Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
File:                     _qutkjWu8XAjzc-xYZAm887bLH8.mft (raw, json)
Hash identifier:          9VZmzI0z+MHRQ9ele7wOEIC1SJMOL7xDFQdLVrrJIpI=
Subject key identifier:   7A:67:8F:44:E6:11:3D:8C:44:71:5D:BC:02:9D:9D:5B:CB:26:51:D9
Authority key identifier: FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F
Certificate issuer:       /CN=A91443DC/serialNumber=FEABAD9235AEF17023CDCFB1619026F3CEDB2C7F
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
Manifest number:          8D
Signing time:             Thu 13 Mar 2025 04:34:40 +0000
Manifest this update:     Thu 13 Mar 2025 04:34:40 +0000
Manifest next update:     Thu 20 Mar 2025 04:34:40 +0000
Files and hashes:         1: _qutkjWu8XAjzc-xYZAm887bLH8.crl (hash: 1sUAKYVYrGExGOoA7XLMCjt+Usno3jXay45/fMOh3IQ=)
                          2: D4F9C46CDCA511EF9BCCFC59C4F9AE02.roa (hash: OuazFSoXGYM6zJItNa4jp1IfJllzFolsgf+lOTd60NE=)
                          3: 557F3136DCA511EF98B72959C4F9AE02.roa (hash: YFXHXJDviBoPayGDb4OGE7GmrzEy24l7DcHuFpblUcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl
                          rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 04:34:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91443DC
        Validity
            Not Before: Mar 13 04:34:40 2025 GMT
            Not After : Mar 20 04:34:40 2025 GMT
        Subject: CN=67d26060-dca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ea:93:43:25:a5:23:8d:bf:fd:8f:70:50:4c:
                    d4:b6:75:dc:90:f0:9d:f7:fe:b8:9c:35:03:57:c1:
                    63:54:4e:2c:5d:dc:a4:d1:10:59:94:a7:e3:bd:93:
                    f5:72:f2:a2:4d:96:39:b0:d3:58:ee:e9:fd:67:87:
                    01:60:5d:26:4e:09:6a:53:6e:bb:ec:79:ed:26:91:
                    f3:23:63:e6:85:02:2f:ec:d5:67:25:bd:5d:05:4e:
                    ca:5f:de:f9:70:61:ce:69:5f:b9:f6:7f:6f:53:5c:
                    35:46:66:3b:df:47:e0:8f:92:5e:35:09:68:7d:ba:
                    18:f2:c8:93:3c:b3:d5:c4:29:f5:b8:aa:6d:36:c7:
                    c4:d9:7e:00:aa:d1:82:6a:bf:36:27:54:87:af:40:
                    a5:95:b5:e4:b5:51:48:18:5f:30:85:42:7f:7f:64:
                    b8:17:79:0d:eb:f2:59:b4:cf:b8:69:23:a6:7c:08:
                    66:f9:09:d8:ef:50:c1:5a:22:80:ec:61:75:ed:4a:
                    78:c7:d9:01:c5:32:86:8f:21:43:aa:da:f0:8c:a9:
                    f7:00:c1:b3:3a:93:f3:df:69:1b:a4:9b:f7:c6:12:
                    56:94:06:23:90:54:b1:8b:b7:16:77:a4:53:30:3c:
                    5a:d6:e6:3b:d0:61:bb:2b:c8:d5:68:35:28:fd:01:
                    ef:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:67:8F:44:E6:11:3D:8C:44:71:5D:BC:02:9D:9D:5B:CB:26:51:D9
            X509v3 Authority Key Identifier:
                keyid:FE:AB:AD:92:35:AE:F1:70:23:CD:CF:B1:61:90:26:F3:CE:DB:2C:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_qutkjWu8XAjzc-xYZAm887bLH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91443DC/97DF7A12306211EF978B4764C4F9AE02/_qutkjWu8XAjzc-xYZAm887bLH8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5a:3e:97:f6:d3:cf:a3:74:ab:bd:95:fc:60:14:a8:ba:78:
         c1:af:54:a0:f7:63:1c:6a:16:d8:1b:74:a0:6b:79:16:84:60:
         3d:64:ff:19:22:8d:00:1d:16:4a:9f:b1:36:be:77:fd:a2:f4:
         06:78:7a:9c:11:c7:af:9c:78:cc:1f:3f:09:43:1d:f3:8b:70:
         68:54:44:22:0d:fb:95:7a:b9:c2:d6:92:b4:45:98:0f:ef:ca:
         80:c7:94:67:7f:dc:22:71:74:c3:f2:ec:f8:2c:34:9d:37:29:
         df:59:40:30:00:b8:46:0c:da:48:24:d3:81:68:52:e4:76:f6:
         8c:0f:8d:09:fa:89:70:e1:3e:39:b8:04:21:43:b7:6a:30:bb:
         4c:ef:ee:2b:1a:90:0a:46:23:91:e6:de:20:ea:7b:10:4a:98:
         64:c7:0d:66:4a:9c:66:b5:4e:d3:cc:97:ac:b0:ff:93:9b:6f:
         94:8f:4d:4a:a0:c4:15:1f:a7:9e:79:b1:2b:14:69:4e:49:80:
         26:55:73:34:c4:3d:6f:41:07:fc:58:ac:de:41:bf:85:51:b9:
         ad:bb:c5:2a:50:da:db:79:ef:20:70:2b:d7:07:9c:2d:ee:7e:
         4e:d3:27:14:9d:d9:17:e4:f4:29:60:0e:8a:5f:ec:7f:70:3d:
         6b:ba:61:ae
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQzREMxMTAvBgNVBAUTKEZFQUJBRDkyMzVBRUYxNzAyM0NEQ0ZCMTYxOTAyNkYz
Q0VEQjJDN0YwHhcNMjUwMzEzMDQzNDQwWhcNMjUwMzIwMDQzNDQwWjAYMRYwFAYD
VQQDEw02N2QyNjA2MC1kY2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzuqTQyWlI42//Y9wUEzUtnXckPCd9/64nDUDV8FjVE4sXdyk0RBZlKfjvZP1
cvKiTZY5sNNY7un9Z4cBYF0mTglqU2677HntJpHzI2PmhQIv7NVnJb1dBU7KX975
cGHOaV+59n9vU1w1RmY730fgj5JeNQlofboY8siTPLPVxCn1uKptNsfE2X4AqtGC
ar82J1SHr0CllbXktVFIGF8whUJ/f2S4F3kN6/JZtM+4aSOmfAhm+QnY71DBWiKA
7GF17Up4x9kBxTKGjyFDqtrwjKn3AMGzOpPz32kbpJv3xhJWlAYjkFSxi7cWd6RT
MDxa1uY70GG7K8jVaDUo/QHv1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHpnj0Tm
ET2MRHFdvAKdnVvLJlHZMB8GA1UdIwQYMBaAFP6rrZI1rvFwI83PsWGQJvPO2yx/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDNEQy85N0RGN0ExMjMw
NjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThYQWp6Yy14WVpBbTg4N2JM
SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL19xdXRrald1OFhBanpjLXhZWkFtODg3YkxIOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDNEQy85N0RGN0ExMjMwNjIxMUVGOTc4QjQ3NjRDNEY5QUUwMi9fcXV0a2pXdThY
QWp6Yy14WVpBbTg4N2JMSDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQWj6X9tPPo3SrvZX8YBSounjBr1Sg92McahbYG3Sga3kWhGA9ZP8Z
Io0AHRZKn7E2vnf9ovQGeHqcEcevnHjMHz8JQx3zi3BoVEQiDfuVernC1pK0RZgP
78qAx5Rnf9wicXTD8uz4LDSdNynfWUAwALhGDNpIJNOBaFLkdvaMD40J+olw4T45
uAQhQ7dqMLtM7+4rGpAKRiOR5t4g6nsQSphkxw1mSpxmtU7TzJessP+Tm2+Uj01K
oMQVH6eeebErFGlOSYAmVXM0xD1vQQf8WKzeQb+FUbmtu8UqUNrbee8gcCvXB5wt
7n5O0ycUndkX5PQpYA6KX+x/cD1rumGu
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:31:49 2025 by rpki-client