Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
File:                     YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft (raw, json)
Hash identifier:          zJ+WC7q8NeDTkLFB3nOLOAulFvk7lFIMSx7JQgFDcOE=
Subject key identifier:   F8:DD:0F:E7:A9:9C:4A:DE:56:49:23:CF:AD:CB:34:36:4C:12:E7:02
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       05CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
Manifest number:          0561
Signing time:             Fri 30 May 2025 23:43:31 +0000
Manifest this update:     Fri 30 May 2025 23:43:30 +0000
Manifest next update:     Fri 06 Jun 2025 23:43:30 +0000
Files and hashes:         1: YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl (hash: sEdbeBpqJuxFM6NLVCV2xsBqw4/38TCFtLJGrMoYxZ4=)
                          2: 20564D22DB5311EEA8BB3775C4F9AE02.roa (hash: +FHx1Rcmiw2Cfk5r6pkki5E5DN80dE1EMz6qZ6ArXQ8=)
                          3: 8293F5FC179711ECB7F7A075C4F9AE02.roa (hash: azztU6jGWGkJ9XE0wv+vwlMZ1OuwZlxTMNo/JPXSCFM=)
                          4: 04545D1C9AB911ECBC6CFA20C4F9AE02.roa (hash: KiUHl6uGGniLvYgVccNgvCIPRBq7X96S1xDDUjJ+aSw=)
                          5: 283A4D20174911EC896AD61BC4F9AE02.roa (hash: FPSQ8p1kwZ3vXAQbffUHxGVHKyRBni/t9uDlhC1ac7I=)
                          6: 7FCB16B6175111EC8D2A3722C4F9AE02.roa (hash: DXFu7/3s3dZZufQfCR7FXNUXUWGkobLBbIzZTN9Mp7k=)
                          7: 3F780E2A179211ECB303FF58C4F9AE02.roa (hash: pI7ua1FostnjJb7ZIqAIfoEGZMv41AhlErmhbZ8SW+0=)
                          8: 16637998DB5311EE9F9F1F75C4F9AE02.roa (hash: zOp+pmoPEmD9FqhHLLTWspA0hasdoDJWm9XMS78WorI=)
                          9: 1B31B0E4270E11EC97471F53C4F9AE02.roa (hash: fV3NIiz/nP1VFmLUqpUHxb/qO3YbAJnR1/hn6cqYalA=)
                          10: 3A9DF21A178411EC83735974C4F9AE02.roa (hash: /5vaFU/movPiNcrsjCj3H2p31M+BSywFDXfC27bwtzs=)
                          11: 7E42E396175111EC8D2A3722C4F9AE02.roa (hash: Rtj2YZUzcKfkgTDcvh/sESq8bL/Thyrlj4Jg24VeLAs=)
                          12: DB208FD4175911EC87322F85C4F9AE02.roa (hash: xyrw8EmHYaazvYNSzHgYLMsIR2DQgj7hYHdBqp8rGQY=)
                          13: DA504F0E175911EC87322F85C4F9AE02.roa (hash: KQ2TYskB2nSpw60IPgL8Z4Nfyg1ScKRjQgnaDOmmNJY=)
                          14: D97BFEC0175911EC87322F85C4F9AE02.roa (hash: zujVYZo1Gy2knnWLbno31U8SLXqyX16vRQYdNEeh8/g=)
                          15: 3B398B8A178411EC83735974C4F9AE02.roa (hash: SksUcxMguSSsYgsTOlV2nGlosz5GcrNGDJ2VSXMrlE0=)
                          16: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (hash: B82Un+DU6B7NyuhVj1V9v///1zPVJ3rXRY6EcEaq0ew=)
                          17: 7DAE1400175111EC8D2A3722C4F9AE02.roa (hash: P9HR6alaLKKcvAvinbQN/9aMjtdjm5ZAoDIUPrfljRg=)
                          18: 3BE907D6178411EC83735974C4F9AE02.roa (hash: ceitiXpUr0OmO04261kMJXcBcKDZSuQ6TyY/na8WY3c=)
