Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
File:                     q8dSj86PeUX0YPdSdIJB2tVnilo.mft (raw, json)
Hash identifier:          +oyRioOJ9l3GB+BnJf8rhnrmyEamZYT9NtobuD8qe88=
Subject key identifier:   2F:EF:06:7F:0C:C6:BA:4B:D4:C8:A9:56:9E:61:E8:23:9F:04:E6:4E
Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A
Certificate issuer:       /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A
Certificate serial:       0788
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
Manifest number:          0783
Signing time:             Fri 28 Mar 2025 21:36:34 +0000
Manifest this update:     Fri 28 Mar 2025 21:36:34 +0000
Manifest next update:     Fri 04 Apr 2025 21:36:34 +0000
Files and hashes:         1: q8dSj86PeUX0YPdSdIJB2tVnilo.crl (hash: t+jvVf1Z4vJJTrttHgposWqGjjQ2MDEFxpKxlXyKe1Y=)
                          2: AC1CD860039511EBBE8C7F47C4F9AE02.roa (hash: bI2YzmE5abFv+G4p73f/qs8eUR6pecodR9lCynJZEoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl
                          rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 21:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928 (0x788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F367D
        Validity
            Not Before: Mar 28 21:36:34 2025 GMT
            Not After : Apr  4 21:36:34 2025 GMT
        Subject: CN=67e71662-22e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e6:57:44:3b:c9:87:96:e7:3b:57:81:22:13:
                    68:0d:fb:f1:38:d5:9c:2f:4c:62:ed:8d:ca:b9:e6:
                    40:77:23:c9:34:43:56:e4:d1:a7:4a:2a:a9:f5:65:
                    d6:9b:89:c9:35:9b:c5:25:d4:27:8d:0c:c0:d8:e6:
                    be:e0:f1:7b:18:f9:ad:10:c7:bf:a4:22:16:81:43:
                    b7:6d:2c:e0:6d:a1:0c:be:fa:f8:ea:6c:4e:cc:c4:
                    79:c5:5c:98:e6:52:cd:8f:c6:79:6e:54:61:cc:8d:
                    86:40:81:10:ed:7e:c2:c5:de:4c:26:e0:a2:d9:66:
                    c8:ad:2f:c8:ac:cb:87:3c:f8:9e:20:59:67:11:f2:
                    8b:57:10:f7:5e:6c:9d:5a:e3:21:3e:91:dc:d6:05:
                    53:b2:1a:ee:cb:ef:c4:03:95:b8:0a:e8:2d:f1:de:
                    e5:90:48:8e:38:d5:d2:2f:61:e6:49:11:9d:e4:dd:
                    26:df:2e:5d:80:8f:18:e6:e6:34:8a:cc:5f:78:32:
                    22:09:4c:2c:5e:2b:4c:d1:25:62:13:b4:6f:c8:47:
                    97:5e:a2:ab:61:d1:96:62:ba:6d:27:8c:73:f8:6e:
                    be:ca:e2:d1:7e:32:3f:15:62:81:45:e2:d9:ef:46:
                    46:53:13:78:ef:8c:c6:f5:f9:55:27:13:d3:fd:b5:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EF:06:7F:0C:C6:BA:4B:D4:C8:A9:56:9E:61:E8:23:9F:04:E6:4E
            X509v3 Authority Key Identifier:
                keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c2:2a:4f:78:d0:12:14:6b:a9:1a:5c:c9:15:76:6f:a7:49:
         51:a8:a3:c0:1f:af:dd:51:f1:b1:d1:32:45:69:f8:ab:5c:37:
         1d:90:71:2c:df:57:34:83:c4:50:9c:b3:3a:39:b1:94:49:5e:
         04:8f:00:0e:63:cc:09:ac:29:40:c0:6c:ba:f4:e3:1f:e3:04:
         a8:fb:a6:70:c8:13:00:5f:05:54:fa:14:44:f5:a4:83:57:a3:
         8e:42:ca:d6:5e:1c:ee:a7:b8:1a:8f:87:54:92:5c:92:98:55:
         d6:e1:1d:a8:2b:7b:5e:db:54:66:fb:80:4d:7f:1b:c4:d5:a2:
         58:5f:20:7b:e0:b0:82:f3:80:b8:5a:ab:13:b9:1b:59:cb:e5:
         16:9b:57:ef:27:20:db:d7:c4:9e:de:df:38:17:18:66:26:26:
         60:cc:12:19:d2:cf:61:62:e1:52:30:74:2c:a2:33:62:ad:c4:
         ea:23:ac:a5:76:e8:bf:13:f7:da:fa:cf:29:1f:54:26:60:46:
         82:0d:23:f5:40:c7:c0:6d:8a:c0:ef:9e:1b:e6:13:42:61:15:
         b4:89:e5:7f:02:6e:fe:55:82:2e:9d:7a:f2:12:df:3b:76:0c:
         fa:4f:f3:6e:e3:25:be:35:92:3c:63:20:b7:62:11:32:b5:ae:
         a6:14:70:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB4gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjM2N0QxMTAvBgNVBAUTKEFCQzc1MjhGQ0U4Rjc5NDVGNDYwRjc1Mjc0ODI0MURB
RDU2NzhBNUEwHhcNMjUwMzI4MjEzNjM0WhcNMjUwNDA0MjEzNjM0WjAYMRYwFAYD
VQQDEw02N2U3MTY2Mi0yMmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw+ZXRDvJh5bnO1eBIhNoDfvxONWcL0xi7Y3KueZAdyPJNENW5NGnSiqp9WXW
m4nJNZvFJdQnjQzA2Oa+4PF7GPmtEMe/pCIWgUO3bSzgbaEMvvr46mxOzMR5xVyY
5lLNj8Z5blRhzI2GQIEQ7X7Cxd5MJuCi2WbIrS/IrMuHPPieIFlnEfKLVxD3Xmyd
WuMhPpHc1gVTshruy+/EA5W4Cugt8d7lkEiOONXSL2HmSRGd5N0m3y5dgI8Y5uY0
isxfeDIiCUwsXitM0SViE7RvyEeXXqKrYdGWYrptJ4xz+G6+yuLRfjI/FWKBReLZ
70ZGUxN474zG9flVJxPT/bVrtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/vBn8M
xrpL1MipVp5h6COfBOZOMB8GA1UdIwQYMBaAFKvHUo/Oj3lF9GD3UnSCQdrVZ4pa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzY3RC85OURBN0FCRTAz
OTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVVWDBZUGRTZElKQjJ0Vm5p
bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3E4ZFNqODZQZVVYMFlQZFNkSUpCMnRWbmlsby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MzY3RC85OURBN0FCRTAzOTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVV
WDBZUGRTZElKQjJ0Vm5pbG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB0wipPeNASFGupGlzJFXZvp0lRqKPAH6/dUfGx0TJFafirXDcdkHEs
31c0g8RQnLM6ObGUSV4EjwAOY8wJrClAwGy69OMf4wSo+6ZwyBMAXwVU+hRE9aSD
V6OOQsrWXhzup7gaj4dUklySmFXW4R2oK3te21Rm+4BNfxvE1aJYXyB74LCC84C4
WqsTuRtZy+UWm1fvJyDb18Se3t84FxhmJiZgzBIZ0s9hYuFSMHQsojNircTqI6yl
dui/E/fa+s8pH1QmYEaCDSP1QMfAbYrA754b5hNCYRW0ieV/Am7+VYIunXryEt87
dgz6T/Nu4yW+NZI8YyC3YhEyta6mFHC8
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:35:50 2025 by rpki-client