Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
File:                     MekS6f9zr1vER2k1KNclslorF_c.mft (raw, json)
Hash identifier:          dbOa36w7PHjgNoOipMJlCMIG3Q2mPWV6d+7yaUz/ebU=
Subject key identifier:   D0:9A:71:F8:5A:12:71:35:23:CC:46:78:26:29:A2:6E:56:C5:05:D5
Authority key identifier: 31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7
Certificate issuer:       /CN=A9127673/serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
Certificate serial:       14E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
Manifest number:          14DD
Signing time:             Sat 28 Jun 2025 16:41:54 +0000
Manifest this update:     Sat 28 Jun 2025 16:41:54 +0000
Manifest next update:     Sat 05 Jul 2025 16:41:54 +0000
Files and hashes:         1: MekS6f9zr1vER2k1KNclslorF_c.crl (hash: jMfkt5rVLSOH3V2r1qhZ2s0w/ZbTzkT2kOwv+TJwIAM=)
                          2: 9C524DA858CE11E891382260C4F9AE02.roa (hash: pz/sh5ewtugJGaQEjLj/4LhT6VQlQpXzMK/OXn+CHaU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl
                          rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 16:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5352 (0x14e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127673, serialNumber=31E912E9FF73AF5BC447693528D725B25A2B17F7
        Validity
            Not Before: Jun 28 16:41:54 2025 GMT
            Not After : Jul  5 16:41:54 2025 GMT
        Subject: CN=68601b52-02ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:88:2d:8c:b4:44:72:f4:3a:8a:8f:0e:a3:07:
                    ff:c2:6c:9e:77:a6:7e:13:72:72:96:20:1d:35:af:
                    64:6e:78:c0:04:39:7d:f8:bb:9c:23:b1:c3:04:6e:
                    83:78:9f:9c:0b:cf:97:a3:43:cc:77:33:2e:c3:3a:
                    4b:58:d2:43:74:de:70:72:21:22:17:85:b2:42:25:
                    36:9f:36:79:c5:e0:c6:f0:ea:78:88:cf:40:fc:2d:
                    1e:1e:ff:ec:81:83:b3:b3:8a:6d:9d:eb:4b:9a:4f:
                    49:5a:92:bf:47:05:41:3d:4f:31:95:a0:a8:32:8d:
                    91:11:21:09:4c:8b:94:71:ff:46:8f:37:32:87:5a:
                    b2:38:96:4e:f2:f1:bf:ba:28:39:32:a7:e7:27:65:
                    a0:a5:43:a4:fd:21:5b:35:ed:62:99:c8:97:8f:96:
                    5c:d3:b4:f9:d2:27:59:fc:79:93:60:92:6d:37:02:
                    d5:93:97:2e:89:5e:31:65:15:de:e1:73:a2:8f:4f:
                    45:be:0f:8a:7f:92:97:45:1e:8e:ce:8b:67:6b:16:
                    ec:8e:db:6c:a3:c7:7c:53:c6:da:49:1e:4e:fe:26:
                    fc:67:b8:84:be:57:61:a0:93:2f:de:e9:9d:ae:71:
                    f6:c9:36:37:b3:c1:5c:3e:2b:2f:40:64:61:c6:45:
                    7a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9A:71:F8:5A:12:71:35:23:CC:46:78:26:29:A2:6E:56:C5:05:D5
            X509v3 Authority Key Identifier:
                keyid:31:E9:12:E9:FF:73:AF:5B:C4:47:69:35:28:D7:25:B2:5A:2B:17:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MekS6f9zr1vER2k1KNclslorF_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127673/03F4309A58CD11E8BB2D9E5DC4F9AE02/MekS6f9zr1vER2k1KNclslorF_c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:75:99:b0:b0:3f:2a:88:89:f9:db:4f:d9:03:68:3a:9a:7c:
         86:0e:ad:d2:88:b8:17:87:0b:5f:b6:bc:85:52:00:41:e5:74:
         75:0c:a0:0b:5f:9d:98:48:ae:c3:c2:cc:da:5a:90:5e:d0:92:
         18:04:a8:ba:62:ab:24:03:c4:19:e5:9a:52:ad:af:c3:9c:cc:
         f4:81:a4:7d:26:d5:ef:30:0c:df:8f:a0:c3:a8:9b:7b:de:11:
         39:76:6b:5c:ed:52:6a:12:20:ca:b3:36:f2:99:81:e4:b0:13:
         8d:72:23:06:dc:6d:ed:a5:c8:c5:90:9b:4b:80:dc:3a:15:50:
         20:98:f4:e3:23:0b:c9:6f:9d:3b:8e:ba:f4:27:72:ac:95:b2:
         02:44:5b:c0:23:be:e8:50:4b:1c:ab:ba:b7:72:39:58:cb:63:
         cd:e3:e3:39:7c:cd:75:23:87:b5:b9:37:8b:9c:66:59:62:c3:
         b1:67:6a:58:38:5c:65:71:ec:9b:f4:ce:0b:31:87:6a:7c:e1:
         f8:76:e6:2e:9c:ae:bd:ea:b8:5d:04:2f:2f:6c:47:ce:f8:e1:
         c8:4e:71:21:aa:f1:b4:05:df:36:3b:76:76:2b:fd:8e:d9:bc:
         b0:22:18:25:08:91:96:7d:6e:a1:0e:eb:ba:b1:a7:6e:b9:f6:
         f0:ca:38:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc2NzMxMTAvBgNVBAUTKDMxRTkxMkU5RkY3M0FGNUJDNDQ3NjkzNTI4RDcyNUIy
NUEyQjE3RjcwHhcNMjUwNjI4MTY0MTU0WhcNMjUwNzA1MTY0MTU0WjAYMRYwFAYD
VQQDEw02ODYwMWI1Mi0wMmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlYgtjLREcvQ6io8Oowf/wmyed6Z+E3JyliAdNa9kbnjABDl9+LucI7HDBG6D
eJ+cC8+Xo0PMdzMuwzpLWNJDdN5wciEiF4WyQiU2nzZ5xeDG8Op4iM9A/C0eHv/s
gYOzs4ptnetLmk9JWpK/RwVBPU8xlaCoMo2RESEJTIuUcf9Gjzcyh1qyOJZO8vG/
uig5MqfnJ2WgpUOk/SFbNe1imciXj5Zc07T50idZ/HmTYJJtNwLVk5cuiV4xZRXe
4XOij09Fvg+Kf5KXRR6Ozotnaxbsjttso8d8U8baSR5O/ib8Z7iEvldhoJMv3umd
rnH2yTY3s8FcPisvQGRhxkV6CQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNCacfha
EnE1I8xGeCYpom5WxQXVMB8GA1UdIwQYMBaAFDHpEun/c69bxEdpNSjXJbJaKxf3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzY3My8wM0Y0MzA5QTU4
Q0QxMUU4QkIyRDlFNURDNEY5QUUwMi9NZWtTNmY5enIxdkVSMmsxS05jbHNsb3JG
X2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01la1M2Zjl6cjF2RVIyazFLTmNsc2xvckZfYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzY3My8wM0Y0MzA5QTU4Q0QxMUU4QkIyRDlFNURDNEY5QUUwMi9NZWtTNmY5enIx
dkVSMmsxS05jbHNsb3JGX2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCodZmwsD8qiIn520/ZA2g6mnyGDq3SiLgXhwtftryFUgBB5XR1DKAL
X52YSK7DwszaWpBe0JIYBKi6YqskA8QZ5ZpSra/DnMz0gaR9JtXvMAzfj6DDqJt7
3hE5dmtc7VJqEiDKszbymYHksBONciMG3G3tpcjFkJtLgNw6FVAgmPTjIwvJb507
jrr0J3KslbICRFvAI77oUEscq7q3cjlYy2PN4+M5fM11I4e1uTeLnGZZYsOxZ2pY
OFxlceyb9M4LMYdqfOH4duYunK696rhdBC8vbEfO+OHITnEhqvG0Bd82O3Z2K/2O
2bywIhglCJGWfW6hDuu6saduufbwyjjO
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:45:17 2025 by rpki-client