Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft
File:                     szbWhuGt3y1ceNLQ4BKNDyh-B44.mft (raw, json)
Hash identifier:          d03z5uUIIai91qRj5lVnUfQ+D6okzk8rn0n9i3hn618=
Subject key identifier:   87:99:4A:EC:AA:02:F3:9A:F0:82:CD:26:15:0E:84:A8:1B:14:32:F7
Authority key identifier: B3:36:D6:86:E1:AD:DF:2D:5C:78:D2:D0:E0:12:8D:0F:28:7E:07:8E
Certificate issuer:       /CN=A91545AC/serialNumber=B336D686E1ADDF2D5C78D2D0E0128D0F287E078E
Certificate serial:       076F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szbWhuGt3y1ceNLQ4BKNDyh-B44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft
Manifest number:          0767
Signing time:             Wed 02 Apr 2025 21:29:41 +0000
Manifest this update:     Wed 02 Apr 2025 21:29:40 +0000
Manifest next update:     Wed 09 Apr 2025 21:29:40 +0000
Files and hashes:         1: szbWhuGt3y1ceNLQ4BKNDyh-B44.crl (hash: Nd7kWS1iyBglmihAxqs38cEy/8I+1FFzRnZ83fdlC/M=)
                          2: B546148C121911EB82F65F7AC4F9AE02.roa (hash: guFQzr4GMuotnLN4g29mwWKV8rRpZXge3ak3JTxYZDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.crl
                          rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szbWhuGt3y1ceNLQ4BKNDyh-B44.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 21:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1903 (0x76f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91545AC
        Validity
            Not Before: Apr  2 21:29:40 2025 GMT
            Not After : Apr  9 21:29:40 2025 GMT
        Subject: CN=67edac45-8d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:84:9b:2d:a0:2d:a8:05:f5:6f:88:c0:2b:
                    5b:44:2b:49:4e:be:70:f2:49:94:b0:70:2a:99:67:
                    15:41:ba:12:27:39:3d:2c:fb:94:50:af:19:f9:73:
                    db:8a:17:dd:24:73:2a:0e:28:3b:35:16:ab:0a:82:
                    25:4c:66:42:35:66:fe:d6:9d:75:a9:ce:d5:2f:b7:
                    23:cd:fd:00:97:d6:67:39:5f:a4:e8:07:7f:2c:8b:
                    3d:9d:9a:3b:00:1f:47:60:42:a3:2f:1f:a4:56:2e:
                    c1:15:7d:52:66:7d:e1:65:34:c3:85:78:f2:71:18:
                    49:45:36:60:7a:03:2f:61:62:30:b3:0d:56:b6:bb:
                    23:6d:69:a4:72:7c:1e:e6:d3:7c:99:cf:03:61:e7:
                    02:78:d9:dc:a6:e1:14:6a:d6:ba:55:11:7e:4a:df:
                    ef:89:03:15:97:49:fe:8e:2d:2b:ed:82:ab:77:e3:
                    e7:fb:c8:ce:5a:bd:17:8d:0d:56:94:9b:8c:03:60:
                    20:bf:b8:00:cf:7e:6e:59:f6:e2:9e:61:86:40:1d:
                    10:14:ab:16:cb:62:45:79:1f:0f:e8:cb:47:d6:11:
                    1d:5a:a1:9d:05:b7:15:c1:d7:b5:64:63:15:aa:60:
                    34:c9:c5:f7:4f:ee:a0:92:5f:2e:63:34:6f:72:6e:
                    c8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:99:4A:EC:AA:02:F3:9A:F0:82:CD:26:15:0E:84:A8:1B:14:32:F7
            X509v3 Authority Key Identifier:
                keyid:B3:36:D6:86:E1:AD:DF:2D:5C:78:D2:D0:E0:12:8D:0F:28:7E:07:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/szbWhuGt3y1ceNLQ4BKNDyh-B44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91545AC/8A568A82121811EBB1852C79C4F9AE02/szbWhuGt3y1ceNLQ4BKNDyh-B44.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e2:a0:ba:43:79:84:fb:1e:a5:d9:5a:20:1b:88:37:57:5f:
         ca:d3:29:a1:fc:71:61:5b:58:fd:91:33:cc:ff:75:2f:ff:9e:
         2d:81:23:2b:d1:14:4c:1a:f1:15:e0:56:c7:ef:0a:42:fb:fb:
         bf:87:ba:e9:f5:13:13:6d:76:ac:f9:69:21:88:f7:14:0a:c8:
         ce:20:0c:39:ab:37:a6:13:1d:e9:8d:7b:33:48:55:01:55:66:
         32:4c:a0:f9:f3:d1:ac:b1:33:ed:b4:b1:51:3d:88:9c:06:bd:
         b0:b6:f7:92:74:00:c2:3e:db:4e:58:4e:cf:8c:4c:b8:f8:bb:
         12:34:12:db:a0:15:65:36:1e:4f:17:58:a6:8d:a0:37:f6:ba:
         a1:49:f2:eb:9b:2c:5a:e0:bd:0a:42:4c:ea:d3:39:b4:ca:df:
         4f:c4:67:ab:30:fc:5d:13:fd:37:b4:8c:c9:70:90:7d:5f:de:
         c8:d3:72:a7:79:de:07:ec:31:1b:bc:1c:93:36:3d:8a:df:cc:
         be:ba:16:cc:fd:0d:58:81:8e:be:4e:6e:8f:c4:03:93:dd:41:
         40:35:48:b9:a3:49:ed:50:9d:db:8e:9d:28:ff:91:d5:de:dc:
         4f:31:fe:24:82:55:c7:9e:76:88:01:b6:81:7f:e3:da:d4:0b:
         42:a3:ab:2f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB28wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ1QUMxMTAvBgNVBAUTKEIzMzZENjg2RTFBRERGMkQ1Qzc4RDJEMEUwMTI4RDBG
Mjg3RTA3OEUwHhcNMjUwNDAyMjEyOTQwWhcNMjUwNDA5MjEyOTQwWjAYMRYwFAYD
VQQDEw02N2VkYWM0NS04ZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwsWEmy2gLagF9W+IwCtbRCtJTr5w8kmUsHAqmWcVQboSJzk9LPuUUK8Z+XPb
ihfdJHMqDig7NRarCoIlTGZCNWb+1p11qc7VL7cjzf0Al9ZnOV+k6Ad/LIs9nZo7
AB9HYEKjLx+kVi7BFX1SZn3hZTTDhXjycRhJRTZgegMvYWIwsw1WtrsjbWmkcnwe
5tN8mc8DYecCeNncpuEUata6VRF+St/viQMVl0n+ji0r7YKrd+Pn+8jOWr0XjQ1W
lJuMA2Agv7gAz35uWfbinmGGQB0QFKsWy2JFeR8P6MtH1hEdWqGdBbcVwde1ZGMV
qmA0ycX3T+6gkl8uYzRvcm7I+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIeZSuyq
AvOa8ILNJhUOhKgbFDL3MB8GA1UdIwQYMBaAFLM21obhrd8tXHjS0OASjQ8ofgeO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDVBQy84QTU2OEE4MjEy
MTgxMUVCQjE4NTJDNzlDNEY5QUUwMi9zemJXaHVHdDN5MWNlTkxRNEJLTkR5aC1C
NDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N6YldodUd0M3kxY2VOTFE0QktORHloLUI0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDVBQy84QTU2OEE4MjEyMTgxMUVCQjE4NTJDNzlDNEY5QUUwMi9zemJXaHVHdDN5
MWNlTkxRNEJLTkR5aC1CNDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBU4qC6Q3mE+x6l2VogG4g3V1/K0ymh/HFhW1j9kTPM/3Uv/54tgSMr
0RRMGvEV4FbH7wpC+/u/h7rp9RMTbXas+WkhiPcUCsjOIAw5qzemEx3pjXszSFUB
VWYyTKD589GssTPttLFRPYicBr2wtveSdADCPttOWE7PjEy4+LsSNBLboBVlNh5P
F1imjaA39rqhSfLrmyxa4L0KQkzq0zm0yt9PxGerMPxdE/03tIzJcJB9X97I03Kn
ed4H7DEbvByTNj2K38y+uhbM/Q1YgY6+Tm6PxAOT3UFANUi5o0ntUJ3bjp0o/5HV
3txPMf4kglXHnnaIAbaBf+Pa1AtCo6sv
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:42:15 2025 by rpki-client