Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft
File:                     xqIW5CMmizknfcEi8-Gq2GxtmkM.mft (raw, json)
Hash identifier:          xw7a6no2pH7NNxLcsC/T24YWjt55SOw6zMc1+DN4rH4=
Subject key identifier:   BA:B2:97:A5:2E:BE:A7:BF:10:42:8A:4E:DB:75:83:FC:4A:DB:01:65
Authority key identifier: C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43
Certificate issuer:       /CN=A9135FB6/serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43
Certificate serial:       8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft
Manifest number:          8B
Signing time:             Sat 23 Aug 2025 06:47:33 +0000
Manifest this update:     Sat 23 Aug 2025 06:47:33 +0000
Manifest next update:     Sat 30 Aug 2025 06:47:33 +0000
Files and hashes:         1: xqIW5CMmizknfcEi8-Gq2GxtmkM.crl (hash: rE7mGK8/7Nvuh1+8IhkghNJHiu+zB+iwXphWO6hIF/4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl
                          rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:47:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135FB6, serialNumber=C6A216E423268B39277DC122F3E1AAD86C6D9A43
        Validity
            Not Before: Aug 23 06:47:33 2025 GMT
            Not After : Aug 30 06:47:33 2025 GMT
        Subject: CN=68a96405-19b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:7b:a3:3f:6c:9d:50:55:7b:e9:0f:c2:46:
                    6c:b5:a0:e8:05:e7:b8:85:56:42:a2:4d:e5:ef:d5:
                    8e:22:2f:45:70:1c:8c:ae:ef:e3:28:90:5e:0b:4e:
                    ab:c9:a3:0b:2b:7b:0c:cc:f4:94:02:3d:ba:c1:13:
                    5e:26:b8:a3:68:b1:ba:46:3c:48:4d:58:a4:a3:f1:
                    de:26:93:95:ee:0b:8c:a2:74:59:b9:94:33:c2:38:
                    1e:bb:a3:6a:85:4f:e8:4a:66:65:60:36:4e:ab:f7:
                    50:f7:0f:98:9f:6b:65:98:ef:96:13:6b:f4:b2:8d:
                    f1:63:c8:aa:d6:5b:b2:a2:1e:3a:de:3f:4c:d7:b5:
                    3a:d5:24:29:eb:ff:2a:b4:c9:88:28:79:aa:4d:e1:
                    56:0c:4c:ce:bb:05:07:fa:43:4e:98:ef:62:49:4e:
                    d6:94:ee:ee:2a:d4:90:b7:ca:30:85:bc:96:8b:ce:
                    48:c9:5b:5f:f5:8f:f8:3a:e4:84:24:77:a1:8b:98:
                    fa:ee:f8:6e:22:36:28:c7:4c:ec:46:d5:f3:6d:89:
                    6c:3a:3a:84:fc:8f:31:6c:9e:a6:68:20:a9:db:41:
                    f2:0c:c8:a3:4d:3c:7f:8a:f6:c7:56:63:0d:61:bc:
                    ce:b5:d0:da:99:8d:86:fd:61:64:5c:f5:ea:cc:2c:
                    3d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B2:97:A5:2E:BE:A7:BF:10:42:8A:4E:DB:75:83:FC:4A:DB:01:65
            X509v3 Authority Key Identifier:
                keyid:C6:A2:16:E4:23:26:8B:39:27:7D:C1:22:F3:E1:AA:D8:6C:6D:9A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xqIW5CMmizknfcEi8-Gq2GxtmkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8EC35DE4AC6411EFB684267BC4F9AE02/xqIW5CMmizknfcEi8-Gq2GxtmkM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:10:7c:ef:0b:52:0d:c0:5a:7a:f2:50:bf:7c:47:48:d7:b7:
         e0:f2:0a:5c:45:fa:97:30:23:22:a1:32:0d:56:98:fc:a8:f1:
         81:af:91:2e:0b:da:1b:7a:c7:d8:89:95:8b:b1:08:55:56:82:
         00:6f:f1:15:52:64:23:2e:bf:9a:12:6d:ca:4e:56:4b:d2:1c:
         88:77:54:98:11:2b:b0:1d:8c:4b:74:45:0b:5c:8d:11:d2:f4:
         f6:31:27:db:c0:be:6e:f8:46:f3:d2:7c:51:5d:96:7c:68:53:
         55:f5:48:4d:d0:46:fe:e9:76:71:40:f0:5e:57:9e:56:1e:15:
         5f:be:b1:d3:22:bf:85:13:00:28:ea:62:e9:39:0e:46:28:f6:
         36:68:0f:26:e5:cd:cb:15:cf:b5:f4:29:4c:19:30:a2:43:1b:
         82:4a:91:44:a6:c7:1d:f1:88:22:a6:90:20:00:d5:80:83:39:
         af:af:3a:b6:c1:28:a4:a3:2c:8c:e7:d1:30:7f:de:48:7b:19:
         ab:10:13:91:6e:a0:97:ae:c3:7b:6d:59:63:7c:a3:a0:53:12:
         14:df:d6:6a:cb:c1:1b:aa:15:c9:9a:42:bf:4b:55:74:80:eb:
         f4:c5:6a:96:87:92:1b:15:2d:c1:90:7c:17:08:da:9b:92:b7:
         58:9e:77:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzVGQjYxMTAvBgNVBAUTKEM2QTIxNkU0MjMyNjhCMzkyNzdEQzEyMkYzRTFBQUQ4
NkM2RDlBNDMwHhcNMjUwODIzMDY0NzMzWhcNMjUwODMwMDY0NzMzWjAYMRYwFAYD
VQQDEw02OGE5NjQwNS0xOWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0rJ7oz9snVBVe+kPwkZstaDoBee4hVZCok3l79WOIi9FcByMru/jKJBeC06r
yaMLK3sMzPSUAj26wRNeJrijaLG6RjxITViko/HeJpOV7guMonRZuZQzwjgeu6Nq
hU/oSmZlYDZOq/dQ9w+Yn2tlmO+WE2v0so3xY8iq1luyoh463j9M17U61SQp6/8q
tMmIKHmqTeFWDEzOuwUH+kNOmO9iSU7WlO7uKtSQt8owhbyWi85IyVtf9Y/4OuSE
JHehi5j67vhuIjYox0zsRtXzbYlsOjqE/I8xbJ6maCCp20HyDMijTTx/ivbHVmMN
YbzOtdDamY2G/WFkXPXqzCw99wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqyl6Uu
vqe/EEKKTtt1g/xK2wFlMB8GA1UdIwQYMBaAFMaiFuQjJos5J33BIvPhqthsbZpD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNUZCNi84RUMzNURFNEFD
NjQxMUVGQjY4NDI2N0JDNEY5QUUwMi94cUlXNUNNbWl6a25mY0VpOC1HcTJHeHRt
a00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hxSVc1Q01taXprbmZjRWk4LUdxMkd4dG1rTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NUZCNi84RUMzNURFNEFDNjQxMUVGQjY4NDI2N0JDNEY5QUUwMi94cUlXNUNNbWl6
a25mY0VpOC1HcTJHeHRta00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCEEHzvC1INwFp68lC/fEdI17fg8gpcRfqXMCMioTINVpj8qPGBr5Eu
C9obesfYiZWLsQhVVoIAb/EVUmQjLr+aEm3KTlZL0hyId1SYESuwHYxLdEULXI0R
0vT2MSfbwL5u+Ebz0nxRXZZ8aFNV9UhN0Eb+6XZxQPBeV55WHhVfvrHTIr+FEwAo
6mLpOQ5GKPY2aA8m5c3LFc+19ClMGTCiQxuCSpFEpscd8YgippAgANWAgzmvrzq2
wSikoyyM59Ewf95IexmrEBORbqCXrsN7bVljfKOgUxIU39Zqy8EbqhXJmkK/S1V0
gOv0xWqWh5IbFS3BkHwXCNqbkrdYnncI
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:25:54 2025 by rpki-client