Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
File:                     eVqDka92AR59slWmAQo0gvEJDj8.mft (raw, json)
Hash identifier:          m1pKMGcZxcgaVK6tBhNjQrFZympU3erswjcYv7b8faM=
Subject key identifier:   28:AA:94:F3:78:DA:A5:AE:95:20:2D:4D:E1:99:57:A5:F1:6E:F6:69
Authority key identifier: 79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F
Certificate issuer:       /CN=A91C60A5/serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F
Certificate serial:       7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
Manifest number:          7A
Signing time:             Tue 17 Jun 2025 05:39:28 +0000
Manifest this update:     Tue 17 Jun 2025 05:39:27 +0000
Manifest next update:     Tue 24 Jun 2025 05:39:27 +0000
Files and hashes:         1: eVqDka92AR59slWmAQo0gvEJDj8.crl (hash: iz7DsUC5MibGfmlvUa04uyUVKmOPhYySJJq1mAeYWJM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 05:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5, serialNumber=795A8391AF76011E7DB255A6010A3482F1090E3F
        Validity
            Not Before: Jun 17 05:39:27 2025 GMT
            Not After : Jun 24 05:39:27 2025 GMT
        Subject: CN=6850ff8f-0aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:73:82:20:b7:b5:1c:82:87:1a:4f:87:d9:67:
                    54:20:78:7b:80:fe:ac:80:5f:cf:88:f8:c5:a8:e1:
                    a5:db:59:b6:66:9d:ed:11:a7:7c:cd:85:5c:1e:7c:
                    81:09:12:a2:1e:ad:a8:d6:a7:5f:ab:41:04:8b:ea:
                    d1:0e:1c:12:77:0b:f9:d9:80:ff:ef:f9:68:6a:0d:
                    78:96:00:66:a6:a4:a8:93:7b:c0:75:83:5e:20:dd:
                    a3:48:c7:af:45:9f:1a:44:6e:c1:6b:37:04:41:6f:
                    bc:30:65:7f:21:16:b4:05:b3:43:b6:8c:39:d1:c1:
                    bf:26:e7:0e:44:e4:46:05:50:cd:06:c1:a7:82:f4:
                    aa:e2:16:bc:02:38:f2:4a:84:27:12:7f:24:0f:0d:
                    c8:b5:9f:a8:32:b3:b5:28:01:b2:15:df:4a:40:42:
                    1c:4c:a3:80:38:cd:51:ab:b9:b2:6b:5c:81:f6:ae:
                    6a:65:c4:88:44:0d:bc:e1:d6:f1:fe:a6:2d:f4:55:
                    f2:6f:26:ec:ad:4c:e4:1e:52:24:07:13:f7:ce:71:
                    dd:b7:60:75:09:a8:1a:c3:1c:47:5a:92:e3:9d:50:
                    64:88:32:7d:cc:51:a5:d0:c6:9b:a1:d4:77:b7:c1:
                    f2:76:b6:6c:9f:63:12:6d:ea:fe:64:89:4e:12:b8:
                    2a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AA:94:F3:78:DA:A5:AE:95:20:2D:4D:E1:99:57:A5:F1:6E:F6:69
            X509v3 Authority Key Identifier:
                keyid:79:5A:83:91:AF:76:01:1E:7D:B2:55:A6:01:0A:34:82:F1:09:0E:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVqDka92AR59slWmAQo0gvEJDj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/A2D5936291F011EFB6965C24C4F9AE02/eVqDka92AR59slWmAQo0gvEJDj8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e5:83:89:0e:74:16:ec:7c:5f:61:5d:bb:46:63:f9:0b:38:
         02:db:44:0e:fa:7b:f1:d3:87:e4:c4:d7:3e:82:56:3e:22:64:
         fb:67:ea:46:0a:52:3a:fe:7d:df:dd:9b:5b:36:d2:d8:c3:83:
         1d:4b:44:67:2c:df:fc:69:a6:fd:e3:09:ba:61:4d:58:05:a2:
         a2:71:84:d3:83:1a:36:1b:db:9c:99:81:3f:5b:f8:f3:e7:c5:
         2e:c1:5a:84:5c:a1:fd:aa:6d:d2:20:b4:ae:7d:94:90:b3:76:
         e4:80:91:3c:43:90:39:b2:34:bb:ca:c3:e8:50:6b:6c:1d:ef:
         46:ce:91:5e:85:93:b4:77:3d:29:b7:5f:fa:78:36:22:5f:05:
         d6:0d:57:c1:8e:e0:ff:96:e5:94:b7:4f:ac:15:72:7e:63:33:
         91:8a:70:e0:4c:ff:c5:a8:af:03:a3:e7:4b:4f:79:13:04:cc:
         9d:7c:31:98:40:b9:f5:ac:92:fa:1b:9b:4f:1d:a6:aa:9a:3f:
         21:61:20:2b:6a:e6:ee:7d:36:d9:38:70:27:37:79:b3:9c:0b:
         65:d8:2c:36:d2:de:9c:25:fb:01:b9:58:1d:35:ad:4b:83:d6:
         32:47:82:7f:c9:9e:35:cf:85:2b:5f:db:23:2e:26:e4:d7:8f:
         1d:5e:2b:8a
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NjBBNTExMC8GA1UEBRMoNzk1QTgzOTFBRjc2MDExRTdEQjI1NUE2MDEwQTM0ODJG
MTA5MEUzRjAeFw0yNTA2MTcwNTM5MjdaFw0yNTA2MjQwNTM5MjdaMBgxFjAUBgNV
BAMTDTY4NTBmZjhmLTBhYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDdc4Igt7UcgocaT4fZZ1QgeHuA/qyAX8+I+MWo4aXbWbZmne0Rp3zNhVwefIEJ
EqIerajWp1+rQQSL6tEOHBJ3C/nZgP/v+WhqDXiWAGampKiTe8B1g14g3aNIx69F
nxpEbsFrNwRBb7wwZX8hFrQFs0O2jDnRwb8m5w5E5EYFUM0GwaeC9KriFrwCOPJK
hCcSfyQPDci1n6gys7UoAbIV30pAQhxMo4A4zVGrubJrXIH2rmplxIhEDbzh1vH+
pi30VfJvJuytTOQeUiQHE/fOcd23YHUJqBrDHEdakuOdUGSIMn3MUaXQxpuh1He3
wfJ2tmyfYxJt6v5kiU4SuCpjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKKqU83ja
pa6VIC1N4ZlXpfFu9mkwHwYDVR0jBBgwFoAUeVqDka92AR59slWmAQo0gvEJDj8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2MEE1L0EyRDU5MzYyOTFG
MDExRUZCNjk2NUMyNEM0RjlBRTAyL2VWcURrYTkyQVI1OXNsV21BUW8wZ3ZFSkRq
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZVZxRGthOTJBUjU5c2xXbUFRbzBndkVKRGo4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2
MEE1L0EyRDU5MzYyOTFGMDExRUZCNjk2NUMyNEM0RjlBRTAyL2VWcURrYTkyQVI1
OXNsV21BUW8wZ3ZFSkRqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIvlg4kOdBbsfF9hXbtGY/kLOALbRA76e/HTh+TE1z6CVj4iZPtn6kYK
Ujr+fd/dm1s20tjDgx1LRGcs3/xppv3jCbphTVgFoqJxhNODGjYb25yZgT9b+PPn
xS7BWoRcof2qbdIgtK59lJCzduSAkTxDkDmyNLvKw+hQa2wd70bOkV6Fk7R3PSm3
X/p4NiJfBdYNV8GO4P+W5ZS3T6wVcn5jM5GKcOBM/8WorwOj50tPeRMEzJ18MZhA
ufWskvobm08dpqqaPyFhICtq5u59Ntk4cCc3ebOcC2XYLDbS3pwl+wG5WB01rUuD
1jJHgn/JnjXPhStf2yMuJuTXjx1eK4o=
-----END CERTIFICATE-----
Generated at Thu Jun 19 05:58:57 2025 by rpki-client