Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C91A/516D4DF2213F11EFBC4CD546C4F9AE02/1VYDCTxFsoI2qo_pdJQeGZUu7No.mft
File:                     1VYDCTxFsoI2qo_pdJQeGZUu7No.mft (raw, json)
Hash identifier:          xC+mAHmm9pMPH+lK5UDSkXMOh6qHQxjSROFBCDhcL4g=
Subject key identifier:   87:32:BB:9E:58:08:26:6B:AA:0E:95:32:CC:83:CD:3E:28:AB:86:B0
Authority key identifier: D5:56:03:09:3C:45:B2:82:36:AA:8F:E9:74:94:1E:19:95:2E:EC:DA
Certificate issuer:       /CN=A913C91A/serialNumber=D55603093C45B28236AA8FE974941E19952EECDA
Certificate serial:       9F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1VYDCTxFsoI2qo_pdJQeGZUu7No.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C91A/516D4DF2213F11EFBC4CD546C4F9AE02/1VYDCTxFsoI2qo_pdJQeGZUu7No.mft
Manifest number:          9F
Signing time:             Sat 05 Apr 2025 03:35:45 +0000
Manifest this update:     Sat 05 Apr 2025 03:35:45 +0000
Manifest next update:     Sat 12 Apr 2025 03:35:45 +0000
Files and hashes:         1: 1VYDCTxFsoI2qo_pdJQeGZUu7No.crl (hash: V/P3HrybHTv4rdJ/UmyXMCwknY53hmVBEaowy+i/AKw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C91A/516D4DF2213F11EFBC4CD546C4F9AE02/1VYDCTxFsoI2qo_pdJQeGZUu7No.crl
                          rsync://rpki.apnic.net/member_repository/A913C91A/516D4DF2213F11EFBC4CD546C4F9AE02/1VYDCTxFsoI2qo_pdJQeGZUu7No.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1VYDCTxFsoI2qo_pdJQeGZUu7No.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 03:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C91A
        Validity
            Not Before: Apr  5 03:35:45 2025 GMT
            Not After : Apr 12 03:35:45 2025 GMT
        Subject: CN=67f0a511-b8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d4:87:3b:88:a1:b8:ec:1c:77:c7:05:d4:75:
                    46:17:b2:80:6a:6d:05:b7:7a:33:c5:f8:ef:b2:ce:
                    df:1c:f7:d8:45:9d:8d:02:b3:c3:87:c4:a1:d6:97:
                    1d:31:ec:05:c1:12:61:ae:88:61:a5:88:25:bd:10:
                    66:18:ba:67:64:d3:ae:94:28:23:d1:5f:59:f1:c7:
                    e5:5d:29:ea:c4:f9:83:9e:9d:b4:43:6b:03:2a:c3:
                    0f:95:32:a4:15:52:b6:81:4b:6b:57:ae:03:58:2f:
                    46:de:4b:a1:ec:03:a2:b6:8e:a6:30:a2:e7:4a:b8:
                    b2:34:f7:59:6b:94:8d:54:3a:7b:57:0d:c1:69:7a:
                    95:7c:c0:b6:bb:e1:9e:ee:b5:ae:5d:68:fc:56:3a:
                    c5:f7:97:bf:82:b5:3a:f8:82:a1:f7:c1:87:20:98:
                    6b:17:9a:13:90:bc:b2:34:87:c6:0f:19:ce:33:f7:
                    2e:96:c3:00:69:85:4b:46:41:9b:b9:c9:67:ec:19:
                    f3:7f:fe:dd:e5:b4:39:53:0d:32:a6:bf:d5:4c:45:
                    4b:6b:d5:3a:d9:2c:f5:98:82:10:2f:4e:e5:7d:27:
                    63:b1:fc:28:cd:89:e1:c1:bd:78:b8:94:20:11:3a:
                    50:de:c6:b6:02:3f:7d:2c:7a:d2:d2:1e:6d:89:ca:
                    92:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:32:BB:9E:58:08:26:6B:AA:0E:95:32:CC:83:CD:3E:28:AB:86:B0
