Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
File:                     EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json)
Hash identifier:          /oObbU22wO/ZKNPAcbZrw0uafJJLpxOsWbfoMg0MTYE=
Subject key identifier:   D1:50:4B:51:90:89:66:BA:C9:2E:04:66:15:BA:92:91:72:F9:ED:58
Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04
Certificate issuer:       /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
Certificate serial:       039C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
Manifest number:          039A
Signing time:             Sun 29 Jun 2025 00:21:21 +0000
Manifest this update:     Sun 29 Jun 2025 00:21:21 +0000
Manifest next update:     Sun 06 Jul 2025 00:21:21 +0000
Files and hashes:         1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: q6Z1A9tkBz0JXCW+hYP0tCKx+Pex2TE/hoOXXlyovlI=)
                          2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: bo3M0SHEmY6fxlknnF6CrnoZr8k2yntFb0qjHa/esME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Jul 2025 00:21:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 924 (0x39c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
        Validity
            Not Before: Jun 29 00:21:21 2025 GMT
            Not After : Jul  6 00:21:21 2025 GMT
        Subject: CN=68608701-f41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:0d:e0:0c:b2:53:7d:83:89:c1:6d:71:2c:
                    90:8a:d2:59:ba:1f:fa:90:83:a3:e3:3d:f7:b0:16:
                    98:ca:b7:11:b4:08:86:3a:73:87:b0:d5:ed:e5:3d:
                    e1:21:9e:f1:43:39:7d:c2:97:48:4a:db:f5:0b:b1:
                    70:98:b3:e8:15:5e:69:34:1b:ca:6a:97:16:e6:70:
                    69:2f:96:db:b5:63:85:8c:a7:4e:6d:94:a7:f8:a8:
                    af:39:1a:7f:f0:c3:83:8d:28:12:7a:eb:02:cc:88:
                    11:a6:94:59:8c:5d:e8:ce:24:b1:ab:ea:ae:0a:3f:
                    29:d4:43:e7:9c:2d:3f:45:aa:44:d4:b9:fb:f7:cd:
                    76:72:39:00:28:96:f5:1b:3d:81:91:50:26:2f:17:
                    5f:4c:9f:2b:4e:dd:06:71:fe:c2:9b:9f:b8:1d:64:
                    2b:fa:3b:38:10:e5:1e:6d:f2:28:a2:31:7f:8a:16:
                    74:9f:c5:1c:d7:cf:fc:30:b2:3c:e3:6d:59:29:7a:
                    e1:63:ac:3d:42:7b:53:5d:fa:51:ad:8c:53:4b:57:
                    46:07:26:75:ab:33:94:04:31:d6:f8:1d:7f:6e:c2:
                    ae:e2:43:8a:d6:07:6b:06:36:d8:85:4f:b8:35:1e:
                    df:72:ae:c3:4c:6b:7f:04:e2:f1:2d:aa:dc:43:ff:
                    a7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:50:4B:51:90:89:66:BA:C9:2E:04:66:15:BA:92:91:72:F9:ED:58
            X509v3 Authority Key Identifier:
                keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:53:4d:6e:ea:0c:df:26:91:2b:79:92:b5:68:82:86:40:75:
         3d:9d:04:1d:82:57:1d:13:6d:92:02:7a:18:a4:14:09:85:1e:
         1c:81:02:f1:bb:f6:48:58:d9:21:15:87:db:be:bb:38:9d:ba:
         f1:1a:f7:e1:aa:cc:61:5d:ff:4f:e5:62:a4:f7:35:ef:68:43:
         43:9e:f3:fb:fc:bf:17:8f:0a:85:9c:07:1b:7a:ec:a6:b1:c7:
         2f:cb:fb:ac:01:ae:95:9e:a4:9a:1b:c2:94:c1:4f:80:bd:a8:
         b7:aa:3c:69:e7:8a:e5:cd:0f:bc:3b:9e:64:39:9e:87:3c:f1:
         18:3d:27:bb:de:45:fe:d4:d2:ce:bc:c7:cf:55:aa:60:88:e0:
         15:50:6e:40:37:8a:89:47:9f:21:0c:6c:c4:48:a2:cc:5a:48:
         9a:5d:4b:b4:1f:56:c9:ca:87:30:5a:6d:74:2d:31:0c:0d:8d:
         0a:c4:b6:01:6d:bc:4c:8e:05:cc:15:b7:58:52:23:a5:71:be:
         82:56:40:8b:a9:26:6e:f9:0f:9e:2a:34:fd:f9:a3:13:39:c3:
         17:dc:8b:26:4a:07:9f:c3:5c:bf:ff:73:20:58:f7:17:c2:bd:
         db:90:8a:fa:f4:91:8e:dd:08:97:81:3e:84:05:14:c3:35:be:
         a0:f4:d6:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkUyOTUxMTAvBgNVBAUTKDExQzA0QkFGQzFDQjQwQjA3MzEwM0Y3NThBQjY4RTU4
N0Y1QkZFMDQwHhcNMjUwNjI5MDAyMTIxWhcNMjUwNzA2MDAyMTIxWjAYMRYwFAYD
VQQDEw02ODYwODcwMS1mNDFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwI8N4AyyU32DicFtcSyQitJZuh/6kIOj4z33sBaYyrcRtAiGOnOHsNXt5T3h
IZ7xQzl9wpdIStv1C7FwmLPoFV5pNBvKapcW5nBpL5bbtWOFjKdObZSn+KivORp/
8MODjSgSeusCzIgRppRZjF3oziSxq+quCj8p1EPnnC0/RapE1Ln79812cjkAKJb1
Gz2BkVAmLxdfTJ8rTt0Gcf7Cm5+4HWQr+js4EOUebfIoojF/ihZ0n8Uc18/8MLI8
421ZKXrhY6w9QntTXfpRrYxTS1dGByZ1qzOUBDHW+B1/bsKu4kOK1gdrBjbYhU+4
NR7fcq7DTGt/BOLxLarcQ/+ntQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNFQS1GQ
iWa6yS4EZhW6kpFy+e1YMB8GA1UdIwQYMBaAFBHAS6/By0CwcxA/dYq2jlh/W/4E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTI5NS82Rjk2QzBEQ0Ew
MTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFMQnpFRDkxaXJhT1dIOWJf
Z1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VjQkxyOEhMUUxCekVEOTFpcmFPV0g5Yl9nUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RTI5NS82Rjk2QzBEQ0EwMTkxMUVDOTQ4NEQxMkZDNEY5QUUwMi9FY0JMcjhITFFM
QnpFRDkxaXJhT1dIOWJfZ1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBzU01u6gzfJpEreZK1aIKGQHU9nQQdglcdE22SAnoYpBQJhR4cgQLx
u/ZIWNkhFYfbvrs4nbrxGvfhqsxhXf9P5WKk9zXvaENDnvP7/L8XjwqFnAcbeuym
sccvy/usAa6VnqSaG8KUwU+Avai3qjxp54rlzQ+8O55kOZ6HPPEYPSe73kX+1NLO
vMfPVapgiOAVUG5AN4qJR58hDGzESKLMWkiaXUu0H1bJyocwWm10LTEMDY0KxLYB
bbxMjgXMFbdYUiOlcb6CVkCLqSZu+Q+eKjT9+aMTOcMX3IsmSgefw1y//3MgWPcX
wr3bkIr69JGO3QiXgT6EBRTDNb6g9NZn
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:24:57 2025 by rpki-client