Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
File:                     9o4033GQZ5Iit29wPgM3yhu5bz4.mft (raw, json)
Hash identifier:          dxdW9fwapfpDWOGm3Ym6boL3MBydpjUTMh/8a7qK1FE=
Subject key identifier:   3D:E7:75:47:05:50:74:D1:89:72:51:52:93:A0:9D:75:0E:AC:F6:45
Authority key identifier: F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E
Certificate issuer:       /CN=A911606A/serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E
Certificate serial:       010D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
Manifest number:          010D
Signing time:             Sat 05 Jul 2025 05:13:41 +0000
Manifest this update:     Sat 05 Jul 2025 05:13:41 +0000
Manifest next update:     Sat 12 Jul 2025 05:13:41 +0000
Files and hashes:         1: 9o4033GQZ5Iit29wPgM3yhu5bz4.crl (hash: kC0AD4Zdbm+jKremOK76PRufO1eyN9zE8sUI/O+9368=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl
                          rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911606A, serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E
        Validity
            Not Before: Jul  5 05:13:41 2025 GMT
            Not After : Jul 12 05:13:41 2025 GMT
        Subject: CN=6868b485-782f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9d:26:8b:55:c6:ff:d7:4c:06:74:0a:ac:34:
                    67:32:99:e1:20:ad:f8:17:71:50:69:5d:be:f5:3e:
                    77:28:26:61:61:af:62:a6:3c:ba:fd:93:2c:24:c1:
                    30:6f:61:02:23:2d:f9:09:a6:b1:61:1f:7a:ba:4a:
                    f0:5f:bb:61:39:b0:ce:04:01:60:59:ab:34:45:84:
                    4c:75:d2:ec:a8:3a:5f:fc:00:8e:7b:ac:25:ca:c4:
                    32:73:0f:30:f2:2a:69:86:20:47:03:69:22:eb:fc:
                    4e:27:e4:71:95:e7:ef:b7:92:c8:c7:d1:65:a1:ce:
                    cb:c7:a2:89:c4:aa:e8:2d:a5:fb:ea:5f:de:5f:31:
                    5d:5c:3a:da:8a:ac:0d:40:e0:15:2a:3f:02:96:c6:
                    3b:06:5c:69:a5:11:ab:db:93:c5:0a:fc:da:f3:e2:
                    ae:e7:98:0c:f9:ad:df:8e:50:37:a2:2e:c2:a0:88:
                    46:6e:39:8e:c8:9f:7b:d6:7b:e8:5b:21:2a:8f:20:
                    56:45:f0:56:56:92:47:52:d0:70:16:0c:bd:40:93:
                    61:6b:c6:6c:06:eb:ce:fe:71:d9:a3:a9:3f:cb:c8:
                    ba:64:f6:71:69:fe:b8:fe:d9:98:84:03:ac:f3:73:
                    c0:34:4e:84:aa:a3:32:5e:a2:9a:9d:9d:f0:19:55:
                    55:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E7:75:47:05:50:74:D1:89:72:51:52:93:A0:9D:75:0E:AC:F6:45
            X509v3 Authority Key Identifier:
                keyid:F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ce:33:22:ab:7e:b8:2b:8c:30:b9:46:1b:6e:eb:c4:f1:7f:
         18:a2:1c:a0:7a:65:da:ce:67:b3:e1:a1:90:c3:fa:f9:07:cc:
         52:60:ab:0a:9c:b3:c2:40:06:5e:7b:a2:a4:d7:ec:a7:a2:5d:
         e4:4e:f7:a3:43:26:6c:2e:da:43:ef:35:64:f7:c5:a3:b0:48:
         87:ed:bb:a3:2f:1a:c1:67:e8:6b:90:02:be:35:a9:d3:a1:19:
         82:78:a8:b7:06:9e:48:b4:9a:0e:d5:99:5c:b6:a4:9f:d5:63:
         1e:fa:2a:87:99:9c:71:3f:c9:db:30:98:d5:c3:ef:1b:6f:d7:
         08:fd:ed:4a:e1:c4:ed:90:dd:df:b9:a1:ec:2f:7c:22:56:94:
         9a:3d:19:01:c3:e3:43:a7:23:6d:74:5f:ab:10:13:11:8c:c1:
         e5:c8:c7:64:78:af:61:19:48:14:5f:be:1f:d2:30:0a:1e:0c:
         32:9c:8c:e4:14:70:28:c1:ea:9b:63:83:5e:43:55:d6:1e:99:
         38:6b:47:41:d6:4a:c6:7a:d4:0d:37:a3:4b:f2:d7:3a:70:41:
         5b:3e:57:26:04:f4:db:e5:9f:a8:e2:be:8a:5d:de:ff:16:e8:
         27:86:35:33:b6:93:fd:e4:a0:9b:f6:ed:81:cc:9c:76:6e:dd:
         0c:6f:0f:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYwNkExMTAvBgNVBAUTKEY2OEUzNERGNzE5MDY3OTIyMkI3NkY3MDNFMDMzN0NB
MUJCOTZGM0UwHhcNMjUwNzA1MDUxMzQxWhcNMjUwNzEyMDUxMzQxWjAYMRYwFAYD
VQQDEw02ODY4YjQ4NS03ODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Z0mi1XG/9dMBnQKrDRnMpnhIK34F3FQaV2+9T53KCZhYa9ipjy6/ZMsJMEw
b2ECIy35CaaxYR96ukrwX7thObDOBAFgWas0RYRMddLsqDpf/ACOe6wlysQycw8w
8ipphiBHA2ki6/xOJ+Rxlefvt5LIx9Floc7Lx6KJxKroLaX76l/eXzFdXDraiqwN
QOAVKj8ClsY7BlxppRGr25PFCvza8+Ku55gM+a3fjlA3oi7CoIhGbjmOyJ971nvo
WyEqjyBWRfBWVpJHUtBwFgy9QJNha8ZsBuvO/nHZo6k/y8i6ZPZxaf64/tmYhAOs
83PANE6EqqMyXqKanZ3wGVVVDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3ndUcF
UHTRiXJRUpOgnXUOrPZFMB8GA1UdIwQYMBaAFPaONN9xkGeSIrdvcD4DN8obuW8+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS81ODcwQTlGNkJC
NDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1SWl0Mjl3UGdNM3lodTVi
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlvNDAzM0dRWjVJaXQyOXdQZ00zeWh1NWJ6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjA2QS81ODcwQTlGNkJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1
SWl0Mjl3UGdNM3lodTViejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQClzjMiq364K4wwuUYbbuvE8X8YohygemXazmez4aGQw/r5B8xSYKsK
nLPCQAZee6Kk1+ynol3kTvejQyZsLtpD7zVk98WjsEiH7bujLxrBZ+hrkAK+NanT
oRmCeKi3Bp5ItJoO1ZlctqSf1WMe+iqHmZxxP8nbMJjVw+8bb9cI/e1K4cTtkN3f
uaHsL3wiVpSaPRkBw+NDpyNtdF+rEBMRjMHlyMdkeK9hGUgUX74f0jAKHgwynIzk
FHAoweqbY4NeQ1XWHpk4a0dB1krGetQNN6NL8tc6cEFbPlcmBPTb5Z+o4r6KXd7/
FugnhjUztpP95KCb9u2BzJx2bt0Mbw+F
-----END CERTIFICATE-----
Generated at Sat Jul 5 22:07:34 2025 by rpki-client