Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
File:                     9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft (raw, json)
Hash identifier:          6UnNd6n995qPSgH9cSE2yjHzEoD3rtbllHbaVwqzidc=
Subject key identifier:   64:9F:73:EF:01:F4:C7:4A:62:A2:36:FE:09:98:FC:E1:AE:9A:34:74
Authority key identifier: F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0
Certificate issuer:       /CN=A91D536E/serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
Certificate serial:       0750
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
Manifest number:          074B
Signing time:             Wed 18 Jun 2025 21:30:41 +0000
Manifest this update:     Wed 18 Jun 2025 21:30:41 +0000
Manifest next update:     Wed 25 Jun 2025 21:30:41 +0000
Files and hashes:         1: 9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl (hash: A9p6IlVOm4QQQ/PpaKXZ2ypxVJXRE1TzSRlNH6nZQ/8=)
                          2: 6091D05229FC11EB861CCA7FC4F9AE02.roa (hash: oXfgRMCkFYhKUKORBUUeo77MRVn7Mx2xxFkJ1oK4WsM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl
                          rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 21:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1872 (0x750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D536E, serialNumber=F734333B5BB54FBA882B232FD253252E7EA0BBC0
        Validity
            Not Before: Jun 18 21:30:41 2025 GMT
            Not After : Jun 25 21:30:41 2025 GMT
        Subject: CN=68533001-6b9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4f:7a:19:f2:a4:29:07:7b:2f:bc:02:94:2a:
                    3f:00:d7:74:27:eb:f1:e2:6d:44:1e:fc:bc:e6:0c:
                    39:48:3e:8c:7d:8a:cb:10:5c:68:91:23:6a:1a:68:
                    f1:2e:3a:ad:7e:b7:99:c1:ab:f4:b5:92:82:4f:0d:
                    44:83:49:f4:fd:5d:51:19:f2:51:96:c8:fc:bd:5a:
                    28:f3:98:70:99:12:5f:a9:50:4e:58:e6:f1:c2:66:
                    a4:61:49:4c:fa:8f:91:aa:b5:20:45:f5:c6:63:9e:
                    94:29:48:8b:23:14:36:f2:09:c7:af:98:9d:4a:e1:
                    1d:ba:6b:e9:40:dc:de:12:09:cd:58:89:da:f2:09:
                    7a:d4:f9:86:ad:c1:4d:1f:00:2c:ee:49:ba:48:09:
                    76:9b:6c:eb:30:ab:a4:b8:e4:dd:ed:b9:06:f4:0d:
                    46:2e:b9:6d:3b:17:67:c8:e8:38:b6:e2:a1:55:7a:
                    4c:4c:53:35:25:4c:c1:34:15:4c:98:ef:9a:b6:8f:
                    f7:3e:78:47:c0:19:b3:c4:4e:dd:20:a6:6e:32:e4:
                    20:bb:71:ef:83:bf:f7:aa:f8:97:31:1d:b7:5a:11:
                    c3:42:fa:16:ff:f7:93:ef:61:28:f1:26:fe:f4:10:
                    38:3c:b2:a9:ee:1d:78:01:39:8c:57:a3:c0:e9:26:
                    5c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9F:73:EF:01:F4:C7:4A:62:A2:36:FE:09:98:FC:E1:AE:9A:34:74
            X509v3 Authority Key Identifier:
