Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
File:                     a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft (raw, json)
Hash identifier:          Vj+Vy5p+WCWMWazAtAJ7PSFQDRqj8Y6rlzqWBRHaJA4=
Subject key identifier:   8E:FC:7F:47:25:C5:23:D3:DD:65:35:E6:A0:3D:7D:2D:A0:1E:C0:94
Authority key identifier: 6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D
Certificate issuer:       /CN=A9112804/serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
Certificate serial:       0CA1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
Manifest number:          1431
Signing time:             Wed 02 Jul 2025 18:24:14 +0000
Manifest this update:     Wed 02 Jul 2025 18:24:13 +0000
Manifest next update:     Wed 09 Jul 2025 18:24:13 +0000
Files and hashes:         1: a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl (hash: 0yQuk4tDPnkHNdFUdYgVcuLeYy17hzKxERgiBWddTdU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl
                          rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3233 (0xca1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112804, serialNumber=6BA79AD54A9383CB526733996BE66E92BF8D384D
        Validity
            Not Before: Jul  2 18:24:13 2025 GMT
            Not After : Jul  9 18:24:13 2025 GMT
        Subject: CN=6865794d-1955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:76:c3:0e:59:6a:ca:0b:67:33:26:a8:01:66:
                    cd:01:a8:6b:77:e9:1a:16:33:06:f2:fc:6a:e9:54:
                    34:ac:7f:63:fe:b5:cf:ef:ff:17:2e:b6:7a:74:f5:
                    63:10:f2:eb:5b:df:ef:41:ca:cf:c7:29:7c:c2:3b:
                    cd:9c:e3:3c:cb:44:b1:2c:bc:7f:83:bf:b7:ae:83:
                    f9:57:08:da:77:8c:4b:93:98:bc:8f:56:41:5b:2b:
                    d4:25:62:4b:7d:40:05:af:0a:30:af:6c:79:21:c5:
                    bc:e9:09:e7:63:9f:20:3a:68:4d:43:13:4e:d4:6b:
                    f2:83:04:e9:d9:65:ca:88:e3:e3:5a:2e:c1:57:c8:
                    f7:d2:5c:81:c1:c5:1c:1b:3c:3d:de:9e:3c:ef:16:
                    8f:18:b7:8a:8e:22:20:9d:06:0c:4c:05:fe:5b:aa:
                    e3:f6:bc:b0:f7:9a:b3:a0:29:6a:fa:8c:fd:75:51:
                    3d:62:68:78:05:6e:f8:3f:61:c0:00:3b:6c:8a:df:
                    ee:ad:bf:df:33:6f:d9:e8:5d:6f:aa:e0:68:cc:a1:
                    89:17:06:64:fc:8b:9b:5e:1f:7e:11:a7:89:f6:84:
                    65:d9:36:a6:13:d6:86:f7:d5:5f:ab:90:95:5c:d4:
                    12:3f:5f:08:6d:97:4e:71:fd:e8:d4:68:27:5f:e0:
                    ec:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FC:7F:47:25:C5:23:D3:DD:65:35:E6:A0:3D:7D:2D:A0:1E:C0:94
            X509v3 Authority Key Identifier:
                keyid:6B:A7:9A:D5:4A:93:83:CB:52:67:33:99:6B:E6:6E:92:BF:8D:38:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6ea1UqTg8tSZzOZa-Zukr-NOE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112804/36ECDA54F4FA11E99918433DC4F9AE02/a6ea1UqTg8tSZzOZa-Zukr-NOE0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:16:87:26:d4:3c:f9:8c:26:b0:f2:ec:b0:ac:89:d0:30:60:
         27:bf:bc:5b:29:2b:39:19:79:0d:e3:c6:7d:fd:0c:24:df:f0:
         a1:ce:b0:0a:34:f3:57:9f:2e:2e:84:a9:30:7b:45:3e:9b:9f:
         1e:c6:d1:b3:43:f9:b1:5f:c6:cc:d2:3b:32:a0:52:bf:bd:2f:
         28:6c:0a:54:db:63:c7:dc:fd:e8:ee:c1:1a:75:56:3d:82:52:
         f8:9f:bf:4f:9a:45:33:68:e7:66:25:e9:e2:27:e2:cd:8b:84:
         0c:99:01:aa:f6:ca:57:a8:8f:eb:fb:87:18:7d:9e:0b:e7:4d:
         18:c8:81:bd:20:cc:1a:e8:a6:00:a0:a4:32:b0:bb:e4:47:5b:
         ce:1e:93:b2:c9:f6:f7:5c:5e:5c:6f:21:83:ba:f8:36:8a:d4:
         54:b0:79:e6:7b:e3:b9:5b:12:0d:b5:99:d7:7c:f4:7d:1f:85:
         a2:43:93:3e:24:18:a6:f8:17:5b:9b:be:da:a2:94:bf:6d:64:
         6e:8c:40:33:04:9b:43:60:ff:ba:05:03:e0:2f:c1:d0:ed:cf:
         dd:0d:30:58:a7:8b:2f:f1:e7:11:d5:a2:a3:83:31:53:dd:fa:
         cf:6d:de:f1:74:a8:af:85:81:71:99:52:4d:fe:f7:a7:5e:c4:
         8e:f7:c2:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTI4MDQxMTAvBgNVBAUTKDZCQTc5QUQ1NEE5MzgzQ0I1MjY3MzM5OTZCRTY2RTky
QkY4RDM4NEQwHhcNMjUwNzAyMTgyNDEzWhcNMjUwNzA5MTgyNDEzWjAYMRYwFAYD
VQQDEw02ODY1Nzk0ZC0xOTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA43bDDllqygtnMyaoAWbNAahrd+kaFjMG8vxq6VQ0rH9j/rXP7/8XLrZ6dPVj
EPLrW9/vQcrPxyl8wjvNnOM8y0SxLLx/g7+3roP5Vwjad4xLk5i8j1ZBWyvUJWJL
fUAFrwowr2x5IcW86QnnY58gOmhNQxNO1GvygwTp2WXKiOPjWi7BV8j30lyBwcUc
Gzw93p487xaPGLeKjiIgnQYMTAX+W6rj9ryw95qzoClq+oz9dVE9Ymh4BW74P2HA
ADtsit/urb/fM2/Z6F1vquBozKGJFwZk/IubXh9+EaeJ9oRl2TamE9aG99Vfq5CV
XNQSP18IbZdOcf3o1GgnX+DsNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI78f0cl
xSPT3WU15qA9fS2gHsCUMB8GA1UdIwQYMBaAFGunmtVKk4PLUmczmWvmbpK/jThN
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjgwNC8zNkVDREE1NEY0
RkExMUU5OTkxODQzM0RDNEY5QUUwMi9hNmVhMVVxVGc4dFNaek9aYS1adWtyLU5P
RTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E2ZWExVXFUZzh0U1p6T1phLVp1a3ItTk9FMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MjgwNC8zNkVDREE1NEY0RkExMUU5OTkxODQzM0RDNEY5QUUwMi9hNmVhMVVxVGc4
dFNaek9aYS1adWtyLU5PRTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLFocm1Dz5jCaw8uywrInQMGAnv7xbKSs5GXkN48Z9/Qwk3/ChzrAK
NPNXny4uhKkwe0U+m58extGzQ/mxX8bM0jsyoFK/vS8obApU22PH3P3o7sEadVY9
glL4n79PmkUzaOdmJeniJ+LNi4QMmQGq9spXqI/r+4cYfZ4L500YyIG9IMwa6KYA
oKQysLvkR1vOHpOyyfb3XF5cbyGDuvg2itRUsHnme+O5WxINtZnXfPR9H4WiQ5M+
JBim+Bdbm77aopS/bWRujEAzBJtDYP+6BQPgL8HQ7c/dDTBYp4sv8ecR1aKjgzFT
3frPbd7xdKivhYFxmVJN/venXsSO98Ku
-----END CERTIFICATE-----
Generated at Thu Jul 3 09:39:03 2025 by rpki-client