                          19: C74D18CE0E7811EF85000B7BC4F9AE02.roa (hash: QcEFCbKzSrsMklkI1eWiqnxmw/ZSSPLydpwjTEuoR+k=)
                          20: C6B686020E7811EF85000B7BC4F9AE02.roa (hash: MQyExLb7Mr7D0TumhjujEz9GIqRyF/YS1SDy3bPilrg=)
                          21: 27A1A5A2174911EC896AD61BC4F9AE02.roa (hash: PT9TyyH2chY28D7xFpiGeKe73ZXXzfI6IzydINCCygw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1484 (0x5cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: May 30 23:43:30 2025 GMT
            Not After : Jun  6 23:43:30 2025 GMT
        Subject: CN=683a42a2-967a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7e:15:d6:91:cf:23:90:4c:fe:df:21:97:6b:
                    1a:6c:cc:e8:9c:8a:ef:f3:0b:bf:3a:dc:95:55:47:
                    3b:ee:de:87:1c:a3:e5:be:f1:52:b6:9f:e3:0d:be:
                    cd:c6:14:0a:bf:15:14:51:71:14:69:62:f4:46:f5:
                    d1:fe:f9:2a:52:6a:08:af:8b:36:c4:b8:da:0e:85:
                    26:05:6d:2a:b3:67:48:a7:87:5b:eb:1f:27:cc:4d:
                    2e:7c:ad:4c:d4:88:0f:cd:76:75:d6:31:a1:40:6e:
                    ca:8d:1d:14:66:f1:9c:08:95:92:ff:ac:22:b2:e2:
                    12:91:24:ee:9f:15:f2:0f:71:f9:97:b3:8c:d7:08:
                    ab:ac:cf:14:9a:90:3b:b4:47:67:36:03:9b:6a:40:
                    1d:aa:d2:e8:9e:23:05:9e:35:3a:52:c4:ac:02:48:
                    ca:6f:d3:2e:69:82:04:ba:d3:40:d4:e0:e9:d2:36:
                    5f:6a:f5:de:5f:e4:d0:6e:15:8c:11:62:3f:7e:36:
                    16:1b:b3:92:88:f3:f8:76:de:58:c1:d2:22:80:ad:
                    bf:c6:ee:93:4c:74:70:84:08:1e:d6:3a:51:ed:38:
                    76:3e:0b:f0:60:c5:d4:b2:2a:88:d8:f3:c1:6b:35:
                    84:0f:e2:e6:db:b2:d8:82:28:87:15:43:72:72:12:
                    cb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DD:0F:E7:A9:9C:4A:DE:56:49:23:CF:AD:CB:34:36:4C:12:E7:02
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:24:3e:a5:03:1c:2d:76:e9:e3:f7:19:fe:f5:53:b7:f5:52:
         5c:75:c0:60:33:48:eb:dc:ad:e5:d3:7a:0e:8f:ad:30:16:d1:
         b5:e6:9c:ac:d3:bb:a0:7d:4c:b6:8b:55:16:a5:91:a7:b5:be:
         c0:1f:21:df:db:c4:1f:a4:c8:f7:78:18:55:40:0c:89:e2:9b:
         b4:f1:7c:a7:27:af:fd:be:61:8f:31:e3:50:e4:28:a0:ab:25:
         a4:f9:34:28:62:0c:9d:79:1f:ce:34:9d:57:f2:4e:16:2d:67:
         20:2a:3e:6f:9d:25:82:b2:d7:2c:ff:ec:de:6f:0e:8f:41:24:
         17:92:d1:75:88:e7:f1:33:87:2f:d8:af:5c:5c:45:b8:d8:76:
         73:23:6b:0a:e0:ab:c0:e2:dc:a2:8a:f9:87:f1:0e:1d:43:2e:
         d7:cb:0d:47:2e:75:d5:83:b3:46:70:02:df:64:8b:0a:3b:e7:
         dd:bc:a9:60:46:5b:e3:3d:9b:6b:31:72:39:e8:c2:5e:c9:24:
         07:de:8a:b3:c4:95:d5:bf:a6:b3:ef:65:e6:14:5a:49:7a:9c:
         33:69:69:7c:51:32:43:16:74:b2:d9:8b:b5:c4:a6:3c:1c:0f:
         bd:6e:59:e9:3e:55:7e:99:4b:d8:f6:bf:5b:a6:d9:ae:66:aa:
         77:22:fc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:47:39 2025 by rpki-client