Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
File:                     FBXygRwDfzZMxYcYC_JAeVsEOmk.mft (raw, json)
Hash identifier:          qV2XXKQeBzbUAcJApBZPNOl5IhGc5KXnwbYFQgmTt9E=
Subject key identifier:   D4:99:02:B7:26:40:CB:56:A6:57:C3:38:4D:A2:BA:60:FD:8F:D7:FD
Authority key identifier: 14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69
Certificate issuer:       /CN=A91E275B/serialNumber=1415F2811C037F364CC587180BF240795B043A69
Certificate serial:       329B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
Manifest number:          9A58
Signing time:             Fri 04 Jul 2025 15:25:09 +0000
Manifest this update:     Fri 04 Jul 2025 15:25:08 +0000
Manifest next update:     Fri 11 Jul 2025 15:25:08 +0000
Files and hashes:         1: FBXygRwDfzZMxYcYC_JAeVsEOmk.crl (hash: 2nhRJA7or8NfqYBrgFrbFIF2W0gBYu3dK7DHlbDpcyg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl
                          rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12955 (0x329b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E275B, serialNumber=1415F2811C037F364CC587180BF240795B043A69
        Validity
            Not Before: Jul  4 15:25:08 2025 GMT
            Not After : Jul 11 15:25:08 2025 GMT
        Subject: CN=6867f254-72c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:37:3d:52:b0:51:29:04:e2:88:91:48:4f:
                    a9:43:04:2b:7e:95:25:d2:54:ca:b5:b8:2a:bc:29:
                    c9:2b:59:ea:f0:1c:bf:7e:ed:84:d5:4f:ed:b4:80:
                    a9:10:98:f6:51:05:e0:7f:af:76:3f:91:f7:97:19:
                    a9:30:d9:36:ea:46:89:48:ec:50:38:f5:0f:70:a8:
                    15:55:3f:18:4b:50:d9:60:c2:c2:6f:56:de:b0:21:
                    8b:e5:30:32:88:1d:c0:08:71:fa:63:60:82:ff:2c:
                    a6:df:4f:b9:e7:d8:60:dd:ca:db:43:66:7d:41:b0:
                    f6:63:55:51:9a:a6:52:bf:5e:ad:06:72:b6:9d:70:
                    71:d7:b3:45:d8:55:b4:50:4a:d4:d0:de:9e:bd:8c:
                    39:5e:01:dd:07:ff:c1:fe:e7:df:67:b6:48:fc:bb:
                    6c:11:fd:e5:e1:ad:dd:e8:77:eb:f4:38:98:45:c1:
                    05:e6:b6:e3:95:5e:eb:e5:1d:7b:95:8d:a0:0f:cd:
                    f4:8f:18:ee:9f:15:4a:9d:80:34:bd:52:00:fc:4e:
                    af:d3:78:7f:91:c6:bf:ca:2c:57:31:4e:27:7a:b3:
                    04:be:76:bf:99:9d:c0:64:d4:e1:81:45:08:28:c2:
                    53:8e:40:15:13:80:10:75:d0:e6:c4:09:64:52:16:
                    f5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:99:02:B7:26:40:CB:56:A6:57:C3:38:4D:A2:BA:60:FD:8F:D7:FD
            X509v3 Authority Key Identifier:
                keyid:14:15:F2:81:1C:03:7F:36:4C:C5:87:18:0B:F2:40:79:5B:04:3A:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FBXygRwDfzZMxYcYC_JAeVsEOmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/FBXygRwDfzZMxYcYC_JAeVsEOmk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0b:e6:84:fe:06:22:df:f8:c8:c2:d0:cc:60:39:f7:1a:6b:
         60:6e:b2:5e:04:e4:17:77:0b:1b:13:17:77:e8:20:e1:8b:d5:
         60:06:05:ed:f3:c3:df:b9:2e:a4:5a:d6:aa:b5:53:e0:cd:f8:
         24:c6:3a:8c:66:22:aa:4f:15:cc:f9:79:c1:59:48:e0:b3:44:
         f9:09:41:00:14:f0:f5:0c:bf:c2:d6:a1:17:f6:ea:09:8e:83:
         d7:89:83:2f:3e:c6:f7:ab:42:68:f8:dd:43:2b:c5:03:b2:b7:
         33:22:54:09:df:34:aa:80:14:1a:cc:ec:30:fa:ef:93:12:ff:
         c1:d8:83:d9:20:77:96:43:bb:e4:e3:1f:c5:ce:31:b1:12:98:
         3a:db:02:6f:85:fc:13:e3:ef:04:d0:1b:c8:1d:a9:8c:df:c5:
         a1:e2:00:4f:12:52:b0:fe:de:f3:7c:4e:fd:c2:5f:25:44:5c:
         76:61:35:42:ae:d8:f5:8f:64:a7:73:d1:ab:56:71:3f:7d:a7:
         20:92:4d:e4:c0:7e:ac:a9:6b:91:92:a7:44:d0:4f:72:5d:23:
         a4:d6:ff:49:ac:9f:cc:66:f6:69:72:51:0a:b4:59:0a:5f:90:
         5e:dc:f4:af:a4:be:7a:fd:ad:4b:b3:69:89:3f:82:9d:39:94:
         83:f0:a1:f6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICMpswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI3NUIxMTAvBgNVBAUTKDE0MTVGMjgxMUMwMzdGMzY0Q0M1ODcxODBCRjI0MDc5
NUIwNDNBNjkwHhcNMjUwNzA0MTUyNTA4WhcNMjUwNzExMTUyNTA4WjAYMRYwFAYD
VQQDEw02ODY3ZjI1NC03MmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp0A3PVKwUSkE4oiRSE+pQwQrfpUl0lTKtbgqvCnJK1nq8By/fu2E1U/ttICp
EJj2UQXgf692P5H3lxmpMNk26kaJSOxQOPUPcKgVVT8YS1DZYMLCb1besCGL5TAy
iB3ACHH6Y2CC/yym30+559hg3crbQ2Z9QbD2Y1VRmqZSv16tBnK2nXBx17NF2FW0
UErU0N6evYw5XgHdB//B/uffZ7ZI/LtsEf3l4a3d6Hfr9DiYRcEF5rbjlV7r5R17
lY2gD830jxjunxVKnYA0vVIA/E6v03h/kca/yixXMU4nerMEvna/mZ3AZNThgUUI
KMJTjkAVE4AQddDmxAlkUhb1ZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNSZArcm
QMtWplfDOE2iumD9j9f9MB8GA1UdIwQYMBaAFBQV8oEcA382TMWHGAvyQHlbBDpp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE
QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9GQlh5Z1J3RGZ6Wk14WWNZQ19KQWVWc0VP
bWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZCWHlnUndEZnpaTXhZY1lDX0pBZVZzRU9tay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9GQlh5Z1J3RGZ6
Wk14WWNZQ19KQWVWc0VPbWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBQC+aE/gYi3/jIwtDMYDn3GmtgbrJeBOQXdwsbExd36CDhi9VgBgXt
88PfuS6kWtaqtVPgzfgkxjqMZiKqTxXM+XnBWUjgs0T5CUEAFPD1DL/C1qEX9uoJ
joPXiYMvPsb3q0Jo+N1DK8UDsrczIlQJ3zSqgBQazOww+u+TEv/B2IPZIHeWQ7vk
4x/FzjGxEpg62wJvhfwT4+8E0BvIHamM38Wh4gBPElKw/t7zfE79wl8lRFx2YTVC
rtj1j2Snc9GrVnE/facgkk3kwH6sqWuRkqdE0E9yXSOk1v9JrJ/MZvZpclEKtFkK
X5Be3PSvpL56/a1Ls2mJP4KdOZSD8KH2
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:08:04 2025 by rpki-client