                keyid:F7:34:33:3B:5B:B5:4F:BA:88:2B:23:2F:D2:53:25:2E:7E:A0:BB:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9zQzO1u1T7qIKyMv0lMlLn6gu8A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D536E/A6D748FA29FA11EBBC65AF7DC4F9AE02/9zQzO1u1T7qIKyMv0lMlLn6gu8A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:f1:45:66:5b:db:0c:99:61:0f:c3:8c:34:23:7d:d1:9d:36:
         2b:e2:97:ad:3b:60:f7:17:c3:11:98:b6:78:48:b1:5c:e9:04:
         f0:76:09:01:ea:41:aa:fd:fd:44:ba:5e:1e:af:06:97:d1:8d:
         af:50:9b:b5:79:a0:d6:f5:8d:c6:55:5c:bb:8e:93:36:ec:c9:
         7c:a5:9c:c6:50:2a:15:62:01:81:e1:ac:46:3e:09:fc:8b:3e:
         8d:95:c9:28:d9:3c:25:55:1c:f3:1a:af:45:f2:18:70:49:0e:
         df:11:0c:0c:0c:79:7b:0e:98:47:7c:98:b9:b2:a3:9b:34:17:
         ae:d0:3c:10:0a:f5:44:e3:2a:6f:5f:2d:3f:0e:9a:15:f1:6a:
         ea:34:58:8a:19:9c:84:eb:ce:44:f4:56:d2:4b:ce:59:a6:4e:
         92:11:ae:dc:d6:c2:59:c9:e2:c9:ce:73:44:24:ea:40:e4:c0:
         ac:e9:78:2c:8e:76:99:d8:c1:5e:0b:72:aa:25:f0:44:5c:97:
         bb:db:5a:29:db:73:1c:53:4b:46:6a:b2:f6:2c:c8:f3:6a:80:
         4d:04:11:c9:b3:65:04:6c:ef:a7:42:d0:01:2d:e4:b4:fc:93:
         62:9b:29:53:7a:90:91:e4:00:3c:7c:01:7d:b6:4a:90:ff:16:
         0d:56:e1:1b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDUzNkUxMTAvBgNVBAUTKEY3MzQzMzNCNUJCNTRGQkE4ODJCMjMyRkQyNTMyNTJF
N0VBMEJCQzAwHhcNMjUwNjE4MjEzMDQxWhcNMjUwNjI1MjEzMDQxWjAYMRYwFAYD
VQQDEw02ODUzMzAwMS02YjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqU96GfKkKQd7L7wClCo/ANd0J+vx4m1EHvy85gw5SD6MfYrLEFxokSNqGmjx
LjqtfreZwav0tZKCTw1Eg0n0/V1RGfJRlsj8vVoo85hwmRJfqVBOWObxwmakYUlM
+o+RqrUgRfXGY56UKUiLIxQ28gnHr5idSuEdumvpQNzeEgnNWIna8gl61PmGrcFN
HwAs7km6SAl2m2zrMKukuOTd7bkG9A1GLrltOxdnyOg4tuKhVXpMTFM1JUzBNBVM
mO+ato/3PnhHwBmzxE7dIKZuMuQgu3Hvg7/3qviXMR23WhHDQvoW//eT72Eo8Sb+
9BA4PLKp7h14ATmMV6PA6SZcwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGSfc+8B
9MdKYqI2/gmY/OGumjR0MB8GA1UdIwQYMBaAFPc0MztbtU+6iCsjL9JTJS5+oLvA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTM2RS9BNkQ3NDhGQTI5
RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3cUlLeU12MGxNbExuNmd1
OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzl6UXpPMXUxVDdxSUt5TXYwbE1sTG42Z3U4QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NTM2RS9BNkQ3NDhGQTI5RkExMUVCQkM2NUFGN0RDNEY5QUUwMi85elF6TzF1MVQ3
cUlLeU12MGxNbExuNmd1OEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBF8UVmW9sMmWEPw4w0I33RnTYr4petO2D3F8MRmLZ4SLFc6QTwdgkB
6kGq/f1Eul4erwaX0Y2vUJu1eaDW9Y3GVVy7jpM27Ml8pZzGUCoVYgGB4axGPgn8
iz6Nlcko2TwlVRzzGq9F8hhwSQ7fEQwMDHl7DphHfJi5sqObNBeu0DwQCvVE4ypv
Xy0/DpoV8WrqNFiKGZyE685E9FbSS85Zpk6SEa7c1sJZyeLJznNEJOpA5MCs6Xgs
jnaZ2MFeC3KqJfBEXJe721op23McU0tGarL2LMjzaoBNBBHJs2UEbO+nQtABLeS0
/JNimylTepCR5AA8fAF9tkqQ/xYNVuEb
-----END CERTIFICATE-----
Generated at Fri Jun 20 08:57:09 2025 by rpki-client