Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
File:                     tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft (raw, json)
Hash identifier:          KqeY/mUJGhkQleaEevYKTIrFGFtsJgZ8UKkPLH9ATbg=
Subject key identifier:   57:CD:CA:D9:97:3F:CB:D3:56:C4:9E:C2:F6:FC:73:4F:73:1F:38:53
Authority key identifier: B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04
Certificate issuer:       /CN=A918E85E/serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
Certificate serial:       0102
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
Manifest number:          0102
Signing time:             Sat 23 Aug 2025 05:12:10 +0000
Manifest this update:     Sat 23 Aug 2025 05:12:09 +0000
Manifest next update:     Sat 30 Aug 2025 05:12:09 +0000
Files and hashes:         1: tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl (hash: hpvUndCG55XTfuWdjs0ZUZBZH47y5qGex3+AbHyIg2A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl
                          rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 05:12:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E85E, serialNumber=B53BCE161ACF6305EC055C59A891E822A11EF804
        Validity
            Not Before: Aug 23 05:12:09 2025 GMT
            Not After : Aug 30 05:12:09 2025 GMT
        Subject: CN=68a94daa-1166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7e:27:f6:50:ad:fd:62:14:01:4f:f9:07:6f:
                    98:c8:fd:66:b3:2a:83:55:08:76:5c:29:92:bc:cd:
                    94:9a:cf:b7:4d:73:55:b4:15:c9:db:a3:cb:23:32:
                    09:49:a5:94:cc:19:de:74:10:3b:7e:22:d5:e2:73:
                    02:55:86:a2:f3:95:78:4a:ec:84:28:a3:63:c0:11:
                    60:f2:5a:0f:4e:0b:1d:6d:2e:6c:5d:db:01:71:88:
                    62:92:70:4e:5a:ca:6e:39:f2:02:d2:63:10:17:62:
                    00:87:8c:6c:c5:8f:48:79:59:b4:e2:f8:8c:24:54:
                    e1:59:e4:62:31:63:4b:fb:77:59:71:d9:00:9c:bc:
                    00:af:6d:6e:94:76:18:8d:f3:37:6d:9f:f0:88:5c:
                    b6:ec:f0:f6:f8:aa:60:86:c6:1d:85:1e:57:d0:9d:
                    d5:71:91:c5:2a:ee:32:c5:b0:64:15:a6:39:2c:9f:
                    b4:b3:8c:50:d4:63:e6:51:67:ff:fe:78:19:93:2a:
                    15:4a:d6:f6:f1:07:2e:e0:7a:f9:0e:db:13:10:14:
                    71:c0:6f:3f:fc:fa:f9:56:51:f4:a0:69:ac:5c:80:
                    ad:0b:91:0c:34:89:07:18:2b:28:57:40:be:3c:b8:
                    22:a6:35:5d:4d:e5:80:cb:44:cb:04:3d:82:4a:ad:
                    2d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CD:CA:D9:97:3F:CB:D3:56:C4:9E:C2:F6:FC:73:4F:73:1F:38:53
            X509v3 Authority Key Identifier:
