Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
File:                     9o4033GQZ5Iit29wPgM3yhu5bz4.mft (raw, json)
Hash identifier:          JLwX8lPlEEfKukyD1+wdV1ufg9WtZyv1FemxtEflAk0=
Subject key identifier:   DC:CE:63:D5:DC:AD:62:FA:A4:8F:16:15:CD:BF:E1:D0:DA:16:C2:D0
Authority key identifier: F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E
Certificate issuer:       /CN=A911606A/serialNumber=F68E34DF7190679222B76F703E0337CA1BB96F3E
Certificate serial:       DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
Manifest number:          DF
Signing time:             Thu 03 Apr 2025 04:42:46 +0000
Manifest this update:     Thu 03 Apr 2025 04:42:46 +0000
Manifest next update:     Thu 10 Apr 2025 04:42:46 +0000
Files and hashes:         1: 9o4033GQZ5Iit29wPgM3yhu5bz4.crl (hash: DXBpUck/ggQqoWrebQ7swKY+kZooxKywj5b7IR0CiJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl
                          rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 04:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911606A
        Validity
            Not Before: Apr  3 04:42:46 2025 GMT
            Not After : Apr 10 04:42:46 2025 GMT
        Subject: CN=67ee11c6-7d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c4:83:77:80:ab:74:5a:6b:f7:fe:32:08:14:
                    f3:aa:0e:f9:d1:2d:d6:22:fc:bf:5f:ca:d0:6d:84:
                    1e:38:7f:04:63:33:a8:89:cd:34:0c:90:ea:87:13:
                    3c:d4:27:8c:1c:ce:2c:5a:32:c4:9f:5a:fe:4a:6f:
                    f4:29:09:f5:a2:15:be:65:4d:54:a5:12:df:a4:f4:
                    a2:c4:6c:47:e8:af:4a:24:d7:a0:38:6e:56:63:a0:
                    c2:03:a8:34:32:5b:b8:a3:0b:27:b9:d4:01:c0:49:
                    b8:93:a4:6b:f6:0e:a5:af:50:2b:97:dd:3b:1a:e0:
                    57:70:75:b3:d6:2b:41:a3:59:c6:e6:93:d9:6f:69:
                    1f:8e:d3:72:51:22:b7:ff:57:c5:f3:85:fc:21:8d:
                    ca:51:85:6e:2c:09:82:c4:a7:85:a5:87:6d:92:46:
                    55:5c:2d:6d:5c:aa:e6:7f:08:8e:d0:6b:a3:1d:ac:
                    00:e6:63:bc:5a:c3:62:1c:c0:d4:48:9b:2f:ff:28:
                    74:63:0e:5a:ed:2d:7d:64:ba:c4:68:83:c5:7a:cb:
                    f7:21:ad:5e:2b:3b:d8:2d:29:9f:ba:5d:da:1d:7f:
                    f8:29:61:36:44:3f:0d:d5:2b:a5:5a:ed:27:ae:5e:
                    66:22:65:7e:42:fc:1f:75:69:df:3b:84:b3:dc:c9:
                    ef:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CE:63:D5:DC:AD:62:FA:A4:8F:16:15:CD:BF:E1:D0:DA:16:C2:D0
            X509v3 Authority Key Identifier:
                keyid:F6:8E:34:DF:71:90:67:92:22:B7:6F:70:3E:03:37:CA:1B:B9:6F:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9o4033GQZ5Iit29wPgM3yhu5bz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/5870A9F6BB4511EE830C985DC4F9AE02/9o4033GQZ5Iit29wPgM3yhu5bz4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:0b:f9:90:68:8d:9d:98:db:07:87:02:ff:fe:7a:c9:2e:13:
         ed:af:80:16:13:22:3a:87:67:fb:9e:16:94:aa:48:3a:86:54:
         9f:d9:44:de:8d:26:63:24:6b:3d:da:c1:27:75:39:16:0b:91:
         38:78:1a:45:16:14:0e:0c:84:33:73:40:2d:ee:57:c9:dc:d0:
         7e:33:ec:45:06:9d:0d:70:4c:df:04:50:f5:11:41:b0:76:08:
         4b:83:ff:d1:b7:b8:31:68:40:33:90:62:d8:d4:2e:94:81:3a:
         34:f2:c0:ab:7b:8e:46:a3:2c:22:a7:27:df:32:55:91:29:8b:
         56:57:d7:37:d9:5e:20:4e:e4:34:c8:1b:c1:90:bf:16:d4:93:
         62:3a:00:7c:25:32:bb:6f:2d:e8:ab:fe:0d:f2:d5:f5:d7:cd:
         fe:44:fc:cb:0f:a3:fa:97:88:f5:0e:a8:c9:b9:e8:63:0d:29:
         d1:34:6d:3c:fc:80:3a:87:06:3e:81:9b:ce:90:2b:52:43:b8:
         3c:6d:70:65:3c:cc:43:cf:8d:f6:b0:0b:25:5e:4d:ec:e7:55:
         1d:43:f6:a9:ee:12:8f:3b:12:86:4c:31:69:9a:dc:56:4d:14:
         fc:47:5f:a6:4a:53:1e:37:f6:70:ee:b1:a7:a0:91:cb:bf:29:
         8f:00:80:18
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAN8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTYwNkExMTAvBgNVBAUTKEY2OEUzNERGNzE5MDY3OTIyMkI3NkY3MDNFMDMzN0NB
MUJCOTZGM0UwHhcNMjUwNDAzMDQ0MjQ2WhcNMjUwNDEwMDQ0MjQ2WjAYMRYwFAYD
VQQDEw02N2VlMTFjNi03ZDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0cSDd4CrdFpr9/4yCBTzqg750S3WIvy/X8rQbYQeOH8EYzOoic00DJDqhxM8
1CeMHM4sWjLEn1r+Sm/0KQn1ohW+ZU1UpRLfpPSixGxH6K9KJNegOG5WY6DCA6g0
Mlu4owsnudQBwEm4k6Rr9g6lr1Arl907GuBXcHWz1itBo1nG5pPZb2kfjtNyUSK3
/1fF84X8IY3KUYVuLAmCxKeFpYdtkkZVXC1tXKrmfwiO0GujHawA5mO8WsNiHMDU
SJsv/yh0Yw5a7S19ZLrEaIPFesv3Ia1eKzvYLSmful3aHX/4KWE2RD8N1SulWu0n
rl5mImV+QvwfdWnfO4Sz3MnvXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzOY9Xc
rWL6pI8WFc2/4dDaFsLQMB8GA1UdIwQYMBaAFPaONN9xkGeSIrdvcD4DN8obuW8+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjA2QS81ODcwQTlGNkJC
NDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1SWl0Mjl3UGdNM3lodTVi
ejQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlvNDAzM0dRWjVJaXQyOXdQZ00zeWh1NWJ6NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjA2QS81ODcwQTlGNkJCNDUxMUVFODMwQzk4NURDNEY5QUUwMi85bzQwMzNHUVo1
SWl0Mjl3UGdNM3lodTViejQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBuC/mQaI2dmNsHhwL//nrJLhPtr4AWEyI6h2f7nhaUqkg6hlSf2UTe
jSZjJGs92sEndTkWC5E4eBpFFhQODIQzc0At7lfJ3NB+M+xFBp0NcEzfBFD1EUGw
dghLg//Rt7gxaEAzkGLY1C6UgTo08sCre45GoywipyffMlWRKYtWV9c32V4gTuQ0
yBvBkL8W1JNiOgB8JTK7by3oq/4N8tX1183+RPzLD6P6l4j1DqjJuehjDSnRNG08
/IA6hwY+gZvOkCtSQ7g8bXBlPMxDz432sAslXk3s51UdQ/ap7hKPOxKGTDFpmtxW
TRT8R1+mSlMeN/Zw7rGnoJHLvymPAIAY
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:10:46 2025 by rpki-client