Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
File:                     JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft (raw, json)
Hash identifier:          Y5U31j+5Lx/jnYOGfRJxszn8RGFCIfj5uJHeKnubQ4I=
Subject key identifier:   AB:7C:81:95:FF:08:71:74:D6:8A:7C:A7:40:5B:8F:FA:9C:B9:88:6B
Authority key identifier: 27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61
Certificate issuer:       /CN=A91E5D61/serialNumber=272307B227936DB3EE3B6540602C32D958309F61
Certificate serial:       34A9
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
Manifest number:          473E
Signing time:             Wed 18 Jun 2025 14:20:52 +0000
Manifest this update:     Wed 18 Jun 2025 14:20:52 +0000
Manifest next update:     Wed 25 Jun 2025 14:20:52 +0000
Files and hashes:         1: JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl (hash: bMnkkA/eL9EqgbEMqGCT36ySmtQg3N2uq5PADtI4FO4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl
                          rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 14:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13481 (0x34a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5D61, serialNumber=272307B227936DB3EE3B6540602C32D958309F61
        Validity
            Not Before: Jun 18 14:20:52 2025 GMT
            Not After : Jun 25 14:20:52 2025 GMT
        Subject: CN=6852cb44-ee8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3a:eb:fe:64:e2:b2:f9:7b:f8:42:e7:30:fd:
                    ca:ce:a3:a8:03:ba:c5:59:3f:8d:de:8b:5d:41:95:
                    ac:46:c4:b2:c8:0a:98:da:7b:a1:3e:10:9a:df:9d:
                    2d:c0:46:d4:31:de:5c:74:b7:19:be:d4:8e:23:b6:
                    72:90:9b:16:42:02:b2:a1:27:88:5d:8c:4b:cc:77:
                    06:29:a2:25:5c:bd:f2:b9:23:ed:90:69:5a:e8:83:
                    ab:7c:61:5a:f8:56:6d:5e:b7:f0:c6:30:60:1f:04:
                    f5:e1:e6:8c:b7:b7:47:ed:41:a7:50:2a:22:13:63:
                    28:d1:44:30:31:e8:ae:63:5d:79:da:3c:aa:22:d2:
                    9b:28:0d:9d:73:75:6b:05:76:4a:98:ca:fd:d1:55:
                    e0:79:3a:8c:27:76:78:d0:be:2b:fa:af:f9:fe:40:
                    a6:a6:b4:97:92:73:e1:e1:10:59:e7:83:e0:ff:06:
                    e7:7e:48:4b:cf:43:34:9a:15:f8:2a:3c:90:f2:4b:
                    ed:ed:3b:f6:77:4d:cb:52:2a:f3:53:d1:b8:25:9a:
                    72:35:f0:ea:a3:86:5b:37:87:2c:92:87:75:ee:76:
                    08:90:60:4e:2e:4d:97:df:00:e9:92:f1:6b:76:1e:
                    9e:c8:4c:cb:f8:70:e5:3c:c6:20:90:49:b8:b2:6b:
                    68:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7C:81:95:FF:08:71:74:D6:8A:7C:A7:40:5B:8F:FA:9C:B9:88:6B
            X509v3 Authority Key Identifier:
