Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
File:                     RmieTZ937kzGyKiOZ57P7zdS9Dc.mft (raw, json)
Hash identifier:          1xzpitqC2bQLNbWyvH3xioR/d8uyoIkGR+bWtPYPuEQ=
Subject key identifier:   FE:EF:2E:F6:CE:3D:4A:A5:D6:4F:E7:E3:78:83:2E:AE:14:A1:1D:0B
Authority key identifier: 46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37
Certificate issuer:       /CN=A91AC4F3/serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437
Certificate serial:       0C1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
Manifest number:          0C1C
Signing time:             Sat 14 Jun 2025 18:29:27 +0000
Manifest this update:     Sat 14 Jun 2025 18:29:26 +0000
Manifest next update:     Sat 21 Jun 2025 18:29:26 +0000
Files and hashes:         1: RmieTZ937kzGyKiOZ57P7zdS9Dc.crl (hash: tya2XUHNCiq3ZAR5fYFAnKwZYKMlacKwLBl11dRjHXI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl
                          rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 18:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3101 (0xc1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC4F3, serialNumber=46689E4D9F77EE4CC6C8A88E679ECFEF3752F437
        Validity
            Not Before: Jun 14 18:29:26 2025 GMT
            Not After : Jun 21 18:29:26 2025 GMT
        Subject: CN=684dbf87-725d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:47:41:64:e9:5f:97:cd:4c:6c:eb:b7:1e:2c:
                    40:44:fd:7e:2e:54:28:d6:be:95:58:c6:c9:96:a3:
                    a6:73:ea:dc:dd:ff:20:26:ac:a6:93:a9:c2:cd:a8:
                    b6:b5:04:94:a4:50:65:86:fc:a9:e9:24:82:b4:7a:
                    b2:e5:06:d1:0c:d3:68:5e:9b:5a:5c:74:de:c1:f9:
                    2e:57:b4:7d:f5:71:dc:7b:6c:f1:94:34:b5:ae:f2:
                    9a:5d:60:4a:2f:a4:0a:ff:f9:fc:f3:c7:7c:12:0c:
                    77:e7:39:51:0a:b2:82:7b:a9:12:46:90:3c:13:7c:
                    5a:c1:8a:ab:46:8d:33:d8:d4:7b:01:8d:7f:a9:73:
                    f5:a9:69:bb:41:6f:83:47:a6:0c:de:bb:52:32:27:
                    f4:0a:de:a0:1f:e1:60:9d:55:de:62:76:60:2e:00:
                    8f:92:4e:89:88:bc:70:85:93:6b:c0:c5:51:c6:cf:
                    d0:35:e5:b6:eb:a5:44:14:43:03:1a:43:30:ab:e9:
                    d4:4e:60:f6:47:c7:d4:44:df:04:3a:6b:30:a4:cf:
                    a4:fd:dd:4d:df:05:ed:87:ce:88:42:71:8b:5a:bb:
                    c3:96:8a:12:65:f2:0a:01:cb:89:c4:8b:bc:14:d6:
                    83:96:d4:36:91:e5:54:e5:fb:05:9b:44:de:39:27:
                    ac:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EF:2E:F6:CE:3D:4A:A5:D6:4F:E7:E3:78:83:2E:AE:14:A1:1D:0B
            X509v3 Authority Key Identifier:
                keyid:46:68:9E:4D:9F:77:EE:4C:C6:C8:A8:8E:67:9E:CF:EF:37:52:F4:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RmieTZ937kzGyKiOZ57P7zdS9Dc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC4F3/CFC6DCB80C0411EA889F9955C4F9AE02/RmieTZ937kzGyKiOZ57P7zdS9Dc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:ad:0a:b0:0b:a0:ba:f7:7a:a4:ef:90:c1:58:9c:1c:67:f4:
         b0:70:1f:e4:77:eb:ad:92:17:f4:11:44:e0:58:a3:ed:9d:d2:
         bc:c2:d7:db:69:25:8e:f7:42:fa:58:79:79:4e:64:8f:8e:06:
         bc:fa:a2:8c:0d:92:c4:bb:af:d3:0d:c3:be:f7:08:34:82:3a:
         c3:eb:09:69:a3:0e:a7:02:0a:4b:ff:e2:c7:08:d5:a1:3d:ae:
         e4:0e:66:e6:3b:ab:c5:c4:f0:b6:72:02:e4:80:46:b6:e6:79:
         35:f4:94:4b:db:aa:29:b6:ca:23:bd:bc:2a:b6:b6:de:d6:49:
         47:60:87:05:11:12:49:69:ca:f6:05:e9:7b:96:08:54:21:ac:
         3a:33:c8:d4:bf:9e:72:fe:89:bd:d6:b7:d8:cc:a4:43:a8:b2:
         b2:cf:21:5d:29:a6:01:b7:1f:81:be:bd:89:17:26:3b:54:ae:
         1f:63:67:33:bd:e6:ff:64:bb:14:cb:1c:21:b6:91:08:9b:0d:
         b0:d1:9b:04:74:66:70:2e:44:b5:53:85:c5:04:de:9d:93:a2:
         82:36:c3:81:3a:9d:dc:52:89:33:b0:7d:42:75:32:4e:08:0a:
         07:d2:f1:97:18:d3:87:8f:8c:5c:49:3f:97:9b:fb:03:4a:f9:
         d8:44:a6:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUM0RjMxMTAvBgNVBAUTKDQ2Njg5RTREOUY3N0VFNENDNkM4QTg4RTY3OUVDRkVG
Mzc1MkY0MzcwHhcNMjUwNjE0MTgyOTI2WhcNMjUwNjIxMTgyOTI2WjAYMRYwFAYD
VQQDEw02ODRkYmY4Ny03MjVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArEdBZOlfl81MbOu3HixARP1+LlQo1r6VWMbJlqOmc+rc3f8gJqymk6nCzai2
tQSUpFBlhvyp6SSCtHqy5QbRDNNoXptaXHTewfkuV7R99XHce2zxlDS1rvKaXWBK
L6QK//n888d8Egx35zlRCrKCe6kSRpA8E3xawYqrRo0z2NR7AY1/qXP1qWm7QW+D
R6YM3rtSMif0Ct6gH+FgnVXeYnZgLgCPkk6JiLxwhZNrwMVRxs/QNeW266VEFEMD
GkMwq+nUTmD2R8fURN8EOmswpM+k/d1N3wXth86IQnGLWrvDlooSZfIKAcuJxIu8
FNaDltQ2keVU5fsFm0TeOSesgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7vLvbO
PUql1k/n43iDLq4UoR0LMB8GA1UdIwQYMBaAFEZonk2fd+5Mxsiojmeez+83UvQ3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzRGMy9DRkM2RENCODBD
MDQxMUVBODg5Rjk5NTVDNEY5QUUwMi9SbWllVFo5Mzdrekd5S2lPWjU3UDd6ZFM5
RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JtaWVUWjkzN2t6R3lLaU9aNTdQN3pkUzlEYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzRGMy9DRkM2RENCODBDMDQxMUVBODg5Rjk5NTVDNEY5QUUwMi9SbWllVFo5Mzdr
ekd5S2lPWjU3UDd6ZFM5RGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC1rQqwC6C693qk75DBWJwcZ/SwcB/kd+utkhf0EUTgWKPtndK8wtfb
aSWO90L6WHl5TmSPjga8+qKMDZLEu6/TDcO+9wg0gjrD6wlpow6nAgpL/+LHCNWh
Pa7kDmbmO6vFxPC2cgLkgEa25nk19JRL26optsojvbwqtrbe1klHYIcFERJJacr2
Bel7lghUIaw6M8jUv55y/om91rfYzKRDqLKyzyFdKaYBtx+Bvr2JFyY7VK4fY2cz
veb/ZLsUyxwhtpEImw2w0ZsEdGZwLkS1U4XFBN6dk6KCNsOBOp3cUokzsH1CdTJO
CAoH0vGXGNOHj4xcST+Xm/sDSvnYRKY7
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:15:43 2025 by rpki-client