Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
File:                     06m0znk41yolUFSgwIW_eI6wabA.mft (raw, json)
Hash identifier:          csZDKlsdGHm6MnZOE5sF+yKnB24r49OSXSbfRMuCzOU=
Subject key identifier:   C1:55:DD:84:7D:49:4E:92:57:3A:69:57:F9:F4:54:4C:C2:A5:FC:40
Authority key identifier: D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0
Certificate issuer:       /CN=A914331D/serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
Certificate serial:       08FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
Manifest number:          08F7
Signing time:             Wed 02 Jul 2025 20:37:22 +0000
Manifest this update:     Wed 02 Jul 2025 20:37:22 +0000
Manifest next update:     Wed 09 Jul 2025 20:37:22 +0000
Files and hashes:         1: 06m0znk41yolUFSgwIW_eI6wabA.crl (hash: gADduWVAbZt0DWftAG+R/+jweR4gb8L/jf784fvtpMw=)
                          2: 425602A0AD2111EA9510AC0DC4F9AE02.roa (hash: eiGSH0P7OA/wuySnx+L4WnNP4YI49fVfK6qem5HgBnk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl
                          rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2303 (0x8ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914331D, serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
        Validity
            Not Before: Jul  2 20:37:22 2025 GMT
            Not After : Jul  9 20:37:22 2025 GMT
        Subject: CN=68659882-ae54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a4:c5:fb:b1:bc:bb:9f:2c:76:49:62:6d:ba:
                    04:98:56:fc:ef:82:93:da:ee:10:3c:24:09:13:e0:
                    17:5f:ed:62:5e:ef:db:3e:d7:ff:d9:23:53:cb:48:
                    59:63:4c:ff:0b:35:41:79:fa:f9:ba:73:1e:25:af:
                    4b:8a:7d:97:03:cf:4c:99:31:41:c0:f2:93:15:78:
                    a6:4d:77:47:ce:0e:3c:57:cf:fb:3a:a9:41:8c:61:
                    ef:b8:55:00:a8:4e:5e:ff:db:d5:8c:f3:fc:e4:06:
                    96:f6:d7:4b:4c:d2:4c:75:ef:75:c1:8d:57:6d:2a:
                    cb:3a:c6:80:30:9e:d8:d3:30:ef:1f:40:bd:0d:cb:
                    2e:bc:97:ae:1b:55:b8:7f:8c:49:65:8f:3a:76:96:
                    56:d9:85:c8:0e:83:eb:3d:51:7d:e0:41:f2:c8:42:
                    3b:54:ae:58:9e:64:f5:5c:53:ef:54:74:db:29:94:
                    41:35:4c:f3:89:75:9b:90:28:89:42:e1:b2:c8:b5:
                    e6:c1:a8:9b:6d:a6:9f:28:15:6e:7b:50:48:87:b3:
                    04:19:57:a3:ac:8a:c9:d3:7f:b2:33:13:84:29:93:
                    6b:ea:8b:88:a8:91:87:92:70:8f:aa:04:31:78:2f:
                    91:06:27:68:49:b8:83:1c:27:24:22:ca:7b:a0:37:
                    95:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:55:DD:84:7D:49:4E:92:57:3A:69:57:F9:F4:54:4C:C2:A5:FC:40
