Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
File:                     owBvXZI9TJzDuBs4ocpnEnR9RAY.mft (raw, json)
Hash identifier:          f0jeDFGdOvd74Vbvx53usiwryi6j8VbPJvxERgDAv64=
Subject key identifier:   B2:F7:AB:E7:83:F9:3B:E5:E4:CB:8E:F2:7B:F6:88:18:75:47:FA:67
Authority key identifier: A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06
Certificate issuer:       /CN=A91185B8/serialNumber=A3006F5D923D4C9CC3B81B38A1CA6712747D4406
Certificate serial:       0186
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
Manifest number:          0185
Signing time:             Thu 03 Apr 2025 02:55:35 +0000
Manifest this update:     Thu 03 Apr 2025 02:55:35 +0000
Manifest next update:     Thu 10 Apr 2025 02:55:34 +0000
Files and hashes:         1: owBvXZI9TJzDuBs4ocpnEnR9RAY.crl (hash: D6YQYBfmcKoa97DsGy8r/kyhnNC/WFzkEGRSXeM3ijU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl
                          rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 02:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91185B8
        Validity
            Not Before: Apr  3 02:55:35 2025 GMT
            Not After : Apr 10 02:55:34 2025 GMT
        Subject: CN=67edf8a7-8bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ec:d4:b8:5b:55:92:c8:0d:f5:87:e8:eb:e0:
                    99:2c:44:37:f1:e4:a0:2a:a0:92:7a:3b:31:8a:b6:
                    6c:f5:cb:79:95:7b:22:a7:62:8e:08:96:16:2e:57:
                    1a:2f:82:99:10:a2:6d:52:60:c2:f1:ed:77:c4:84:
                    f9:b2:bb:5b:83:03:7c:cf:f2:ae:66:34:eb:aa:f2:
                    e9:1e:26:cd:63:56:a1:a7:16:87:c8:38:79:3c:35:
                    07:09:c5:ba:a8:cf:4b:cc:63:f2:37:72:4b:86:bb:
                    07:53:41:7a:e4:50:c1:2f:99:15:3d:75:f1:f4:66:
                    fe:02:71:71:60:89:87:4c:da:27:c4:c8:f6:15:43:
                    d5:4b:f8:c0:8f:e7:c4:4d:44:d1:c9:3f:7e:2e:bc:
                    41:a1:05:36:9b:47:ce:f0:a9:3f:eb:4b:96:56:7a:
                    ee:80:94:f8:db:13:a5:cb:29:5c:b4:89:31:59:c1:
                    22:73:05:12:20:4d:a1:c8:0f:11:9e:c8:09:80:65:
                    43:13:cb:21:b5:ac:2b:62:e5:5c:0c:bd:b9:a2:d0:
                    8d:26:1a:ae:62:23:9c:93:7d:30:7d:f0:72:2b:fa:
                    eb:8e:95:d8:d8:9e:52:95:78:f5:43:92:78:87:bf:
                    7e:52:d1:2d:28:b4:ee:83:8d:e1:92:51:37:43:bb:
                    34:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F7:AB:E7:83:F9:3B:E5:E4:CB:8E:F2:7B:F6:88:18:75:47:FA:67
            X509v3 Authority Key Identifier:
                keyid:A3:00:6F:5D:92:3D:4C:9C:C3:B8:1B:38:A1:CA:67:12:74:7D:44:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/owBvXZI9TJzDuBs4ocpnEnR9RAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91185B8/D9BF4394BE3111EDB4FF7D34C4F9AE02/owBvXZI9TJzDuBs4ocpnEnR9RAY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:b6:de:9a:90:a7:bb:c6:07:05:f5:25:da:e5:82:55:cd:1f:
         82:a8:e0:33:c4:e8:e2:d6:59:9d:b0:f7:55:2a:19:eb:74:14:
         8e:e5:81:fe:d6:39:1c:a8:e2:8d:c1:c1:65:d3:1f:fc:51:80:
         c0:fd:55:76:87:73:09:03:a0:ab:52:df:69:7b:45:25:63:3b:
         e6:22:b7:c1:e0:49:e1:98:87:1d:b1:30:d6:36:54:59:08:6d:
         43:09:db:03:38:2c:98:06:c2:9e:d5:12:8f:c7:f7:3f:6e:25:
         0e:e2:2e:09:f4:7f:c2:6d:92:74:fb:92:87:55:ea:10:7b:0a:
         ae:8e:7d:d8:74:c0:44:3b:07:f4:ca:bd:6d:88:de:eb:c2:b6:
         70:5d:6b:20:71:02:ea:eb:8f:40:ce:5e:51:44:17:74:b5:ab:
         78:87:46:56:62:37:b9:b7:bc:f3:5a:98:82:c5:7b:67:66:66:
         1d:92:78:54:0a:43:ca:fa:89:ed:12:1b:86:f0:73:3e:7d:1e:
         e3:95:85:89:8e:84:da:a0:68:b2:7b:59:00:6e:ba:99:fa:3e:
         35:87:09:02:f9:22:f8:59:7e:11:37:64:0c:ad:2a:8f:75:ff:
         f2:f3:1a:4f:84:06:3a:1f:b8:62:be:c3:de:f8:a8:ca:81:7c:
         c5:3f:75:05
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTg1QjgxMTAvBgNVBAUTKEEzMDA2RjVEOTIzRDRDOUNDM0I4MUIzOEExQ0E2NzEy
NzQ3RDQ0MDYwHhcNMjUwNDAzMDI1NTM1WhcNMjUwNDEwMDI1NTM0WjAYMRYwFAYD
VQQDEw02N2VkZjhhNy04YmNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6+zUuFtVksgN9Yfo6+CZLEQ38eSgKqCSejsxirZs9ct5lXsip2KOCJYWLlca
L4KZEKJtUmDC8e13xIT5srtbgwN8z/KuZjTrqvLpHibNY1ahpxaHyDh5PDUHCcW6
qM9LzGPyN3JLhrsHU0F65FDBL5kVPXXx9Gb+AnFxYImHTNonxMj2FUPVS/jAj+fE
TUTRyT9+LrxBoQU2m0fO8Kk/60uWVnrugJT42xOlyylctIkxWcEicwUSIE2hyA8R
nsgJgGVDE8shtawrYuVcDL25otCNJhquYiOck30wffByK/rrjpXY2J5SlXj1Q5J4
h79+UtEtKLTug43hklE3Q7s0QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLL3q+eD
+Tvl5MuO8nv2iBh1R/pnMB8GA1UdIwQYMBaAFKMAb12SPUycw7gbOKHKZxJ0fUQG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODVCOC9EOUJGNDM5NEJF
MzExMUVEQjRGRjdEMzRDNEY5QUUwMi9vd0J2WFpJOVRKekR1QnM0b2NwbkVuUjlS
QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL293QnZYWkk5VEp6RHVCczRvY3BuRW5SOVJBWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODVCOC9EOUJGNDM5NEJFMzExMUVEQjRGRjdEMzRDNEY5QUUwMi9vd0J2WFpJOVRK
ekR1QnM0b2NwbkVuUjlSQVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+tt6akKe7xgcF9SXa5YJVzR+CqOAzxOji1lmdsPdVKhnrdBSO5YH+
1jkcqOKNwcFl0x/8UYDA/VV2h3MJA6CrUt9pe0UlYzvmIrfB4EnhmIcdsTDWNlRZ
CG1DCdsDOCyYBsKe1RKPx/c/biUO4i4J9H/CbZJ0+5KHVeoQewqujn3YdMBEOwf0
yr1tiN7rwrZwXWsgcQLq649Azl5RRBd0tat4h0ZWYje5t7zzWpiCxXtnZmYdknhU
CkPK+ontEhuG8HM+fR7jlYWJjoTaoGiye1kAbrqZ+j41hwkC+SL4WX4RN2QMrSqP
df/y8xpPhAY6H7hivsPe+KjKgXzFP3UF
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:48 2025 by rpki-client