Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
File:                     XpYNUYjwNveeqnlBVSzPRrh6vwc.mft (raw, json)
Hash identifier:          MVG6al8t66YI5BFt+Pde/ALC8pePresltCUWA9yJ+lc=
Subject key identifier:   AB:3D:E0:A5:63:7C:2C:3E:DA:13:A0:50:7C:1C:DD:4C:AB:2F:5E:3B
Authority key identifier: 5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07
Certificate issuer:       /CN=A91B190F/serialNumber=5E960D5188F036F79EAA7941552CCF46B87ABF07
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
Manifest number:          64
Signing time:             Sat 05 Apr 2025 06:16:31 +0000
Manifest this update:     Sat 05 Apr 2025 06:16:30 +0000
Manifest next update:     Sat 12 Apr 2025 06:16:30 +0000
Files and hashes:         1: XpYNUYjwNveeqnlBVSzPRrh6vwc.crl (hash: rSe0hiDdG5U2D2GbGvXmSdGogV6j5oLEngq/1CP9Tss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl
                          rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 06:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B190F
        Validity
            Not Before: Apr  5 06:16:30 2025 GMT
            Not After : Apr 12 06:16:30 2025 GMT
        Subject: CN=67f0cabe-33cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:58:38:b3:78:d1:77:cb:b8:f6:ad:14:c7:09:
                    e7:14:30:78:15:69:80:ea:70:d4:c2:63:24:be:23:
                    98:27:84:4a:c9:af:0f:17:c1:1d:07:0f:6c:d6:db:
                    5d:a3:67:0f:31:d6:fb:0d:c4:e6:20:e0:d1:1b:68:
                    29:00:9e:eb:1e:84:4a:9e:b4:b4:cf:9a:ca:fd:f4:
                    61:67:0b:e2:db:26:c7:27:cd:fd:d6:3f:4f:71:0f:
                    d6:79:51:a6:30:57:c0:e2:0b:56:fc:25:e4:24:39:
                    90:89:25:fc:93:c3:14:92:cd:a7:12:d7:05:5d:75:
                    3d:e7:78:d4:d6:c6:34:b2:87:54:04:8c:28:4c:34:
                    95:68:c3:59:fe:b2:1b:09:97:2f:10:08:91:11:24:
                    5d:18:61:16:35:1f:2f:6d:c7:42:f7:d0:91:0d:d8:
                    ca:89:eb:24:de:7b:20:c3:6a:69:a8:a1:2f:7d:04:
                    b2:1c:5c:65:bd:9f:a4:f6:e9:f1:10:83:12:30:70:
                    20:87:06:a6:e7:97:d5:84:42:c4:33:db:39:b5:4d:
                    ab:32:f8:25:aa:fb:70:22:3a:f4:75:0b:fb:a3:b8:
                    2c:a3:53:b9:55:d0:74:10:ae:55:cf:db:78:32:03:
                    d2:ce:52:e2:bf:9d:01:69:99:07:63:56:49:5a:79:
                    b0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:3D:E0:A5:63:7C:2C:3E:DA:13:A0:50:7C:1C:DD:4C:AB:2F:5E:3B
            X509v3 Authority Key Identifier:
                keyid:5E:96:0D:51:88:F0:36:F7:9E:AA:79:41:55:2C:CF:46:B8:7A:BF:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpYNUYjwNveeqnlBVSzPRrh6vwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B190F/C85BA12C7BEC11EF999FBC19C4F9AE02/XpYNUYjwNveeqnlBVSzPRrh6vwc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:78:4f:9d:0b:fe:14:e2:6c:3c:e8:28:d9:84:5f:53:d9:2a:
         70:48:26:7b:84:4b:ce:6e:cb:db:80:3d:58:cb:35:a8:08:c0:
         f7:60:c0:b6:af:65:2f:0d:a5:9a:c0:73:f4:4e:e5:16:be:5e:
         92:f1:75:25:c7:59:e8:c3:df:2d:26:d8:b4:68:0d:f7:bf:e0:
         f5:36:f8:61:a6:67:6d:7e:69:7a:f3:69:b9:9e:12:a0:5f:05:
         74:9a:61:3b:8c:7b:6e:5f:bc:1c:09:7e:9e:4c:3a:36:26:8b:
         a7:24:cb:85:59:91:88:f9:db:0a:7c:27:13:35:76:f1:4d:99:
         00:a0:d5:10:80:c6:12:00:1d:d6:d2:92:ad:92:0a:f4:63:58:
         98:6e:23:2f:9a:df:16:a5:cb:a3:00:0c:6c:11:95:29:be:0c:
         ca:d2:4f:47:d6:04:93:a1:73:b8:29:fa:2b:f6:90:aa:2d:23:
         79:2c:e7:b9:62:75:d5:9b:7e:db:f6:a5:93:bb:47:dd:aa:43:
         61:76:b9:29:59:88:c5:da:b2:7a:e0:0c:60:2d:7b:1e:29:f7:
         ee:1b:58:0e:e2:d5:62:37:36:cc:1d:04:ac:31:7e:59:dc:da:
         d2:c3:31:3c:c0:a8:3e:bc:0d:9e:01:a7:fd:12:21:83:9e:30:
         31:e8:30:9c
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MTkwRjExMC8GA1UEBRMoNUU5NjBENTE4OEYwMzZGNzlFQUE3OTQxNTUyQ0NGNDZC
ODdBQkYwNzAeFw0yNTA0MDUwNjE2MzBaFw0yNTA0MTIwNjE2MzBaMBgxFjAUBgNV
BAMTDTY3ZjBjYWJlLTMzY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/WDizeNF3y7j2rRTHCecUMHgVaYDqcNTCYyS+I5gnhErJrw8XwR0HD2zW212j
Zw8x1vsNxOYg4NEbaCkAnusehEqetLTPmsr99GFnC+LbJscnzf3WP09xD9Z5UaYw
V8DiC1b8JeQkOZCJJfyTwxSSzacS1wVddT3neNTWxjSyh1QEjChMNJVow1n+shsJ
ly8QCJERJF0YYRY1Hy9tx0L30JEN2MqJ6yTeeyDDammooS99BLIcXGW9n6T26fEQ
gxIwcCCHBqbnl9WEQsQz2zm1Tasy+CWq+3AiOvR1C/ujuCyjU7lV0HQQrlXP23gy
A9LOUuK/nQFpmQdjVklaebDfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqz3gpWN8
LD7aE6BQfBzdTKsvXjswHwYDVR0jBBgwFoAUXpYNUYjwNveeqnlBVSzPRrh6vwcw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxOTBGL0M4NUJBMTJDN0JF
QzExRUY5OTlGQkMxOUM0RjlBRTAyL1hwWU5VWWp3TnZlZXFubEJWU3pQUnJoNnZ3
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvWHBZTlVZandOdmVlcW5sQlZTelBScmg2dndjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx
OTBGL0M4NUJBMTJDN0JFQzExRUY5OTlGQkMxOUM0RjlBRTAyL1hwWU5VWWp3TnZl
ZXFubEJWU3pQUnJoNnZ3Yy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHh4T50L/hTibDzoKNmEX1PZKnBIJnuES85uy9uAPVjLNagIwPdgwLav
ZS8NpZrAc/RO5Ra+XpLxdSXHWejD3y0m2LRoDfe/4PU2+GGmZ21+aXrzabmeEqBf
BXSaYTuMe25fvBwJfp5MOjYmi6cky4VZkYj52wp8JxM1dvFNmQCg1RCAxhIAHdbS
kq2SCvRjWJhuIy+a3xaly6MADGwRlSm+DMrST0fWBJOhc7gp+iv2kKotI3ks57li
ddWbftv2pZO7R92qQ2F2uSlZiMXasnrgDGAtex4p9+4bWA7i1WI3NswdBKwxflnc
2tLDMTzAqD68DZ4Bp/0SIYOeMDHoMJw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:35:06 2025 by rpki-client