            X509v3 Authority Key Identifier:
                keyid:D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0b:ea:c0:70:60:fb:7a:08:75:6d:25:5a:e4:8a:8b:42:3a:
         90:52:e5:47:30:42:6f:36:6e:78:3e:6b:74:10:69:d3:53:a9:
         7d:43:46:06:d7:14:75:7f:0c:67:c3:b6:ed:e4:d7:11:7f:33:
         43:18:17:84:cf:18:69:13:c1:49:71:da:f2:e9:25:3a:f1:9e:
         36:db:2c:af:6d:33:d0:41:25:cc:a2:a7:99:1f:70:49:28:8d:
         fe:9e:58:4d:0a:97:7a:8b:3e:5e:22:94:be:f6:e1:fe:de:d3:
         2b:1d:af:e2:46:87:09:ed:78:bf:8b:19:17:65:9c:73:7b:30:
         7a:c0:4d:09:75:be:30:b3:d5:f7:bd:9e:79:e4:2d:5f:56:61:
         02:cb:07:9b:f3:c4:9e:45:c5:0f:d3:17:0d:db:66:5d:bf:a5:
         d4:f0:07:f8:32:78:88:71:60:e0:e6:df:78:16:50:8c:df:c3:
         7c:4a:46:7d:a1:62:e3:e0:1c:45:eb:37:e8:e2:fc:98:47:9d:
         1c:11:02:e4:ad:9d:97:61:0f:16:df:7c:83:6a:69:88:58:54:
         0e:80:e2:8b:a6:25:40:14:f2:d5:6c:f3:49:51:d1:6f:b2:e6:
         ac:1d:18:3d:e9:cd:a3:25:0f:76:cd:4b:da:71:86:0c:f9:05:
         0e:9c:d2:0a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDMzMUQxMTAvBgNVBAUTKEQzQTlCNENFNzkzOEQ3MkEyNTUwNTRBMEMwODVCRjc4
OEVCMDY5QjAwHhcNMjUwNzAyMjAzNzIyWhcNMjUwNzA5MjAzNzIyWjAYMRYwFAYD
VQQDEw02ODY1OTg4Mi1hZTU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2KTF+7G8u58sdklibboEmFb874KT2u4QPCQJE+AXX+1iXu/bPtf/2SNTy0hZ
Y0z/CzVBefr5unMeJa9Lin2XA89MmTFBwPKTFXimTXdHzg48V8/7OqlBjGHvuFUA
qE5e/9vVjPP85AaW9tdLTNJMde91wY1XbSrLOsaAMJ7Y0zDvH0C9DcsuvJeuG1W4
f4xJZY86dpZW2YXIDoPrPVF94EHyyEI7VK5YnmT1XFPvVHTbKZRBNUzziXWbkCiJ
QuGyyLXmwaibbaafKBVue1BIh7MEGVejrIrJ03+yMxOEKZNr6ouIqJGHknCPqgQx
eC+RBidoSbiDHCckIsp7oDeVEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMFV3YR9
SU6SVzppV/n0VEzCpfxAMB8GA1UdIwQYMBaAFNOptM55ONcqJVBUoMCFv3iOsGmw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzMxRC80QjQ1QkZFOEFE
MUUxMUVBOTRDN0U1ODFDNEY5QUUwMi8wNm0wem5rNDF5b2xVRlNnd0lXX2VJNndh
YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzA2bTB6bms0MXlvbFVGU2d3SVdfZUk2d2FiQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MzMxRC80QjQ1QkZFOEFEMUUxMUVBOTRDN0U1ODFDNEY5QUUwMi8wNm0wem5rNDF5
b2xVRlNnd0lXX2VJNndhYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA6C+rAcGD7egh1bSVa5IqLQjqQUuVHMEJvNm54Pmt0EGnTU6l9Q0YG
1xR1fwxnw7bt5NcRfzNDGBeEzxhpE8FJcdry6SU68Z422yyvbTPQQSXMoqeZH3BJ
KI3+nlhNCpd6iz5eIpS+9uH+3tMrHa/iRocJ7Xi/ixkXZZxzezB6wE0Jdb4ws9X3
vZ555C1fVmECyweb88SeRcUP0xcN22Zdv6XU8Af4MniIcWDg5t94FlCM38N8SkZ9
oWLj4BxF6zfo4vyYR50cEQLkrZ2XYQ8W33yDammIWFQOgOKLpiVAFPLVbPNJUdFv
suasHRg96c2jJQ92zUvacYYM+QUOnNIK
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:28:52 2025 by rpki-client