            X509v3 Authority Key Identifier:
                keyid:D5:56:03:09:3C:45:B2:82:36:AA:8F:E9:74:94:1E:19:95:2E:EC:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C91A/516D4DF2213F11EFBC4CD546C4F9AE02/1VYDCTxFsoI2qo_pdJQeGZUu7No.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1VYDCTxFsoI2qo_pdJQeGZUu7No.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C91A/516D4DF2213F11EFBC4CD546C4F9AE02/1VYDCTxFsoI2qo_pdJQeGZUu7No.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:9e:bc:97:0b:12:e6:41:ac:2c:c8:a4:8f:09:ea:65:4e:77:
         3b:6b:f4:82:ab:07:a0:62:d3:09:1c:11:dd:7d:70:fc:fd:a3:
         93:2f:fe:5d:07:d2:c4:2e:aa:b6:2f:87:d6:63:4d:cb:6a:cc:
         7f:3c:50:54:ff:df:49:90:86:84:1b:3c:0d:35:44:ed:33:e5:
         d0:50:ab:64:ae:13:d6:9b:19:d3:ea:6b:43:50:22:06:12:52:
         df:f7:c2:8c:39:9c:41:5d:ee:4f:e0:dc:0e:9b:8c:83:b9:dc:
         aa:02:83:46:0b:51:a8:7d:18:ad:93:34:a2:bc:8f:4b:8f:5e:
         59:e1:c6:af:c8:eb:a8:eb:1d:34:93:8d:4e:c8:6b:c0:86:4b:
         16:9c:ad:e6:45:47:ac:6d:e8:66:94:1c:0f:c8:0b:41:fc:f3:
         84:43:f8:04:8f:92:43:e8:9a:c7:81:69:e3:00:69:da:06:a3:
         2d:e9:64:45:06:4e:cc:31:aa:1c:1c:9f:8a:dd:b0:5e:25:55:
         b0:e2:39:e5:2e:6c:a9:05:ef:b0:6d:37:57:f3:ab:f2:ef:93:
         23:c4:c1:4b:0d:22:c8:45:e4:7b:e3:7b:ce:9c:f8:be:6d:5b:
         00:af:5d:f5:5e:45:8f:d9:39:64:1f:09:f4:84:91:33:d4:1a:
         15:fe:64:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M5MUExMTAvBgNVBAUTKEQ1NTYwMzA5M0M0NUIyODIzNkFBOEZFOTc0OTQxRTE5
OTUyRUVDREEwHhcNMjUwNDA1MDMzNTQ1WhcNMjUwNDEyMDMzNTQ1WjAYMRYwFAYD
VQQDEw02N2YwYTUxMS1iOGE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwdSHO4ihuOwcd8cF1HVGF7KAam0Ft3ozxfjvss7fHPfYRZ2NArPDh8Sh1pcd
MewFwRJhrohhpYglvRBmGLpnZNOulCgj0V9Z8cflXSnqxPmDnp20Q2sDKsMPlTKk
FVK2gUtrV64DWC9G3kuh7AOito6mMKLnSriyNPdZa5SNVDp7Vw3BaXqVfMC2u+Ge
7rWuXWj8VjrF95e/grU6+IKh98GHIJhrF5oTkLyyNIfGDxnOM/culsMAaYVLRkGb
ucln7Bnzf/7d5bQ5Uw0ypr/VTEVLa9U62Sz1mIIQL07lfSdjsfwozYnhwb14uJQg
ETpQ3sa2Aj99LHrS0h5ticqSdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIcyu55Y
CCZrqg6VMsyDzT4oq4awMB8GA1UdIwQYMBaAFNVWAwk8RbKCNqqP6XSUHhmVLuza
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzkxQS81MTZENERGMjIx
M0YxMUVGQkM0Q0Q1NDZDNEY5QUUwMi8xVllEQ1R4RnNvSTJxb19wZEpRZUdaVXU3
Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFWWURDVHhGc29JMnFvX3BkSlFlR1pVdTdOby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzkxQS81MTZENERGMjIxM0YxMUVGQkM0Q0Q1NDZDNEY5QUUwMi8xVllEQ1R4RnNv
STJxb19wZEpRZUdaVXU3Tm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqnryXCxLmQawsyKSPCeplTnc7a/SCqwegYtMJHBHdfXD8/aOTL/5d
B9LELqq2L4fWY03Lasx/PFBU/99JkIaEGzwNNUTtM+XQUKtkrhPWmxnT6mtDUCIG
ElLf98KMOZxBXe5P4NwOm4yDudyqAoNGC1GofRitkzSivI9Lj15Z4cavyOuo6x00
k41OyGvAhksWnK3mRUesbehmlBwPyAtB/POEQ/gEj5JD6JrHgWnjAGnaBqMt6WRF
Bk7MMaocHJ+K3bBeJVWw4jnlLmypBe+wbTdX86vy75MjxMFLDSLIReR743vOnPi+
bVsAr131XkWP2TlkHwn0hJEz1BoV/mRo
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:57:50 2025 by rpki-client