Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
File:                     H2-6P798TnUQgNZ0Pi_OANKU20E.mft (raw, json)
Hash identifier:          EHRjcNN2xogjZwmnBlSh3U6/CO/fO4Tl36tLukAXtI4=
Subject key identifier:   86:36:36:6B:FF:6F:E3:75:98:8A:95:FB:42:F2:AF:1E:58:EC:BB:22
Authority key identifier: 1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41
Certificate issuer:       /CN=A91A6204/serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
Certificate serial:       04F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
Manifest number:          04E5
Signing time:             Sat 12 Apr 2025 23:24:33 +0000
Manifest this update:     Sat 12 Apr 2025 23:24:33 +0000
Manifest next update:     Sat 19 Apr 2025 23:24:33 +0000
Files and hashes:         1: H2-6P798TnUQgNZ0Pi_OANKU20E.crl (hash: Lm2FTr1j4P46CreWFBeKWYXm6uLgDMOKG+LuSkPWj9s=)
                          2: 81A9AA2A30A011EC9613A82FC4F9AE02.roa (hash: sdwmDbTL9d6N7lKxS/YB/i6htv88Z1LDyZ9CwaUF42o=)
                          3: F8F09AC071BC11EF98EE3652C4F9AE02.roa (hash: OmOKCpnNGxuTgnm/3ZUNP0n4Wl3zYcoWkWZk3CIh3c8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl
                          rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 23:24:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1265 (0x4f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6204, serialNumber=1F6FBA3FBF7C4E751080D6743E2FCE00D294DB41
        Validity
            Not Before: Apr 12 23:24:33 2025 GMT
            Not After : Apr 19 23:24:33 2025 GMT
        Subject: CN=67faf631-5712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:1d:52:e4:af:f6:f8:52:1a:21:e8:66:76:
                    3e:f5:36:06:61:11:eb:73:47:53:13:81:a0:01:4e:
                    3c:90:e7:ad:0e:23:8f:51:4d:e1:8c:53:21:1e:57:
                    51:b6:0d:ef:7c:c9:5d:c8:07:b0:ee:73:cf:08:9f:
                    5f:80:ec:7c:1c:cd:c1:da:52:1b:dc:29:6c:63:e9:
                    73:0a:5b:93:eb:e0:14:e5:e5:fe:33:57:e5:3e:4a:
                    48:42:bc:52:8e:88:99:f7:e0:ca:cf:06:7a:40:2d:
                    3b:2f:b8:c8:c9:98:cb:fb:ad:28:c1:2b:5c:27:74:
                    b8:61:60:89:6b:5c:5a:29:cd:bc:05:86:d7:34:e7:
                    71:ef:c4:44:b7:ea:ef:a9:51:91:19:b4:a3:0a:ca:
                    21:2b:b6:48:12:90:b9:84:51:84:b4:8d:4e:9a:4b:
                    f2:65:4a:22:37:db:13:de:c1:cb:08:bd:e0:9c:cd:
                    25:0a:4b:e7:62:8d:fa:a0:a4:e0:91:44:ce:0d:0d:
                    3b:40:0e:fe:d0:f9:bd:a9:44:94:4f:4f:db:af:f4:
                    6d:ef:e6:32:e4:86:2b:e5:c4:b8:65:bc:04:72:83:
                    20:81:57:6a:71:46:3d:e9:bd:3e:0d:85:dc:49:23:
                    5f:b1:91:df:0e:5d:3c:e6:5a:19:00:f3:99:27:e7:
                    ad:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:36:36:6B:FF:6F:E3:75:98:8A:95:FB:42:F2:AF:1E:58:EC:BB:22
