Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
File:                     M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json)
Hash identifier:          AXPHJRSziTaZRoZXZ3IF4kC3oJyY+FSq+7QXFhzFpSY=
Subject key identifier:   77:AD:45:AC:C2:87:A1:B6:D4:AD:93:96:00:78:64:99:A6:0E:D3:67
Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5
Certificate issuer:       /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
Certificate serial:       59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
Manifest number:          59
Signing time:             Mon 11 Aug 2025 07:25:33 +0000
Manifest this update:     Mon 11 Aug 2025 07:25:32 +0000
Manifest next update:     Mon 18 Aug 2025 07:25:32 +0000
Files and hashes:         1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: XC2i6JKhNnHKMpuJU5FekDNO6iniJggMZXghZnfS/3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl
                          rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 07:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5
        Validity
            Not Before: Aug 11 07:25:32 2025 GMT
            Not After : Aug 18 07:25:32 2025 GMT
        Subject: CN=68999aed-3765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:98:dc:4c:e7:54:9e:1c:1b:60:a5:3f:0d:af:
                    59:b0:9f:f4:af:f5:66:74:8c:c1:fe:10:e3:28:22:
                    42:39:7e:b7:38:39:be:76:fd:a5:6d:33:ff:9a:02:
                    12:8a:5d:cc:df:48:3b:94:d8:d1:50:41:4f:3b:e6:
                    2e:1b:39:f8:47:1e:5f:cc:2c:7f:ba:52:06:3c:6a:
                    a4:f7:53:da:65:d2:f2:1c:a6:c8:64:40:67:fe:3e:
                    0c:9b:10:4a:79:6a:47:ab:d9:b5:a5:11:95:7e:49:
                    86:80:7a:6a:76:c8:c8:99:17:71:96:c7:d8:89:62:
                    76:25:54:8a:e1:c8:d4:68:af:bb:79:00:c6:38:82:
                    46:0c:63:a4:6e:a2:81:6f:0f:5f:41:db:c5:33:e4:
                    ac:4a:33:39:3c:a3:af:aa:37:70:1e:ac:5c:65:5d:
                    6e:a5:db:18:67:3e:5d:e2:f7:8a:00:b9:4c:e5:ab:
                    02:77:5e:54:9c:ef:71:54:f2:a9:54:ef:ff:e3:b5:
                    bc:90:b9:1b:1f:55:20:f4:66:41:af:a5:bb:6d:cf:
                    e4:28:53:8e:9f:c3:13:dd:4e:03:6d:29:5a:a8:af:
                    df:88:94:80:75:aa:8e:ad:8d:51:81:be:a4:86:af:
                    a0:51:f3:c9:3e:22:3e:f7:3c:fe:25:44:99:75:0f:
                    2f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AD:45:AC:C2:87:A1:B6:D4:AD:93:96:00:78:64:99:A6:0E:D3:67
            X509v3 Authority Key Identifier:
                keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ef:c5:8d:df:cb:e1:71:6d:1a:72:ee:a4:35:3a:24:3a:72:
         1b:07:0c:9d:9d:7b:30:30:0a:f1:b5:39:8f:ab:fa:34:ca:9c:
         ff:97:a1:c1:97:f5:56:24:48:66:1b:2c:bb:73:16:dc:ec:91:
         1c:a3:86:d5:71:0c:89:79:a0:d1:47:41:16:1c:f1:b4:76:96:
         7c:c4:3a:93:bb:01:51:d5:bd:5c:a3:43:7c:56:aa:1e:88:08:
         8b:28:c5:f0:1e:7f:11:7b:7e:1b:d3:11:dc:2f:a0:f0:c5:c1:
         02:66:2d:01:4e:aa:a2:46:3d:0c:a5:36:0e:e4:4a:fe:7d:58:
         92:77:49:a8:dd:ab:3e:b3:df:ec:15:91:8e:43:24:69:f8:9f:
         fe:d0:4f:95:a3:e7:fa:d8:a5:c1:33:c9:a9:d0:61:b2:a6:be:
         b7:1b:37:31:30:c5:ab:dd:e7:43:9b:e3:12:75:ff:90:01:7f:
         20:16:69:e3:f4:23:a3:52:8a:45:13:d7:d6:f4:ff:31:9f:d2:
         b0:92:08:33:97:43:76:33:d8:6b:3d:05:c1:35:a5:e4:52:51:
         c8:cb:78:1f:fa:ae:b3:6e:37:5a:1b:79:7e:da:6b:cf:b2:96:
         0b:76:3a:dc:0f:52:ba:48:b4:42:c5:e1:8d:02:0b:8e:2c:cb:
         91:62:9e:ef
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RjFDQzExMC8GA1UEBRMoMzNBMDE3NEE0QTRCMDA5QzAxMTUxNTk2OTEzNkYzMDEw
ODlEQjVCNTAeFw0yNTA4MTEwNzI1MzJaFw0yNTA4MTgwNzI1MzJaMBgxFjAUBgNV
BAMTDTY4OTk5YWVkLTM3NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNmNxM51SeHBtgpT8Nr1mwn/Sv9WZ0jMH+EOMoIkI5frc4Ob52/aVtM/+aAhKK
XczfSDuU2NFQQU875i4bOfhHHl/MLH+6UgY8aqT3U9pl0vIcpshkQGf+PgybEEp5
aker2bWlEZV+SYaAemp2yMiZF3GWx9iJYnYlVIrhyNRor7t5AMY4gkYMY6RuooFv
D19B28Uz5KxKMzk8o6+qN3AerFxlXW6l2xhnPl3i94oAuUzlqwJ3XlSc73FU8qlU
7//jtbyQuRsfVSD0ZkGvpbttz+QoU46fwxPdTgNtKVqor9+IlIB1qo6tjVGBvqSG
r6BR88k+Ij73PP4lRJl1Dy8nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd61FrMKH
obbUrZOWAHhkmaYO02cwHwYDVR0jBBgwFoAUM6AXSkpLAJwBFRWWkTbzAQidtbUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMUNDLzQzRUE2QjE4RUY2
MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3QkZSV1drVGJ6QVFpZHRi
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTTZBWFNrcExBSndCRlJXV2tUYnpBUWlkdGJVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG
MUNDLzQzRUE2QjE4RUY2MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3
QkZSV1drVGJ6QVFpZHRiVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAA3vxY3fy+FxbRpy7qQ1OiQ6chsHDJ2dezAwCvG1OY+r+jTKnP+XocGX
9VYkSGYbLLtzFtzskRyjhtVxDIl5oNFHQRYc8bR2lnzEOpO7AVHVvVyjQ3xWqh6I
CIsoxfAefxF7fhvTEdwvoPDFwQJmLQFOqqJGPQylNg7kSv59WJJ3Sajdqz6z3+wV
kY5DJGn4n/7QT5Wj5/rYpcEzyanQYbKmvrcbNzEwxavd50Ob4xJ1/5ABfyAWaeP0
I6NSikUT19b0/zGf0rCSCDOXQ3Yz2Gs9BcE1peRSUcjLeB/6rrNuN1obeX7aa8+y
lgt2OtwPUrpItELF4Y0CC44sy5Finu8=
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:30:31 2025 by rpki-client