:
         62:0a:4a:81:76:ed:eb:77:2a:7d:d0:95:cc:e3:74:3c:08:49:
         4f:61:0d:79:35:3f:d2:99:56:9f:4c:c5:5a:df:44:43:43:6a:
         b7:91:46:99:d2:23:7e:a5:20:11:d8:af:4d:68:e1:af:3c:ac:
         2f:76:69:6c:57:12:cf:cb:d0:c3:52:ba:2d:0b:14:28:13:1a:
         56:86:46:41:d4:03:24:0f:72:7a:c6:19:13:be:f9:d9:58:e2:
         b3:a6:b3:60:09:68:17:3d:76:33:ee:c7:d8:3f:b1:93:e8:58:
         81:47:d4:e9:17:6c:fc:a1:26:3c:f2:6d:38:92:33:4a:67:fc:
         56:76:d6:64:cf:63:c3:6b:ad:e6:27:cf:e1:97:f0:6d:46:0a:
         bd:4f:f8:bf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTcyREYxMTAvBgNVBAUTKDY4MTQ3N0I1REU1NjZBMzhEOUIwMTU2REE4N0FCQUZB
OUZBRjg1QkQwHhcNMjUwODA5MDYzOTUxWhcNMjUwODE2MDYzOTUwWjAYMRYwFAYD
VQQDEw02ODk2ZWQzNy1jODYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoefJ9ROmLXCRvw4e/ckXemYPeUwtpJUvXXfubXPuxPsx+gbEWIuOBuXT7f5H
tQDpQIJPOw0goWk5B5akE2yagbTa0s36XKvFVUdkye25qCyDQWynhOyMgd+ktQZf
CsPXk931CWPufM+B2MSG/GpB0Ggwelsz2s6VknBNgk2ElmySJBrJT5wsxBTShZdc
JKp5mVgLvlheIxsNiYoPSDxf2JR0Jvqr0My86N5hd/tQqoINX9/Ja31ivJuAX6Lp
SmomkaAVG0NmtcNvCFgJp120CmWEoOE9H8jsvyYO9/wHs7X8b0LWdCJtOGsOP6mD
dqOgR12gZu/d84aUYpRVp5P0YQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOUPecI0
j/GmIgZwa2tEzEmL9ILTMB8GA1UdIwQYMBaAFGgUd7XeVmo42bAVbah6uvqfr4W9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJERi9DQzc4Qjc2MjdD
MEIxMUVGODk0QTI5MTlDNEY5QUUwMi9hQlIzdGQ1V2FqalpzQlZ0cUhxNi1wLXZo
YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FCUjN0ZDVXYWpqWnNCVnRxSHE2LXAtdmhiMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NzJERi9DQzc4Qjc2MjdDMEIxMUVGODk0QTI5MTlDNEY5QUUwMi9hQlIzdGQ1V2Fq
alpzQlZ0cUhxNi1wLXZoYjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCRe1UGl7bkP6j7Xfc5bCwNevb4dmQMhDcb5dGIPxa7oRWnC3SAi2Z7
9wUanS6zsWeopr+DdPM9Gybmqw2igYSAJv0fvF8DjPk4K+Z2ntC5xWWMPmPa23n3
7DwGYRGo8krqIe0B1tsA0K/llBRiCkqBdu3rdyp90JXM43Q8CElPYQ15NT/SmVaf
TMVa30RDQ2q3kUaZ0iN+pSAR2K9NaOGvPKwvdmlsVxLPy9DDUrotCxQoExpWhkZB
1AMkD3J6xhkTvvnZWOKzprNgCWgXPXYz7sfYP7GT6FiBR9TpF2z8oSY88m04kjNK
Z/xWdtZkz2PDa63mJ8/hl/BtRgq9T/i/
-----END CERTIFICATE-----
Generated at Sun Aug 10 16:00:07 2025 by rpki-client