                keyid:B5:3B:CE:16:1A:CF:63:05:EC:05:5C:59:A8:91:E8:22:A1:1E:F8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E85E/659E9010EFF311EE977CAC31C4F9AE02/tTvOFhrPYwXsBVxZqJHoIqEe-AQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:14:ad:f8:58:61:0c:bd:e2:57:52:93:3d:68:a6:5e:46:98:
         82:0e:1e:8e:53:ff:dc:5f:2c:de:35:15:0d:36:9d:a4:da:78:
         0c:26:c5:ef:f6:e5:a3:38:f9:16:3b:41:11:f0:d2:64:04:d8:
         b0:73:d7:d5:60:32:f1:11:0e:c3:0c:3a:c2:39:b2:34:25:f8:
         b0:2f:31:91:04:d6:b4:91:76:bc:71:cd:10:4b:66:64:22:24:
         85:fc:b8:b3:f2:12:93:ea:1a:60:da:ac:2e:5c:ea:ed:87:e8:
         3f:a4:e9:9f:0b:31:c6:ea:06:ef:af:14:35:bc:34:4c:eb:71:
         4d:af:62:ef:4a:c3:fc:b4:09:3a:9e:b1:e0:15:49:ed:29:01:
         d5:19:73:ea:13:99:65:21:b6:4e:f4:e3:6b:56:f4:67:c1:02:
         f5:cb:b8:c9:25:b4:a1:2c:94:d5:59:49:f5:70:e6:16:f5:c6:
         ad:b0:18:86:1c:42:a6:1d:23:04:70:bc:c7:cd:07:6f:bd:e9:
         52:e9:e7:c7:3a:e0:b4:6c:f9:36:fd:71:c3:37:2a:2b:f0:b5:
         1c:ec:83:53:2f:69:e1:ce:d2:05:ff:45:f9:43:66:c5:1d:27:
         59:b6:c2:34:b5:0d:a4:ea:eb:31:71:0e:9d:e0:15:1a:d5:7a:
         ef:09:80:c4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU4NUUxMTAvBgNVBAUTKEI1M0JDRTE2MUFDRjYzMDVFQzA1NUM1OUE4OTFFODIy
QTExRUY4MDQwHhcNMjUwODIzMDUxMjA5WhcNMjUwODMwMDUxMjA5WjAYMRYwFAYD
VQQDEw02OGE5NGRhYS0xMTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2n4n9lCt/WIUAU/5B2+YyP1msyqDVQh2XCmSvM2Ums+3TXNVtBXJ26PLIzIJ
SaWUzBnedBA7fiLV4nMCVYai85V4SuyEKKNjwBFg8loPTgsdbS5sXdsBcYhiknBO
WspuOfIC0mMQF2IAh4xsxY9IeVm04viMJFThWeRiMWNL+3dZcdkAnLwAr21ulHYY
jfM3bZ/wiFy27PD2+KpghsYdhR5X0J3VcZHFKu4yxbBkFaY5LJ+0s4xQ1GPmUWf/
/ngZkyoVStb28Qcu4Hr5DtsTEBRxwG8//Pr5VlH0oGmsXICtC5EMNIkHGCsoV0C+
PLgipjVdTeWAy0TLBD2CSq0t0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFfNytmX
P8vTVsSewvb8c09zHzhTMB8GA1UdIwQYMBaAFLU7zhYaz2MF7AVcWaiR6CKhHvgE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTg1RS82NTlFOTAxMEVG
RjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi90VHZPRmhyUFl3WHNCVnhacUpIb0lxRWUt
QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RUdk9GaHJQWXdYc0JWeFpxSkhvSXFFZS1BUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTg1RS82NTlFOTAxMEVGRjMxMUVFOTc3Q0FDMzFDNEY5QUUwMi90VHZPRmhyUFl3
WHNCVnhacUpIb0lxRWUtQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCyFK34WGEMveJXUpM9aKZeRpiCDh6OU//cXyzeNRUNNp2k2ngMJsXv
9uWjOPkWO0ER8NJkBNiwc9fVYDLxEQ7DDDrCObI0JfiwLzGRBNa0kXa8cc0QS2Zk
IiSF/Liz8hKT6hpg2qwuXOrth+g/pOmfCzHG6gbvrxQ1vDRM63FNr2LvSsP8tAk6
nrHgFUntKQHVGXPqE5llIbZO9ONrVvRnwQL1y7jJJbShLJTVWUn1cOYW9catsBiG
HEKmHSMEcLzHzQdvvelS6efHOuC0bPk2/XHDNyor8LUc7INTL2nhztIF/0X5Q2bF
HSdZtsI0tQ2k6usxcQ6d4BUa1XrvCYDE
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:34:43 2025 by rpki-client