Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
File:                     fSxGJ1bUkw5gMpuitqcGbzsImu0.mft (raw, json)
Hash identifier:          n+PFXEUTZPF3VfU9jjNtG+w/xiz0i/w3v1yHdWj27Ro=
Subject key identifier:   A5:B1:4E:86:72:99:08:47:2E:70:18:2B:73:7B:F7:BB:B8:25:FB:A6
Authority key identifier: 7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED
Certificate issuer:       /CN=A9151631/serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED
Certificate serial:       0635
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
Manifest number:          062F
Signing time:             Wed 02 Jul 2025 23:02:12 +0000
Manifest this update:     Wed 02 Jul 2025 23:02:11 +0000
Manifest next update:     Wed 09 Jul 2025 23:02:11 +0000
Files and hashes:         1: fSxGJ1bUkw5gMpuitqcGbzsImu0.crl (hash: CDje1eH/CXRlTD6LTYQ3hqm8A+V/sO+nGAvPeYY6od4=)
                          2: 44F388569DA411EBA820C56AC4F9AE02.roa (hash: 71xWzWQEtjmsg9iGQHPh0f8acNegF6g7VmKGwD79bmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl
                          rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1589 (0x635)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151631, serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED
        Validity
            Not Before: Jul  2 23:02:11 2025 GMT
            Not After : Jul  9 23:02:11 2025 GMT
        Subject: CN=6865ba73-538f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:08:73:ca:4c:a8:83:29:ad:fb:0b:f6:98:d5:
                    5b:94:c7:28:bd:fe:ea:39:90:c6:83:12:54:8a:49:
                    96:0a:d7:78:63:90:fa:f7:bb:ce:ee:40:39:0d:ee:
                    3f:70:32:ad:8a:48:49:72:89:93:0c:62:5d:81:77:
                    11:02:7f:36:45:7e:0d:50:65:9a:49:5b:09:91:d2:
                    7d:58:4e:dd:cd:2b:2a:d7:56:03:07:73:18:3d:0f:
                    5a:52:08:5d:11:9c:c6:19:85:4d:b2:c7:0d:13:22:
                    d0:13:11:ac:ee:b2:90:0a:c4:fc:e3:4f:0c:4a:ca:
                    a3:ea:30:00:a6:bc:e6:83:cb:88:49:d2:38:7a:e9:
                    8a:9c:5e:61:ea:77:87:cd:06:fa:dc:f0:72:f0:4f:
                    2c:e4:b1:93:29:fa:e2:3c:fc:27:38:65:4e:96:da:
                    47:44:e9:94:41:ad:ac:d6:89:c8:01:71:01:79:ed:
                    fa:56:8c:ce:4f:62:f8:73:4e:15:da:6d:4a:ea:ee:
                    48:a3:00:ed:6c:69:0a:fd:09:1c:ca:f3:b5:25:2d:
                    bc:5d:57:3b:e1:2e:03:ca:8a:e5:9c:f1:ed:5a:77:
                    ec:5a:82:88:da:4a:59:70:e4:2f:df:ae:7e:ac:12:
                    c3:cd:86:ca:6f:2e:4f:6e:27:7e:09:91:37:ed:7f:
                    26:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B1:4E:86:72:99:08:47:2E:70:18:2B:73:7B:F7:BB:B8:25:FB:A6
