Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
File:                     CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json)
Hash identifier:          ChJTfaXurzJaRGEhcaw1YF5qutlydz4/mfR2DH9pfv4=
Subject key identifier:   27:91:35:A5:83:83:70:72:40:E0:F8:B0:F7:48:2C:F3:16:4C:46:32
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Certificate issuer:       /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial:       06D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
Manifest number:          06B7
Signing time:             Fri 04 Apr 2025 22:20:39 +0000
Manifest this update:     Fri 04 Apr 2025 22:20:38 +0000
Manifest next update:     Fri 11 Apr 2025 22:20:38 +0000
Files and hashes:         1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: FISm3wK1ZBK8xOhPvQcMwMnvPtEA3xSBEsoBY7Dl3cU=)
                          2: A825CC96324011EC9E90243EC4F9AE02.roa (hash: Csw4qj9xE9hGEDImUH/XPPY2KPdm1RGZvA3bAW3MNCY=)
                          3: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: MLem2RJrmzD72xixiKpCd0XFlZ6/VicCf/qXTlSWENc=)
                          4: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: w3Ln1KV8lxVl5Uw2YRQh7wulnVukzVJfQnsYtJXybYU=)
                          5: 0C42C86EF38611EF92753935C4F9AE02.roa (hash: MdSSPQnzwPVIzYg1f83uFbIF+zvXp1fZov2cahwOMzI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
                          rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1747 (0x6d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7C04
        Validity
            Not Before: Apr  4 22:20:38 2025 GMT
            Not After : Apr 11 22:20:38 2025 GMT
        Subject: CN=67f05b37-86d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:32:e2:73:f7:b2:b7:06:15:13:f0:be:0f:
                    b6:c8:6f:6c:08:00:30:64:51:8c:24:53:1d:58:7a:
                    d1:ef:1c:5b:d3:92:cf:73:bf:77:a2:22:4f:bc:56:
                    52:eb:49:60:0b:52:43:72:32:eb:65:5b:15:72:f7:
                    2c:91:1b:36:35:14:f0:9d:d5:a6:60:34:c1:ef:93:
                    a5:26:fe:07:85:1c:28:36:8d:f0:e5:3b:a9:d2:c5:
                    4e:84:af:90:6c:f1:49:c1:10:ed:2c:ef:3d:bf:5c:
                    4c:bf:68:e0:b6:d5:14:9b:cf:2e:d3:af:23:01:a8:
                    34:7c:a4:04:fb:9c:5d:1f:5f:c2:9f:27:ab:b1:e6:
                    fc:a7:25:fd:bc:5d:ea:e0:99:bc:dd:b5:1d:69:17:
                    56:cf:ef:22:f9:70:61:04:17:5e:b2:66:4b:e5:85:
                    c2:7d:fe:8e:61:0a:d5:73:74:86:7c:0d:22:e5:8c:
                    91:10:1e:5f:42:69:ec:b6:23:4d:80:6e:e6:39:af:
                    67:ff:07:b8:eb:c4:cc:94:76:ed:49:98:18:26:70:
                    5b:4b:b0:80:e3:f1:96:aa:e8:76:a7:42:7d:ac:20:
                    34:1b:02:c1:8b:b5:04:4d:56:49:03:2c:36:89:2f:
                    43:9e:fd:42:4d:dd:d0:6f:69:43:4f:44:dc:d3:db:
                    31:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:91:35:A5:83:83:70:72:40:E0:F8:B0:F7:48:2C:F3:16:4C:46:32
            X509v3 Authority Key Identifier:
                keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ca:0f:8b:a8:22:0c:99:f6:2d:78:08:49:36:bc:e7:50:3b:
         fe:ae:5b:90:a3:b5:6d:e0:ed:cc:96:de:18:7e:74:96:a8:24:
         2d:69:e1:4b:7f:8b:01:7b:14:f9:92:1d:1f:ce:70:db:c7:a2:
         20:55:1f:36:1b:d2:c9:5e:d3:da:34:f4:52:35:7a:80:48:46:
         e8:8e:ab:ee:86:b3:69:e1:16:8c:22:4b:f1:17:eb:3d:d6:03:
         49:09:20:cd:1b:6d:21:08:88:dc:f9:84:b5:2f:73:0b:93:a3:
         3b:78:35:2e:15:09:b3:59:9d:ed:05:64:fb:62:0e:48:6d:5d:
         5a:33:f6:75:50:a0:23:94:2b:18:be:55:89:1e:77:19:ec:a3:
         e8:98:e3:34:65:2a:dc:df:80:ae:5a:26:36:6f:8d:e0:45:36:
         17:ee:94:9a:14:fb:a9:f4:56:95:b4:9c:fd:46:2e:6d:44:c3:
         e3:cf:4f:25:cc:cb:9c:a4:d9:91:1a:55:96:9c:73:96:52:f2:
         7a:43:b4:97:d0:84:60:b9:60:17:54:af:ea:45:6a:70:5b:05:
         89:c3:57:34:86:eb:67:97:88:36:e6:5a:07:64:75:ab:a6:7f:
         8e:f2:ad:8e:3d:b7:71:ac:ee:09:ed:54:7f:81:82:9e:e5:00:
         48:fb:ff:21
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz
MzJEQTQzQ0IwHhcNMjUwNDA0MjIyMDM4WhcNMjUwNDExMjIyMDM4WjAYMRYwFAYD
VQQDEw02N2YwNWIzNy04NmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuOUy4nP3srcGFRPwvg+2yG9sCAAwZFGMJFMdWHrR7xxb05LPc793oiJPvFZS
60lgC1JDcjLrZVsVcvcskRs2NRTwndWmYDTB75OlJv4HhRwoNo3w5Tup0sVOhK+Q
bPFJwRDtLO89v1xMv2jgttUUm88u068jAag0fKQE+5xdH1/Cnyerseb8pyX9vF3q
4Jm83bUdaRdWz+8i+XBhBBdesmZL5YXCff6OYQrVc3SGfA0i5YyREB5fQmnstiNN
gG7mOa9n/we468TMlHbtSZgYJnBbS7CA4/GWquh2p0J9rCA0GwLBi7UETVZJAyw2
iS9Dnv1CTd3Qb2lDT0Tc09sxwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCeRNaWD
g3ByQOD4sPdILPMWTEYyMB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG
QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR
OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
N0MwNC9BMERCMzU1MjVGQjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1
WXl0Vm5VbkZzZTh6TGFROHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBVyg+LqCIMmfYteAhJNrznUDv+rluQo7Vt4O3Mlt4YfnSWqCQtaeFL
f4sBexT5kh0fznDbx6IgVR82G9LJXtPaNPRSNXqASEbojqvuhrNp4RaMIkvxF+s9
1gNJCSDNG20hCIjc+YS1L3MLk6M7eDUuFQmzWZ3tBWT7Yg5IbV1aM/Z1UKAjlCsY
vlWJHncZ7KPomOM0ZSrc34CuWiY2b43gRTYX7pSaFPup9FaVtJz9Ri5tRMPjz08l
zMucpNmRGlWWnHOWUvJ6Q7SX0IRguWAXVK/qRWpwWwWJw1c0hutnl4g25loHZHWr
pn+O8q2OPbdxrO4J7VR/gYKe5QBI+/8h
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:23:42 2025 by rpki-client