Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
File:                     veGzlV8WJd92Ja9xy7eUuHw53Gc.mft (raw, json)
Hash identifier:          jrxVqU/Pm4HdVvbmdT2DfLTMOIXQ7oHHImFQxEWa2CQ=
Subject key identifier:   C4:DC:48:05:F2:27:92:94:3B:E9:55:9D:BE:FA:4E:BB:56:2C:C8:7B
Authority key identifier: BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67
Certificate issuer:       /CN=A913387C/serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
Certificate serial:       348D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
Manifest number:          3489
Signing time:             Sat 31 May 2025 14:30:55 +0000
Manifest this update:     Sat 31 May 2025 14:30:55 +0000
Manifest next update:     Sat 07 Jun 2025 14:30:55 +0000
Files and hashes:         1: veGzlV8WJd92Ja9xy7eUuHw53Gc.crl (hash: XwqhJXv/idnmFlrUkEiwzfeyV8gZ2Ksk638rlIq335M=)
                          2: 08B3D71E068611EDA1C2070DC4F9AE02.roa (hash: nsDloBmSb7WnZ4IIBV/7HLbvVNyY5PAJVB5LfyUu8BU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl
                          rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 14:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13453 (0x348d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913387C, serialNumber=BDE1B3955F1625DF7625AF71CBB794B87C39DC67
        Validity
            Not Before: May 31 14:30:55 2025 GMT
            Not After : Jun  7 14:30:55 2025 GMT
        Subject: CN=683b129f-19fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:f1:d0:95:ba:70:63:77:58:78:46:60:20:
                    14:78:85:63:3e:6c:e0:c0:e5:8a:0f:d3:a7:1e:3e:
                    e6:0b:9f:1b:e9:45:ed:0e:44:36:c6:d5:cb:77:c3:
                    95:b4:85:41:e0:d4:bf:f6:34:58:68:51:92:8f:bd:
                    f6:9c:6f:96:4a:23:b0:55:3f:07:e1:c4:63:7e:b3:
                    9c:d2:03:6b:83:41:93:59:58:bb:14:a5:bd:29:9f:
                    ab:78:44:40:e9:4d:e3:e8:17:27:93:56:1b:59:cb:
                    2f:5a:a6:ab:4b:f0:28:d8:12:51:da:04:16:97:6c:
                    e5:cb:cd:aa:97:31:6b:15:84:fb:ed:db:39:fa:78:
                    87:6f:08:24:72:df:82:3f:31:ad:8d:4c:71:88:02:
                    12:d6:77:1e:e1:3a:33:c2:ee:75:6a:60:4f:d3:3d:
                    8d:8b:79:85:13:24:34:2e:bd:ba:1c:65:41:6f:16:
                    db:bb:de:2c:22:4e:55:6c:a5:ec:cb:ea:36:63:31:
                    57:52:c4:48:56:db:be:ef:14:4f:a7:2c:25:be:d0:
                    58:aa:00:50:fd:fd:eb:31:19:4d:50:31:1d:08:87:
                    39:e0:de:44:2f:28:91:13:16:93:53:be:47:d4:ca:
                    0b:90:f6:e6:f4:85:a0:20:8b:69:0b:45:0d:7e:ec:
                    5c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:DC:48:05:F2:27:92:94:3B:E9:55:9D:BE:FA:4E:BB:56:2C:C8:7B
            X509v3 Authority Key Identifier:
