Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft
File:                     w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft (raw, json)
Hash identifier:          t272FQJzf7IEUd7GSOLLFRb+IfQVajf2BExLLX8LM1w=
Subject key identifier:   48:6E:74:E0:50:9A:F6:7A:A3:63:EB:1B:CE:96:F7:3C:15:C9:40:DB
Authority key identifier: C3:F8:FC:E1:62:A1:05:58:62:63:79:E8:C0:19:73:2A:24:3E:63:49
Certificate issuer:       /CN=A91557F2/serialNumber=C3F8FCE162A10558626379E8C019732A243E6349
Certificate serial:       015E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w_j84WKhBVhiY3nowBlzKiQ-Y0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft
Manifest number:          0853
Signing time:             Wed 02 Jul 2025 22:12:55 +0000
Manifest this update:     Wed 02 Jul 2025 22:12:55 +0000
Manifest next update:     Wed 09 Jul 2025 22:12:55 +0000
Files and hashes:         1: w_j84WKhBVhiY3nowBlzKiQ-Y0k.crl (hash: lRrklJyPPTl80hpfn7BYAH0bGpNScUxb9jdeUDplk3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.crl
                          rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w_j84WKhBVhiY3nowBlzKiQ-Y0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 22:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350 (0x15e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557F2, serialNumber=C3F8FCE162A10558626379E8C019732A243E6349
        Validity
            Not Before: Jul  2 22:12:55 2025 GMT
            Not After : Jul  9 22:12:55 2025 GMT
        Subject: CN=6865aee7-4013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:71:ce:7e:49:b1:43:73:7f:4c:6b:3c:4c:31:
                    2c:76:cc:6f:08:f4:ee:d5:d9:e4:60:a4:6a:24:d5:
                    92:9f:84:0f:81:be:03:96:d8:d3:62:cc:0d:02:47:
                    40:b0:97:b4:31:8d:ae:52:19:d7:c4:6a:3d:8e:e9:
                    b2:d3:19:c4:8e:6a:a6:16:9d:e4:bc:24:41:cd:14:
                    f3:c2:23:df:38:84:65:1f:67:2c:b2:8a:f9:98:c9:
                    0a:eb:ad:cf:07:8a:ca:36:dc:6c:76:f4:5a:82:45:
                    41:8b:12:f1:66:36:d5:f4:72:25:6b:20:a0:3c:ff:
                    c4:34:c5:d1:47:db:9d:46:83:e5:9f:2e:c1:0a:a6:
                    5b:57:12:c6:91:50:a8:b8:ab:53:34:0c:c0:e9:14:
                    75:36:ed:e0:18:d2:41:23:f0:14:2a:1a:c7:68:0d:
                    91:16:50:37:cb:8a:e4:c0:40:d9:ad:47:e3:0e:50:
                    f1:31:b6:22:44:b6:53:e1:61:7e:86:a1:f8:bb:65:
                    93:0b:08:c2:80:e2:94:20:01:b1:e6:37:f9:1f:51:
                    34:d1:e8:9a:b2:a7:1d:d9:61:c0:9f:59:e6:06:fd:
                    f2:94:b8:bf:0f:8b:ca:d3:88:ec:80:4b:58:3d:2d:
                    38:67:08:46:a9:96:40:4a:3b:04:a7:8b:b3:cb:6b:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6E:74:E0:50:9A:F6:7A:A3:63:EB:1B:CE:96:F7:3C:15:C9:40:DB
