Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
File:                     n4LbyUZjEsW6LpISeTAkAJVqmCo.mft (raw, json)
Hash identifier:          hGJIx1IZhR4Njlxw9Fl0w4QCMmCPQUoyQh4pTAi+W2E=
Subject key identifier:   05:D2:6F:05:E2:AB:5D:B2:82:A8:F2:C6:54:53:CE:B3:EF:9E:B1:42
Authority key identifier: 9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A
Certificate issuer:       /CN=A91697FA/serialNumber=9F82DBC9466312C5BA2E921279302400956A982A
Certificate serial:       358B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
Manifest number:          34AD
Signing time:             Fri 04 Apr 2025 14:22:10 +0000
Manifest this update:     Fri 04 Apr 2025 14:22:10 +0000
Manifest next update:     Fri 11 Apr 2025 14:22:10 +0000
Files and hashes:         1: n4LbyUZjEsW6LpISeTAkAJVqmCo.crl (hash: 9xdd2ld5ifmYU+KkBdrnMEuiaHdJGyXEKov7yDzGJzU=)
                          2: 1827B7E0605411EFA8069323C4F9AE02.roa (hash: f3ZnVyGboZ3Akbin4yXhLknrh3afmJ+B8J3RZmmaopQ=)
                          3: 439638A88DB811E98ACC9F7EC4F9AE02.roa (hash: tJj1Fysd0xDWoVakE+OSdSVBLD/VndaJXIUaElpuDlU=)
                          4: 4D21FB36F7DB11EE92D1E11FC4F9AE02.roa (hash: mkqJnfjAyC1y3JZ3S/aqxyvN2bSQ/y7HbUZRZ5455Yo=)
                          5: EBD5A3CA6B8711EFB0476280C4F9AE02.roa (hash: fA+kqaKk3JYJ5L1SCxggXVF38dEFRQWvBBK35ZGIubk=)
                          6: 4107DF748DB811E98ACC9F7EC4F9AE02.roa (hash: gyGZW8SRrhVaNuiEThQUlAOFPVRZ4pRi/unEVqDLonc=)
                          7: F6D9C45E7B1811EF82C90D2AC4F9AE02.roa (hash: AfBe49D3Yjx5Xz+auV8iqKW+ThAbYjOi5aUSfgO+bI8=)
                          8: 4A71D7E08DB811E98ACC9F7EC4F9AE02.roa (hash: E7yqhdrwljkTSOgbnaG+ysHeOquc8SyVIcLUBLYl/Ds=)
                          9: 4EE07E481F7F11ECA7242F6CC4F9AE02.roa (hash: TA9EFDfSdd7+EEK/5RjdrLiMORuBq9ygTpVOMFIYOcU=)
                          10: 42EBE8D08DB811E98ACC9F7EC4F9AE02.roa (hash: FSsmkLJ70j/LoQlK6EvnfSTcsUCXKKUSfAS4HphN87g=)
                          11: CEC68F44973211E9954F0565C4F9AE02.roa (hash: 1JZ1OOenzlz7dOVNT0ysjgGRJusSE3+1Rk7pSgH2Okk=)
                          12: 9DB6EBB4972E11E9B776A755C4F9AE02.roa (hash: F9o71AH8ui5/aDIyX2EvjpYqZFlu7QiC2robUaKm7Ww=)
                          13: 471E9C908DB811E98ACC9F7EC4F9AE02.roa (hash: dhSNGV7WN5Gdy2FxgxjeunIC6meweUvz6hG+CLphccQ=)
                          14: 482C95F68DB811E98ACC9F7EC4F9AE02.roa (hash: zEScPtSmfxNjAFuYUiCbjBlCrAeiT/w5Td2/JrWEkDk=)
                          15: 3ED710C68DB811E98ACC9F7EC4F9AE02.roa (hash: nCFG+bk+dqsOuGFESr8+Ya9a1BnYrZYntqhV2PYzrJ0=)
