Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
File:                     67mxD9JPdAljNjwtk1eAidsN5_U.mft (raw, json)
Hash identifier:          Ymd4Det4HQ0IqBnNxeoOJJk74yDzQX0uGQsVzgM+G6o=
Subject key identifier:   89:61:12:28:49:EC:37:1D:B0:01:DF:1D:0E:99:F3:30:F2:65:29:F4
Authority key identifier: EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5
Certificate issuer:       /CN=A915393C/serialNumber=EBB9B10FD24F740963363C2D93578089DB0DE7F5
Certificate serial:       BA
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
Manifest number:          BA
Signing time:             Sat 23 Aug 2025 06:07:46 +0000
Manifest this update:     Sat 23 Aug 2025 06:07:45 +0000
Manifest next update:     Sat 30 Aug 2025 06:07:45 +0000
Files and hashes:         1: 67mxD9JPdAljNjwtk1eAidsN5_U.crl (hash: tuMnUcdpCeUB0JKuOb66Ru6A3o97+bpXnIba2JxtWMg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.crl
                          rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 186 (0xba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915393C, serialNumber=EBB9B10FD24F740963363C2D93578089DB0DE7F5
        Validity
            Not Before: Aug 23 06:07:45 2025 GMT
            Not After : Aug 30 06:07:45 2025 GMT
        Subject: CN=68a95ab1-83ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:a3:53:9c:07:82:e4:c2:44:db:e6:6c:4e:
                    3e:0b:0a:e2:f2:b3:56:0e:8d:e3:ca:35:a1:32:a2:
                    7b:8a:23:7a:48:13:77:5c:23:00:60:32:61:0a:6a:
                    06:89:33:1e:6d:48:63:8b:1f:62:a7:66:4c:3d:cd:
                    1f:73:1b:9c:42:17:f5:a1:ef:3f:53:ef:43:20:5d:
                    3b:c9:8d:05:eb:43:79:eb:50:08:ee:66:64:0f:ef:
                    e0:30:6a:d1:0d:0f:63:be:6a:e9:ec:10:9d:d8:78:
                    ed:dc:07:d8:a8:a6:39:f7:18:ce:53:52:ff:6e:49:
                    c9:d0:f5:53:a5:2d:37:f6:02:35:fc:b3:3c:6a:d8:
                    4c:66:de:d7:81:36:30:79:72:ac:7c:1d:17:9b:6d:
                    cc:86:59:48:a9:ac:93:7a:40:28:32:07:78:13:df:
                    98:55:0d:01:8e:1b:e1:fe:fb:01:16:d4:15:7c:b4:
                    43:2d:b3:ff:07:2a:c0:a3:b1:42:7a:7a:f3:f9:2a:
                    ec:77:ae:e2:b2:ef:0d:44:7d:a8:23:75:0e:76:c7:
                    32:69:ad:12:fc:49:ed:69:a6:60:33:62:65:15:70:
                    60:8e:7d:e7:33:fb:4a:de:15:9f:88:98:23:14:31:
                    d3:f0:af:c0:fd:d7:43:83:d2:44:d0:77:18:57:d1:
                    d9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:61:12:28:49:EC:37:1D:B0:01:DF:1D:0E:99:F3:30:F2:65:29:F4
            X509v3 Authority Key Identifier:
                keyid:EB:B9:B1:0F:D2:4F:74:09:63:36:3C:2D:93:57:80:89:DB:0D:E7:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/67mxD9JPdAljNjwtk1eAidsN5_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915393C/64A76AEE640E11EFB5446458C4F9AE02/67mxD9JPdAljNjwtk1eAidsN5_U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:f2:f5:d2:aa:2f:bb:49:28:9e:3d:2e:48:e3:62:01:54:87:
         7c:f8:b5:23:55:73:d6:57:29:9f:8e:85:0d:86:d7:a4:19:e6:
         da:7f:72:01:24:e8:6e:11:65:fb:99:44:d7:dc:6e:d2:21:0e:
         19:32:02:54:67:35:0a:8b:81:d0:0c:a6:ce:b2:a6:01:d2:c5:
         e5:3b:18:88:9d:06:29:71:a6:53:2e:00:8d:0b:0f:cb:c0:d6:
         8b:c7:a0:45:8e:a4:cc:ec:87:51:9a:ad:5f:39:c9:7e:bf:91:
         f1:e3:94:41:12:47:65:de:a7:85:48:62:80:24:91:5c:45:95:
         1f:60:09:6b:ce:06:26:84:36:6d:ce:d0:93:fb:8a:9f:61:ef:
         cf:04:db:68:d5:b9:8a:fd:26:3d:e2:3a:66:c1:f4:fa:46:df:
         32:dd:12:83:0e:35:9b:5b:e2:00:90:5e:cb:a0:05:63:26:de:
         6a:8c:79:58:71:83:c7:f5:f1:51:a4:f1:75:d9:21:4a:df:d2:
         45:9a:9c:58:1f:ba:ef:48:f2:1a:ab:d2:03:ca:ee:a7:55:7b:
         59:7f:b9:ba:7e:b7:58:51:b0:72:64:a3:5d:86:c0:78:fe:c2:
         55:ca:fa:02:3e:23:72:d6:0a:3e:d6:6c:13:c1:dd:da:6f:23:
         e8:dc:0f:c8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM5M0MxMTAvBgNVBAUTKEVCQjlCMTBGRDI0Rjc0MDk2MzM2M0MyRDkzNTc4MDg5
REIwREU3RjUwHhcNMjUwODIzMDYwNzQ1WhcNMjUwODMwMDYwNzQ1WjAYMRYwFAYD
VQQDEw02OGE5NWFiMS04M2VjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAolSjU5wHguTCRNvmbE4+Cwri8rNWDo3jyjWhMqJ7iiN6SBN3XCMAYDJhCmoG
iTMebUhjix9ip2ZMPc0fcxucQhf1oe8/U+9DIF07yY0F60N561AI7mZkD+/gMGrR
DQ9jvmrp7BCd2Hjt3AfYqKY59xjOU1L/bknJ0PVTpS039gI1/LM8athMZt7XgTYw
eXKsfB0Xm23MhllIqayTekAoMgd4E9+YVQ0Bjhvh/vsBFtQVfLRDLbP/ByrAo7FC
enrz+Srsd67isu8NRH2oI3UOdscyaa0S/EntaaZgM2JlFXBgjn3nM/tK3hWfiJgj
FDHT8K/A/ddDg9JE0HcYV9HZUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIlhEihJ
7DcdsAHfHQ6Z8zDyZSn0MB8GA1UdIwQYMBaAFOu5sQ/ST3QJYzY8LZNXgInbDef1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzkzQy82NEE3NkFFRTY0
MEUxMUVGQjU0NDY0NThDNEY5QUUwMi82N214RDlKUGRBbGpOand0azFlQWlkc041
X1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzY3bXhEOUpQZEFsak5qd3RrMWVBaWRzTjVfVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzkzQy82NEE3NkFFRTY0MEUxMUVGQjU0NDY0NThDNEY5QUUwMi82N214RDlKUGRB
bGpOand0azFlQWlkc041X1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBR8vXSqi+7SSiePS5I42IBVId8+LUjVXPWVymfjoUNhtekGebaf3IB
JOhuEWX7mUTX3G7SIQ4ZMgJUZzUKi4HQDKbOsqYB0sXlOxiInQYpcaZTLgCNCw/L
wNaLx6BFjqTM7IdRmq1fOcl+v5Hx45RBEkdl3qeFSGKAJJFcRZUfYAlrzgYmhDZt
ztCT+4qfYe/PBNto1bmK/SY94jpmwfT6Rt8y3RKDDjWbW+IAkF7LoAVjJt5qjHlY
cYPH9fFRpPF12SFK39JFmpxYH7rvSPIaq9IDyu6nVXtZf7m6frdYUbByZKNdhsB4
/sJVyvoCPiNy1go+1mwTwd3abyPo3A/I
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:36:55 2025 by rpki-client