Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
File:                     9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json)
Hash identifier:          NLfdFZRqPLNP7uHuglupcRQK3wAU5H0quS6BCgtMN3g=
Subject key identifier:   F3:18:49:5D:98:98:22:24:0A:95:5D:76:AC:9F:D8:B8:03:1E:59:E3
Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5
Certificate issuer:       /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5
Certificate serial:       030A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
Manifest number:          030A
Signing time:             Fri 13 Jun 2025 00:44:48 +0000
Manifest this update:     Fri 13 Jun 2025 00:44:47 +0000
Manifest next update:     Fri 20 Jun 2025 00:44:47 +0000
Files and hashes:         1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: vj1K5R9x1tszHvkUtGavVLZSg2T0nok16Dt0A/REd58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl
                          rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 00:44:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778 (0x30a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5
        Validity
            Not Before: Jun 13 00:44:47 2025 GMT
            Not After : Jun 20 00:44:47 2025 GMT
        Subject: CN=684b7480-a9d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8f:1a:ae:10:57:72:0c:db:a4:d9:b4:c9:2b:
                    ab:43:b1:9b:ef:65:11:34:68:93:2b:53:cf:ca:3c:
                    59:71:6c:f0:2f:c4:ff:97:bd:f4:ac:2a:67:38:44:
                    54:fd:02:75:09:56:6c:e5:eb:91:b1:e5:00:6b:e0:
                    fe:5b:00:8e:7c:ef:c9:4f:90:71:f1:6a:28:d9:a1:
                    fe:c0:29:bf:df:b3:d7:5b:ff:94:33:75:26:d0:91:
                    fa:ac:8d:ab:9b:5d:ec:64:ca:a6:ef:f3:eb:c1:c9:
                    db:85:86:c5:a5:33:27:a9:e5:e8:bf:37:56:d7:da:
                    1c:eb:f2:fa:f6:e4:9d:fe:0b:eb:fd:3f:ec:79:58:
                    f8:9e:f6:63:2d:08:6c:98:b0:a2:e4:5c:e5:2e:c4:
                    46:c0:e3:dd:95:98:eb:30:55:73:d7:98:43:70:a6:
                    3e:4e:8f:d3:51:8a:c4:91:9f:b4:a0:91:96:b6:c3:
                    c2:41:a9:80:84:48:4e:9e:82:5f:ee:36:9f:38:0a:
                    70:74:b1:d4:af:71:4b:b3:fe:bc:d4:6e:89:8f:be:
                    2b:fc:ef:79:97:e4:ff:a2:e2:75:11:bd:f4:16:bb:
                    29:6e:fa:70:dd:f7:04:cf:ad:30:15:f7:21:4c:9e:
                    a8:1c:e7:d0:9c:fb:04:47:f9:63:47:02:aa:95:09:
                    c1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:18:49:5D:98:98:22:24:0A:95:5D:76:AC:9F:D8:B8:03:1E:59:E3
            X509v3 Authority Key Identifier:
                keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:dc:05:a7:db:1f:76:e1:8b:2f:b0:35:41:da:7b:66:9f:dd:
         94:a2:d0:3a:2b:8e:cf:8b:ed:5c:14:42:de:8f:1d:cf:e5:79:
         d3:c3:1f:c5:0d:a3:f1:76:3f:51:96:de:c6:ba:67:5d:58:23:
         43:72:60:5a:1d:c3:5b:08:6e:d8:f9:f4:15:f8:a9:a9:59:84:
         02:4e:57:17:84:93:86:0b:b1:38:53:5e:3b:2b:f7:36:0d:46:
         7d:fe:20:17:1d:f9:aa:45:ef:a8:aa:9f:42:ae:91:f5:6b:7a:
         e7:d8:af:d9:62:03:6e:04:b4:1e:e4:7c:4c:86:66:8b:55:7a:
         57:ee:73:94:09:4f:e2:7f:d7:b4:1f:a1:7d:11:1f:15:66:ae:
         39:fe:fd:17:3b:a3:29:b3:0c:19:00:ce:c6:08:24:78:fd:07:
         4b:90:11:55:02:d9:05:62:6e:f8:0a:c5:28:56:7d:2f:1f:c1:
         31:35:46:9f:a2:34:02:39:1d:a7:44:5a:30:ac:60:f7:1f:a8:
         52:66:66:31:cc:0d:b6:d0:6a:5d:68:c1:78:17:7c:5c:3f:40:
         e0:6b:73:a0:db:c7:a8:22:00:64:41:de:87:9a:3c:18:fb:12:
         56:c9:1f:ab:c2:bc:f3:af:1b:dc:6f:2e:6d:1e:67:39:5c:8b:
         85:b9:a5:c3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUNGMjExMTAvBgNVBAUTKEY2N0RBOUYxNUU1RTkzNEQ5MEU0OEZFNTBFN0RDODU3
MUREOTM3QTUwHhcNMjUwNjEzMDA0NDQ3WhcNMjUwNjIwMDA0NDQ3WjAYMRYwFAYD
VQQDEw02ODRiNzQ4MC1hOWQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4Y8arhBXcgzbpNm0ySurQ7Gb72URNGiTK1PPyjxZcWzwL8T/l730rCpnOERU
/QJ1CVZs5euRseUAa+D+WwCOfO/JT5Bx8Woo2aH+wCm/37PXW/+UM3Um0JH6rI2r
m13sZMqm7/PrwcnbhYbFpTMnqeXovzdW19oc6/L69uSd/gvr/T/seVj4nvZjLQhs
mLCi5FzlLsRGwOPdlZjrMFVz15hDcKY+To/TUYrEkZ+0oJGWtsPCQamAhEhOnoJf
7jafOApwdLHUr3FLs/681G6Jj74r/O95l+T/ouJ1Eb30Frspbvpw3fcEz60wFfch
TJ6oHOfQnPsER/ljRwKqlQnBGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPMYSV2Y
mCIkCpVddqyf2LgDHlnjMB8GA1UdIwQYMBaAFPZ9qfFeXpNNkOSP5Q59yFcd2Tel
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQ0YyMS9GMkVCRUIzNEQ1
MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWswMlE1SV9sRG4zSVZ4M1pO
NlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzluMnA4VjVlazAyUTVJX2xEbjNJVngzWk42VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Q0YyMS9GMkVCRUIzNEQ1MTAxMUVDOTU1MkI4MkFDNEY5QUUwMi85bjJwOFY1ZWsw
MlE1SV9sRG4zSVZ4M1pONlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB43AWn2x924YsvsDVB2ntmn92UotA6K47Pi+1cFELejx3P5XnTwx/F
DaPxdj9Rlt7GumddWCNDcmBaHcNbCG7Y+fQV+KmpWYQCTlcXhJOGC7E4U147K/c2
DUZ9/iAXHfmqRe+oqp9CrpH1a3rn2K/ZYgNuBLQe5HxMhmaLVXpX7nOUCU/if9e0
H6F9ER8VZq45/v0XO6MpswwZAM7GCCR4/QdLkBFVAtkFYm74CsUoVn0vH8ExNUaf
ojQCOR2nRFowrGD3H6hSZmYxzA220GpdaMF4F3xcP0Dga3Og28eoIgBkQd6HmjwY
+xJWyR+rwrzzrxvcby5tHmc5XIuFuaXD
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:52:14 2025 by rpki-client