Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
File:                     RLpWm_0uyBawaXNFE-C78tNOtwc.mft (raw, json)
Hash identifier:          7tIDJucKdx6AMsY/ha6PM51sErPdm2GL4OTUthVdmfQ=
Subject key identifier:   B2:69:3E:21:0A:BA:C8:F9:54:52:41:B6:CB:30:65:64:C4:9D:C0:91
Authority key identifier: 44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07
Certificate issuer:       /CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707
Certificate serial:       05AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
Manifest number:          0598
Signing time:             Tue 08 Apr 2025 22:59:02 +0000
Manifest this update:     Tue 08 Apr 2025 22:59:01 +0000
Manifest next update:     Tue 15 Apr 2025 22:59:01 +0000
Files and hashes:         1: RLpWm_0uyBawaXNFE-C78tNOtwc.crl (hash: PXAzJ6bUfw5jctkjkp7b2iSUc19QZmo7+vT7JozevVo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl
                          rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 22:59:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1450 (0x5aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD0B2
        Validity
            Not Before: Apr  8 22:59:01 2025 GMT
            Not After : Apr 15 22:59:01 2025 GMT
        Subject: CN=67f5aa35-6d2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:51:fb:bd:58:5a:c4:2d:cf:23:7c:ce:b3:6f:
                    af:da:c4:90:f3:63:89:05:31:31:81:da:c1:1c:f3:
                    71:82:72:ed:95:72:55:6a:e6:9c:6b:85:37:79:07:
                    7d:be:fb:04:75:f0:27:e8:0e:d0:3f:0e:42:e4:4e:
                    c9:e4:55:cd:26:55:78:1f:09:36:09:42:c2:f1:4a:
                    29:1b:08:32:44:57:33:d9:dc:14:67:d0:59:70:3f:
                    4e:48:63:8a:c0:5d:1d:3e:77:bd:64:fc:2c:82:97:
                    5f:6e:6f:c2:4d:3e:cb:20:d7:29:1f:45:57:32:48:
                    c4:9f:7a:32:27:38:d4:e9:fa:1f:9f:11:d8:c5:39:
                    86:56:7d:f1:9b:a7:63:0f:6e:fe:1b:c3:dd:8a:f4:
                    e6:f2:8f:aa:28:20:53:c4:50:d8:71:7b:24:78:84:
                    8f:87:50:23:a7:31:ca:30:0d:f9:8f:85:c9:0a:74:
                    f3:7b:d1:c7:04:c8:03:6f:75:7c:e6:69:31:1e:09:
                    63:6c:a1:6d:60:91:8a:67:e4:ea:b1:e7:8e:46:a7:
                    71:c1:1b:cc:7b:4d:16:d2:d8:ab:d9:6a:3e:78:b4:
                    1f:fb:3f:ed:11:a0:35:df:bc:75:a9:c9:a0:12:49:
                    1d:ea:36:e5:3c:8b:a3:fd:ed:75:6b:a4:ba:ae:1e:
                    2f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:69:3E:21:0A:BA:C8:F9:54:52:41:B6:CB:30:65:64:C4:9D:C0:91
            X509v3 Authority Key Identifier:
                keyid:44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:f0:a2:d7:7d:e8:1b:aa:c1:28:0f:18:1a:48:ef:d8:13:3f:
         96:fd:4e:d8:03:fb:f5:54:08:ea:23:12:f4:7a:74:83:7f:16:
         85:b6:7f:0d:4b:ca:87:c6:a3:21:2e:86:6e:b3:56:93:bc:fe:
         79:66:14:53:eb:c1:37:42:ad:94:61:56:82:f3:21:aa:01:00:
         35:53:c4:82:7f:c6:44:80:89:d0:e1:9a:98:66:31:e6:66:4b:
         6d:b0:12:50:93:4c:16:26:d4:3d:9e:ee:85:6c:c4:05:67:9a:
         e6:b6:01:48:46:67:7e:1e:db:01:5b:15:81:05:41:55:0e:0c:
         3c:a2:b9:0a:d8:88:4c:d9:a2:04:43:30:f9:7c:7b:30:83:3c:
         b3:12:e7:d6:e4:88:fb:e5:0b:1e:53:dd:cc:90:f2:72:43:31:
         1f:aa:ca:c8:31:54:53:da:34:3c:1c:e4:00:af:c6:89:f9:3c:
         8e:59:4e:13:28:74:95:73:f6:30:9b:17:93:14:07:da:9e:61:
         b3:3c:c5:20:67:67:d7:44:7d:6a:47:6b:4e:6b:2e:6d:c9:5b:
         b4:0a:b4:54:11:7c:c4:47:ee:9f:99:48:3c:77:39:34:46:bb:
         3f:c9:75:f8:7d:43:d9:9b:4d:c6:cb:ff:c3:3b:d3:98:c1:24:
         33:85:e1:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBaowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUQwQjIxMTAvBgNVBAUTKDQ0QkE1NjlCRkQyRUM4MTZCMDY5NzM0NTEzRTBCQkYy
RDM0RUI3MDcwHhcNMjUwNDA4MjI1OTAxWhcNMjUwNDE1MjI1OTAxWjAYMRYwFAYD
VQQDEw02N2Y1YWEzNS02ZDJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq1H7vVhaxC3PI3zOs2+v2sSQ82OJBTExgdrBHPNxgnLtlXJVauaca4U3eQd9
vvsEdfAn6A7QPw5C5E7J5FXNJlV4Hwk2CULC8UopGwgyRFcz2dwUZ9BZcD9OSGOK
wF0dPne9ZPwsgpdfbm/CTT7LINcpH0VXMkjEn3oyJzjU6fofnxHYxTmGVn3xm6dj
D27+G8PdivTm8o+qKCBTxFDYcXskeISPh1AjpzHKMA35j4XJCnTze9HHBMgDb3V8
5mkxHgljbKFtYJGKZ+TqseeORqdxwRvMe00W0tir2Wo+eLQf+z/tEaA137x1qcmg
Ekkd6jblPIuj/e11a6S6rh4vMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLJpPiEK
usj5VFJBtsswZWTEncCRMB8GA1UdIwQYMBaAFES6Vpv9LsgWsGlzRRPgu/LTTrcH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDBCMi8yMjEzRTVCQ0NC
MkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlCYXdhWE5GRS1DNzh0Tk90
d2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JMcFdtXzB1eUJhd2FYTkZFLUM3OHROT3R3Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RDBCMi8yMjEzRTVCQ0NCMkUxMUVCQjJEMzk3NDhDNEY5QUUwMi9STHBXbV8wdXlC
YXdhWE5GRS1DNzh0Tk90d2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA88KLXfegbqsEoDxgaSO/YEz+W/U7YA/v1VAjqIxL0enSDfxaFtn8N
S8qHxqMhLoZus1aTvP55ZhRT68E3Qq2UYVaC8yGqAQA1U8SCf8ZEgInQ4ZqYZjHm
ZkttsBJQk0wWJtQ9nu6FbMQFZ5rmtgFIRmd+HtsBWxWBBUFVDgw8orkK2IhM2aIE
QzD5fHswgzyzEufW5Ij75QseU93MkPJyQzEfqsrIMVRT2jQ8HOQAr8aJ+TyOWU4T
KHSVc/YwmxeTFAfanmGzPMUgZ2fXRH1qR2tOay5tyVu0CrRUEXzER+6fmUg8dzk0
Rrs/yXX4fUPZm03Gy//DO9OYwSQzheFL
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:24:40 2025 by rpki-client