Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
File:                     yMJcY971ZwDWV_xDmUpVH-QMzcc.mft (raw, json)
Hash identifier:          l+no0r2knwdEuIUY2X8X+wR5eFaFLP7LxBIGJVHcESw=
Subject key identifier:   31:74:5C:23:DE:6F:E4:80:15:04:32:94:E5:8B:13:23:18:6D:18:5F
Authority key identifier: C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7
Certificate issuer:       /CN=A9119363/serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
Certificate serial:       0149
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
Manifest number:          0615
Signing time:             Thu 03 Jul 2025 00:34:45 +0000
Manifest this update:     Thu 03 Jul 2025 00:34:44 +0000
Manifest next update:     Thu 10 Jul 2025 00:34:44 +0000
Files and hashes:         1: yMJcY971ZwDWV_xDmUpVH-QMzcc.crl (hash: Da6C95jkMZTwYfxgXWyARP9RgnnJmad2xh7XfWzDTfk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl
                          rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 00:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 329 (0x149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363, serialNumber=C8C25C63DEF56700D657FC43994A551FE40CCDC7
        Validity
            Not Before: Jul  3 00:34:44 2025 GMT
            Not After : Jul 10 00:34:44 2025 GMT
        Subject: CN=6865d024-c19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:d5:9d:62:b0:a3:f3:3f:c0:15:37:7c:89:
                    be:28:62:3a:1b:9a:1f:67:57:5a:de:fc:f8:bd:75:
                    38:62:4d:4d:be:8e:2e:00:d2:f9:21:23:26:15:92:
                    97:f5:45:e1:2e:6b:d0:b8:c8:5a:85:a0:9f:fd:01:
                    bc:cc:be:e7:b6:27:2d:58:7d:b0:2c:1b:8a:59:28:
                    3e:bd:83:1d:61:e8:35:b1:3f:29:3a:7c:d1:0a:ab:
                    09:3b:40:e2:a6:7f:27:fa:c0:60:93:6a:ce:b6:41:
                    74:37:45:26:65:e8:29:83:c0:2a:3e:eb:14:7f:d0:
                    76:af:93:d5:e4:c2:74:c0:c4:c4:55:6a:a0:1f:a7:
                    ee:56:44:8b:17:eb:af:19:df:dd:c7:c9:d6:81:5f:
                    e0:47:c2:45:9d:19:af:b8:d7:00:eb:5e:9a:ba:7c:
                    89:39:2d:10:e3:62:91:3f:1b:11:47:29:d5:38:90:
                    4c:f2:e7:d8:34:b8:6d:6d:da:2d:60:dc:df:1c:39:
                    72:ad:1c:ce:50:ef:eb:37:57:89:75:63:8f:ff:7f:
                    b7:f1:63:ca:bb:0c:e7:8a:90:fe:f2:90:4d:ba:3b:
                    cf:4f:22:c0:3f:5d:01:fb:55:8b:df:0e:44:d5:86:
                    cd:24:c7:73:b4:6a:40:49:6f:d9:c9:c5:fd:59:b5:
                    b3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:74:5C:23:DE:6F:E4:80:15:04:32:94:E5:8B:13:23:18:6D:18:5F
            X509v3 Authority Key Identifier:
                keyid:C8:C2:5C:63:DE:F5:67:00:D6:57:FC:43:99:4A:55:1F:E4:0C:CD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yMJcY971ZwDWV_xDmUpVH-QMzcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/yMJcY971ZwDWV_xDmUpVH-QMzcc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:fb:0a:ae:44:1e:fa:5a:ec:b6:41:94:42:77:3e:45:cc:c6:
         e6:ed:54:90:a9:d6:ed:e0:c2:cb:cd:41:40:01:3b:d0:bb:4e:
         e3:db:4c:5d:bc:55:88:c7:04:f8:a5:a2:b6:63:6a:5c:fd:9a:
         61:73:0b:6c:6a:ff:d0:9d:41:80:bf:87:ab:f3:c6:32:0b:7a:
         96:12:16:de:14:6f:b5:9e:c0:d9:f3:6c:8d:14:fb:92:df:55:
         bf:95:1f:b3:9e:e3:df:d2:d5:cd:8b:93:a8:2d:6a:11:f4:ef:
         34:a3:27:67:9b:e3:35:cd:3c:45:c8:2e:75:ed:67:93:e8:ab:
         d8:ef:e6:b5:db:a7:2b:df:fa:fa:23:6f:16:10:ef:d9:8d:64:
         60:a5:d0:7e:bb:c7:a2:9a:ff:f7:6d:f9:b2:10:ab:e9:25:d3:
         4c:5a:2c:da:72:5f:04:0b:f8:b2:0c:af:35:f3:9f:60:86:bd:
         38:1d:9b:52:f8:40:68:22:94:09:f1:21:62:35:4b:fe:1a:5e:
         d7:90:c7:c2:d6:d0:0f:fd:63:dd:1e:da:2a:7e:c2:89:02:98:
         b9:f2:c3:ed:dc:aa:20:f0:33:84:bb:5e:df:82:f5:97:56:9d:
         c1:2a:95:39:34:26:bf:4f:52:a4:e0:f2:a2:93:7d:11:78:0e:
         68:f4:a3:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkzNjMxMTAvBgNVBAUTKEM4QzI1QzYzREVGNTY3MDBENjU3RkM0Mzk5NEE1NTFG
RTQwQ0NEQzcwHhcNMjUwNzAzMDAzNDQ0WhcNMjUwNzEwMDAzNDQ0WjAYMRYwFAYD
VQQDEw02ODY1ZDAyNC1jMTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs5jVnWKwo/M/wBU3fIm+KGI6G5ofZ1da3vz4vXU4Yk1Nvo4uANL5ISMmFZKX
9UXhLmvQuMhahaCf/QG8zL7ntictWH2wLBuKWSg+vYMdYeg1sT8pOnzRCqsJO0Di
pn8n+sBgk2rOtkF0N0UmZegpg8AqPusUf9B2r5PV5MJ0wMTEVWqgH6fuVkSLF+uv
Gd/dx8nWgV/gR8JFnRmvuNcA616aunyJOS0Q42KRPxsRRynVOJBM8ufYNLhtbdot
YNzfHDlyrRzOUO/rN1eJdWOP/3+38WPKuwznipD+8pBNujvPTyLAP10B+1WL3w5E
1YbNJMdztGpASW/ZycX9WbWzZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDF0XCPe
b+SAFQQylOWLEyMYbRhfMB8GA1UdIwQYMBaAFMjCXGPe9WcA1lf8Q5lKVR/kDM3H
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTM2My8zMUVBREZBNDVD
QkExMUVDOEFBMTNFMjRDNEY5QUUwMi95TUpjWTk3MVp3RFdWX3hEbVVwVkgtUU16
Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lNSmNZOTcxWndEV1ZfeERtVXBWSC1RTXpjYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTM2My8zMUVBREZBNDVDQkExMUVDOEFBMTNFMjRDNEY5QUUwMi95TUpjWTk3MVp3
RFdWX3hEbVVwVkgtUU16Y2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDE+wquRB76Wuy2QZRCdz5FzMbm7VSQqdbt4MLLzUFAATvQu07j20xd
vFWIxwT4paK2Y2pc/Zphcwtsav/QnUGAv4er88YyC3qWEhbeFG+1nsDZ82yNFPuS
31W/lR+znuPf0tXNi5OoLWoR9O80oydnm+M1zTxFyC517WeT6KvY7+a126cr3/r6
I28WEO/ZjWRgpdB+u8eimv/3bfmyEKvpJdNMWizacl8EC/iyDK81859ghr04HZtS
+EBoIpQJ8SFiNUv+Gl7XkMfC1tAP/WPdHtoqfsKJApi58sPt3Kog8DOEu17fgvWX
Vp3BKpU5NCa/T1Kk4PKik30ReA5o9KPK
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:53:15 2025 by rpki-client