            X509v3 Authority Key Identifier:
                keyid:1F:6F:BA:3F:BF:7C:4E:75:10:80:D6:74:3E:2F:CE:00:D2:94:DB:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H2-6P798TnUQgNZ0Pi_OANKU20E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6204/830A3A28120611ECAECED477C4F9AE02/H2-6P798TnUQgNZ0Pi_OANKU20E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:6e:c0:27:4c:92:06:61:c0:17:22:1b:1d:d3:15:64:b8:56:
         35:f4:a8:ba:1a:50:f6:8a:68:d4:50:8e:75:c6:c3:71:ea:7f:
         13:86:28:9e:a0:80:ef:c9:15:74:1f:71:d8:a9:df:b9:73:db:
         8e:b6:70:0d:ad:8d:58:af:a1:a8:6a:32:c9:ed:f0:57:9a:dd:
         44:09:be:1a:bf:f9:46:78:dc:52:b5:7f:01:48:2d:c0:81:3e:
         96:aa:18:61:18:21:30:ae:e2:83:f0:1b:2f:bc:82:68:b6:cd:
         c3:a4:c4:99:1b:83:9d:ca:10:da:b8:6b:89:fa:ee:18:6c:24:
         f3:97:b7:d6:bc:62:35:7e:52:2d:87:ff:eb:4b:ef:be:02:aa:
         3d:d6:fb:ff:6e:4f:24:95:28:9b:c7:01:e4:6c:0e:6f:26:24:
         68:44:cc:6a:dc:57:d0:a7:ab:a8:24:56:85:66:9b:73:7d:c5:
         36:b7:bc:13:53:ef:48:cd:da:1f:2e:0c:e1:18:bf:8b:cd:62:
         c8:76:77:fc:ab:52:39:cd:16:46:f6:16:d7:22:75:a8:c4:cd:
         d7:20:03:7f:61:92:11:41:3d:cc:82:a1:b5:57:bc:bd:ad:b6:
         64:53:41:b5:c5:0c:3c:b7:e5:ff:32:ba:92:36:88:61:f4:d8:
         e2:71:50:b2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTYyMDQxMTAvBgNVBAUTKDFGNkZCQTNGQkY3QzRFNzUxMDgwRDY3NDNFMkZDRTAw
RDI5NERCNDEwHhcNMjUwNDEyMjMyNDMzWhcNMjUwNDE5MjMyNDMzWjAYMRYwFAYD
VQQDEw02N2ZhZjYzMS01NzEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt6AdUuSv9vhSGiHoZnY+9TYGYRHrc0dTE4GgAU48kOetDiOPUU3hjFMhHldR
tg3vfMldyAew7nPPCJ9fgOx8HM3B2lIb3ClsY+lzCluT6+AU5eX+M1flPkpIQrxS
joiZ9+DKzwZ6QC07L7jIyZjL+60owStcJ3S4YWCJa1xaKc28BYbXNOdx78REt+rv
qVGRGbSjCsohK7ZIEpC5hFGEtI1OmkvyZUoiN9sT3sHLCL3gnM0lCkvnYo36oKTg
kUTODQ07QA7+0Pm9qUSUT0/br/Rt7+Yy5IYr5cS4ZbwEcoMggVdqcUY96b0+DYXc
SSNfsZHfDl085loZAPOZJ+etgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIY2Nmv/
b+N1mIqV+0Lyrx5Y7LsiMB8GA1UdIwQYMBaAFB9vuj+/fE51EIDWdD4vzgDSlNtB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNjIwNC84MzBBM0EyODEy
MDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRuVVFnTlowUGlfT0FOS1Uy
MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0gyLTZQNzk4VG5VUWdOWjBQaV9PQU5LVTIwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NjIwNC84MzBBM0EyODEyMDYxMUVDQUVDRUQ0NzdDNEY5QUUwMi9IMi02UDc5OFRu
VVFnTlowUGlfT0FOS1UyMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDWbsAnTJIGYcAXIhsd0xVkuFY19Ki6GlD2imjUUI51xsNx6n8Thiie
oIDvyRV0H3HYqd+5c9uOtnANrY1Yr6GoajLJ7fBXmt1ECb4av/lGeNxStX8BSC3A
gT6WqhhhGCEwruKD8BsvvIJots3DpMSZG4OdyhDauGuJ+u4YbCTzl7fWvGI1flIt
h//rS+++Aqo91vv/bk8klSibxwHkbA5vJiRoRMxq3FfQp6uoJFaFZptzfcU2t7wT
U+9IzdofLgzhGL+LzWLIdnf8q1I5zRZG9hbXInWoxM3XIAN/YZIRQT3MgqG1V7y9
rbZkU0G1xQw8t+X/MrqSNohh9NjicVCy
-----END CERTIFICATE-----
Generated at Sun Apr 13 05:55:30 2025 by rpki-client