Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft
File:                     B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft (raw, json)
Hash identifier:          6YUaX7CHnpvDH4CookLrmTQa77OvMSi+e3G/YpES7Is=
Subject key identifier:   BB:50:90:17:BE:36:25:3F:04:35:5C:89:4E:BB:1B:4E:8A:41:30:31
Authority key identifier: 07:9C:FC:C5:12:EA:61:96:6F:A3:19:A2:98:8C:92:FD:86:BD:F8:8B
Certificate issuer:       /CN=A9177157/serialNumber=079CFCC512EA61966FA319A2988C92FD86BDF88B
Certificate serial:       10DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5z8xRLqYZZvoxmimIyS_Ya9-Is.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft
Manifest number:          10D3
Signing time:             Sun 04 May 2025 17:12:58 +0000
Manifest this update:     Sun 04 May 2025 17:12:57 +0000
Manifest next update:     Sun 11 May 2025 17:12:57 +0000
Files and hashes:         1: B5z8xRLqYZZvoxmimIyS_Ya9-Is.crl (hash: 645Ft3dGVnkwoxFJdnIS3yx0lYkm5sW3I3evGdrhgJw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.crl
                          rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5z8xRLqYZZvoxmimIyS_Ya9-Is.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 17:12:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4317 (0x10dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9177157, serialNumber=079CFCC512EA61966FA319A2988C92FD86BDF88B
        Validity
            Not Before: May  4 17:12:57 2025 GMT
            Not After : May 11 17:12:57 2025 GMT
        Subject: CN=6817a01a-e26c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:51:fc:d4:e8:b2:f7:3d:50:81:df:6e:76:1c:
                    ad:ad:2f:75:f1:ba:15:66:81:ff:77:7b:d3:7b:4c:
                    14:18:d2:5a:fb:9f:c9:a0:ec:04:8b:70:68:d4:3f:
                    1d:a5:26:bf:64:6c:3b:5c:2b:0a:b8:63:72:82:5c:
                    1d:73:90:3f:7a:bb:29:94:6a:7c:25:e0:c3:e6:9d:
                    60:8c:b2:60:1c:df:a1:1e:03:bf:30:dc:fd:a1:a6:
                    d5:24:24:58:35:09:93:15:08:b7:02:bc:fa:34:27:
                    f0:7f:75:3e:61:b7:b4:60:30:c2:21:a5:56:e2:b6:
                    63:d4:70:99:78:1f:df:67:a5:3a:2e:40:e9:c2:12:
                    49:15:97:ac:c7:e6:d7:5e:52:1b:d1:2e:09:0c:14:
                    15:3c:1a:a0:99:18:c3:e6:af:9c:ce:6e:ba:b1:e9:
                    e9:0c:7b:4e:45:00:2e:89:ba:e2:62:3a:4a:4e:d2:
                    7a:e2:c4:c4:36:79:36:00:a2:2e:54:75:27:95:76:
                    06:1f:61:2d:1b:ab:d9:73:aa:ec:1c:f7:44:f4:17:
                    f7:2c:da:4b:0e:d8:c4:d3:a9:5c:c4:c3:94:27:99:
                    79:32:94:df:3c:d2:e4:08:fc:97:f5:b3:59:97:7c:
                    3c:e2:15:e0:4b:91:10:62:fe:8e:e8:5b:a9:1b:e8:
                    e2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:50:90:17:BE:36:25:3F:04:35:5C:89:4E:BB:1B:4E:8A:41:30:31
            X509v3 Authority Key Identifier:
                keyid:07:9C:FC:C5:12:EA:61:96:6F:A3:19:A2:98:8C:92:FD:86:BD:F8:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B5z8xRLqYZZvoxmimIyS_Ya9-Is.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9177157/54E47DEE1D3E11E9A45DB76DC4F9AE02/B5z8xRLqYZZvoxmimIyS_Ya9-Is.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:fc:7d:11:0e:1d:89:8e:44:c2:71:46:b0:95:51:65:ba:69:
         c1:3d:ec:76:46:5a:09:80:5e:2c:57:cf:19:8f:5b:9a:a6:b2:
         bb:3d:ff:ea:c3:08:73:e2:2b:ec:bb:93:ef:ab:0d:ed:39:69:
         7d:19:f9:bb:fe:99:1f:43:66:1a:5a:eb:80:6d:b0:3b:18:20:
         81:37:ca:94:30:2b:1c:83:2f:c9:6d:0f:be:8b:e3:d8:b9:d9:
         99:a4:2e:af:5f:c4:2c:14:d0:09:84:ea:14:17:6f:ef:a7:66:
         91:31:74:fc:57:1f:60:57:97:fc:c1:79:59:1a:17:43:3a:74:
         9c:9e:3d:4f:9d:95:46:85:37:18:11:32:6a:bb:68:9a:c6:14:
         8f:92:2e:21:05:3a:74:24:c6:4b:bf:87:25:6c:2e:c8:62:ef:
         dd:0e:6e:73:e6:4c:f4:a8:94:2a:7a:00:67:58:71:a8:85:a2:
         a2:cd:28:78:1e:41:15:e7:a8:18:07:a7:ba:a5:c1:b2:91:d7:
         4e:fe:78:3e:d8:11:e3:69:03:16:49:7d:9c:76:b5:db:e1:83:
         ea:25:86:f9:c2:c2:d1:80:1e:76:35:b4:ff:30:e0:51:5f:29:
         64:38:73:3c:00:ef:e6:7d:b3:62:d2:f1:d5:cc:75:1d:fc:8e:
         14:42:88:35
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzcxNTcxMTAvBgNVBAUTKDA3OUNGQ0M1MTJFQTYxOTY2RkEzMTlBMjk4OEM5MkZE
ODZCREY4OEIwHhcNMjUwNTA0MTcxMjU3WhcNMjUwNTExMTcxMjU3WjAYMRYwFAYD
VQQDEw02ODE3YTAxYS1lMjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAulH81Oiy9z1Qgd9udhytrS918boVZoH/d3vTe0wUGNJa+5/JoOwEi3Bo1D8d
pSa/ZGw7XCsKuGNyglwdc5A/ersplGp8JeDD5p1gjLJgHN+hHgO/MNz9oabVJCRY
NQmTFQi3Arz6NCfwf3U+Ybe0YDDCIaVW4rZj1HCZeB/fZ6U6LkDpwhJJFZesx+bX
XlIb0S4JDBQVPBqgmRjD5q+czm66senpDHtORQAuibriYjpKTtJ64sTENnk2AKIu
VHUnlXYGH2EtG6vZc6rsHPdE9Bf3LNpLDtjE06lcxMOUJ5l5MpTfPNLkCPyX9bNZ
l3w84hXgS5EQYv6O6FupG+ji7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLtQkBe+
NiU/BDVciU67G06KQTAxMB8GA1UdIwQYMBaAFAec/MUS6mGWb6MZopiMkv2GvfiL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzE1Ny81NEU0N0RFRTFE
M0UxMUU5QTQ1REI3NkRDNEY5QUUwMi9CNXo4eFJMcVlaWnZveG1pbUl5U19ZYTkt
SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I1ejh4UkxxWVpadm94bWltSXlTX1lhOS1Jcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NzE1Ny81NEU0N0RFRTFEM0UxMUU5QTQ1REI3NkRDNEY5QUUwMi9CNXo4eFJMcVla
WnZveG1pbUl5U19ZYTktSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAv/H0RDh2JjkTCcUawlVFlumnBPex2RloJgF4sV88Zj1uaprK7Pf/q
wwhz4ivsu5Pvqw3tOWl9Gfm7/pkfQ2YaWuuAbbA7GCCBN8qUMCscgy/JbQ++i+PY
udmZpC6vX8QsFNAJhOoUF2/vp2aRMXT8Vx9gV5f8wXlZGhdDOnScnj1PnZVGhTcY
ETJqu2iaxhSPki4hBTp0JMZLv4clbC7IYu/dDm5z5kz0qJQqegBnWHGohaKizSh4
HkEV56gYB6e6pcGykddO/ng+2BHjaQMWSX2cdrXb4YPqJYb5wsLRgB52NbT/MOBR
XylkOHM8AO/mfbNi0vHVzHUd/I4UQog1
-----END CERTIFICATE-----
Generated at Mon May 5 05:41:00 2025 by rpki-client