                          16: F3A41ADEC0E411EFA19F644CC4F9AE02.roa (hash: ACVLyZykAztEdUIVBfhutPukbcuitqKmSjWINXZwcgQ=)
                          17: 47A6C8E08DB811E98ACC9F7EC4F9AE02.roa (hash: TGN+p1ofbtkEaQ7GXRuZyKCw4vYy+9mP3K55Olf1oRk=)
                          18: B2FF274A00EC11EDBC60AA4FC4F9AE02.roa (hash: SB4SEPfrJcU4bAaiYGmkUQemcbi1AfCVHBrodW3eBtk=)
                          19: 402418C08DB811E98ACC9F7EC4F9AE02.roa (hash: u9VQpLnmNPRlXjoztXx96YhTp7IciEzLswD4rNTXg90=)
                          20: 441E60E88DB811E98ACC9F7EC4F9AE02.roa (hash: uq5spO8r//Mx5XkVnf0Z6fnNcxxWQ62LgeziZF4eNPE=)
                          21: A3601D70C2A511EBB2025B36C4F9AE02.roa (hash: y0DwpoBfHHEL957f/ttZlyeIHwIEba7rVVTz2uU5AGY=)
                          22: EC8209420EB411EFAE1CF63BC4F9AE02.roa (hash: NhE6BhdvNa2vpC+KQiezMi0MSOcKQeq7OmkH62Iv3CM=)
                          23: B580AA94013D11EBBC81306AC4F9AE02.roa (hash: Mw8xJZC8kTBbi9VQc48nB8qn9ni0B4gLN8NhE9LyvLM=)
                          24: 46800A948DB811E98ACC9F7EC4F9AE02.roa (hash: HDowV0jxfkJYeFr+sT32cXrZ6tZ57Cd3d2XNwlRtI04=)
                          25: 5B917C28A2E011E9A98B0235C4F9AE02.roa (hash: nL1G6QX9sO47hs0tQUmWNASOgl/VhJm0a/th8GsoFuE=)
                          26: F7318C2CBA3E11ECA0543F6BC4F9AE02.roa (hash: MeS1DOyTdCwke/RbgIIQT3rBZNWyYB2mfEuyQ/lkLGY=)
                          27: 4AEE35608DB811E98ACC9F7EC4F9AE02.roa (hash: fkmpdzQWy7yxmakJ09stjz11PIAgWGUDm5gwI5DEe7k=)
                          28: 48ED106A8DB811E98ACC9F7EC4F9AE02.roa (hash: mkmvnGvUB9LKYbrwKSr+DiBXHGZP38l2ItEGjYEGTms=)
                          29: 453F8E988DB811E98ACC9F7EC4F9AE02.roa (hash: jQRT5PlFbI2u576tkmy6PzP4OP+SK4T1Hzx4zOkrIWw=)
                          30: 1BA16D001F8211EC8FC82E73C4F9AE02.roa (hash: DDC+5+VXBnfrx9wWnbESqssm0Yt82gNbLRVKOAlPMNQ=)
                          31: 49EECD288DB811E98ACC9F7EC4F9AE02.roa (hash: x7dEeBeojoDb2WMyQhh46vqt838katbavZyk3phE4cQ=)
                          32: 4495856A8DB811E98ACC9F7EC4F9AE02.roa (hash: a14/2406/c/Vc+e673jRH7rbdHirwb+sw7UAVsW6UA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl
                          rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 14:22:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13707 (0x358b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91697FA
        Validity
            Not Before: Apr  4 14:22:10 2025 GMT
            Not After : Apr 11 14:22:10 2025 GMT
        Subject: CN=67efeb12-f704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9f:68:e0:b5:0b:33:ee:44:78:d5:26:2a:2c:
                    64:20:3a:33:92:df:bf:e0:1b:53:18:d9:16:f3:ba:
                    0f:5e:92:dc:92:37:e9:f9:cf:f5:d1:30:4a:0f:e0:
                    b8:0e:e5:de:2b:7a:10:83:b6:d1:59:ca:91:16:2d:
                    26:1b:c1:6b:ef:15:cc:ca:04:c9:1d:bb:bd:46:78:
                    71:a3:f5:75:60:ca:8e:14:40:0b:aa:9c:4b:e6:85:
                    06:50:03:1d:74:0f:2f:cd:02:97:7e:59:d0:e7:95:
                    33:32:78:96:6b:ba:92:62:13:78:eb:93:5d:40:8e:
                    3f:95:11:38:04:b1:40:87:37:e4:3d:64:a7:4b:a6:
                    e9:e6:69:bd:9c:eb:d1:9d:25:3b:18:ec:79:a2:e4:
                    fa:4d:37:fd:3e:dd:1e:1e:8b:99:d1:46:59:45:72:
                    08:ab:d9:c5:85:4d:99:4b:b0:eb:e3:0a:19:51:60:
                    68:9c:c6:a9:0c:fc:a9:72:80:9c:7b:61:31:91:1c:
                    ba:af:1d:8e:c6:56:e9:32:b8:c9:85:ae:8b:a8:66:
                    34:6f:93:c1:4d:36:bc:4f:15:2f:ee:9a:a0:40:24:
                    8f:ba:99:62:9b:d1:ff:26:0f:7c:f8:55:7f:3d:ac:
                    94:fd:0f:78:ad:cd:18:61:63:a3:c1:81:a6:b2:1d:
                    2a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D2:6F:05:E2:AB:5D:B2:82:A8:F2:C6:54:53:CE:B3:EF:9E:B1:42
            X509v3 Authority Key Identifier:
                keyid:9F:82:DB:C9:46:63:12:C5:BA:2E:92:12:79:30:24:00:95:6A:98:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n4LbyUZjEsW6LpISeTAkAJVqmCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91697FA/27F83B701D8311E2932921D808B02CD2/n4LbyUZjEsW6LpISeTAkAJVqmCo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:37:fa:a2:45:fb:ef:5b:b1:ed:9e:4c:6b:7d:a6:fe:5b:54:
         41:31:a5:f8:8b:21:dc:0f:71:b3:4b:82:4e:96:ed:fa:58:97:
         99:e3:15:04:13:72:02:cf:20:62:3a:c0:23:b7:cc:ab:17:7a:
         0e:7f:74:9d:66:91:1a:97:92:b7:c1:f3:0a:0c:00:af:c3:01:
         8f:21:8b:ef:f7:02:00:23:f4:46:81:98:40:f9:4e:b0:5d:64:
         1f:0f:7e:d1:36:af:13:6e:d7:b2:fe:a8:21:f8:0c:c4:6e:1d:
         b2:3d:e3:65:d9:41:82:5a:3b:4b:40:93:5f:32:c1:8b:07:6f:
         86:40:c3:8b:a8:bb:df:7f:c9:78:f6:e8:e5:51:55:95:ce:26:
         9a:10:d4:a0:d8:a0:3e:13:28:54:eb:86:5b:73:3d:ff:3c:ef:
         db:08:da:15:a2:95:4b:db:b7:9f:1c:26:80:13:18:e3:f8:88:
         fb:73:bb:1a:1f:27:51:a8:5c:77:40:43:6c:74:12:c6:2f:f7:
         e7:b0:6e:8a:5f:64:35:7b:bf:57:ca:27:1b:fc:df:30:08:e7:
         99:f8:2a:d6:8f:cb:66:eb:88:f6:cf:da:f2:8c:6c:10:0e:0f:
         0b:62:1b:00:d3:99:70:0b:b5:f2:15:7a:3d:19:db:46:8e:58:
         f9:8e:a0:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:23:13 2025 by rpki-client