Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
File:                     6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft (raw, json)
Hash identifier:          4lqOG+q6QaGzeQQ54LrnrQAs98aCGD+Q0MQcXAc/kQk=
Subject key identifier:   EC:B6:9B:E1:C8:98:48:37:67:C3:98:31:DA:8D:34:81:2E:8D:D8:77
Authority key identifier: EA:9C:86:46:A2:D3:FC:B3:73:BC:A6:5E:28:9D:64:48:EE:A8:CD:BC
Certificate issuer:       /CN=A91452AC/serialNumber=EA9C8646A2D3FCB373BCA65E289D6448EEA8CDBC
Certificate serial:       079C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
Manifest number:          0799
Signing time:             Fri 22 Aug 2025 20:34:45 +0000
Manifest this update:     Fri 22 Aug 2025 20:34:44 +0000
Manifest next update:     Fri 29 Aug 2025 20:34:44 +0000
Files and hashes:         1: 6pyGRqLT_LNzvKZeKJ1kSO6ozbw.crl (hash: Xb8kLurTl6cvDbBjgM0izXfB97ZRQOhRCFPFZC9KS5Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.crl
                          rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1948 (0x79c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91452AC, serialNumber=EA9C8646A2D3FCB373BCA65E289D6448EEA8CDBC
        Validity
            Not Before: Aug 22 20:34:44 2025 GMT
            Not After : Aug 29 20:34:44 2025 GMT
        Subject: CN=68a8d464-d275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:eb:3c:83:36:b2:9e:00:4b:7f:b1:a3:da:9b:
                    b5:a8:f3:f8:fa:fb:6a:52:2c:c5:e7:d2:87:f9:3f:
                    c3:04:b2:3e:48:a2:39:b0:de:60:58:af:85:2a:7b:
                    f5:7f:93:7f:a5:e7:16:a8:52:b9:de:70:06:b0:96:
                    1b:1a:9d:9a:d0:65:6d:68:a0:10:b7:01:14:83:f4:
                    4d:42:04:ac:bf:72:75:b8:38:fe:e1:ae:da:e7:d2:
                    b1:5f:e5:05:ed:d1:8b:63:4e:d1:d4:ca:ff:3e:49:
                    0c:27:ce:f9:98:b2:a1:80:e9:2d:ac:79:8d:f1:f9:
                    91:b9:71:97:39:38:20:d6:65:33:5b:d2:53:78:ad:
                    0c:7e:b1:a8:83:52:c7:38:6b:f5:78:ae:f4:e8:97:
                    c2:36:80:47:e6:6a:61:a6:39:dc:d0:45:c4:fd:c3:
                    ef:d9:0c:69:81:05:73:f0:a9:cd:56:31:54:00:2a:
                    c3:f3:8d:ae:8c:86:e2:1c:e5:46:89:6f:56:ef:18:
                    b4:b5:4a:54:3a:09:6c:c5:00:00:ae:a0:46:60:52:
                    c4:66:ed:4e:be:81:08:97:0a:17:0c:5c:41:ef:ae:
                    f7:39:69:65:80:a1:4b:73:77:22:18:de:36:0c:c7:
                    00:17:22:ce:47:cd:00:e4:98:87:4a:5e:36:3b:ff:
                    6c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B6:9B:E1:C8:98:48:37:67:C3:98:31:DA:8D:34:81:2E:8D:D8:77
            X509v3 Authority Key Identifier:
                keyid:EA:9C:86:46:A2:D3:FC:B3:73:BC:A6:5E:28:9D:64:48:EE:A8:CD:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91452AC/248C36221A9F11EB9FD2D363C4F9AE02/6pyGRqLT_LNzvKZeKJ1kSO6ozbw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:01:06:aa:c3:0f:ea:f3:98:47:03:a5:cb:c0:be:8d:0c:f4:
         8c:5a:5b:be:ac:42:6b:03:f0:5e:0d:66:d5:4d:16:60:88:e2:
         7e:6e:fa:e9:c0:dc:75:bc:0b:43:58:00:8a:92:01:c0:16:b3:
         05:40:c3:75:dc:8c:3d:fe:a7:83:4e:81:1c:1a:8b:2e:d6:8f:
         43:ba:69:d0:5a:22:5f:20:d8:21:55:01:07:2f:6c:7c:0e:2a:
         a7:71:6c:07:c2:c9:62:be:bc:20:76:1c:58:36:95:44:e5:5e:
         27:91:68:24:83:8f:f8:ef:c6:c9:38:df:b4:cb:ad:b7:29:8d:
         55:19:68:3e:48:ca:18:7a:ab:79:8c:36:00:50:18:7e:f8:4e:
         7b:ae:ed:93:f9:61:37:7b:1f:4f:72:b8:f8:c6:cc:25:12:f1:
         57:a5:09:ee:f2:43:e1:05:65:4f:59:56:5e:84:1b:41:4f:81:
         11:e7:76:58:05:d2:26:95:71:f6:7a:10:8f:56:ff:ed:a1:e1:
         56:9d:0a:3d:5d:ad:89:45:2c:ed:67:e3:ab:7b:c1:22:7a:e1:
         64:e5:86:a3:51:cb:f7:2f:ae:ec:9f:dd:0c:68:9a:aa:7b:24:
         6d:20:a6:6d:13:ff:c3:d8:20:25:7e:08:95:8d:9b:b1:b6:f6:
         40:bf:9d:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDUyQUMxMTAvBgNVBAUTKEVBOUM4NjQ2QTJEM0ZDQjM3M0JDQTY1RTI4OUQ2NDQ4
RUVBOENEQkMwHhcNMjUwODIyMjAzNDQ0WhcNMjUwODI5MjAzNDQ0WjAYMRYwFAYD
VQQDEw02OGE4ZDQ2NC1kMjc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo+s8gzayngBLf7Gj2pu1qPP4+vtqUizF59KH+T/DBLI+SKI5sN5gWK+FKnv1
f5N/pecWqFK53nAGsJYbGp2a0GVtaKAQtwEUg/RNQgSsv3J1uDj+4a7a59KxX+UF
7dGLY07R1Mr/PkkMJ875mLKhgOktrHmN8fmRuXGXOTgg1mUzW9JTeK0MfrGog1LH
OGv1eK706JfCNoBH5mphpjnc0EXE/cPv2QxpgQVz8KnNVjFUACrD842ujIbiHOVG
iW9W7xi0tUpUOglsxQAArqBGYFLEZu1OvoEIlwoXDFxB7673OWllgKFLc3ciGN42
DMcAFyLOR80A5JiHSl42O/9sywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOy2m+HI
mEg3Z8OYMdqNNIEujdh3MB8GA1UdIwQYMBaAFOqchkai0/yzc7ymXiidZEjuqM28
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NTJBQy8yNDhDMzYyMjFB
OUYxMUVCOUZEMkQzNjNDNEY5QUUwMi82cHlHUnFMVF9MTnp2S1plS0oxa1NPNm96
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzZweUdScUxUX0xOenZLWmVLSjFrU082b3pidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NTJBQy8yNDhDMzYyMjFBOUYxMUVCOUZEMkQzNjNDNEY5QUUwMi82cHlHUnFMVF9M
Tnp2S1plS0oxa1NPNm96YncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNAQaqww/q85hHA6XLwL6NDPSMWlu+rEJrA/BeDWbVTRZgiOJ+bvrp
wNx1vAtDWACKkgHAFrMFQMN13Iw9/qeDToEcGosu1o9DumnQWiJfINghVQEHL2x8
DiqncWwHwslivrwgdhxYNpVE5V4nkWgkg4/478bJON+0y623KY1VGWg+SMoYeqt5
jDYAUBh++E57ru2T+WE3ex9Pcrj4xswlEvFXpQnu8kPhBWVPWVZehBtBT4ER53ZY
BdImlXH2ehCPVv/toeFWnQo9Xa2JRSztZ+Ore8EieuFk5YajUcv3L67sn90MaJqq
eyRtIKZtE//D2CAlfgiVjZuxtvZAv50G
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:05:28 2025 by rpki-client