Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
File:                     C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft (raw, json)
Hash identifier:          k7KCcOOPeQowHPgFTInMx3Cq0ip8E+mpyeihTHkXGZQ=
Subject key identifier:   BF:27:98:D9:5F:5B:09:A4:3C:1E:46:36:01:2F:EB:BE:2E:1F:78:0C
Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72
Certificate issuer:       /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
Manifest number:          ED
Signing time:             Fri 11 Apr 2025 04:32:55 +0000
Manifest this update:     Fri 11 Apr 2025 04:32:54 +0000
Manifest next update:     Fri 18 Apr 2025 04:32:54 +0000
Files and hashes:         1: C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl (hash: aB18jbmrhUb22Aqq0Ct0f7k9Jukk1/Lx/8ojTbUq/UY=)
                          2: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (hash: 9KgUBwn7ZxB41N0G+ybbb26vRb4/nvvRfm6F0NtcKGs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl
                          rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 04:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91868EC, serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772
        Validity
            Not Before: Apr 11 04:32:54 2025 GMT
            Not After : Apr 18 04:32:54 2025 GMT
        Subject: CN=67f89b76-79c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:02:4a:d4:52:a0:1d:3a:0d:5a:f5:a7:89:c0:
                    9a:9b:da:87:14:4f:c1:38:e6:14:12:4a:f0:ca:11:
                    34:e6:e5:2a:3f:5b:b9:7f:f4:37:9b:28:6e:12:6f:
                    6b:3e:0a:08:e8:f9:2f:8e:3f:cd:3b:7f:a3:ae:d5:
                    e0:b4:7f:24:cf:ac:ee:66:fd:7a:ae:08:6a:2e:c4:
                    e9:80:40:dd:b1:55:e2:6a:af:5b:f7:61:47:51:b4:
                    67:8d:9f:86:f6:a0:25:18:68:5c:33:6b:a1:c0:31:
                    40:57:40:d9:ab:f9:cd:cc:f0:a1:f0:55:5d:9c:38:
                    fb:8e:58:6c:ff:0b:a4:5a:1f:ba:71:49:4d:4f:d0:
                    ca:55:d9:3c:0a:25:d5:2a:aa:ff:5e:a9:f3:68:02:
                    9b:c3:c2:83:df:37:91:bb:01:89:c3:50:14:d0:e2:
                    93:fa:12:b3:bf:fb:c0:43:37:f5:95:c5:0c:43:d8:
                    42:62:44:3f:98:7a:c8:84:02:c2:5f:26:c3:c3:f4:
                    9c:6f:70:d1:7a:08:7b:e8:29:83:a6:b5:cc:cd:58:
                    35:9e:1d:ff:93:0c:20:fb:d7:58:72:34:1b:b1:28:
                    21:23:2c:47:b7:0c:22:f0:b4:05:49:3d:ff:be:1e:
                    a5:1a:15:78:c7:36:31:f8:62:a4:47:2e:25:97:9e:
                    b2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:27:98:D9:5F:5B:09:A4:3C:1E:46:36:01:2F:EB:BE:2E:1F:78:0C
            X509v3 Authority Key Identifier:
                keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:df:25:da:ad:4f:58:1f:dd:71:74:10:4d:19:11:70:53:cc:
         ef:15:20:d5:d3:b8:f5:86:5f:48:05:47:a1:ee:42:c8:c6:53:
         79:31:18:59:93:d4:20:1f:11:1a:93:68:4b:af:9f:27:20:f4:
         79:a7:09:13:82:82:d6:15:57:61:be:2f:5f:0a:4c:9c:68:f0:
         86:df:f6:db:80:f8:4c:e4:e6:cb:f8:82:b2:d4:a9:30:4d:9b:
         65:e6:88:67:9f:76:a8:6a:14:5c:3b:c1:ae:4c:1b:02:34:b0:
         79:91:2c:44:1d:4a:77:9e:83:a7:7e:76:63:ec:65:49:e9:df:
         ac:32:03:6c:f2:b9:16:4a:22:0d:fc:c9:a8:6c:62:84:5d:37:
         05:71:59:49:d3:01:01:3b:50:2f:26:97:a0:2c:a1:92:c8:d2:
         13:e0:f8:cb:76:77:70:fe:d7:e3:fa:7e:a9:6d:04:eb:33:3c:
         9e:20:4a:18:e8:44:58:1e:a6:f5:2a:60:73:0a:d7:97:1f:21:
         ff:49:6d:4c:57:a1:e0:fc:b4:5c:ed:70:ce:a1:48:fc:26:a3:
         91:03:ef:17:06:38:fe:99:26:ac:ac:15:8e:49:b4:bf:6b:44:
         6b:d7:6d:fc:3a:07:6f:3f:66:8a:91:70:0c:eb:ae:8b:2e:40:
         ad:f5:7c:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODY4RUMxMTAvBgNVBAUTKDBCQThCQTQwRjg5NzM0Q0MzRjNBRTNFRDY3NzRDQkQ4
NDNFMkU3NzIwHhcNMjUwNDExMDQzMjU0WhcNMjUwNDE4MDQzMjU0WjAYMRYwFAYD
VQQDEw02N2Y4OWI3Ni03OWM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArgJK1FKgHToNWvWnicCam9qHFE/BOOYUEkrwyhE05uUqP1u5f/Q3myhuEm9r
PgoI6Pkvjj/NO3+jrtXgtH8kz6zuZv16rghqLsTpgEDdsVXiaq9b92FHUbRnjZ+G
9qAlGGhcM2uhwDFAV0DZq/nNzPCh8FVdnDj7jlhs/wukWh+6cUlNT9DKVdk8CiXV
Kqr/XqnzaAKbw8KD3zeRuwGJw1AU0OKT+hKzv/vAQzf1lcUMQ9hCYkQ/mHrIhALC
XybDw/Scb3DRegh76CmDprXMzVg1nh3/kwwg+9dYcjQbsSghIyxHtwwi8LQFST3/
vh6lGhV4xzYx+GKkRy4ll56y5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL8nmNlf
WwmkPB5GNgEv674uH3gMMB8GA1UdIwQYMBaAFAuoukD4lzTMPzrj7Wd0y9hD4udy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjhFQy9FMDU3RTJCMEFE
QjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5Nd19PdVB0WjNUTDJFUGk1
M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M2aTZRUGlYTk13X091UHRaM1RMMkVQaTUzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NjhFQy9FMDU3RTJCMEFEQjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5N
d19PdVB0WjNUTDJFUGk1M0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAW3yXarU9YH91xdBBNGRFwU8zvFSDV07j1hl9IBUeh7kLIxlN5MRhZ
k9QgHxEak2hLr58nIPR5pwkTgoLWFVdhvi9fCkycaPCG3/bbgPhM5ObL+IKy1Kkw
TZtl5ohnn3aoahRcO8GuTBsCNLB5kSxEHUp3noOnfnZj7GVJ6d+sMgNs8rkWSiIN
/MmobGKEXTcFcVlJ0wEBO1AvJpegLKGSyNIT4PjLdndw/tfj+n6pbQTrMzyeIEoY
6ERYHqb1KmBzCteXHyH/SW1MV6Hg/LRc7XDOoUj8JqORA+8XBjj+mSasrBWOSbS/
a0Rr1238OgdvP2aKkXAM666LLkCt9XwD
-----END CERTIFICATE-----
Generated at Sun Apr 13 04:26:29 2025 by rpki-client