Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
File:                     pp7mLFrogRdKQhI3WepCPWH3NCM.mft (raw, json)
Hash identifier:          ire4Df1UuPMSCmkxDGi20/cyT4MuaCTwXaEI6zghctY=
Subject key identifier:   74:AD:FA:56:35:5E:75:4A:78:8C:31:0A:95:1D:D1:C7:F2:66:79:1E
Authority key identifier: A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23
Certificate issuer:       /CN=A9132F12/serialNumber=A69EE62C5AE881174A42123759EA423D61F73423
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
Manifest number:          8F
Signing time:             Tue 03 Jun 2025 06:15:29 +0000
Manifest this update:     Tue 03 Jun 2025 06:15:29 +0000
Manifest next update:     Tue 10 Jun 2025 06:15:29 +0000
Files and hashes:         1: pp7mLFrogRdKQhI3WepCPWH3NCM.crl (hash: 5hkukhIStgQTVgesoqlYp5kmDFwSgiulK3il3agvcY0=)
                          2: A1418C5E68C411EF841B7987C4F9AE02.roa (hash: w11TSOq/EaycCd3tkTNvuoFONdTStuPzFxhygocn60Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl
                          rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 06:15:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132F12, serialNumber=A69EE62C5AE881174A42123759EA423D61F73423
        Validity
            Not Before: Jun  3 06:15:29 2025 GMT
            Not After : Jun 10 06:15:29 2025 GMT
        Subject: CN=683e9301-43df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:68:bf:fb:29:03:c9:7b:25:4a:92:05:6a:
                    06:18:19:ba:4a:94:18:0a:5d:69:35:c4:ad:26:1c:
                    82:9b:94:ad:d5:ac:d6:47:c8:2a:bf:7e:66:52:d4:
                    24:69:e1:e3:4a:6c:62:a7:67:98:94:7f:45:d3:dd:
                    9f:d6:5c:1a:d2:39:6e:de:a7:64:ec:3c:2e:36:60:
                    2a:2c:98:83:22:fa:50:8f:ae:e1:1e:75:42:b0:f7:
                    0d:e6:81:32:d4:4f:bf:27:68:59:57:94:22:0a:b9:
                    01:03:92:ee:d6:e6:f6:45:05:e4:c3:29:ee:7a:68:
                    53:00:ca:67:12:a1:0d:c0:8e:b4:5f:7c:4c:27:51:
                    2f:31:c0:c5:e9:ec:29:68:78:79:77:a8:03:0f:2e:
                    71:9f:9d:fb:ab:4c:fa:5a:89:97:4d:da:12:5a:7d:
                    06:7f:68:01:12:5e:bb:24:50:a5:5e:39:81:35:66:
                    ae:92:6a:17:23:6c:cd:97:e7:03:2e:38:1a:e8:5b:
                    f5:47:67:a0:82:00:da:08:af:e6:02:c6:e2:3d:ff:
                    15:45:dd:fe:a7:e7:d5:51:82:e4:c9:e1:23:2a:c5:
                    08:c6:fc:ef:05:02:32:3a:b4:9d:64:65:b2:45:5b:
                    d4:d8:f5:8c:be:24:36:dc:c2:51:6a:04:9c:95:35:
                    ab:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AD:FA:56:35:5E:75:4A:78:8C:31:0A:95:1D:D1:C7:F2:66:79:1E
            X509v3 Authority Key Identifier:
                keyid:A6:9E:E6:2C:5A:E8:81:17:4A:42:12:37:59:EA:42:3D:61:F7:34:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pp7mLFrogRdKQhI3WepCPWH3NCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132F12/FF333B8A68C111EFA753A164C4F9AE02/pp7mLFrogRdKQhI3WepCPWH3NCM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:bd:84:ce:29:85:68:c8:d6:a9:d3:dd:32:ee:dc:fe:d1:11:
         83:02:78:e0:8e:75:cd:c2:e1:1e:e6:7c:57:74:01:9f:39:56:
         9d:88:c1:57:c3:ea:bd:a5:5b:97:1a:10:0e:0e:aa:b2:da:a7:
         7c:b7:81:4d:bc:b8:61:31:cb:15:cd:58:a1:7f:41:53:f2:fa:
         72:92:20:73:ec:04:90:be:b2:77:ba:f9:c8:63:c4:3b:f5:35:
         ed:cf:8a:08:e1:df:82:f2:54:98:60:02:af:22:5a:4c:02:73:
         d1:30:5a:56:ad:6a:56:13:9f:09:2c:da:2a:b5:84:fd:00:00:
         ad:61:f0:c0:fa:d2:60:64:59:7d:d5:ae:83:f6:a4:bb:e7:8f:
         3c:7f:d6:ec:8f:0d:40:30:d2:1c:34:8a:5f:a2:31:1b:9f:1a:
         a7:b1:50:51:00:7d:fb:3b:a7:1a:e5:07:94:27:85:62:7a:46:
         f4:e3:30:36:c0:60:09:dd:b9:69:32:ca:02:a1:af:21:de:55:
         7b:6d:c0:6e:bf:5e:96:f1:61:ca:8b:d4:dc:83:a2:20:e1:b0:
         17:de:b3:11:49:55:7b:a2:3a:da:0f:7e:8d:7c:80:4a:7c:1a:
         b3:f5:3e:5e:17:ab:4d:db:39:f7:65:77:56:61:07:9f:f1:ad:
         a5:04:90:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJGMTIxMTAvBgNVBAUTKEE2OUVFNjJDNUFFODgxMTc0QTQyMTIzNzU5RUE0MjNE
NjFGNzM0MjMwHhcNMjUwNjAzMDYxNTI5WhcNMjUwNjEwMDYxNTI5WjAYMRYwFAYD
VQQDEw02ODNlOTMwMS00M2RmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArIpov/spA8l7JUqSBWoGGBm6SpQYCl1pNcStJhyCm5St1azWR8gqv35mUtQk
aeHjSmxip2eYlH9F092f1lwa0jlu3qdk7DwuNmAqLJiDIvpQj67hHnVCsPcN5oEy
1E+/J2hZV5QiCrkBA5Lu1ub2RQXkwynuemhTAMpnEqENwI60X3xMJ1EvMcDF6ewp
aHh5d6gDDy5xn537q0z6WomXTdoSWn0Gf2gBEl67JFClXjmBNWaukmoXI2zNl+cD
Ljga6Fv1R2egggDaCK/mAsbiPf8VRd3+p+fVUYLkyeEjKsUIxvzvBQIyOrSdZGWy
RVvU2PWMviQ23MJRagSclTWruQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHSt+lY1
XnVKeIwxCpUd0cfyZnkeMB8GA1UdIwQYMBaAFKae5ixa6IEXSkISN1nqQj1h9zQj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkYxMi9GRjMzM0I4QTY4
QzExMUVGQTc1M0ExNjRDNEY5QUUwMi9wcDdtTEZyb2dSZEtRaEkzV2VwQ1BXSDNO
Q00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BwN21MRnJvZ1JkS1FoSTNXZXBDUFdIM05DTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkYxMi9GRjMzM0I4QTY4QzExMUVGQTc1M0ExNjRDNEY5QUUwMi9wcDdtTEZyb2dS
ZEtRaEkzV2VwQ1BXSDNOQ00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrvYTOKYVoyNap090y7tz+0RGDAnjgjnXNwuEe5nxXdAGfOVadiMFX
w+q9pVuXGhAODqqy2qd8t4FNvLhhMcsVzVihf0FT8vpykiBz7ASQvrJ3uvnIY8Q7
9TXtz4oI4d+C8lSYYAKvIlpMAnPRMFpWrWpWE58JLNoqtYT9AACtYfDA+tJgZFl9
1a6D9qS75488f9bsjw1AMNIcNIpfojEbnxqnsVBRAH37O6ca5QeUJ4Viekb04zA2
wGAJ3blpMsoCoa8h3lV7bcBuv16W8WHKi9Tcg6Ig4bAX3rMRSVV7ojraD36NfIBK
fBqz9T5eF6tN2zn3ZXdWYQef8a2lBJBZ
-----END CERTIFICATE-----
Generated at Tue Jun 3 23:52:32 2025 by rpki-client