Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft
File:                     d6V15x8FqSPAyxKXxZzmW0u90z0.mft (raw, json)
Hash identifier:          46C5dedogp2q4AlXzFO11i4iOECKimajkxPKE5lywlk=
Subject key identifier:   59:33:01:54:0D:6A:15:42:FA:F6:CC:3D:60:62:B6:22:04:06:23:16
Authority key identifier: 77:A5:75:E7:1F:05:A9:23:C0:CB:12:97:C5:9C:E6:5B:4B:BD:D3:3D
Certificate issuer:       /CN=A9144F34/serialNumber=77A575E71F05A923C0CB1297C59CE65B4BBDD33D
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6V15x8FqSPAyxKXxZzmW0u90z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft
Manifest number:          64
Signing time:             Tue 01 Jul 2025 07:47:45 +0000
Manifest this update:     Tue 01 Jul 2025 07:47:44 +0000
Manifest next update:     Tue 08 Jul 2025 07:47:44 +0000
Files and hashes:         1: d6V15x8FqSPAyxKXxZzmW0u90z0.crl (hash: +TmnIF378fJQLr7ntXtUHV8Cp5nrND65+yxtoImG7vc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.crl
                          rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6V15x8FqSPAyxKXxZzmW0u90z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 07:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144F34, serialNumber=77A575E71F05A923C0CB1297C59CE65B4BBDD33D
        Validity
            Not Before: Jul  1 07:47:44 2025 GMT
            Not After : Jul  8 07:47:44 2025 GMT
        Subject: CN=686392a1-eced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:db:39:62:97:74:e7:58:70:5c:eb:37:8f:b1:
                    f1:7e:df:9b:84:05:e7:2f:5b:c4:bc:b9:e5:22:21:
                    8f:33:2b:28:da:1b:e3:18:d4:df:1c:2d:2b:aa:2c:
                    fb:1b:6f:b4:72:22:4d:a4:f2:d1:03:0f:5a:6e:76:
                    c5:c3:ff:44:71:c1:9a:66:ef:ff:52:a1:cf:2a:6f:
                    dc:6b:eb:72:73:d4:2d:f3:35:70:b8:d2:d1:84:9c:
                    05:8f:37:f4:1f:54:11:fb:3f:fa:ee:41:81:3c:83:
                    2b:2e:f9:63:db:d8:2b:b9:70:66:c5:e6:c4:d3:c0:
                    1a:29:9e:72:f4:7b:d9:ac:ff:7f:d8:e1:e7:69:cc:
                    bf:c4:f9:37:e9:1d:f7:81:e7:12:c9:88:7e:3b:f2:
                    f5:12:ed:bd:7e:36:36:d2:c8:f1:d4:97:44:4e:19:
                    c6:47:a5:de:ab:1c:d1:b4:82:b8:5e:37:dd:a9:7f:
                    6b:1a:f9:ca:dc:2e:95:77:3a:6e:ed:9f:64:fe:0e:
                    46:77:5f:14:0f:3b:39:8c:57:37:bf:40:b7:cb:79:
                    b5:e7:5d:08:2e:6f:b1:36:bc:72:c7:aa:64:cb:ff:
                    8b:a3:07:80:f7:d4:31:ba:90:eb:fe:b0:ca:6c:0d:
                    99:42:b1:a0:3e:74:3f:70:5d:5e:88:a1:f0:ed:87:
                    8a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:33:01:54:0D:6A:15:42:FA:F6:CC:3D:60:62:B6:22:04:06:23:16
            X509v3 Authority Key Identifier:
                keyid:77:A5:75:E7:1F:05:A9:23:C0:CB:12:97:C5:9C:E6:5B:4B:BD:D3:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6V15x8FqSPAyxKXxZzmW0u90z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F34/56424A0CBDE911EFBFD53882C4F9AE02/d6V15x8FqSPAyxKXxZzmW0u90z0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f7:bd:b4:7c:a2:40:c1:d9:f4:75:b2:5d:30:2c:3f:5a:aa:
         58:4f:17:9e:9a:c6:ac:f2:07:f1:77:88:4c:d0:fb:9b:44:c8:
         7c:66:67:a0:b2:8e:29:6b:eb:e4:c9:51:99:1c:2f:9a:85:29:
         91:50:56:49:ab:1c:dd:d8:d3:87:37:36:71:4b:67:70:18:3a:
         54:43:8e:d1:f5:ef:d5:4d:d8:b2:5e:9c:38:6e:71:3d:bb:d7:
         7f:7b:97:92:00:dc:12:32:45:3f:50:d3:09:e2:5d:d5:52:5a:
         2f:79:14:7a:41:f9:56:cf:7a:3c:91:aa:4f:a5:5d:3a:94:8c:
         1f:d6:c7:1b:ac:18:c1:94:f7:3c:2d:9d:d8:dc:1c:cd:95:3b:
         10:09:c3:77:be:ef:44:98:a5:bf:07:af:28:6a:2f:b0:45:eb:
         17:3a:05:d7:27:ef:05:52:8c:3a:35:c8:2e:60:e5:6d:69:6c:
         8c:8a:cc:c4:5f:bf:ea:cf:19:97:86:10:5b:e8:a7:aa:87:47:
         00:1f:8d:2c:fc:a1:e2:5d:98:ba:da:b9:15:07:58:95:b3:0e:
         97:4d:1f:40:d4:1a:3e:61:0e:34:2d:99:01:04:f5:6f:7c:26:
         08:cb:08:00:1c:f7:d3:b4:f5:9e:5b:1e:79:df:b7:c3:2d:8b:
         3d:d7:88:0c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
NEYzNDExMC8GA1UEBRMoNzdBNTc1RTcxRjA1QTkyM0MwQ0IxMjk3QzU5Q0U2NUI0
QkJERDMzRDAeFw0yNTA3MDEwNzQ3NDRaFw0yNTA3MDgwNzQ3NDRaMBgxFjAUBgNV
BAMTDTY4NjM5MmExLWVjZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCY2zlil3TnWHBc6zePsfF+35uEBecvW8S8ueUiIY8zKyjaG+MY1N8cLSuqLPsb
b7RyIk2k8tEDD1pudsXD/0RxwZpm7/9Soc8qb9xr63Jz1C3zNXC40tGEnAWPN/Qf
VBH7P/ruQYE8gysu+WPb2Cu5cGbF5sTTwBopnnL0e9ms/3/Y4edpzL/E+TfpHfeB
5xLJiH478vUS7b1+NjbSyPHUl0ROGcZHpd6rHNG0grheN92pf2sa+crcLpV3Om7t
n2T+DkZ3XxQPOzmMVze/QLfLebXnXQgub7E2vHLHqmTL/4ujB4D31DG6kOv+sMps
DZlCsaA+dD9wXV6IofDth4rrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUWTMBVA1q
FUL69sw9YGK2IgQGIxYwHwYDVR0jBBgwFoAUd6V15x8FqSPAyxKXxZzmW0u90z0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0RjM0LzU2NDI0QTBDQkRF
OTExRUZCRkQ1Mzg4MkM0RjlBRTAyL2Q2VjE1eDhGcVNQQXl4S1h4WnptVzB1OTB6
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZDZWMTV4OEZxU1BBeXhLWHhaem1XMHU5MHowLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ0
RjM0LzU2NDI0QTBDQkRFOTExRUZCRkQ1Mzg4MkM0RjlBRTAyL2Q2VjE1eDhGcVNQ
QXl4S1h4WnptVzB1OTB6MC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACz3vbR8okDB2fR1sl0wLD9aqlhPF56axqzyB/F3iEzQ+5tEyHxmZ6Cy
jilr6+TJUZkcL5qFKZFQVkmrHN3Y04c3NnFLZ3AYOlRDjtH179VN2LJenDhucT27
1397l5IA3BIyRT9Q0wniXdVSWi95FHpB+VbPejyRqk+lXTqUjB/WxxusGMGU9zwt
ndjcHM2VOxAJw3e+70SYpb8HryhqL7BF6xc6Bdcn7wVSjDo1yC5g5W1pbIyKzMRf
v+rPGZeGEFvop6qHRwAfjSz8oeJdmLrauRUHWJWzDpdNH0DUGj5hDjQtmQEE9W98
JgjLCAAc99O09Z5bHnnft8Mtiz3XiAw=
-----END CERTIFICATE-----
Generated at Thu Jul 3 05:27:21 2025 by rpki-client