Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
File:                     peMSM_m0rMgiKz_WfG288kF5CbE.mft (raw, json)
Hash identifier:          iJ/mU6FAzWTZSYA3oFtqdJzxk+6udnjkdk0uXUOtFv8=
Subject key identifier:   0C:60:93:55:61:F2:E7:E2:AC:E7:E1:DD:77:99:4B:7A:58:2C:37:72
Authority key identifier: A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1
Certificate issuer:       /CN=A912E411/serialNumber=A5E31233F9B4ACC8222B3FD67C6DBCF2417909B1
Certificate serial:       0BBB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
Manifest number:          1421
Signing time:             Fri 04 Apr 2025 18:57:49 +0000
Manifest this update:     Fri 04 Apr 2025 18:57:49 +0000
Manifest next update:     Fri 11 Apr 2025 18:57:49 +0000
Files and hashes:         1: peMSM_m0rMgiKz_WfG288kF5CbE.crl (hash: hEyMk+Hrsnwx8fa4G1uUYg4U0Nd8X33YAG9a3LLQZNc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl
                          rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3003 (0xbbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E411
        Validity
            Not Before: Apr  4 18:57:49 2025 GMT
            Not After : Apr 11 18:57:49 2025 GMT
        Subject: CN=67f02bad-dd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:b5:bd:af:90:01:97:c0:db:c7:b5:ea:fa:
                    f6:a9:73:f1:33:33:fc:46:cd:25:98:43:aa:2d:68:
                    ee:fb:b0:5d:70:46:f5:58:13:46:ae:2d:e3:31:9c:
                    f6:35:68:79:45:20:b4:20:f1:a3:3b:bb:fd:f9:1a:
                    1a:61:68:d2:9f:0d:51:44:a1:b8:fa:73:50:fa:71:
                    5b:c8:05:cd:ce:5b:43:28:5b:19:11:8e:db:cc:65:
                    33:53:8e:d5:19:1a:02:56:dd:47:7a:f8:85:b3:d0:
                    cc:fe:86:fb:22:0e:c1:78:4c:28:40:90:0d:72:ba:
                    bb:34:36:49:46:8e:74:7b:09:76:64:18:72:23:48:
                    06:f8:c6:c0:b0:e0:81:7b:08:e5:fb:2b:a5:88:6c:
                    86:22:8c:27:98:c9:fe:12:88:df:f6:30:6e:d1:19:
                    e8:d7:cc:ba:83:eb:45:8d:2d:66:70:e7:66:3b:f2:
                    4b:57:af:dc:24:63:29:ec:40:99:30:74:f1:1e:d2:
                    14:6e:03:f4:4f:7e:0c:c8:9a:76:59:77:85:43:03:
                    b9:57:fe:08:e1:f0:da:66:9e:0e:bf:11:3b:4f:3a:
                    05:ba:b8:14:1b:c8:af:c0:fc:9b:a6:ea:ab:97:d5:
                    85:9f:93:4a:1c:d6:ac:a6:2f:fc:e6:1d:16:89:9e:
                    52:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:60:93:55:61:F2:E7:E2:AC:E7:E1:DD:77:99:4B:7A:58:2C:37:72
            X509v3 Authority Key Identifier:
                keyid:A5:E3:12:33:F9:B4:AC:C8:22:2B:3F:D6:7C:6D:BC:F2:41:79:09:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/peMSM_m0rMgiKz_WfG288kF5CbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/peMSM_m0rMgiKz_WfG288kF5CbE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:cc:1a:c8:60:a5:5c:4c:53:ea:98:f2:e5:f6:a1:1b:3f:48:
         d4:c2:3e:12:85:b0:d4:85:57:61:ce:50:b6:d0:9d:2d:97:46:
         47:03:f0:d1:b8:3d:17:0a:e3:b8:ef:70:a5:a3:42:40:53:fb:
         56:cf:fa:9d:fa:19:4a:6f:a3:3a:fb:18:a2:6a:e6:d1:c3:56:
         cd:42:bc:34:35:b4:26:60:7f:db:3a:84:c2:3f:93:df:3d:48:
         e5:36:d9:06:6d:e3:e7:70:d5:fd:80:61:ad:70:8d:3e:e1:9e:
         e9:51:ce:67:17:c6:87:cc:4b:4c:0b:34:75:bc:29:78:e5:f6:
         b2:42:54:fb:fa:d5:db:a2:8d:74:e9:b9:15:27:aa:3f:2e:80:
         b8:7f:0b:e6:80:01:14:60:10:ba:31:49:f7:e4:6d:a0:c8:8e:
         18:55:49:7c:ab:46:36:32:fe:87:eb:18:77:b9:14:f7:9d:53:
         74:3f:d9:49:9b:bf:95:af:36:a6:23:46:b2:9e:ad:5a:49:19:
         00:0c:b8:d7:de:62:18:ab:eb:28:d7:d3:50:ab:44:74:81:33:
         3f:91:46:69:18:41:c8:19:78:61:a0:d8:3c:d2:94:2f:00:0a:
         91:d7:89:d0:5a:c1:de:f0:20:72:53:6e:4b:44:72:94:0d:54:
         2e:34:0d:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC7swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkU0MTExMTAvBgNVBAUTKEE1RTMxMjMzRjlCNEFDQzgyMjJCM0ZENjdDNkRCQ0Yy
NDE3OTA5QjEwHhcNMjUwNDA0MTg1NzQ5WhcNMjUwNDExMTg1NzQ5WjAYMRYwFAYD
VQQDEw02N2YwMmJhZC1kZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApJC1va+QAZfA28e16vr2qXPxMzP8Rs0lmEOqLWju+7BdcEb1WBNGri3jMZz2
NWh5RSC0IPGjO7v9+RoaYWjSnw1RRKG4+nNQ+nFbyAXNzltDKFsZEY7bzGUzU47V
GRoCVt1HeviFs9DM/ob7Ig7BeEwoQJANcrq7NDZJRo50ewl2ZBhyI0gG+MbAsOCB
ewjl+yuliGyGIownmMn+Eojf9jBu0Rno18y6g+tFjS1mcOdmO/JLV6/cJGMp7ECZ
MHTxHtIUbgP0T34MyJp2WXeFQwO5V/4I4fDaZp4OvxE7TzoFurgUG8ivwPybpuqr
l9WFn5NKHNaspi/85h0WiZ5SEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxgk1Vh
8ufirOfh3XeZS3pYLDdyMB8GA1UdIwQYMBaAFKXjEjP5tKzIIis/1nxtvPJBeQmx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTQxMS9GMEIwMEVCNDE5
MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJNZ2lLel9XZkcyODhrRjVD
YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BlTVNNX20wck1naUt6X1dmRzI4OGtGNUNiRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RTQxMS9GMEIwMEVCNDE5MTQxMUVBODZGMjQ4MUVDNEY5QUUwMi9wZU1TTV9tMHJN
Z2lLel9XZkcyODhrRjVDYkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQArzBrIYKVcTFPqmPLl9qEbP0jUwj4ShbDUhVdhzlC20J0tl0ZHA/DR
uD0XCuO473Clo0JAU/tWz/qd+hlKb6M6+xiiaubRw1bNQrw0NbQmYH/bOoTCP5Pf
PUjlNtkGbePncNX9gGGtcI0+4Z7pUc5nF8aHzEtMCzR1vCl45fayQlT7+tXboo10
6bkVJ6o/LoC4fwvmgAEUYBC6MUn35G2gyI4YVUl8q0Y2Mv6H6xh3uRT3nVN0P9lJ
m7+VrzamI0aynq1aSRkADLjX3mIYq+so19NQq0R0gTM/kUZpGEHIGXhhoNg80pQv
AAqR14nQWsHe8CByU25LRHKUDVQuNA3P
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:58:30 2025 by rpki-client