Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
File:                     VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft (raw, json)
Hash identifier:          i1+yC3SKudb7bjrqhFczY7nYrU4WObuAcpfE8tVfZ5g=
Subject key identifier:   13:00:FE:02:5B:04:3E:14:EA:2D:FE:38:08:4E:B7:57:46:23:28:39
Authority key identifier: 56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC
Certificate issuer:       /CN=A91203DF/serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
Certificate serial:       0DA4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
Manifest number:          0D93
Signing time:             Wed 02 Jul 2025 18:10:14 +0000
Manifest this update:     Wed 02 Jul 2025 18:10:14 +0000
Manifest next update:     Wed 09 Jul 2025 18:10:14 +0000
Files and hashes:         1: VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl (hash: NOTjG02uq4wxFYW4H67Nt5zcj36quY13lShjWY8fdY0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl
                          rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3492 (0xda4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91203DF, serialNumber=56790B8C9507D9D4F3900950D329E275747767AC
        Validity
            Not Before: Jul  2 18:10:14 2025 GMT
            Not After : Jul  9 18:10:14 2025 GMT
        Subject: CN=68657606-25e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:53:fb:10:7b:80:e7:63:bf:43:4b:8b:c0:42:
                    8b:32:36:9a:8c:73:a8:f7:1d:50:af:0f:f8:39:19:
                    07:d6:29:13:dc:0a:3c:9d:dc:ee:7a:87:64:4c:b9:
                    e8:13:ed:5d:bc:f8:63:38:0c:41:0a:9d:4a:3b:b7:
                    62:a6:eb:c0:ef:70:c7:ce:49:22:a6:2c:91:6c:be:
                    3a:4d:1d:98:97:3f:ad:1a:7c:d9:af:79:e1:39:ee:
                    71:9e:08:8a:09:34:3c:26:60:78:96:94:da:23:54:
                    f6:af:2d:2b:bd:19:54:0d:9d:d5:e6:3c:f0:95:3e:
                    c4:c1:97:11:21:ba:bf:e5:3c:0f:5a:70:23:ba:02:
                    ce:cd:c3:08:9f:74:eb:94:87:6d:3d:f4:8e:14:20:
                    26:44:df:b9:58:f3:4b:2d:c5:68:ca:09:ba:0d:e1:
                    66:e4:22:03:7f:1d:72:55:59:8a:ef:22:c7:69:58:
                    aa:ef:ba:67:24:f7:62:5c:c1:03:fc:f7:0d:37:76:
                    cb:71:d0:1a:03:f7:7c:33:a8:b2:ad:3d:7f:3c:7b:
                    c7:c1:b5:fd:5a:47:dc:cc:1f:3b:16:c1:e5:2e:35:
                    ac:26:4c:02:1d:84:0c:8a:a8:c8:a4:37:bf:6c:c9:
                    c4:63:bc:3c:94:2b:4e:10:57:86:a0:fe:9e:a1:41:
                    3d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:00:FE:02:5B:04:3E:14:EA:2D:FE:38:08:4E:B7:57:46:23:28:39
            X509v3 Authority Key Identifier:
                keyid:56:79:0B:8C:95:07:D9:D4:F3:90:09:50:D3:29:E2:75:74:77:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91203DF/927397B4CA3411E996837E56C4F9AE02/VnkLjJUH2dTzkAlQ0ynidXR3Z6w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:65:b7:3e:f7:61:ff:54:3e:24:fb:99:9c:be:e0:e3:5d:bb:
         67:25:26:e5:75:cd:e9:1b:8d:0b:84:d5:a3:e5:d0:d8:9f:89:
         11:d9:09:7d:3b:5d:f8:dd:20:ae:eb:b8:c5:74:67:43:78:3a:
         62:db:76:b1:41:49:46:9f:76:68:f6:3d:9c:fd:24:8d:31:8b:
         ec:d1:6c:7b:1c:32:cb:17:be:2b:08:a9:08:bd:f9:20:ff:f8:
         dd:bb:b8:42:e8:3e:87:24:21:b3:f6:21:14:73:4b:9f:d6:df:
         2a:6c:9c:ec:5b:38:31:3b:c8:8c:83:bd:3f:b5:08:05:78:00:
         c2:2c:a3:49:1d:06:43:67:b1:e9:35:fd:67:1d:69:92:89:27:
         5a:9b:86:50:1a:9d:02:38:10:ab:21:a0:cc:f5:3b:fb:93:67:
         1d:7b:97:f0:2c:87:30:ff:fc:52:23:28:eb:4c:51:11:b3:02:
         47:b6:fb:e1:7c:3c:51:50:82:65:5d:eb:de:50:aa:9d:b4:be:
         4a:5c:d9:3f:55:1f:54:cc:5c:92:96:b3:e8:12:54:7d:fd:06:
         7b:fa:04:d1:93:eb:29:10:9f:64:52:8a:f5:6e:cb:ce:fe:d1:
         02:76:a9:ab:b3:b4:f2:7b:d2:66:72:7e:37:a6:24:ff:be:9b:
         fc:eb:fe:1d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjAzREYxMTAvBgNVBAUTKDU2NzkwQjhDOTUwN0Q5RDRGMzkwMDk1MEQzMjlFMjc1
NzQ3NzY3QUMwHhcNMjUwNzAyMTgxMDE0WhcNMjUwNzA5MTgxMDE0WjAYMRYwFAYD
VQQDEw02ODY1NzYwNi0yNWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA21P7EHuA52O/Q0uLwEKLMjaajHOo9x1Qrw/4ORkH1ikT3Ao8ndzueodkTLno
E+1dvPhjOAxBCp1KO7dipuvA73DHzkkipiyRbL46TR2Ylz+tGnzZr3nhOe5xngiK
CTQ8JmB4lpTaI1T2ry0rvRlUDZ3V5jzwlT7EwZcRIbq/5TwPWnAjugLOzcMIn3Tr
lIdtPfSOFCAmRN+5WPNLLcVoygm6DeFm5CIDfx1yVVmK7yLHaViq77pnJPdiXMED
/PcNN3bLcdAaA/d8M6iyrT1/PHvHwbX9WkfczB87FsHlLjWsJkwCHYQMiqjIpDe/
bMnEY7w8lCtOEFeGoP6eoUE9SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMA/gJb
BD4U6i3+OAhOt1dGIyg5MB8GA1UdIwQYMBaAFFZ5C4yVB9nU85AJUNMp4nV0d2es
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMDNERi85MjczOTdCNENB
MzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJkVHprQWxRMHluaWRYUjNa
NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Zua0xqSlVIMmRUemtBbFEweW5pZFhSM1o2dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MDNERi85MjczOTdCNENBMzQxMUU5OTY4MzdFNTZDNEY5QUUwMi9WbmtMakpVSDJk
VHprQWxRMHluaWRYUjNaNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC4Zbc+92H/VD4k+5mcvuDjXbtnJSbldc3pG40LhNWj5dDYn4kR2Ql9
O1343SCu67jFdGdDeDpi23axQUlGn3Zo9j2c/SSNMYvs0Wx7HDLLF74rCKkIvfkg
//jdu7hC6D6HJCGz9iEUc0uf1t8qbJzsWzgxO8iMg70/tQgFeADCLKNJHQZDZ7Hp
Nf1nHWmSiSdam4ZQGp0COBCrIaDM9Tv7k2cde5fwLIcw//xSIyjrTFERswJHtvvh
fDxRUIJlXeveUKqdtL5KXNk/VR9UzFySlrPoElR9/QZ7+gTRk+spEJ9kUor1bsvO
/tECdqmrs7Tye9Jmcn43piT/vpv86/4d
-----END CERTIFICATE-----
Generated at Wed Jul 2 20:38:31 2025 by rpki-client