Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
File:                     bkWq8A0m8fB31nRzkUTUuMOU87g.mft (raw, json)
Hash identifier:          UnqOvC/uoqg+bMXIuCUaP7lmFGto4Qv6RhDAlMyeiH4=
Subject key identifier:   3A:4B:C0:01:4A:F3:E0:68:CE:BA:7E:00:46:DF:9A:98:D2:60:98:A8
Authority key identifier: 6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8
Certificate issuer:       /CN=A919F0DA/serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
Certificate serial:       2403
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
Manifest number:          60A0
Signing time:             Fri 08 Aug 2025 14:15:27 +0000
Manifest this update:     Fri 08 Aug 2025 14:15:27 +0000
Manifest next update:     Fri 15 Aug 2025 14:15:27 +0000
Files and hashes:         1: bkWq8A0m8fB31nRzkUTUuMOU87g.crl (hash: jRrW9PMsXXj2z2BD8EoeuZvXrgC37RGcdzbcZ5HBOjU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9219 (0x2403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
        Validity
            Not Before: Aug  8 14:15:27 2025 GMT
            Not After : Aug 15 14:15:27 2025 GMT
        Subject: CN=6896067f-0815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c2:97:8a:3f:21:15:8a:dc:f5:b5:fd:30:35:
                    fe:b1:f6:97:4f:3d:d3:74:e4:3a:9c:a6:20:be:1a:
                    f6:d7:8d:22:d6:52:b2:df:cd:ee:15:44:86:9a:93:
                    c7:a3:03:36:64:a9:26:c3:71:d1:1e:4a:c0:e6:c6:
                    0a:52:2e:aa:d8:67:a3:a2:8b:92:b0:5d:65:fb:44:
                    d5:09:79:65:3c:ef:be:39:a8:3b:8e:8a:8a:54:c5:
                    32:4a:9f:4d:25:1c:b6:a0:54:d5:b7:87:2d:ac:02:
                    f5:88:f1:bd:76:75:ee:8e:1f:45:ba:e4:ae:30:52:
                    41:e1:8b:cd:1e:22:39:7e:6c:6b:22:6c:c9:fd:ac:
                    aa:8d:93:0c:9b:b3:50:2e:4b:93:78:f0:24:ad:58:
                    7f:4c:38:b3:5d:e5:3a:61:cf:10:af:7f:e0:25:41:
                    f5:61:ab:c7:63:a7:68:87:80:d3:e7:f1:f4:a5:1e:
                    9d:79:0d:25:cb:18:8f:08:87:bd:ae:c7:36:8f:1b:
                    83:07:00:aa:9b:67:13:d8:67:f3:78:c2:e3:e8:06:
                    27:bd:97:89:08:3a:81:72:d3:06:c7:17:f2:40:d8:
                    3e:63:b2:8f:78:d4:5e:6d:da:85:4f:03:e4:06:28:
                    f1:28:b7:c9:7c:6e:bd:0a:f5:d2:91:4a:15:80:90:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4B:C0:01:4A:F3:E0:68:CE:BA:7E:00:46:DF:9A:98:D2:60:98:A8
            X509v3 Authority Key Identifier:
                keyid:6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:56:68:68:75:fd:b0:d5:77:13:f8:98:ae:29:27:c7:63:d8:
         1c:cc:b0:18:05:1f:28:90:33:1b:2c:18:1d:9a:07:95:bc:98:
         ce:fe:47:53:49:fa:ae:44:e6:50:de:64:05:50:73:d3:1c:32:
         8b:48:b0:d4:e3:d9:40:39:44:d7:c2:3d:68:47:a7:03:d0:76:
         ed:5c:ed:00:c0:a9:e5:98:4f:c1:31:43:23:02:4f:29:81:74:
         9d:76:0a:e1:f1:7e:e3:6a:51:f3:4f:a2:07:69:aa:da:9b:29:
         ff:d4:af:ad:6f:f5:cc:4b:90:a5:0f:ce:4d:d2:4c:40:6d:ba:
         d4:5f:70:9d:b3:1d:e7:dc:37:da:63:ad:d6:b5:70:a7:78:98:
         4b:77:f0:84:8e:c9:93:2a:69:c6:f8:f5:23:99:98:6e:eb:10:
         77:29:a9:c9:e2:45:6e:cf:8f:1b:77:e9:f6:55:e6:ce:08:f1:
         44:f4:9c:53:d7:b0:42:c4:fc:f5:9d:c2:c6:a6:1c:5c:63:15:
         31:cb:51:27:50:21:f6:2f:e3:86:3b:88:ee:80:08:64:9f:c0:
         f6:4f:ab:cc:32:9e:13:de:8a:2b:97:46:19:5c:3e:bf:b7:d6:
         3b:c5:da:e6:65:6d:f3:54:bd:29:cb:51:b4:5d:2a:bc:fd:4f:
         13:5d:05:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJAMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwREExMTAvBgNVBAUTKDZFNDVBQUYwMEQyNkYxRjA3N0Q2NzQ3MzkxNDRENEI4
QzM5NEYzQjgwHhcNMjUwODA4MTQxNTI3WhcNMjUwODE1MTQxNTI3WjAYMRYwFAYD
VQQDEw02ODk2MDY3Zi0wODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz8KXij8hFYrc9bX9MDX+sfaXTz3TdOQ6nKYgvhr2140i1lKy383uFUSGmpPH
owM2ZKkmw3HRHkrA5sYKUi6q2GejoouSsF1l+0TVCXllPO++Oag7joqKVMUySp9N
JRy2oFTVt4ctrAL1iPG9dnXujh9FuuSuMFJB4YvNHiI5fmxrImzJ/ayqjZMMm7NQ
LkuTePAkrVh/TDizXeU6Yc8Qr3/gJUH1YavHY6doh4DT5/H0pR6deQ0lyxiPCIe9
rsc2jxuDBwCqm2cT2GfzeMLj6AYnvZeJCDqBctMGxxfyQNg+Y7KPeNRebdqFTwPk
BijxKLfJfG69CvXSkUoVgJC4pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDpLwAFK
8+Bozrp+AEbfmpjSYJioMB8GA1UdIwQYMBaAFG5FqvANJvHwd9Z0c5FE1LjDlPO4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS8xNTBEM0VGNDFE
NjgxMUUyOEMxODI4QTQwOEIwMkNEMi9ia1dxOEEwbThmQjMxblJ6a1VUVXVNT1U4
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JrV3E4QTBtOGZCMzFuUnprVVRVdU1PVTg3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjBEQS8xNTBEM0VGNDFENjgxMUUyOEMxODI4QTQwOEIwMkNEMi9ia1dxOEEwbThm
QjMxblJ6a1VUVXVNT1U4N2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCVmhodf2w1XcT+JiuKSfHY9gczLAYBR8okDMbLBgdmgeVvJjO/kdT
SfquROZQ3mQFUHPTHDKLSLDU49lAOUTXwj1oR6cD0HbtXO0AwKnlmE/BMUMjAk8p
gXSddgrh8X7jalHzT6IHaaramyn/1K+tb/XMS5ClD85N0kxAbbrUX3Cdsx3n3Dfa
Y63WtXCneJhLd/CEjsmTKmnG+PUjmZhu6xB3KanJ4kVuz48bd+n2VebOCPFE9JxT
17BCxPz1ncLGphxcYxUxy1EnUCH2L+OGO4jugAhkn8D2T6vMMp4T3oorl0YZXD6/
t9Y7xdrmZW3zVL0py1G0XSq8/U8TXQXC
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:37:55 2025 by rpki-client