Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
File:                     FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft (raw, json)
Hash identifier:          WKgWn3W9+uZOTiNgrsMNWTWBLy3GP5L4TCZfQ3HOtAA=
Subject key identifier:   03:57:0F:E2:D7:6A:28:1F:BF:FB:E8:13:2C:2F:DD:F9:C4:2C:88:99
Authority key identifier: 14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27
Certificate issuer:       /CN=A91193C1/serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
Certificate serial:       052C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
Manifest number:          0520
Signing time:             Sun 08 Jun 2025 23:12:29 +0000
Manifest this update:     Sun 08 Jun 2025 23:12:29 +0000
Manifest next update:     Sun 15 Jun 2025 23:12:29 +0000
Files and hashes:         1: FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl (hash: ix1ki6JthI5ljLVjGpCyDAwgbkhhg5OVAX8W8T0jKL0=)
                          2: AC58009E782A11EFA7DD8F7CC4F9AE02.roa (hash: QVvq8n67O4BwvE2m1nf05uYuzsM/8nQ/hW6OWK20q7A=)
                          3: C8900982059611ECB2896C55C4F9AE02.roa (hash: hg4ELKymdwHyn2QAAvtW6T2bJJMNtTNjpAlYq36iGfA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl
                          rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 23:12:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1324 (0x52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91193C1, serialNumber=14548E70949E505F8BA8A5391E466E1E99D3B727
        Validity
            Not Before: Jun  8 23:12:29 2025 GMT
            Not After : Jun 15 23:12:29 2025 GMT
        Subject: CN=684618dd-9fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0c:06:42:97:6b:4b:f7:f2:07:d8:ab:27:92:
                    e2:0a:40:e0:3a:fc:b8:0f:50:5a:c8:96:22:b0:e6:
                    af:8d:69:e0:99:df:16:64:c4:c0:50:4a:0f:86:ef:
                    f4:8a:9a:6f:71:40:7a:37:88:51:0c:0f:8a:8f:11:
                    91:18:67:0f:ce:44:be:1d:e2:44:58:41:ef:fd:21:
                    22:79:89:3f:7c:b2:70:37:83:66:67:d5:c7:d2:03:
                    66:17:b8:0c:a6:1f:c6:26:43:2f:dd:7f:30:65:98:
                    06:22:6d:a8:57:e3:3a:3c:eb:01:4c:b7:e0:98:fe:
                    d9:68:0a:08:58:7a:da:48:c9:bb:7a:11:1d:b2:fb:
                    ea:8b:cf:cf:fe:2c:16:d9:7a:06:8d:25:d9:cf:e1:
                    00:f6:43:8d:e5:a2:f0:ab:92:f5:82:88:be:2d:78:
                    25:60:26:ae:b8:99:89:c5:70:e4:8c:c0:75:b8:ce:
                    b1:24:6f:72:b3:dc:a5:ad:b2:aa:2b:3e:9d:9f:94:
                    1a:d8:07:8f:34:33:9b:1c:9d:28:c3:fe:ff:95:de:
                    23:12:d9:f5:1a:e8:97:c6:86:f6:c3:de:d0:b3:d2:
                    4c:72:c7:3b:4a:07:c3:71:bf:fc:b8:7f:13:21:96:
                    84:bb:7e:2d:28:a1:c2:47:06:19:96:60:bf:ec:65:
                    b9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:57:0F:E2:D7:6A:28:1F:BF:FB:E8:13:2C:2F:DD:F9:C4:2C:88:99
