Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
File:                     mYWbHvAhS7n86OW_FSbzvRHsKAc.mft (raw, json)
Hash identifier:          XTjiWxr4eYFE9AA0jg2yqIbxg/4+xVdAdit9r+vgp+4=
Subject key identifier:   1D:4C:61:02:69:38:19:67:F4:EA:FF:94:EC:72:88:0B:7A:66:20:26
Authority key identifier: 99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07
Certificate issuer:       /CN=A91BF026/serialNumber=99859B1EF0214BB9FCE8E5BF1526F3BD11EC2807
Certificate serial:       171E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
Manifest number:          1F57
Signing time:             Fri 04 Apr 2025 16:41:53 +0000
Manifest this update:     Fri 04 Apr 2025 16:41:53 +0000
Manifest next update:     Fri 11 Apr 2025 16:41:53 +0000
Files and hashes:         1: mYWbHvAhS7n86OW_FSbzvRHsKAc.crl (hash: KMOVqKYm49x5k5wWalzqVdlSfMIPqq44+r9cIzwtIzI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl
                          rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 16:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5918 (0x171e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF026
        Validity
            Not Before: Apr  4 16:41:53 2025 GMT
            Not After : Apr 11 16:41:53 2025 GMT
        Subject: CN=67f00bd1-31f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a2:87:7e:b4:f6:e1:c3:9f:7b:86:6b:cf:e7:
                    70:6b:11:51:d1:11:84:9b:55:5d:a0:a3:40:3e:d4:
                    87:66:63:16:7c:d4:0d:b2:b2:87:13:c0:04:7d:7d:
                    16:e6:81:0d:08:b1:81:48:b7:9e:73:4e:52:82:cf:
                    9f:4f:b9:dd:18:f1:09:20:bf:26:b8:00:37:0a:c8:
                    95:c2:0e:fa:cb:12:0b:6c:98:ef:81:72:1e:b0:6a:
                    ba:60:1e:a7:5d:c7:80:1d:ff:66:87:b4:95:d2:12:
                    5f:5f:b0:81:a7:c7:32:d4:e4:3f:db:6f:e4:83:e6:
                    c5:32:5d:80:5b:cf:d3:ef:36:24:08:1f:b3:e1:96:
                    8e:1a:1b:e8:be:5c:90:78:ae:3f:7f:25:63:d8:bc:
                    62:f3:fa:15:74:5d:47:af:c6:b0:01:6a:91:77:4a:
                    e4:c1:31:c4:5e:a8:3f:9c:11:c5:be:c8:d0:10:80:
                    13:b9:88:52:14:79:cb:6d:2a:48:7d:dd:57:0d:ed:
                    e7:37:9e:2c:cf:7f:53:98:d9:38:77:18:9b:fc:c5:
                    0b:f8:47:91:1e:b9:fb:45:5d:55:dc:ac:08:4d:dc:
                    ed:76:e8:7b:94:25:17:5b:a5:eb:cf:57:cd:46:71:
                    db:f4:a9:e1:df:00:f1:82:2d:d6:69:6b:4f:2d:ce:
                    9d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4C:61:02:69:38:19:67:F4:EA:FF:94:EC:72:88:0B:7A:66:20:26
            X509v3 Authority Key Identifier:
                keyid:99:85:9B:1E:F0:21:4B:B9:FC:E8:E5:BF:15:26:F3:BD:11:EC:28:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mYWbHvAhS7n86OW_FSbzvRHsKAc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/mYWbHvAhS7n86OW_FSbzvRHsKAc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a7:22:24:06:e9:0e:a5:4f:8d:31:9c:4e:50:dd:cc:4a:64:
         4d:67:fa:f4:0e:11:97:34:de:17:7d:1a:f9:0f:23:86:dc:f7:
         cc:49:25:12:7e:5a:fa:98:60:a4:d0:a4:6f:87:97:bb:8d:33:
         17:cd:b4:cb:26:bf:08:2b:e9:e3:fd:3b:eb:e6:2a:ec:a6:3c:
         31:c9:09:0e:eb:2a:37:20:23:92:56:14:97:d0:59:84:8d:2e:
         68:c3:09:3a:8c:7a:19:25:e6:be:aa:5d:0c:31:a5:c4:cc:7f:
         f5:10:91:86:5c:55:ab:6d:55:69:b1:c9:9f:83:93:3a:b6:df:
         b2:e7:64:fc:80:8f:ad:2f:2e:a4:00:5d:69:ca:57:ad:59:8c:
         ce:e4:62:23:0a:5e:6b:f3:5d:5f:64:a8:97:fc:60:40:3e:a8:
         e0:7a:29:8b:e3:bd:ed:05:df:8e:94:8c:07:68:5d:76:97:f2:
         ab:80:bb:5d:59:3a:3d:4f:c9:45:5b:35:ec:49:cb:7f:0e:b7:
         04:40:95:42:e4:3d:7e:7a:d3:a9:55:ae:00:21:8c:88:55:39:
         6c:4f:cc:19:25:01:55:2c:0c:c3:fd:a7:e2:fd:27:6b:2f:7e:
         a2:1f:32:0b:82:b4:cf:a4:1c:04:82:d2:7c:06:85:50:37:36:
         be:e1:ed:9d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFx4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkYwMjYxMTAvBgNVBAUTKDk5ODU5QjFFRjAyMTRCQjlGQ0U4RTVCRjE1MjZGM0JE
MTFFQzI4MDcwHhcNMjUwNDA0MTY0MTUzWhcNMjUwNDExMTY0MTUzWjAYMRYwFAYD
VQQDEw02N2YwMGJkMS0zMWY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoKKHfrT24cOfe4Zrz+dwaxFR0RGEm1VdoKNAPtSHZmMWfNQNsrKHE8AEfX0W
5oENCLGBSLeec05Sgs+fT7ndGPEJIL8muAA3CsiVwg76yxILbJjvgXIesGq6YB6n
XceAHf9mh7SV0hJfX7CBp8cy1OQ/22/kg+bFMl2AW8/T7zYkCB+z4ZaOGhvovlyQ
eK4/fyVj2Lxi8/oVdF1Hr8awAWqRd0rkwTHEXqg/nBHFvsjQEIATuYhSFHnLbSpI
fd1XDe3nN54sz39TmNk4dxib/MUL+EeRHrn7RV1V3KwITdztduh7lCUXW6Xrz1fN
RnHb9Knh3wDxgi3WaWtPLc6d7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB1MYQJp
OBln9Or/lOxyiAt6ZiAmMB8GA1UdIwQYMBaAFJmFmx7wIUu5/OjlvxUm870R7CgH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAyNi8wMzI4QTg1Q0RE
RTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9tWVdiSHZBaFM3bjg2T1dfRlNienZSSHNL
QWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21ZV2JIdkFoUzduODZPV19GU2J6dlJIc0tBYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RjAyNi8wMzI4QTg1Q0RERTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9tWVdiSHZBaFM3
bjg2T1dfRlNienZSSHNLQWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBWpyIkBukOpU+NMZxOUN3MSmRNZ/r0DhGXNN4XfRr5DyOG3PfMSSUS
flr6mGCk0KRvh5e7jTMXzbTLJr8IK+nj/Tvr5irspjwxyQkO6yo3ICOSVhSX0FmE
jS5owwk6jHoZJea+ql0MMaXEzH/1EJGGXFWrbVVpscmfg5M6tt+y52T8gI+tLy6k
AF1pyletWYzO5GIjCl5r811fZKiX/GBAPqjgeimL473tBd+OlIwHaF12l/KrgLtd
WTo9T8lFWzXsSct/DrcEQJVC5D1+etOpVa4AIYyIVTlsT8wZJQFVLAzD/afi/Sdr
L36iHzILgrTPpBwEgtJ8BoVQNza+4e2d
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:54:07 2025 by rpki-client