Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
File:                     T96UkP8v8-m_k7SY108x916p_P8.mft (raw, json)
Hash identifier:          OWhxUMDvXR5R8uDA2/TkRXjAeLusa+Lkgu6IYwC2OXw=
Subject key identifier:   06:5D:B1:64:E3:E2:94:02:56:3D:2D:56:C3:18:02:F3:03:43:C2:4F
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Certificate issuer:       /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial:       0397
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
Manifest number:          0388
Signing time:             Sat 31 May 2025 01:04:14 +0000
Manifest this update:     Sat 31 May 2025 01:04:14 +0000
Manifest next update:     Sat 07 Jun 2025 01:04:13 +0000
Files and hashes:         1: T96UkP8v8-m_k7SY108x916p_P8.crl (hash: t8tSP75lX7XHM+XLMve8S4U085KW+R1BjMmaScyqU4Q=)
                          2: D791DEB48DEE11EEB451D416C4F9AE02.roa (hash: xWMMfEWphw+jGw6vFyTgUW/C6T4JCFAjmX3tY8qjIQU=)
                          3: 152E5750901211EEA25BED1EC4F9AE02.roa (hash: q9Ub/O/CxWNZ+a3hm7Iv+ArFH+XEypUPU6PVAyD6z+U=)
                          4: D226E012A4EA11ECA8C4D151C4F9AE02.roa (hash: JV8w5HTbgBjA5P018WfQWq636lJGXmUnJAVnuy5z5CQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
                          rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 01:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
        Validity
            Not Before: May 31 01:04:14 2025 GMT
            Not After : Jun  7 01:04:13 2025 GMT
        Subject: CN=683a558e-fcce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:20:3e:c1:0d:02:72:a1:7a:63:b2:16:76:18:
                    4d:68:8b:ee:e9:28:9d:4a:4d:a7:3c:e9:28:49:cf:
                    5f:07:d3:3e:bb:23:73:41:3c:4f:ee:ba:02:01:65:
                    5d:cb:f6:b2:1c:69:a6:6f:0a:53:9b:a4:d1:46:c7:
                    1e:8c:0a:5c:2b:bc:5c:4d:90:ba:33:fe:d5:3a:0b:
                    07:09:b7:e0:40:ec:df:c8:c8:e6:64:94:cd:b1:8e:
                    83:01:69:9b:a9:63:56:4c:f3:f6:1b:d8:56:9d:e2:
                    f7:14:23:45:be:7e:c7:54:8b:50:d5:f5:de:d8:ba:
                    5f:05:10:43:31:39:14:59:1c:9f:0f:b6:64:ce:d2:
                    7c:80:47:9b:e6:0f:44:c6:30:e8:5e:7c:69:da:f1:
                    85:df:a7:ee:46:1d:63:d1:0a:9f:dd:6c:c7:c8:e3:
                    80:ee:b6:ac:53:43:92:81:ea:c6:93:79:b3:7b:36:
                    2c:ab:1f:e7:6a:f9:d2:ac:fb:83:ea:e5:99:c4:39:
                    fa:09:04:5a:d7:07:d1:d0:ce:c0:a2:ae:b6:05:8d:
                    5f:22:48:27:8c:05:ca:b8:f6:ce:43:c1:2e:6d:bd:
                    23:be:e9:40:b8:72:da:41:fd:ab:2d:44:9e:18:7a:
                    f3:42:73:64:07:9a:b7:0f:1a:0b:75:38:24:45:70:
                    3f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5D:B1:64:E3:E2:94:02:56:3D:2D:56:C3:18:02:F3:03:43:C2:4F
            X509v3 Authority Key Identifier:
                keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:60:e0:40:a2:26:ac:09:81:8a:8c:3f:3b:32:29:09:7c:17:
         07:7e:d0:9f:70:73:51:39:69:09:c5:68:b1:85:f3:bb:ac:50:
         59:21:38:bd:26:36:ef:51:3c:38:29:d6:8a:ee:bb:22:3b:6e:
         d5:02:00:52:75:b3:00:40:0f:fa:4f:90:b6:a0:c8:bf:71:ca:
         47:f2:3e:91:fe:29:34:11:21:8e:97:98:c2:d5:f5:a1:2b:0f:
         02:1d:10:68:3c:9a:de:86:60:2f:f6:c2:78:60:50:66:76:1a:
         f0:09:5c:fa:6b:21:fa:72:8d:70:8a:d4:ec:be:17:dc:cf:22:
         16:44:93:10:ee:d2:26:54:1d:94:f1:90:15:38:35:ec:54:60:
         de:89:e5:b9:28:6a:84:18:fa:89:5f:e4:44:7c:04:ff:97:22:
         84:01:92:e7:70:eb:10:f7:1c:ee:97:9f:9b:21:59:dc:64:1e:
         bf:e3:8a:6a:50:ec:65:ee:73:4b:6a:07:ff:87:59:36:a8:10:
         9d:ed:3c:47:7e:af:d0:04:29:26:d4:81:8a:02:76:00:26:28:
         1b:ac:b2:72:3f:38:9d:5e:03:23:79:79:dd:a3:1b:c6:18:3d:
         23:1a:01:2c:9f:a7:ee:95:dc:0f:8c:dc:13:15:64:88:f9:91:
         8e:f1:10:57
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQxNEIxMTAvBgNVBAUTKDRGREU5NDkwRkYyRkYzRTlCRjkzQjQ5OEQ3NEYzMUY3
NUVBOUZDRkYwHhcNMjUwNTMxMDEwNDE0WhcNMjUwNjA3MDEwNDEzWjAYMRYwFAYD
VQQDEw02ODNhNTU4ZS1mY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkiA+wQ0CcqF6Y7IWdhhNaIvu6SidSk2nPOkoSc9fB9M+uyNzQTxP7roCAWVd
y/ayHGmmbwpTm6TRRscejApcK7xcTZC6M/7VOgsHCbfgQOzfyMjmZJTNsY6DAWmb
qWNWTPP2G9hWneL3FCNFvn7HVItQ1fXe2LpfBRBDMTkUWRyfD7ZkztJ8gEeb5g9E
xjDoXnxp2vGF36fuRh1j0Qqf3WzHyOOA7rasU0OSgerGk3mzezYsqx/navnSrPuD
6uWZxDn6CQRa1wfR0M7Aoq62BY1fIkgnjAXKuPbOQ8Eubb0jvulAuHLaQf2rLUSe
GHrzQnNkB5q3DxoLdTgkRXA/RwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZdsWTj
4pQCVj0tVsMYAvMDQ8JPMB8GA1UdIwQYMBaAFE/elJD/L/Ppv5O0mNdPMfdeqfz/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDE0Qi9EQzFFNzIxNEE0
RTYxMUVDOUVGNDMxNERDNEY5QUUwMi9UOTZVa1A4djgtbV9rN1NZMTA4eDkxNnBf
UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Q5NlVrUDh2OC1tX2s3U1kxMDh4OTE2cF9QOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDE0Qi9EQzFFNzIxNEE0RTYxMUVDOUVGNDMxNERDNEY5QUUwMi9UOTZVa1A4djgt
bV9rN1NZMTA4eDkxNnBfUDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB/YOBAoiasCYGKjD87MikJfBcHftCfcHNROWkJxWixhfO7rFBZITi9
JjbvUTw4KdaK7rsiO27VAgBSdbMAQA/6T5C2oMi/ccpH8j6R/ik0ESGOl5jC1fWh
Kw8CHRBoPJrehmAv9sJ4YFBmdhrwCVz6ayH6co1witTsvhfczyIWRJMQ7tImVB2U
8ZAVODXsVGDeieW5KGqEGPqJX+REfAT/lyKEAZLncOsQ9xzul5+bIVncZB6/44pq
UOxl7nNLagf/h1k2qBCd7TxHfq/QBCkm1IGKAnYAJigbrLJyPzidXgMjeXndoxvG
GD0jGgEsn6fuldwPjNwTFWSI+ZGO8RBX
-----END CERTIFICATE-----
Generated at Sat May 31 16:38:54 2025 by rpki-client