Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
File:                     5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft (raw, json)
Hash identifier:          RBDCnt/1Ua7hbPKzrw1Z5MJhKyuSGPVo/CHjDLjfEi0=
Subject key identifier:   F8:4C:D1:EA:F9:0A:57:09:0C:A7:6D:81:25:43:46:17:1C:B4:05:8C
Authority key identifier: E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0
Certificate issuer:       /CN=A917B633/serialNumber=E60E2141D71DB9FC89FABFB5FDAD0372DFA337D0
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
Manifest number:          5E
Signing time:             Mon 07 Apr 2025 05:55:21 +0000
Manifest this update:     Mon 07 Apr 2025 05:55:21 +0000
Manifest next update:     Mon 14 Apr 2025 05:55:21 +0000
Files and hashes:         1: 5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl (hash: gyDA+c0abbay/UAlrGlSRehfBEN6gw5+YHibAAmq8BQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl
                          rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 05:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B633
        Validity
            Not Before: Apr  7 05:55:21 2025 GMT
            Not After : Apr 14 05:55:21 2025 GMT
        Subject: CN=67f368c9-dd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:de:1c:a2:c6:02:d7:9b:2d:2d:9f:28:b7:d1:
                    4b:ea:c9:45:81:21:74:97:ab:2e:1b:12:ac:d8:6b:
                    de:fa:38:69:49:1b:55:82:d9:d3:2d:9b:97:36:5a:
                    33:99:eb:a1:bf:5d:28:e5:f7:66:8c:e2:a1:e7:74:
                    e8:20:17:4a:dc:35:2f:fd:d8:54:d2:96:e2:c5:76:
                    76:c4:64:b2:ed:91:6e:66:52:b5:a3:f6:ba:1e:86:
                    9e:e0:95:03:52:66:a1:cf:da:54:73:cd:ba:d5:a7:
                    8e:0a:33:e3:f2:e4:82:23:61:c9:c7:b9:3b:c0:3d:
                    63:90:54:2c:5d:6b:18:ea:99:a7:ba:e4:e9:96:1c:
                    cc:27:a5:19:35:f5:f8:09:e4:fe:0c:ee:a3:84:21:
                    9c:55:58:be:58:ee:2f:7f:fe:96:c8:1e:eb:d7:e7:
                    14:e8:bc:3f:19:92:c6:9c:e6:10:f6:f8:dd:29:8e:
                    e1:3f:37:cf:46:72:48:c8:23:b2:25:9d:da:90:e8:
                    41:90:8c:cb:05:6e:c0:91:71:ce:67:d9:1b:23:af:
                    8e:6a:2c:80:d5:50:07:51:07:ad:9a:d1:dd:33:d0:
                    8e:95:76:c9:d1:ad:e7:43:d5:53:17:80:71:16:85:
                    f4:00:7c:69:a5:f2:eb:06:00:ef:f4:e6:cc:be:1d:
                    1d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4C:D1:EA:F9:0A:57:09:0C:A7:6D:81:25:43:46:17:1C:B4:05:8C
            X509v3 Authority Key Identifier:
                keyid:E6:0E:21:41:D7:1D:B9:FC:89:FA:BF:B5:FD:AD:03:72:DF:A3:37:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5g4hQdcdufyJ-r-1_a0Dct-jN9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B633/D9165EBA86D911EF8B8BEB1FC4F9AE02/5g4hQdcdufyJ-r-1_a0Dct-jN9A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:81:0d:60:7b:97:42:22:04:80:c4:e1:cf:8d:9a:44:54:47:
         43:0e:b0:10:10:27:a7:ca:28:90:ca:e1:13:82:f7:97:f1:05:
         c9:19:99:62:43:e0:fd:14:f1:10:65:22:ca:fa:d1:33:c7:14:
         0a:7a:dc:a9:4b:20:5c:8c:41:c3:00:3a:c5:31:96:90:ac:71:
         a6:94:a4:ac:f6:0b:46:76:2f:fa:28:72:69:21:00:51:47:fe:
         30:7c:5e:e0:90:45:45:24:0a:ab:36:67:de:c1:ca:e9:2a:ed:
         64:3d:13:c7:aa:4d:53:19:5d:0a:4a:b2:38:bb:1b:c9:72:41:
         e1:b8:b9:2f:08:c3:33:b3:46:67:c6:60:d5:27:fe:ba:87:6e:
         75:67:4b:85:06:32:62:06:2d:4d:d3:1a:b3:72:3f:bf:d3:32:
         d4:7a:d9:34:1c:fb:e0:62:c9:3e:e8:eb:60:32:04:fa:37:d4:
         c7:f2:ff:67:42:0c:75:0c:b8:e4:72:5b:eb:6a:3d:08:8e:55:
         c9:4e:d1:02:9f:6d:ce:f9:39:16:14:cf:fd:92:71:57:31:1b:
         f4:08:2e:c9:77:47:67:0c:e1:b1:3b:a4:59:37:31:5b:33:8c:
         30:2d:1a:67:69:22:84:a4:a9:f0:48:cb:b7:33:6f:bd:69:a8:
         3a:34:a3:59
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
QjYzMzExMC8GA1UEBRMoRTYwRTIxNDFENzFEQjlGQzg5RkFCRkI1RkRBRDAzNzJE
RkEzMzdEMDAeFw0yNTA0MDcwNTU1MjFaFw0yNTA0MTQwNTU1MjFaMBgxFjAUBgNV
BAMTDTY3ZjM2OGM5LWRkODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/3hyixgLXmy0tnyi30UvqyUWBIXSXqy4bEqzYa976OGlJG1WC2dMtm5c2WjOZ
66G/XSjl92aM4qHndOggF0rcNS/92FTSluLFdnbEZLLtkW5mUrWj9roehp7glQNS
ZqHP2lRzzbrVp44KM+Py5IIjYcnHuTvAPWOQVCxdaxjqmae65OmWHMwnpRk19fgJ
5P4M7qOEIZxVWL5Y7i9//pbIHuvX5xTovD8Zksac5hD2+N0pjuE/N89GckjII7Il
ndqQ6EGQjMsFbsCRcc5n2Rsjr45qLIDVUAdRB62a0d0z0I6VdsnRredD1VMXgHEW
hfQAfGml8usGAO/05sy+HR3RAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+EzR6vkK
VwkMp22BJUNGFxy0BYwwHwYDVR0jBBgwFoAU5g4hQdcdufyJ+r+1/a0Dct+jN9Aw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdCNjMzL0Q5MTY1RUJBODZE
OTExRUY4QjhCRUIxRkM0RjlBRTAyLzVnNGhRZGNkdWZ5Si1yLTFfYTBEY3Qtak45
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNWc0aFFkY2R1ZnlKLXItMV9hMERjdC1qTjlBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdC
NjMzL0Q5MTY1RUJBODZEOTExRUY4QjhCRUIxRkM0RjlBRTAyLzVnNGhRZGNkdWZ5
Si1yLTFfYTBEY3Qtak45QS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJCBDWB7l0IiBIDE4c+NmkRUR0MOsBAQJ6fKKJDK4ROC95fxBckZmWJD
4P0U8RBlIsr60TPHFAp63KlLIFyMQcMAOsUxlpCscaaUpKz2C0Z2L/oocmkhAFFH
/jB8XuCQRUUkCqs2Z97Byukq7WQ9E8eqTVMZXQpKsji7G8lyQeG4uS8IwzOzRmfG
YNUn/rqHbnVnS4UGMmIGLU3TGrNyP7/TMtR62TQc++BiyT7o62AyBPo31Mfy/2dC
DHUMuORyW+tqPQiOVclO0QKfbc75ORYUz/2ScVcxG/QILsl3R2cM4bE7pFk3MVsz
jDAtGmdpIoSkqfBIy7czb71pqDo0o1k=
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:34:35 2025 by rpki-client