            X509v3 Authority Key Identifier:
                keyid:14:54:8E:70:94:9E:50:5F:8B:A8:A5:39:1E:46:6E:1E:99:D3:B7:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FFSOcJSeUF-LqKU5HkZuHpnTtyc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91193C1/736E3B48059311EC8921ED85C4F9AE02/FFSOcJSeUF-LqKU5HkZuHpnTtyc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:07:32:85:0b:14:39:a0:8d:6d:27:22:ca:e3:63:89:b2:96:
         45:5f:20:f5:57:cc:66:3c:98:85:b9:9d:8b:dd:8e:a0:90:b0:
         ba:62:e3:3d:d4:9f:6b:db:8d:7f:a3:3a:3b:94:88:45:c9:67:
         ab:f9:5a:31:13:4c:d3:79:37:24:d0:17:da:d3:06:ad:34:28:
         71:c6:85:1c:2e:df:15:ec:09:9c:33:4f:ff:17:1d:77:03:9e:
         e5:26:c1:1c:6b:21:b6:19:ef:63:68:82:62:95:ee:e8:99:cc:
         10:f2:42:f4:fa:08:e0:93:19:80:a9:f0:52:45:42:20:8f:7f:
         78:ef:9c:e9:be:9a:a5:1b:cb:ae:10:7b:f3:c6:80:7d:0e:f8:
         a5:b9:39:e4:46:58:1e:19:36:fe:a2:a7:1f:ff:8a:80:19:72:
         96:af:cb:4c:c5:c9:54:3b:71:d1:fe:c0:fa:dc:5b:f1:d3:cf:
         70:0b:a1:ba:fc:08:a8:7a:cd:37:d0:11:e9:f8:c0:23:98:b7:
         1e:a7:24:25:67:43:58:a4:82:87:98:84:99:36:4f:2d:fd:c5:
         ad:ff:91:33:40:2f:5c:89:09:fc:aa:39:de:d2:a0:c4:8b:1a:
         e7:ce:8e:b2:1b:9b:19:d0:b7:56:8f:91:24:e6:cb:49:5f:58:
         51:86:52:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBSwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkzQzExMTAvBgNVBAUTKDE0NTQ4RTcwOTQ5RTUwNUY4QkE4QTUzOTFFNDY2RTFF
OTlEM0I3MjcwHhcNMjUwNjA4MjMxMjI5WhcNMjUwNjE1MjMxMjI5WjAYMRYwFAYD
VQQDEw02ODQ2MThkZC05ZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0AwGQpdrS/fyB9irJ5LiCkDgOvy4D1BayJYisOavjWngmd8WZMTAUEoPhu/0
ippvcUB6N4hRDA+KjxGRGGcPzkS+HeJEWEHv/SEieYk/fLJwN4NmZ9XH0gNmF7gM
ph/GJkMv3X8wZZgGIm2oV+M6POsBTLfgmP7ZaAoIWHraSMm7ehEdsvvqi8/P/iwW
2XoGjSXZz+EA9kON5aLwq5L1goi+LXglYCauuJmJxXDkjMB1uM6xJG9ys9ylrbKq
Kz6dn5Qa2AePNDObHJ0ow/7/ld4jEtn1GuiXxob2w97Qs9JMcsc7SgfDcb/8uH8T
IZaEu34tKKHCRwYZlmC/7GW5eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFANXD+LX
aigfv/voEywv3fnELIiZMB8GA1UdIwQYMBaAFBRUjnCUnlBfi6ilOR5Gbh6Z07cn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTNDMS83MzZFM0I0ODA1
OTMxMUVDODkyMUVEODVDNEY5QUUwMi9GRlNPY0pTZVVGLUxxS1U1SGtadUhwblR0
eWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZGU09jSlNlVUYtTHFLVTVIa1p1SHBuVHR5Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTNDMS83MzZFM0I0ODA1OTMxMUVDODkyMUVEODVDNEY5QUUwMi9GRlNPY0pTZVVG
LUxxS1U1SGtadUhwblR0eWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAUBzKFCxQ5oI1tJyLK42OJspZFXyD1V8xmPJiFuZ2L3Y6gkLC6YuM9
1J9r241/ozo7lIhFyWer+VoxE0zTeTck0Bfa0watNChxxoUcLt8V7AmcM0//Fx13
A57lJsEcayG2Ge9jaIJile7omcwQ8kL0+gjgkxmAqfBSRUIgj39475zpvpqlG8uu
EHvzxoB9DviluTnkRlgeGTb+oqcf/4qAGXKWr8tMxclUO3HR/sD63Fvx089wC6G6
/Aioes030BHp+MAjmLcepyQlZ0NYpIKHmISZNk8t/cWt/5EzQC9ciQn8qjne0qDE
ixrnzo6yG5sZ0LdWj5Ek5stJX1hRhlLP
-----END CERTIFICATE-----
Generated at Tue Jun 10 03:51:48 2025 by rpki-client