            X509v3 Authority Key Identifier:
                keyid:7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3f:09:b1:68:c8:b9:32:c1:ad:72:75:f4:57:bf:3f:5a:d1:
         e6:b8:3f:a3:dc:12:b5:91:ed:49:fc:b4:59:de:0b:c5:8e:70:
         8f:99:52:1a:59:ae:6c:e2:d6:bf:56:e0:c6:02:21:6e:cb:d0:
         03:1e:eb:9f:10:b0:02:f1:a9:8b:df:25:1a:ee:8c:8f:55:63:
         01:b2:82:9c:cc:cc:55:1a:78:79:1e:75:cd:82:20:6b:1e:60:
         a6:c4:f2:79:83:05:73:72:32:bf:01:cf:a3:a6:49:b4:51:9a:
         4c:9d:87:80:95:e6:82:fd:96:7c:ab:be:30:93:4f:b1:68:bc:
         e3:2b:c2:aa:15:48:7f:7c:72:ec:0f:17:60:13:73:c7:05:be:
         a5:e8:c0:c4:0c:44:c8:5a:af:17:18:97:ee:29:ff:01:4c:3a:
         7f:f9:0d:27:fb:52:a0:17:98:13:3e:3b:d9:8d:7f:09:d0:37:
         83:17:33:22:3a:c1:b9:dd:37:ef:18:25:8e:22:93:23:49:cb:
         c7:43:ac:ad:0a:57:03:a8:73:59:bd:de:4e:66:65:80:c9:b7:
         92:5f:d4:cc:e6:cb:01:2b:15:ae:37:a0:7d:93:02:22:77:a4:
         83:e9:2c:7c:ee:48:08:b0:be:fc:ef:8e:80:f0:8b:bd:a2:30:
         ec:8f:38:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE2MzExMTAvBgNVBAUTKDdEMkM0NjI3NTZENDkzMEU2MDMyOUJBMkI2QTcwNjZG
M0IwODlBRUQwHhcNMjUwNzAyMjMwMjExWhcNMjUwNzA5MjMwMjExWjAYMRYwFAYD
VQQDEw02ODY1YmE3My01MzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAughzykyogymt+wv2mNVblMcovf7qOZDGgxJUikmWCtd4Y5D697vO7kA5De4/
cDKtikhJcomTDGJdgXcRAn82RX4NUGWaSVsJkdJ9WE7dzSsq11YDB3MYPQ9aUghd
EZzGGYVNsscNEyLQExGs7rKQCsT8408MSsqj6jAAprzmg8uISdI4eumKnF5h6neH
zQb63PBy8E8s5LGTKfriPPwnOGVOltpHROmUQa2s1onIAXEBee36VozOT2L4c04V
2m1K6u5IowDtbGkK/QkcyvO1JS28XVc74S4DyorlnPHtWnfsWoKI2kpZcOQv365+
rBLDzYbKby5Pbid+CZE37X8m2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKWxToZy
mQhHLnAYK3N797u4JfumMB8GA1UdIwQYMBaAFH0sRidW1JMOYDKboranBm87CJrt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTYzMS9GMDUxNTgyNDlE
QTIxMUVCQjQzOUFBNjlDNEY5QUUwMi9mU3hHSjFiVWt3NWdNcHVpdHFjR2J6c0lt
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZTeEdKMWJVa3c1Z01wdWl0cWNHYnpzSW11MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTYzMS9GMDUxNTgyNDlEQTIxMUVCQjQzOUFBNjlDNEY5QUUwMi9mU3hHSjFiVWt3
NWdNcHVpdHFjR2J6c0ltdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB/PwmxaMi5MsGtcnX0V78/WtHmuD+j3BK1ke1J/LRZ3gvFjnCPmVIa
Wa5s4ta/VuDGAiFuy9ADHuufELAC8amL3yUa7oyPVWMBsoKczMxVGnh5HnXNgiBr
HmCmxPJ5gwVzcjK/Ac+jpkm0UZpMnYeAleaC/ZZ8q74wk0+xaLzjK8KqFUh/fHLs
DxdgE3PHBb6l6MDEDETIWq8XGJfuKf8BTDp/+Q0n+1KgF5gTPjvZjX8J0DeDFzMi
OsG53TfvGCWOIpMjScvHQ6ytClcDqHNZvd5OZmWAybeSX9TM5ssBKxWuN6B9kwIi
d6SD6Sx87kgIsL78746A8Iu9ojDsjzjQ
-----END CERTIFICATE-----
Generated at Fri Jul 4 08:28:41 2025 by rpki-client