Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
File:                     woYQciwbyJvjK01LiizCHeZxfMg.mft (raw, json)
Hash identifier:          P1zq2uuMEuaqK3h3tjq84Xrwi5aTgZcuim30KfhnIdQ=
Subject key identifier:   49:70:33:2A:AF:28:B3:22:DC:AB:06:07:53:D8:CF:4D:B3:D9:ED:EF
Authority key identifier: C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8
Certificate issuer:       /CN=A91E11D6/serialNumber=C28610722C1BC89BE32B4D4B8A2CC21DE6717CC8
Certificate serial:       027A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
Manifest number:          0274
Signing time:             Thu 03 Apr 2025 01:41:23 +0000
Manifest this update:     Thu 03 Apr 2025 01:41:22 +0000
Manifest next update:     Thu 10 Apr 2025 01:41:22 +0000
Files and hashes:         1: woYQciwbyJvjK01LiizCHeZxfMg.crl (hash: xrVRBMYw8yc1lae8mmlwwznXlR+Nb/szZ0HRUGhBKWQ=)
                          2: ACBFA1221CD111EFB2BDF412C4F9AE02.roa (hash: ifFLN+8twN04B6jY6cx/b65AiJj/Z2yB7h3ev34IjTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl
                          rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 01:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11D6
        Validity
            Not Before: Apr  3 01:41:22 2025 GMT
            Not After : Apr 10 01:41:22 2025 GMT
        Subject: CN=67ede743-8da7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:fc:a8:0a:3b:c8:14:4c:d9:ab:4e:36:a9:48:
                    3f:c5:8f:27:9e:1b:ab:38:16:15:15:9c:1b:de:68:
                    14:c3:98:a6:73:a1:4f:25:ea:d5:f3:34:c5:cf:66:
                    ab:c9:2a:23:19:8b:ce:4d:b8:ac:e0:1d:ca:ae:06:
                    82:53:a4:51:55:9a:f6:07:a5:f2:09:91:a0:05:46:
                    1d:0e:f1:8a:da:39:23:a8:9f:66:bd:b0:d8:59:f4:
                    84:3a:35:3c:ef:90:70:3d:e6:16:be:0c:48:b4:78:
                    a4:2c:3b:45:76:ce:d6:56:01:d3:fb:77:64:e9:c3:
                    44:76:c0:45:c3:04:35:f2:9d:52:76:21:16:da:19:
                    9e:07:10:15:71:77:b1:a3:6a:e3:b6:a4:10:02:03:
                    42:d8:86:6b:4a:dc:41:38:61:c1:4a:2a:ae:86:25:
                    45:6f:dc:c7:f0:d5:61:b2:1c:04:b2:9b:8a:cf:76:
                    77:88:85:9a:dc:47:74:dd:e5:fb:2b:6c:83:1f:4c:
                    f9:52:0b:54:18:e7:68:85:7e:ab:35:4e:2a:34:73:
                    6b:9d:d8:ee:02:71:49:50:bd:92:47:2e:fb:06:23:
                    0d:50:a8:5f:73:2a:1e:03:99:0a:4f:b1:be:22:7b:
                    ed:27:eb:48:5c:6c:e1:ea:7f:b8:3f:c3:fe:e6:00:
                    00:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:70:33:2A:AF:28:B3:22:DC:AB:06:07:53:D8:CF:4D:B3:D9:ED:EF
            X509v3 Authority Key Identifier:
                keyid:C2:86:10:72:2C:1B:C8:9B:E3:2B:4D:4B:8A:2C:C2:1D:E6:71:7C:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/woYQciwbyJvjK01LiizCHeZxfMg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11D6/77DEFD32063911ED818C4016C4F9AE02/woYQciwbyJvjK01LiizCHeZxfMg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:79:d8:f9:d0:5c:13:96:d6:df:e9:65:68:24:97:9b:72:39:
         d3:45:8e:82:f6:b1:1b:1c:e1:82:6f:cf:c3:2a:72:64:ab:5f:
         08:73:b6:60:60:38:03:b7:ae:10:62:3f:14:18:02:ff:74:b4:
         33:90:a4:fc:65:4b:57:fc:58:b3:26:48:2f:cd:5e:51:f4:8d:
         ae:18:45:4f:5b:0c:16:e6:0b:e6:aa:8c:5f:f2:37:a3:94:92:
         3b:b0:a9:16:c0:45:3d:96:2d:78:38:6f:f2:f9:18:bd:a6:73:
         ff:4c:fd:ca:5b:22:52:9d:0c:b1:fa:2e:38:72:e3:d0:c6:7a:
         1a:b8:36:19:0d:3e:33:7d:7e:99:cf:1a:b5:68:10:e2:fa:db:
         e7:24:1c:2d:bd:02:a7:fa:64:36:e0:7e:77:af:fd:d8:df:2e:
         c4:c7:40:f8:d6:83:d9:03:df:be:59:eb:40:87:5f:bc:c1:0d:
         98:09:51:78:0b:3d:6b:32:04:48:41:16:61:71:d9:b9:74:d3:
         3c:b5:e1:04:a7:37:69:8f:8c:62:ab:9a:6b:2a:8b:0f:31:11:
         fa:2d:e2:a7:81:7e:bc:3c:1e:cb:14:f0:09:cf:c2:c5:a0:53:
         e8:f4:aa:e9:39:32:21:af:1c:ae:a3:15:1f:2c:af:07:aa:54:
         92:c9:b6:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAnowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTExRDYxMTAvBgNVBAUTKEMyODYxMDcyMkMxQkM4OUJFMzJCNEQ0QjhBMkNDMjFE
RTY3MTdDQzgwHhcNMjUwNDAzMDE0MTIyWhcNMjUwNDEwMDE0MTIyWjAYMRYwFAYD
VQQDEw02N2VkZTc0My04ZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9PyoCjvIFEzZq042qUg/xY8nnhurOBYVFZwb3mgUw5imc6FPJerV8zTFz2ar
ySojGYvOTbis4B3KrgaCU6RRVZr2B6XyCZGgBUYdDvGK2jkjqJ9mvbDYWfSEOjU8
75BwPeYWvgxItHikLDtFds7WVgHT+3dk6cNEdsBFwwQ18p1SdiEW2hmeBxAVcXex
o2rjtqQQAgNC2IZrStxBOGHBSiquhiVFb9zH8NVhshwEspuKz3Z3iIWa3Ed03eX7
K2yDH0z5UgtUGOdohX6rNU4qNHNrndjuAnFJUL2SRy77BiMNUKhfcyoeA5kKT7G+
InvtJ+tIXGzh6n+4P8P+5gAAZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElwMyqv
KLMi3KsGB1PYz02z2e3vMB8GA1UdIwQYMBaAFMKGEHIsG8ib4ytNS4oswh3mcXzI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTFENi83N0RFRkQzMjA2
MzkxMUVEODE4QzQwMTZDNEY5QUUwMi93b1lRY2l3YnlKdmpLMDFMaWl6Q0hlWnhm
TWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dvWVFjaXdieUp2akswMUxpaXpDSGVaeGZNZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTFENi83N0RFRkQzMjA2MzkxMUVEODE4QzQwMTZDNEY5QUUwMi93b1lRY2l3YnlK
dmpLMDFMaWl6Q0hlWnhmTWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDEedj50FwTltbf6WVoJJebcjnTRY6C9rEbHOGCb8/DKnJkq18Ic7Zg
YDgDt64QYj8UGAL/dLQzkKT8ZUtX/FizJkgvzV5R9I2uGEVPWwwW5gvmqoxf8jej
lJI7sKkWwEU9li14OG/y+Ri9pnP/TP3KWyJSnQyx+i44cuPQxnoauDYZDT4zfX6Z
zxq1aBDi+tvnJBwtvQKn+mQ24H53r/3Y3y7Ex0D41oPZA9++WetAh1+8wQ2YCVF4
Cz1rMgRIQRZhcdm5dNM8teEEpzdpj4xiq5prKosPMRH6LeKngX68PB7LFPAJz8LF
oFPo9KrpOTIhrxyuoxUfLK8HqlSSybYu
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:49 2025 by rpki-client