Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
File:                     agTrNKPf8GX9DvMS4s44P6tQJN4.mft (raw, json)
Hash identifier:          +HRE7/kEhSeBWd2kLyliwaT0lb/FA4PP6PycoNOK0Uc=
Subject key identifier:   72:09:9C:E8:30:6E:DA:30:29:63:84:EB:5D:6B:F2:97:27:8F:3C:C3
Authority key identifier: 6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE
Certificate issuer:       /CN=A911691A/serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
Certificate serial:       79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
Manifest number:          79
Signing time:             Sun 29 Jun 2025 05:49:30 +0000
Manifest this update:     Sun 29 Jun 2025 05:49:29 +0000
Manifest next update:     Sun 06 Jul 2025 05:49:29 +0000
Files and hashes:         1: agTrNKPf8GX9DvMS4s44P6tQJN4.crl (hash: eQhw5f7BCaPjYmUV9U6iir3KVXiyo2S7UOe3YWMjv4Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl
                          rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 05:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911691A, serialNumber=6A04EB34A3DFF065FD0EF312E2CE383FAB5024DE
        Validity
            Not Before: Jun 29 05:49:29 2025 GMT
            Not After : Jul  6 05:49:29 2025 GMT
        Subject: CN=6860d3ea-3bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c0:1b:06:4a:d8:65:91:f1:c9:f7:94:d9:b0:
                    fc:d3:74:7c:2b:f2:b8:ba:28:df:95:64:2d:05:51:
                    f2:b4:75:42:1d:64:33:64:52:cb:32:e8:69:68:5d:
                    49:e2:f7:b2:90:e6:85:b8:04:63:82:21:e3:27:20:
                    60:91:eb:dc:18:94:ce:f0:40:97:ea:15:e7:7d:b9:
                    ec:d4:06:51:6a:b0:b0:cc:0e:22:ad:99:db:6d:0f:
                    90:57:1b:e7:85:97:78:75:a8:8f:c4:27:8e:49:b5:
                    7e:76:22:40:48:a7:89:37:a4:90:a1:f8:d4:cf:71:
                    b0:59:72:1c:70:50:3c:41:66:e8:12:3a:f1:a0:90:
                    0b:57:bc:22:7e:40:40:a4:64:01:c7:4c:99:f2:fd:
                    56:87:2b:7e:46:9a:f7:39:7f:44:3d:82:d5:d2:7f:
                    cf:b0:56:8d:8c:40:6b:df:f2:19:43:c5:dd:13:19:
                    e1:6f:f3:34:75:75:f6:e0:32:17:49:43:b8:d5:a5:
                    5a:8b:60:0e:69:af:35:35:b3:5e:e4:d1:46:d0:0c:
                    9d:a5:7f:bf:ce:25:8e:1e:30:c6:1a:40:20:84:de:
                    e1:f7:77:a4:fb:bf:c4:55:f0:ea:52:54:46:03:01:
                    0b:1a:e0:4e:d5:e6:89:9c:61:e9:cf:39:15:f3:1f:
                    f9:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:09:9C:E8:30:6E:DA:30:29:63:84:EB:5D:6B:F2:97:27:8F:3C:C3
            X509v3 Authority Key Identifier:
                keyid:6A:04:EB:34:A3:DF:F0:65:FD:0E:F3:12:E2:CE:38:3F:AB:50:24:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/agTrNKPf8GX9DvMS4s44P6tQJN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911691A/47893178A19D11EFBEB5697DC4F9AE02/agTrNKPf8GX9DvMS4s44P6tQJN4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:d7:ff:e7:79:fd:e8:ee:64:e8:5a:0c:5b:bb:7f:1b:c2:6b:
         56:01:63:62:78:b5:de:9c:de:b8:cd:3b:7c:23:87:84:de:13:
         f0:d4:77:aa:ff:60:aa:fd:9b:90:21:f6:12:44:16:0d:4a:fe:
         22:d1:37:83:e9:54:fe:75:7e:5e:a5:2c:96:19:d5:57:d8:3a:
         5e:3e:c0:bd:36:89:c6:46:0c:8b:30:72:7b:10:31:37:cf:a8:
         2d:17:7e:df:40:7a:03:ca:a8:00:be:d8:95:8a:fd:ad:e4:48:
         9a:76:7c:d7:46:cf:e8:4b:6b:f9:e3:b7:80:a7:32:16:6b:4a:
         95:9e:08:b7:e1:5e:b7:0f:f2:40:be:5a:fb:ce:d9:7e:91:0c:
         0b:17:b5:ad:e4:26:39:70:64:f3:8b:16:56:45:e3:01:63:48:
         99:bb:b0:7d:4f:54:9d:a0:2f:0c:fe:10:21:07:6d:d3:29:41:
         6a:db:36:10:95:53:2e:7f:17:ef:2d:f5:87:fd:3b:7d:c5:77:
         77:eb:60:cc:d7:36:9d:8d:37:b4:ad:f1:ee:78:cc:ae:8f:fa:
         00:6e:ab:74:80:74:59:d0:17:d8:68:77:26:71:a0:af:7e:25:
         b4:3c:35:9f:6c:c5:1d:e1:25:24:2c:95:7f:3a:11:05:3b:e6:
         88:d3:6f:d2
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx
NjkxQTExMC8GA1UEBRMoNkEwNEVCMzRBM0RGRjA2NUZEMEVGMzEyRTJDRTM4M0ZB
QjUwMjRERTAeFw0yNTA2MjkwNTQ5MjlaFw0yNTA3MDYwNTQ5MjlaMBgxFjAUBgNV
BAMTDTY4NjBkM2VhLTNiY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDAwBsGSthlkfHJ95TZsPzTdHwr8ri6KN+VZC0FUfK0dUIdZDNkUssy6GloXUni
97KQ5oW4BGOCIeMnIGCR69wYlM7wQJfqFed9uezUBlFqsLDMDiKtmdttD5BXG+eF
l3h1qI/EJ45JtX52IkBIp4k3pJCh+NTPcbBZchxwUDxBZugSOvGgkAtXvCJ+QECk
ZAHHTJny/VaHK35Gmvc5f0Q9gtXSf8+wVo2MQGvf8hlDxd0TGeFv8zR1dfbgMhdJ
Q7jVpVqLYA5przU1s17k0UbQDJ2lf7/OJY4eMMYaQCCE3uH3d6T7v8RV8OpSVEYD
AQsa4E7V5omcYenPORXzH/n/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcgmc6DBu
2jApY4TrXWvylyePPMMwHwYDVR0jBBgwFoAUagTrNKPf8GX9DvMS4s44P6tQJN4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2OTFBLzQ3ODkzMTc4QTE5
RDExRUZCRUI1Njk3REM0RjlBRTAyL2FnVHJOS1BmOEdYOUR2TVM0czQ0UDZ0UUpO
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvYWdUck5LUGY4R1g5RHZNUzRzNDRQNnRRSk40LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE2
OTFBLzQ3ODkzMTc4QTE5RDExRUZCRUI1Njk3REM0RjlBRTAyL2FnVHJOS1BmOEdY
OUR2TVM0czQ0UDZ0UUpONC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMbX/+d5/ejuZOhaDFu7fxvCa1YBY2J4td6c3rjNO3wjh4TeE/DUd6r/
YKr9m5Ah9hJEFg1K/iLRN4PpVP51fl6lLJYZ1VfYOl4+wL02icZGDIswcnsQMTfP
qC0Xft9AegPKqAC+2JWK/a3kSJp2fNdGz+hLa/njt4CnMhZrSpWeCLfhXrcP8kC+
WvvO2X6RDAsXta3kJjlwZPOLFlZF4wFjSJm7sH1PVJ2gLwz+ECEHbdMpQWrbNhCV
Uy5/F+8t9Yf9O33Fd3frYMzXNp2NN7St8e54zK6P+gBuq3SAdFnQF9hodyZxoK9+
JbQ8NZ9sxR3hJSQslX86EQU75ojTb9I=
-----END CERTIFICATE-----
Generated at Tue Jul 1 03:50:40 2025 by rpki-client