                keyid:BD:E1:B3:95:5F:16:25:DF:76:25:AF:71:CB:B7:94:B8:7C:39:DC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/veGzlV8WJd92Ja9xy7eUuHw53Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913387C/2C7D79E81D8911E28A693DE208B02CD2/veGzlV8WJd92Ja9xy7eUuHw53Gc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:fc:b7:a8:9f:54:21:8c:22:c4:80:e8:41:1c:9b:c9:5f:6a:
         14:67:53:fa:c5:80:db:8e:d3:8e:08:dc:36:30:0d:3b:d4:a2:
         30:7f:5a:f3:95:11:d1:21:09:50:6e:25:d3:0e:c3:a6:eb:6f:
         62:b6:82:6e:8e:a6:ea:e1:c8:de:e2:40:09:60:17:51:2a:c9:
         d3:0a:2f:aa:4a:28:aa:99:a1:c3:7e:60:00:2e:51:2f:45:cf:
         85:d2:73:15:a2:54:ec:63:e8:08:06:3d:70:a5:9f:16:71:1b:
         75:a3:b6:15:c0:bf:8c:c1:c3:c4:55:2d:c8:16:ad:83:27:8b:
         c4:f6:64:8b:e9:22:e8:b8:fb:03:93:02:a6:26:ea:63:21:ba:
         40:83:18:19:18:eb:e7:3d:a4:5c:dc:38:56:9c:bd:47:0e:a4:
         d0:0f:9e:b3:48:ff:a4:f4:99:63:bf:31:83:7a:3c:20:2b:c8:
         79:e2:d6:f0:08:18:01:c4:21:53:48:0a:74:5b:3e:0d:84:6e:
         a7:22:f5:d4:1f:1d:d0:7f:49:b0:2d:41:c7:f2:96:13:9d:82:
         e3:46:67:2f:cb:04:46:34:66:29:01:4f:08:8d:3e:b5:96:37:
         bd:94:22:20:59:7c:a7:f1:d1:e8:72:5e:41:c0:da:8d:df:4d:
         c6:a6:0c:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzM4N0MxMTAvBgNVBAUTKEJERTFCMzk1NUYxNjI1REY3NjI1QUY3MUNCQjc5NEI4
N0MzOURDNjcwHhcNMjUwNTMxMTQzMDU1WhcNMjUwNjA3MTQzMDU1WjAYMRYwFAYD
VQQDEw02ODNiMTI5Zi0xOWZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyjDx0JW6cGN3WHhGYCAUeIVjPmzgwOWKD9OnHj7mC58b6UXtDkQ2xtXLd8OV
tIVB4NS/9jRYaFGSj732nG+WSiOwVT8H4cRjfrOc0gNrg0GTWVi7FKW9KZ+reERA
6U3j6Bcnk1YbWcsvWqarS/Ao2BJR2gQWl2zly82qlzFrFYT77ds5+niHbwgkct+C
PzGtjUxxiAIS1nce4Tozwu51amBP0z2Ni3mFEyQ0Lr26HGVBbxbbu94sIk5VbKXs
y+o2YzFXUsRIVtu+7xRPpywlvtBYqgBQ/f3rMRlNUDEdCIc54N5ELyiRExaTU75H
1MoLkPbm9IWgIItpC0UNfuxcBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMTcSAXy
J5KUO+lVnb76TrtWLMh7MB8GA1UdIwQYMBaAFL3hs5VfFiXfdiWvccu3lLh8Odxn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMzg3Qy8yQzdENzlFODFE
ODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pkOTJKYTl4eTdlVXVIdzUz
R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZlR3psVjhXSmQ5MkphOXh5N2VVdUh3NTNHYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
Mzg3Qy8yQzdENzlFODFEODkxMUUyOEE2OTNERTIwOEIwMkNEMi92ZUd6bFY4V0pk
OTJKYTl4eTdlVXVIdzUzR2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBC/Leon1QhjCLEgOhBHJvJX2oUZ1P6xYDbjtOOCNw2MA071KIwf1rz
lRHRIQlQbiXTDsOm629itoJujqbq4cje4kAJYBdRKsnTCi+qSiiqmaHDfmAALlEv
Rc+F0nMVolTsY+gIBj1wpZ8WcRt1o7YVwL+MwcPEVS3IFq2DJ4vE9mSL6SLouPsD
kwKmJupjIbpAgxgZGOvnPaRc3DhWnL1HDqTQD56zSP+k9JljvzGDejwgK8h54tbw
CBgBxCFTSAp0Wz4NhG6nIvXUHx3Qf0mwLUHH8pYTnYLjRmcvywRGNGYpAU8IjT61
lje9lCIgWXyn8dHocl5BwNqN303Gpgzn
-----END CERTIFICATE-----
Generated at Mon Jun 2 07:19:42 2025 by rpki-client