Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
File:                     J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft (raw, json)
Hash identifier:          naQiUx9iWShtDMMX+YiAonml8UVGoxEfzCc9I1ueQPI=
Subject key identifier:   A2:FF:A6:C5:3D:40:77:A9:EA:12:E5:24:BD:88:DD:14:D6:D2:04:91
Authority key identifier: 27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
Certificate issuer:       /CN=A91BBCAF/serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Certificate serial:       0122
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
Manifest number:          011E
Signing time:             Tue 15 Apr 2025 03:41:27 +0000
Manifest this update:     Tue 15 Apr 2025 03:41:26 +0000
Manifest next update:     Tue 22 Apr 2025 03:41:26 +0000
Files and hashes:         1: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl (hash: XPTKRnVcZmsnJtGoWPM84x95r79Nlpn573IXxKlcBnI=)
                          2: D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa (hash: VxCtnEbF2p63KawOX+Ec2pPAYcngxsY5VpNi8SAFc50=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
                          rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 22 Apr 2025 03:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBCAF, serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
        Validity
            Not Before: Apr 15 03:41:26 2025 GMT
            Not After : Apr 22 03:41:26 2025 GMT
        Subject: CN=67fdd566-ccc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c9:85:b2:7c:77:b2:64:f8:d2:b6:d7:fa:15:
                    1e:fc:d2:ce:cb:1a:05:2c:d0:c5:e6:7b:d7:fe:51:
                    f4:6c:5d:61:a2:24:a6:76:d5:49:6b:f1:22:c9:1d:
                    93:07:12:d4:31:75:f8:c9:55:dd:2b:d2:dd:7e:f8:
                    6f:a0:d4:99:c6:e0:69:3d:9d:c1:2d:64:50:41:96:
                    9c:8c:08:5a:de:c8:3d:6e:04:23:ed:d0:db:d1:a6:
                    f1:ae:8c:80:f8:ad:20:91:c4:fe:e3:94:df:07:ac:
                    cc:6e:65:d3:05:13:08:74:e0:d1:d1:62:9f:2a:13:
                    a3:79:8a:5a:1c:20:7d:77:da:85:49:1a:23:81:b0:
                    ce:99:b1:bd:69:84:20:d2:0d:da:db:3d:58:00:64:
                    f7:42:d9:5d:32:75:6e:ff:c5:73:7c:9a:38:74:1c:
                    cb:49:83:cb:be:8b:91:07:79:b6:54:a3:2f:f5:28:
                    cd:06:24:94:3c:db:cd:97:d2:ad:eb:1c:32:1c:58:
                    25:a3:f9:1b:c0:27:7d:2b:f2:fe:c2:6d:ee:6a:30:
                    f0:6e:78:3c:2e:21:f9:28:a1:be:0c:98:2b:07:71:
                    c1:5c:76:d4:5b:ad:70:2d:03:75:95:4c:84:50:ea:
                    04:93:55:e0:70:13:18:a4:e0:18:9d:42:8e:f3:73:
                    ba:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FF:A6:C5:3D:40:77:A9:EA:12:E5:24:BD:88:DD:14:D6:D2:04:91
            X509v3 Authority Key Identifier:
                keyid:27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:c8:50:84:42:82:dd:2c:b5:bf:b2:89:39:46:4c:30:dc:a2:
         c0:42:4c:01:92:4d:aa:94:80:2f:0e:0f:1a:a2:c1:a8:73:46:
         d2:52:c2:03:14:8b:0b:50:3f:f4:be:41:a7:66:65:84:5d:ff:
         40:00:ae:78:87:f1:e4:d9:fc:58:55:f7:c6:ac:7b:48:77:9a:
         86:fb:ad:48:c9:73:70:57:29:39:9a:88:16:ce:e0:ed:2b:bb:
         fd:67:bb:2a:f6:5a:87:93:aa:09:89:68:7e:e2:30:bc:0c:13:
         8b:ab:f2:89:f5:ba:f7:ae:f5:61:0c:cb:68:81:b5:82:14:07:
         fd:c6:21:aa:0a:20:f0:83:6f:9f:55:41:52:1f:16:8c:8e:ea:
         fd:e5:3c:b2:d1:c3:9d:55:a8:a3:77:2c:99:d4:7f:62:e8:ea:
         91:04:1a:3b:0d:82:c4:a1:c0:49:9e:cf:1b:51:dd:bf:1f:c5:
         da:a8:7b:2b:11:f0:15:8a:1f:37:02:c3:ef:4f:f8:cd:18:18:
         da:6c:d7:52:c6:55:5c:32:42:6d:1e:79:54:8c:f8:46:51:5c:
         9c:0e:9e:bd:aa:a3:f6:8f:9c:9b:93:9a:77:b2:23:72:d3:22:
         35:1f:c4:13:ab:5a:2d:77:63:17:ac:05:b2:53:2c:b6:f9:ef:
         80:35:3d:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkJDQUYxMTAvBgNVBAUTKDI3QjJFNjYyOTE0ODIyMTM2QjA5NjJEQkI1QkE0NDdD
MjUzRjUyMUIwHhcNMjUwNDE1MDM0MTI2WhcNMjUwNDIyMDM0MTI2WjAYMRYwFAYD
VQQDEw02N2ZkZDU2Ni1jY2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAssmFsnx3smT40rbX+hUe/NLOyxoFLNDF5nvX/lH0bF1hoiSmdtVJa/EiyR2T
BxLUMXX4yVXdK9LdfvhvoNSZxuBpPZ3BLWRQQZacjAha3sg9bgQj7dDb0abxroyA
+K0gkcT+45TfB6zMbmXTBRMIdODR0WKfKhOjeYpaHCB9d9qFSRojgbDOmbG9aYQg
0g3a2z1YAGT3QtldMnVu/8VzfJo4dBzLSYPLvouRB3m2VKMv9SjNBiSUPNvNl9Kt
6xwyHFglo/kbwCd9K/L+wm3uajDwbng8LiH5KKG+DJgrB3HBXHbUW61wLQN1lUyE
UOoEk1XgcBMYpOAYnUKO83O6sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKL/psU9
QHep6hLlJL2I3RTW0gSRMB8GA1UdIwQYMBaAFCey5mKRSCITawli27W6RHwlP1Ib
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkNBRi8wRjYxODg2QTZC
MzIxMUVFOUI1MjIwNTNDNEY5QUUwMi9KN0xtWXBGSUloTnJDV0xidGJwRWZDVV9V
aHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0o3TG1ZcEZJSWhOckNXTGJ0YnBFZkNVX1Vocy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QkNBRi8wRjYxODg2QTZCMzIxMUVFOUI1MjIwNTNDNEY5QUUwMi9KN0xtWXBGSUlo
TnJDV0xidGJwRWZDVV9VaHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC2yFCEQoLdLLW/sok5Rkww3KLAQkwBkk2qlIAvDg8aosGoc0bSUsID
FIsLUD/0vkGnZmWEXf9AAK54h/Hk2fxYVffGrHtId5qG+61IyXNwVyk5mogWzuDt
K7v9Z7sq9lqHk6oJiWh+4jC8DBOLq/KJ9br3rvVhDMtogbWCFAf9xiGqCiDwg2+f
VUFSHxaMjur95Tyy0cOdVaijdyyZ1H9i6OqRBBo7DYLEocBJns8bUd2/H8XaqHsr
EfAVih83AsPvT/jNGBjabNdSxlVcMkJtHnlUjPhGUVycDp69qqP2j5ybk5p3siNy
0yI1H8QTq1otd2MXrAWyUyy2+e+ANT2q
-----END CERTIFICATE-----
Generated at Wed Apr 16 08:19:17 2025 by rpki-client