Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
File:                     EE3r2037i5__46TvfbFlevst9-I.mft (raw, json)
Hash identifier:          SY1zVTPZeJ/kWaEG2uZ4lR8nJaw0X29PEvPIv6BY7A0=
Subject key identifier:   75:3B:21:36:A5:8E:D7:44:7C:50:8A:72:34:DA:D8:4D:BA:45:58:8D
Authority key identifier: 10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2
Certificate issuer:       /CN=A91F10DC/serialNumber=104DEBDB4DFB8B9FFFE3A4EF7DB1657AFB2DF7E2
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
Manifest number:          0180
Signing time:             Thu 03 Apr 2025 03:00:15 +0000
Manifest this update:     Thu 03 Apr 2025 03:00:14 +0000
Manifest next update:     Thu 10 Apr 2025 03:00:14 +0000
Files and hashes:         1: EE3r2037i5__46TvfbFlevst9-I.crl (hash: kAjvWAqqlsI5tKoKjzJWUiNZd79MHBV/dlMHqTEaFFo=)
                          2: 01003962C9DC11ED8D68375EC4F9AE02.roa (hash: KSfw6IBecAIXXXtQTk/28sHhzeNjJPQPF3dORiab4B8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl
                          rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 03:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F10DC
        Validity
            Not Before: Apr  3 03:00:14 2025 GMT
            Not After : Apr 10 03:00:14 2025 GMT
        Subject: CN=67edf9bf-487b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6b:07:35:da:ec:71:7f:23:e6:0e:20:33:00:
                    bd:84:7c:36:29:7a:48:95:79:f9:3e:ce:f3:1e:4e:
                    c0:a5:25:a1:6a:f8:b4:80:2f:08:f8:32:e1:d7:36:
                    44:80:cd:1b:fb:0c:32:15:ba:55:92:3c:bb:9f:ef:
                    4f:39:56:12:2b:d4:e8:45:e3:6c:a8:fe:fa:c5:ee:
                    5e:a6:54:83:8d:db:ad:da:31:8a:60:db:48:26:44:
                    1e:a3:7e:15:66:62:6a:d9:71:ed:e4:0d:02:79:cc:
                    67:d0:45:71:5f:91:81:d0:ab:5d:bb:37:36:4c:f4:
                    40:67:e6:3e:dd:43:62:d6:d7:c8:26:50:0b:65:17:
                    a3:b6:af:10:3d:25:59:e5:d9:72:0b:00:e3:a2:7c:
                    62:11:4f:a4:e4:87:b2:3b:f4:e9:4b:9c:94:e5:5b:
                    33:db:8c:e4:ee:7e:03:af:ad:b6:e4:4f:58:ca:ed:
                    74:aa:9b:d9:f9:3e:5a:80:7a:8b:64:2f:66:8a:7f:
                    49:4d:22:4e:57:12:8e:86:43:6a:3f:4a:8f:dc:ba:
                    8c:15:9a:23:85:e5:d4:5e:30:af:e6:74:47:4c:46:
                    2f:40:1a:cd:11:86:eb:f9:65:94:02:36:df:30:4a:
                    1e:2c:43:e1:97:c1:48:24:03:48:80:fe:c2:80:9e:
                    d3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3B:21:36:A5:8E:D7:44:7C:50:8A:72:34:DA:D8:4D:BA:45:58:8D
            X509v3 Authority Key Identifier:
                keyid:10:4D:EB:DB:4D:FB:8B:9F:FF:E3:A4:EF:7D:B1:65:7A:FB:2D:F7:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EE3r2037i5__46TvfbFlevst9-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F10DC/85B8E4AAC9D811ED97975A2EC4F9AE02/EE3r2037i5__46TvfbFlevst9-I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:83:94:3c:e8:3d:c7:d8:06:2b:c5:0f:99:7b:7f:04:37:2d:
         a0:9d:68:e6:9c:32:ed:4a:17:7f:e1:56:93:27:a6:68:a7:5f:
         26:6f:ec:3d:18:a7:03:b9:e9:99:78:37:79:4a:a3:ba:48:26:
         15:e1:99:13:a6:d5:50:88:c7:e1:50:fd:80:91:08:56:f9:32:
         02:5c:2a:77:e5:ed:ef:03:36:c9:8a:c0:17:fb:7a:c7:5d:47:
         64:e3:c4:7e:de:f3:a1:5f:d7:1d:f7:89:1e:76:42:ce:d5:63:
         86:88:15:0e:69:6c:13:3b:fd:45:7c:09:d2:3f:a9:b2:19:0c:
         57:cf:35:44:89:9f:c7:7a:10:07:12:55:cb:00:62:95:c8:1d:
         14:6a:11:2d:98:15:4f:e3:b8:58:dc:40:c9:1c:c3:fd:e2:2e:
         5b:52:b6:89:b7:3f:6f:ad:8b:26:a2:42:05:2e:6b:4b:61:16:
         89:02:ff:03:2d:69:d8:c8:c0:1c:f8:f4:0e:6f:66:77:3d:43:
         ea:f9:81:b1:58:cd:32:53:b5:47:4c:af:a2:ba:9b:09:90:52:
         2f:c5:1f:cb:cc:fc:6b:52:3b:7a:bb:4f:6c:10:16:ce:5f:f3:
         67:39:82:68:7d:85:3e:da:6f:7e:a8:87:6b:a7:1e:14:d5:49:
         02:a8:20:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjEwREMxMTAvBgNVBAUTKDEwNERFQkRCNERGQjhCOUZGRkUzQTRFRjdEQjE2NTdB
RkIyREY3RTIwHhcNMjUwNDAzMDMwMDE0WhcNMjUwNDEwMDMwMDE0WjAYMRYwFAYD
VQQDEw02N2VkZjliZi00ODdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAumsHNdrscX8j5g4gMwC9hHw2KXpIlXn5Ps7zHk7ApSWhavi0gC8I+DLh1zZE
gM0b+wwyFbpVkjy7n+9POVYSK9ToReNsqP76xe5eplSDjdut2jGKYNtIJkQeo34V
ZmJq2XHt5A0Cecxn0EVxX5GB0Ktduzc2TPRAZ+Y+3UNi1tfIJlALZRejtq8QPSVZ
5dlyCwDjonxiEU+k5IeyO/TpS5yU5Vsz24zk7n4Dr6225E9Yyu10qpvZ+T5agHqL
ZC9min9JTSJOVxKOhkNqP0qP3LqMFZojheXUXjCv5nRHTEYvQBrNEYbr+WWUAjbf
MEoeLEPhl8FIJANIgP7CgJ7T+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHU7ITal
jtdEfFCKcjTa2E26RViNMB8GA1UdIwQYMBaAFBBN69tN+4uf/+Ok732xZXr7Lffi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTBEQy84NUI4RTRBQUM5
RDgxMUVEOTc5NzVBMkVDNEY5QUUwMi9FRTNyMjAzN2k1X180NlR2ZmJGbGV2c3Q5
LUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VFM3IyMDM3aTVfXzQ2VHZmYkZsZXZzdDktSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTBEQy84NUI4RTRBQUM5RDgxMUVEOTc5NzVBMkVDNEY5QUUwMi9FRTNyMjAzN2k1
X180NlR2ZmJGbGV2c3Q5LUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjg5Q86D3H2AYrxQ+Ze38ENy2gnWjmnDLtShd/4VaTJ6Zop18mb+w9
GKcDuemZeDd5SqO6SCYV4ZkTptVQiMfhUP2AkQhW+TICXCp35e3vAzbJisAX+3rH
XUdk48R+3vOhX9cd94kedkLO1WOGiBUOaWwTO/1FfAnSP6myGQxXzzVEiZ/HehAH
ElXLAGKVyB0UahEtmBVP47hY3EDJHMP94i5bUraJtz9vrYsmokIFLmtLYRaJAv8D
LWnYyMAc+PQOb2Z3PUPq+YGxWM0yU7VHTK+iupsJkFIvxR/LzPxrUjt6u09sEBbO
X/NnOYJofYU+2m9+qIdrpx4U1UkCqCB+
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:55:38 2025 by rpki-client