Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
File:                     rKEv19uyg_Ms3XPPzs8F08uaiKE.mft (raw, json)
Hash identifier:          wAI39+UplvbMib9G2L3AaR3orOVZkHtBKaryS3818lE=
Subject key identifier:   51:67:E4:8D:5F:EF:4F:D1:A3:62:5D:13:0F:6B:C5:BF:4F:5C:B9:1C
Authority key identifier: AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1
Certificate issuer:       /CN=A91994D1/serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
Certificate serial:       07AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
Manifest number:          07A6
Signing time:             Mon 14 Apr 2025 20:59:08 +0000
Manifest this update:     Mon 14 Apr 2025 20:59:07 +0000
Manifest next update:     Mon 21 Apr 2025 20:59:07 +0000
Files and hashes:         1: rKEv19uyg_Ms3XPPzs8F08uaiKE.crl (hash: gtgHHcspCVWV1G4vQUu4VMfgH5cWIHsoEi4wfUxGC6k=)
                          2: CD8C0430F99011EAB54DF63CC4F9AE02.roa (hash: KyOkY9VA3J/3sBokvUHuRFKP5fmOGmjv1+iHz+yAeU0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl
                          rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 21 Apr 2025 20:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1963 (0x7ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91994D1, serialNumber=ACA12FD7DBB283F32CDD73CFCECF05D3CB9A88A1
        Validity
            Not Before: Apr 14 20:59:07 2025 GMT
            Not After : Apr 21 20:59:07 2025 GMT
        Subject: CN=67fd771b-5f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9f:39:36:fe:5e:ec:9e:12:f4:8e:11:d6:f7:
                    f3:da:8f:0e:d2:44:07:d4:a0:27:dd:48:cb:49:9d:
                    aa:71:94:2c:73:bf:ce:4d:5e:02:a0:5c:bb:6d:d3:
                    8f:bd:a2:a2:36:c6:01:45:c5:f6:6d:b2:8e:64:d3:
                    55:b7:6a:69:72:8c:f3:7e:a8:89:7a:7b:97:91:8e:
                    9c:44:69:32:7e:17:47:fa:09:42:54:b7:cc:5b:d2:
                    6a:d4:ce:9c:d1:10:9f:90:4c:34:fe:33:57:d9:40:
                    16:57:2e:2f:38:81:52:cf:a1:6f:93:51:25:0d:4d:
                    86:e2:b4:4a:b3:55:ad:0e:11:81:a2:bd:3d:2a:01:
                    92:39:36:fe:26:01:32:4f:16:2a:8c:e7:10:4a:ec:
                    c4:98:23:e1:c0:1f:3b:b3:b0:c2:03:d5:f2:c2:7d:
                    5a:45:a7:67:6b:5e:ec:1a:68:e2:ec:ad:23:14:c0:
                    ec:aa:1d:37:8b:55:2e:04:f3:d2:8b:a7:d5:70:b8:
                    0d:f2:2a:dc:62:76:29:cc:20:38:1b:a4:34:f9:cc:
                    a7:c0:67:c7:f9:36:5e:26:4a:01:bf:01:a0:ab:fb:
                    41:1c:9a:47:65:6c:a1:71:18:43:8b:0d:9d:57:5d:
                    5d:4f:3f:d1:1f:28:b1:5c:0a:ed:15:ae:c5:fc:9f:
                    62:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:67:E4:8D:5F:EF:4F:D1:A3:62:5D:13:0F:6B:C5:BF:4F:5C:B9:1C
            X509v3 Authority Key Identifier:
                keyid:AC:A1:2F:D7:DB:B2:83:F3:2C:DD:73:CF:CE:CF:05:D3:CB:9A:88:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rKEv19uyg_Ms3XPPzs8F08uaiKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91994D1/7BD21AFEF97B11EAAC905E62C4F9AE02/rKEv19uyg_Ms3XPPzs8F08uaiKE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:47:07:c1:d2:b2:17:fe:27:4f:11:f8:61:9e:3c:ae:9c:e2:
         84:53:d7:8e:c3:6f:0f:f8:fb:3c:4d:33:20:2c:09:c6:d0:a5:
         4b:5c:86:f7:66:79:9e:1b:13:b4:32:78:d5:08:b3:ef:b4:d0:
         68:e1:7d:36:66:da:88:50:f2:33:d8:86:db:15:5d:79:bd:d6:
         5d:8b:2c:89:e7:2c:f6:f2:7e:d7:b7:6f:68:e0:fe:c8:17:a6:
         ae:f6:56:53:3b:73:24:d6:89:85:ca:5e:f4:32:93:fd:f0:b5:
         45:68:e7:21:a0:24:e1:13:2e:ad:62:98:c1:80:5c:60:07:d0:
         b7:ef:f7:e5:8a:b6:62:87:f5:56:fb:2c:0e:0e:67:57:25:ec:
         11:55:2c:79:73:73:83:13:ad:03:cc:bf:61:f1:79:65:a1:77:
         bc:c0:97:00:55:3b:98:2c:b0:3a:3b:ab:d3:73:88:b1:dd:c7:
         8c:ff:20:51:97:1e:44:5a:0d:61:b2:94:ed:37:67:88:41:7a:
         94:22:66:76:0a:36:6e:70:da:14:67:9a:cf:1d:1a:94:e0:c8:
         53:2f:93:b7:c8:78:12:51:75:36:9a:4f:a3:b8:37:31:96:c9:
         e2:eb:cc:7f:eb:40:3d:6b:2a:55:63:c0:6f:57:cf:1d:df:21:
         79:5e:91:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB6swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTk0RDExMTAvBgNVBAUTKEFDQTEyRkQ3REJCMjgzRjMyQ0RENzNDRkNFQ0YwNUQz
Q0I5QTg4QTEwHhcNMjUwNDE0MjA1OTA3WhcNMjUwNDIxMjA1OTA3WjAYMRYwFAYD
VQQDEw02N2ZkNzcxYi01ZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtZ85Nv5e7J4S9I4R1vfz2o8O0kQH1KAn3UjLSZ2qcZQsc7/OTV4CoFy7bdOP
vaKiNsYBRcX2bbKOZNNVt2ppcozzfqiJenuXkY6cRGkyfhdH+glCVLfMW9Jq1M6c
0RCfkEw0/jNX2UAWVy4vOIFSz6Fvk1ElDU2G4rRKs1WtDhGBor09KgGSOTb+JgEy
TxYqjOcQSuzEmCPhwB87s7DCA9Xywn1aRadna17sGmji7K0jFMDsqh03i1UuBPPS
i6fVcLgN8ircYnYpzCA4G6Q0+cynwGfH+TZeJkoBvwGgq/tBHJpHZWyhcRhDiw2d
V11dTz/RHyixXArtFa7F/J9i9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFn5I1f
70/Ro2JdEw9rxb9PXLkcMB8GA1UdIwQYMBaAFKyhL9fbsoPzLN1zz87PBdPLmoih
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTREMS83QkQyMUFGRUY5
N0IxMUVBQUM5MDVFNjJDNEY5QUUwMi9yS0V2MTl1eWdfTXMzWFBQenM4RjA4dWFp
S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JLRXYxOXV5Z19NczNYUFB6czhGMDh1YWlLRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTREMS83QkQyMUFGRUY5N0IxMUVBQUM5MDVFNjJDNEY5QUUwMi9yS0V2MTl1eWdf
TXMzWFBQenM4RjA4dWFpS0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC9RwfB0rIX/idPEfhhnjyunOKEU9eOw28P+Ps8TTMgLAnG0KVLXIb3
ZnmeGxO0MnjVCLPvtNBo4X02ZtqIUPIz2IbbFV15vdZdiyyJ5yz28n7Xt29o4P7I
F6au9lZTO3Mk1omFyl70MpP98LVFaOchoCThEy6tYpjBgFxgB9C37/flirZih/VW
+ywODmdXJewRVSx5c3ODE60DzL9h8XlloXe8wJcAVTuYLLA6O6vTc4ix3ceM/yBR
lx5EWg1hspTtN2eIQXqUImZ2CjZucNoUZ5rPHRqU4MhTL5O3yHgSUXU2mk+juDcx
lsni68x/60A9aypVY8BvV88d3yF5XpG7
-----END CERTIFICATE-----
Generated at Wed Apr 16 17:18:07 2025 by rpki-client