                keyid:27:23:07:B2:27:93:6D:B3:EE:3B:65:40:60:2C:32:D9:58:30:9F:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/2A7C7D981D7911E2879E38C508B02CD2/JyMHsieTbbPuO2VAYCwy2Vgwn2E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:05:09:be:c1:ec:75:41:5f:84:53:9b:ad:63:bc:fc:af:ff:
         3d:ef:f6:da:a5:ff:d3:3f:0d:9e:97:19:14:5b:6f:ed:e6:69:
         d5:2c:d7:ef:8b:ea:b8:a7:0d:b1:7c:04:f8:b0:be:68:9f:e7:
         b0:97:41:04:b6:c9:38:20:ab:08:4d:df:f7:ff:e4:51:a7:2e:
         c0:cd:3c:60:15:c4:14:60:58:dc:83:70:fa:42:cf:06:54:72:
         be:68:e2:56:cf:39:9e:29:c3:b6:3e:81:60:59:26:58:54:dd:
         74:17:ec:8d:98:94:45:a0:41:6b:4c:2e:d8:fd:fb:30:f8:59:
         82:16:f8:f5:6d:e4:24:34:14:c1:bf:71:de:ae:41:3f:ca:ea:
         d1:6b:d4:90:4e:dc:91:45:f9:74:be:88:30:a7:e3:b3:4a:1a:
         68:d1:b4:aa:41:c0:ad:90:f2:64:a0:8f:39:c0:e0:63:fc:55:
         83:40:0d:ab:d2:b9:d9:a4:19:64:9a:38:bd:b4:96:6a:a4:77:
         0f:f0:49:1d:55:f8:b4:ea:9b:90:f1:43:b9:88:6e:f3:fd:60:
         e4:71:91:41:61:c8:4c:54:e5:cd:4e:22:ed:b0:fc:7e:06:cd:
         cf:50:45:44:ff:02:2d:5a:40:26:d4:47:3f:aa:8f:f5:19:26:
         8b:c2:fe:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTVENjExMTAvBgNVBAUTKDI3MjMwN0IyMjc5MzZEQjNFRTNCNjU0MDYwMkMzMkQ5
NTgzMDlGNjEwHhcNMjUwNjE4MTQyMDUyWhcNMjUwNjI1MTQyMDUyWjAYMRYwFAYD
VQQDEw02ODUyY2I0NC1lZThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0zrr/mTisvl7+ELnMP3KzqOoA7rFWT+N3otdQZWsRsSyyAqY2nuhPhCa350t
wEbUMd5cdLcZvtSOI7ZykJsWQgKyoSeIXYxLzHcGKaIlXL3yuSPtkGla6IOrfGFa
+FZtXrfwxjBgHwT14eaMt7dH7UGnUCoiE2Mo0UQwMeiuY1152jyqItKbKA2dc3Vr
BXZKmMr90VXgeTqMJ3Z40L4r+q/5/kCmprSXknPh4RBZ54Pg/wbnfkhLz0M0mhX4
KjyQ8kvt7Tv2d03LUirzU9G4JZpyNfDqo4ZbN4cskod17nYIkGBOLk2X3wDpkvFr
dh6eyEzL+HDlPMYgkEm4smtoiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKt8gZX/
CHF01op8p0Bbj/qcuYhrMB8GA1UdIwQYMBaAFCcjB7Ink22z7jtlQGAsMtlYMJ9h
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8yQTdDN0Q5ODFE
NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9KeU1Ic2llVGJiUHVPMlZBWUN3eTJWZ3du
MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL0p5TUhzaWVUYmJQdU8yVkFZQ3d5MlZnd24yRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NUQ2MS8yQTdDN0Q5ODFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9KeU1Ic2llVGJi
UHVPMlZBWUN3eTJWZ3duMkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCIBQm+wex1QV+EU5utY7z8r/897/bapf/TPw2elxkUW2/t5mnVLNfv
i+q4pw2xfAT4sL5on+ewl0EEtsk4IKsITd/3/+RRpy7AzTxgFcQUYFjcg3D6Qs8G
VHK+aOJWzzmeKcO2PoFgWSZYVN10F+yNmJRFoEFrTC7Y/fsw+FmCFvj1beQkNBTB
v3HerkE/yurRa9SQTtyRRfl0vogwp+OzShpo0bSqQcCtkPJkoI85wOBj/FWDQA2r
0rnZpBlkmji9tJZqpHcP8EkdVfi06puQ8UO5iG7z/WDkcZFBYchMVOXNTiLtsPx+
Bs3PUEVE/wItWkAm1Ec/qo/1GSaLwv6P
-----END CERTIFICATE-----
Generated at Fri Jun 20 07:19:18 2025 by rpki-client