            X509v3 Authority Key Identifier:
                keyid:C3:F8:FC:E1:62:A1:05:58:62:63:79:E8:C0:19:73:2A:24:3E:63:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w_j84WKhBVhiY3nowBlzKiQ-Y0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/w_j84WKhBVhiY3nowBlzKiQ-Y0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:06:62:8a:97:10:59:4c:12:6a:ea:68:93:29:9e:cf:e8:c7:
         d4:35:b7:5e:62:bc:2d:0a:6b:cb:39:b5:9e:d5:d3:c7:5d:6d:
         14:03:e9:b3:2b:5a:c2:ca:19:f5:c0:b6:03:28:e2:26:b4:ea:
         14:cf:15:bf:c3:37:f4:90:bb:ff:e2:d9:1c:d0:04:0d:c8:54:
         50:e0:fd:20:53:f1:9b:99:66:7e:bd:41:da:6c:96:d1:a4:3e:
         bb:6f:13:f7:70:8e:52:dd:4f:2e:7a:03:7d:c7:52:b6:55:ba:
         ad:3d:94:fc:1e:56:21:4c:5e:ee:21:63:6e:02:bc:e1:8b:4e:
         3c:44:40:23:ed:44:01:e5:43:d5:f7:ec:0e:67:b6:ff:2f:c4:
         f5:bc:13:e2:2a:7d:f3:b0:b5:af:00:b1:63:55:8f:83:47:17:
         0d:e6:fc:3c:6f:35:2b:f7:f8:a1:ec:02:fb:e3:51:4f:b5:99:
         3a:8a:dc:25:93:22:b1:11:09:95:e4:d3:a4:db:55:53:7d:22:
         f5:8a:29:e3:ae:41:66:7d:0d:41:fb:48:98:dd:f4:28:85:28:
         05:fa:f9:6f:07:f3:ed:37:7e:15:af:5a:ff:b7:96:6c:fc:32:
         f9:61:f2:17:5e:8d:82:2b:6e:ce:02:3a:1e:37:d3:7f:f1:49:
         4f:32:fa:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU3RjIxMTAvBgNVBAUTKEMzRjhGQ0UxNjJBMTA1NTg2MjYzNzlFOEMwMTk3MzJB
MjQzRTYzNDkwHhcNMjUwNzAyMjIxMjU1WhcNMjUwNzA5MjIxMjU1WjAYMRYwFAYD
VQQDEw02ODY1YWVlNy00MDEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA13HOfkmxQ3N/TGs8TDEsdsxvCPTu1dnkYKRqJNWSn4QPgb4DltjTYswNAkdA
sJe0MY2uUhnXxGo9jumy0xnEjmqmFp3kvCRBzRTzwiPfOIRlH2cssor5mMkK663P
B4rKNtxsdvRagkVBixLxZjbV9HIlayCgPP/ENMXRR9udRoPlny7BCqZbVxLGkVCo
uKtTNAzA6RR1Nu3gGNJBI/AUKhrHaA2RFlA3y4rkwEDZrUfjDlDxMbYiRLZT4WF+
hqH4u2WTCwjCgOKUIAGx5jf5H1E00eiasqcd2WHAn1nmBv3ylLi/D4vK04jsgEtY
PS04ZwhGqZZASjsEp4uzy2sT5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhudOBQ
mvZ6o2PrG86W9zwVyUDbMB8GA1UdIwQYMBaAFMP4/OFioQVYYmN56MAZcyokPmNJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdGMi8yMzM1MDRBNDRG
Q0MxMUVCOURCRTdGNURDNEY5QUUwMi93X2o4NFdLaEJWaGlZM25vd0JsektpUS1Z
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dfajg0V0toQlZoaVkzbm93Qmx6S2lRLVkway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTdGMi8yMzM1MDRBNDRGQ0MxMUVCOURCRTdGNURDNEY5QUUwMi93X2o4NFdLaEJW
aGlZM25vd0JsektpUS1ZMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCMBmKKlxBZTBJq6miTKZ7P6MfUNbdeYrwtCmvLObWe1dPHXW0UA+mz
K1rCyhn1wLYDKOImtOoUzxW/wzf0kLv/4tkc0AQNyFRQ4P0gU/GbmWZ+vUHabJbR
pD67bxP3cI5S3U8uegN9x1K2VbqtPZT8HlYhTF7uIWNuArzhi048REAj7UQB5UPV
9+wOZ7b/L8T1vBPiKn3zsLWvALFjVY+DRxcN5vw8bzUr9/ih7AL741FPtZk6itwl
kyKxEQmV5NOk21VTfSL1iinjrkFmfQ1B+0iY3fQohSgF+vlvB/PtN34Vr1r/t5Zs
/DL5YfIXXo2CK27OAjoeN9N/8UlPMvo3
-----END CERTIFICATE-----
Generated at Thu Jul 3 17:30:10 2025 by rpki-client