Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft
File:                     0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft (raw, json)
Hash identifier:          CBT+v5D3HoZAmsZTaOUi1k1V8tva5Su3uUqtW3SBwgY=
Subject key identifier:   4E:5D:A7:80:D2:2F:7B:7C:E9:C6:42:8F:65:2D:5F:09:2B:1F:F5:53
Authority key identifier: D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29
Certificate issuer:       /CN=A91C9019/serialNumber=D002ABEAA5B2CDC48FEA0983B04A8EC2860CF929
Certificate serial:       01F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft
Manifest number:          01F1
Signing time:             Sat 29 Mar 2025 02:19:26 +0000
Manifest this update:     Sat 29 Mar 2025 02:19:26 +0000
Manifest next update:     Sat 05 Apr 2025 02:19:26 +0000
Files and hashes:         1: 0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl (hash: 0k9bHxrrR8CA82dDBJ44wf3vAsSMO2xtQzKwZ+RrUL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl
                          rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 02:19:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9019
        Validity
            Not Before: Mar 29 02:19:26 2025 GMT
            Not After : Apr  5 02:19:26 2025 GMT
        Subject: CN=67e758ae-91e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:f2:c5:bb:d3:7d:6a:92:33:67:14:c3:2d:
                    2b:48:29:62:b5:93:f3:b3:e0:b4:77:fb:68:22:51:
                    64:36:97:18:69:93:b7:28:5b:f6:a6:fd:05:f6:45:
                    8d:16:06:ef:6a:56:cd:fd:ad:d4:26:45:76:26:78:
                    f7:4e:08:f4:d8:4e:e3:b2:08:7b:8c:6e:ad:8b:ae:
                    98:9c:cd:90:84:4f:b8:7b:1f:04:3b:72:14:28:3a:
                    1a:ca:db:5a:41:8d:20:c4:5d:27:2d:23:5a:9d:01:
                    ac:6f:c4:86:78:69:d0:d4:cf:a2:c1:01:05:fe:5f:
                    23:8c:a9:c1:b2:0e:38:21:8c:7f:c2:59:c2:7b:3e:
                    ff:f9:83:d9:b2:d9:c0:ea:53:12:c4:45:e3:4e:1a:
                    e2:29:0b:de:44:0e:fc:5f:6e:87:6f:64:c5:b8:b8:
                    07:36:91:3e:32:1f:50:7f:39:75:8b:a0:5c:9b:10:
                    03:36:0e:85:1c:6c:a2:bd:31:a7:73:22:8a:b7:3c:
                    6c:b7:85:03:b2:f1:c2:ce:55:46:fe:57:8e:65:a1:
                    16:2e:93:be:80:d9:55:1c:91:85:dc:98:c4:68:31:
                    e5:6c:3c:18:ed:d7:44:dc:e1:64:15:c8:64:76:00:
                    3b:28:32:b2:db:61:c6:14:b8:fe:bc:06:2a:13:41:
                    87:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5D:A7:80:D2:2F:7B:7C:E9:C6:42:8F:65:2D:5F:09:2B:1F:F5:53
            X509v3 Authority Key Identifier:
                keyid:D0:02:AB:EA:A5:B2:CD:C4:8F:EA:09:83:B0:4A:8E:C2:86:0C:F9:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9019/28AE43D8347611ED867E9512C4F9AE02/0AKr6qWyzcSP6gmDsEqOwoYM-Sk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:6e:16:13:37:32:10:1a:cf:22:f2:61:69:e3:58:78:02:e7:
         c7:d4:e0:19:6e:ce:6f:ae:7b:ac:4a:3e:26:e6:7d:03:44:6a:
         46:2b:3f:90:8b:d0:3b:77:30:6d:5d:19:fb:04:29:63:7f:b1:
         26:b7:cc:10:61:c4:ff:f8:9c:48:ab:3c:c7:1e:be:c4:ce:58:
         a6:f5:36:bd:9f:30:73:ca:2d:c1:a7:7c:b2:9b:f7:7b:45:dc:
         61:fc:89:36:4e:1f:5e:7a:8a:68:4b:09:f1:f8:54:15:97:c8:
         9d:9c:ac:24:d3:e0:56:a5:a0:ad:a3:bb:e2:f3:b0:16:71:44:
         ba:bf:e8:ca:a7:5d:0c:22:96:30:0e:84:b0:02:d3:28:e8:9a:
         d2:67:05:8f:61:22:03:5f:76:af:f5:59:4a:76:ff:97:0e:8b:
         83:d8:5e:12:3a:b4:36:d9:f2:22:97:e0:a1:31:2b:6a:40:a3:
         c6:ec:25:ad:4c:54:bc:21:c6:90:e4:92:86:8b:cb:13:7e:2a:
         8c:6c:7b:08:b6:24:d4:fe:09:d8:70:a0:ed:9b:63:83:cc:8c:
         79:35:dc:92:3f:4f:20:f1:fd:fd:73:86:02:36:21:ee:8a:26:
         21:89:c2:51:4c:3f:17:42:51:0f:7e:c2:ab:c3:ab:4d:09:f9:
         86:17:c6:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzkwMTkxMTAvBgNVBAUTKEQwMDJBQkVBQTVCMkNEQzQ4RkVBMDk4M0IwNEE4RUMy
ODYwQ0Y5MjkwHhcNMjUwMzI5MDIxOTI2WhcNMjUwNDA1MDIxOTI2WjAYMRYwFAYD
VQQDEw02N2U3NThhZS05MWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzqbyxbvTfWqSM2cUwy0rSClitZPzs+C0d/toIlFkNpcYaZO3KFv2pv0F9kWN
FgbvalbN/a3UJkV2Jnj3Tgj02E7jsgh7jG6ti66YnM2QhE+4ex8EO3IUKDoaytta
QY0gxF0nLSNanQGsb8SGeGnQ1M+iwQEF/l8jjKnBsg44IYx/wlnCez7/+YPZstnA
6lMSxEXjThriKQveRA78X26Hb2TFuLgHNpE+Mh9Qfzl1i6BcmxADNg6FHGyivTGn
cyKKtzxst4UDsvHCzlVG/leOZaEWLpO+gNlVHJGF3JjEaDHlbDwY7ddE3OFkFchk
dgA7KDKy22HGFLj+vAYqE0GHywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE5dp4DS
L3t86cZCj2UtXwkrH/VTMB8GA1UdIwQYMBaAFNACq+qlss3Ej+oJg7BKjsKGDPkp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTAxOS8yOEFFNDNEODM0
NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpjU1A2Z21Ec0VxT3dvWU0t
U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBBS3I2cVd5emNTUDZnbURzRXFPd29ZTS1Tay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
OTAxOS8yOEFFNDNEODM0NzYxMUVEODY3RTk1MTJDNEY5QUUwMi8wQUtyNnFXeXpj
U1A2Z21Ec0VxT3dvWU0tU2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAobhYTNzIQGs8i8mFp41h4AufH1OAZbs5vrnusSj4m5n0DRGpGKz+Q
i9A7dzBtXRn7BCljf7Emt8wQYcT/+JxIqzzHHr7Ezlim9Ta9nzBzyi3Bp3yym/d7
Rdxh/Ik2Th9eeopoSwnx+FQVl8idnKwk0+BWpaCto7vi87AWcUS6v+jKp10MIpYw
DoSwAtMo6JrSZwWPYSIDX3av9VlKdv+XDouD2F4SOrQ22fIil+ChMStqQKPG7CWt
TFS8IcaQ5JKGi8sTfiqMbHsItiTU/gnYcKDtm2ODzIx5NdySP08g8f39c4YCNiHu
iiYhicJRTD8XQlEPfsKrw6tNCfmGF8YG
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:34:00 2025 by rpki-client