Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft
File:                     J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft (raw, json)
Hash identifier:          S31md2W4slzn1Lsp2g62zTt1ziTVky1yb9tCnHxBb4s=
Subject key identifier:   F3:D7:B5:48:4B:5A:E3:78:9F:F8:2C:93:69:D1:25:66:47:ED:36:94
Authority key identifier: 27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73
Certificate issuer:       /CN=A913F133/serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873
Certificate serial:       050B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft
Manifest number:          0506
Signing time:             Fri 30 May 2025 23:52:00 +0000
Manifest this update:     Fri 30 May 2025 23:51:59 +0000
Manifest next update:     Fri 06 Jun 2025 23:51:59 +0000
Files and hashes:         1: J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl (hash: hub3J8qNE49JbvRkNOhByOWXO4+UmHNAxqnho/gtysE=)
                          2: 5B4D0C8C0C5111EC9CE0E859C4F9AE02.roa (hash: W+BtOFen2tvsjV49WKw2eVzddjYyjjH2A+mxtbdGf/A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl
                          rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:51:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1291 (0x50b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F133, serialNumber=27E6352946C684A7CCDAEC77F538D18FF3537873
        Validity
            Not Before: May 30 23:51:59 2025 GMT
            Not After : Jun  6 23:51:59 2025 GMT
        Subject: CN=683a449f-b51f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:31:e8:c5:9c:a1:c0:a3:65:56:c6:c1:a1:85:
                    fa:82:90:d8:b5:4a:ba:70:6d:b4:4c:e3:bc:aa:03:
                    d4:17:77:28:d0:4a:8b:39:c2:eb:68:16:47:89:69:
                    27:0c:0b:7d:a5:5a:b8:20:f1:3f:80:ae:1f:e7:f3:
                    16:6b:db:16:c1:66:c8:2e:8d:ba:90:b5:fe:ba:4c:
                    28:09:e5:11:20:4f:62:50:ef:74:b4:d5:93:ca:d2:
                    01:17:68:d7:bc:5c:b0:a2:f2:61:d4:c0:dd:43:04:
                    58:d7:cd:e3:55:f5:79:e3:f9:05:a8:48:fd:8c:a5:
                    5d:48:73:ad:b4:c3:29:c3:1e:b4:df:13:a3:9f:c3:
                    ae:4f:4e:07:c4:b7:25:3f:09:22:4f:fa:06:40:97:
                    01:dd:ec:1c:82:82:15:a6:68:e2:b6:83:b5:d4:19:
                    97:08:b8:06:eb:9f:90:8d:34:a3:e8:35:81:e1:f7:
                    8e:38:c7:ba:b5:81:17:b4:6a:2d:a1:ba:7f:b4:81:
                    73:3f:34:c1:87:41:66:44:c8:e2:82:f8:be:f1:0c:
                    d1:f2:0a:8e:9d:e6:c9:94:a4:d6:55:14:a0:cd:3b:
                    d5:25:af:1f:29:1f:5e:94:97:75:21:e9:4e:43:3c:
                    f0:fa:8b:96:e4:6e:fd:40:3b:d2:7f:ee:46:9f:53:
                    c2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:D7:B5:48:4B:5A:E3:78:9F:F8:2C:93:69:D1:25:66:47:ED:36:94
            X509v3 Authority Key Identifier:
                keyid:27:E6:35:29:46:C6:84:A7:CC:DA:EC:77:F5:38:D1:8F:F3:53:78:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J-Y1KUbGhKfM2ux39TjRj_NTeHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F133/826863D60C4F11EC8BE0F959C4F9AE02/J-Y1KUbGhKfM2ux39TjRj_NTeHM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e6:34:f0:70:af:0f:5d:eb:ce:97:3a:e8:c1:6c:ab:4f:d5:
         36:f8:2b:c3:bd:29:6d:b0:ce:10:b5:ba:58:ff:06:ed:cb:7e:
         91:0c:5d:01:52:8a:78:81:76:4b:a3:a1:00:d8:23:f9:65:1e:
         96:eb:fd:34:d0:8e:d5:08:81:01:61:75:c5:95:b4:62:4a:f6:
         ad:e1:fc:03:65:c2:db:1f:05:6a:66:9a:a6:b6:c0:26:03:94:
         a6:30:76:c4:1c:9f:60:7f:d1:5c:28:d6:82:f0:5c:67:cf:2c:
         ab:69:a7:47:e5:fe:68:8f:ba:40:36:12:dd:a9:67:c5:9d:fd:
         ec:5d:14:c1:92:99:7d:09:1c:45:eb:88:ac:83:e0:f2:26:cd:
         34:a9:5c:a6:c5:b2:5a:1f:0c:50:d2:87:e3:97:98:a6:69:b0:
         6e:15:a4:22:51:1a:3a:48:f0:01:54:35:29:5e:20:ba:28:93:
         50:a2:82:55:18:1b:2f:92:29:27:3a:95:dd:d8:d2:7f:fc:ee:
         f5:fd:5f:bd:e5:da:81:91:bc:f2:df:a9:3e:18:d1:ee:94:aa:
         6b:6c:18:81:44:9c:36:cb:86:74:23:44:f8:7a:e1:ed:01:c4:
         fd:1e:8a:66:89:d0:6f:05:f1:0a:33:0a:b2:d4:0e:71:d6:98:
         73:36:7b:01
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YxMzMxMTAvBgNVBAUTKDI3RTYzNTI5NDZDNjg0QTdDQ0RBRUM3N0Y1MzhEMThG
RjM1Mzc4NzMwHhcNMjUwNTMwMjM1MTU5WhcNMjUwNjA2MjM1MTU5WjAYMRYwFAYD
VQQDEw02ODNhNDQ5Zi1iNTFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoTHoxZyhwKNlVsbBoYX6gpDYtUq6cG20TOO8qgPUF3co0EqLOcLraBZHiWkn
DAt9pVq4IPE/gK4f5/MWa9sWwWbILo26kLX+ukwoCeURIE9iUO90tNWTytIBF2jX
vFywovJh1MDdQwRY183jVfV54/kFqEj9jKVdSHOttMMpwx603xOjn8OuT04HxLcl
PwkiT/oGQJcB3ewcgoIVpmjitoO11BmXCLgG65+QjTSj6DWB4feOOMe6tYEXtGot
obp/tIFzPzTBh0FmRMjigvi+8QzR8gqOnebJlKTWVRSgzTvVJa8fKR9elJd1IelO
Qzzw+ouW5G79QDvSf+5Gn1PCiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPXtUhL
WuN4n/gsk2nRJWZH7TaUMB8GA1UdIwQYMBaAFCfmNSlGxoSnzNrsd/U40Y/zU3hz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjEzMy84MjY4NjNENjBD
NEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hLZk0ydXgzOVRqUmpfTlRl
SE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0otWTFLVWJHaEtmTTJ1eDM5VGpSal9OVGVITS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjEzMy84MjY4NjNENjBDNEYxMUVDOEJFMEY5NTlDNEY5QUUwMi9KLVkxS1ViR2hL
Zk0ydXgzOVRqUmpfTlRlSE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCy5jTwcK8PXevOlzrowWyrT9U2+CvDvSltsM4QtbpY/wbty36RDF0B
Uop4gXZLo6EA2CP5ZR6W6/000I7VCIEBYXXFlbRiSvat4fwDZcLbHwVqZpqmtsAm
A5SmMHbEHJ9gf9FcKNaC8FxnzyyraadH5f5oj7pANhLdqWfFnf3sXRTBkpl9CRxF
64isg+DyJs00qVymxbJaHwxQ0ofjl5imabBuFaQiURo6SPABVDUpXiC6KJNQooJV
GBsvkiknOpXd2NJ//O71/V+95dqBkbzy36k+GNHulKprbBiBRJw2y4Z0I0T4euHt
AcT9HopmidBvBfEKMwqy1A5x1phzNnsB
-----END CERTIFICATE-----
Generated at Sat May 31 17:18:45 2025 by rpki-client