Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.mft
File:                     SJVLWyX5QTqoBU5UE8Eekxra9_Q.mft (raw, json)
Hash identifier:          otH9CqCSgiIPw4JkojWgfR7UXrKMS/oc9VqWqzJJVSo=
Subject key identifier:   9D:44:21:FC:63:3A:63:39:A3:2D:ED:17:D8:19:37:72:9F:71:D2:12
Authority key identifier: 48:95:4B:5B:25:F9:41:3A:A8:05:4E:54:13:C1:1E:93:1A:DA:F7:F4
Certificate issuer:       /CN=A917FD40/serialNumber=48954B5B25F9413AA8054E5413C11E931ADAF7F4
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJVLWyX5QTqoBU5UE8Eekxra9_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.mft
Manifest number:          0556
Signing time:             Fri 30 May 2025 23:51:46 +0000
Manifest this update:     Fri 30 May 2025 23:51:46 +0000
Manifest next update:     Fri 06 Jun 2025 23:51:46 +0000
Files and hashes:         1: SJVLWyX5QTqoBU5UE8Eekxra9_Q.crl (hash: hiLGWuov013BbnIgdQS/LLgOxSeYCOv0aqGnTeSTgHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.crl
                          rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJVLWyX5QTqoBU5UE8Eekxra9_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FD40, serialNumber=48954B5B25F9413AA8054E5413C11E931ADAF7F4
        Validity
            Not Before: May 30 23:51:46 2025 GMT
            Not After : Jun  6 23:51:46 2025 GMT
        Subject: CN=683a4492-585e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c4:04:31:4c:73:3a:c7:5f:5e:bb:fb:dc:6a:
                    52:b0:c8:88:f2:5e:69:87:5f:08:36:10:5f:18:74:
                    4b:4b:4d:d3:56:a6:aa:d7:aa:60:0b:ed:31:7e:e5:
                    e7:32:87:5b:f3:92:14:5a:db:37:7c:63:2b:12:3b:
                    8b:b1:98:82:35:6d:29:58:52:14:a1:f7:b6:58:10:
                    ea:6e:af:c2:cf:cf:83:97:1b:43:72:0a:a9:27:90:
                    a0:3c:3f:42:0b:e3:45:f1:98:9e:c2:4d:23:a5:72:
                    55:75:29:14:82:eb:94:d7:9e:13:d8:de:85:49:35:
                    c1:5a:16:b3:08:52:a3:e0:48:70:a9:7c:6f:3d:ec:
                    96:c2:2b:09:a8:a3:c3:a0:95:4f:02:eb:8a:f1:fc:
                    b3:61:06:0e:b7:bd:96:13:c9:de:27:99:bf:72:6b:
                    ef:e9:1c:5d:57:5b:b8:fe:66:ca:8d:2a:bf:d2:f6:
                    23:9e:59:e1:6e:4c:9f:1c:61:67:10:ba:d3:29:6b:
                    8b:73:c8:49:51:65:fc:ef:c6:21:93:c7:a7:9b:42:
                    82:4e:dd:02:0e:e9:01:1f:35:43:81:5f:0b:f6:40:
                    de:9c:d0:01:b9:3c:28:8e:fc:57:47:11:0a:be:af:
                    30:5e:09:46:91:0f:e0:b6:54:d0:2c:b4:57:1f:e0:
                    8d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:44:21:FC:63:3A:63:39:A3:2D:ED:17:D8:19:37:72:9F:71:D2:12
            X509v3 Authority Key Identifier:
                keyid:48:95:4B:5B:25:F9:41:3A:A8:05:4E:54:13:C1:1E:93:1A:DA:F7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SJVLWyX5QTqoBU5UE8Eekxra9_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/SJVLWyX5QTqoBU5UE8Eekxra9_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:bd:b5:2f:2f:3e:24:3f:58:29:08:5e:50:9b:c4:18:12:27:
         b0:2e:24:ec:00:b6:1f:84:7e:28:99:f1:56:8d:3c:4e:ac:92:
         4a:36:ca:10:8d:ff:4f:ec:6d:1a:0b:26:ac:2e:5b:b7:e2:36:
         52:6d:4a:81:69:7d:4f:1d:c6:84:2f:62:8b:34:20:8e:d3:cc:
         90:11:22:7f:07:cd:64:97:b8:59:86:bb:b1:9e:42:5b:52:70:
         e8:1c:8e:53:37:33:f7:98:dc:37:2a:e6:eb:87:ac:48:a8:dd:
         db:1a:b5:02:c6:38:95:12:d1:9f:4a:89:03:89:53:3f:9e:b8:
         4d:cd:8d:c9:65:f8:ab:75:60:4e:d7:95:b1:a1:3d:40:2a:a8:
         67:de:b6:ae:a2:41:be:9f:1d:29:32:0d:e0:68:0f:05:36:79:
         a2:b1:bf:2a:b8:dd:0c:0b:ea:59:24:68:58:14:77:aa:f1:ce:
         c2:cd:76:18:4e:40:e8:bb:b2:9c:5a:1f:60:07:46:fb:6a:c9:
         f9:b6:fe:14:4e:d3:fe:e9:33:9b:cf:65:54:8b:a7:92:22:c2:
         e9:6d:60:44:36:ee:d6:c2:4e:12:6e:90:41:93:db:ff:39:09:
         81:d4:82:06:46:6d:77:6a:6b:48:8e:42:cc:f5:24:9b:35:61:
         fe:28:53:88
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBVDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RkQ0MDExMC8GA1UEBRMoNDg5NTRCNUIyNUY5NDEzQUE4MDU0RTU0MTNDMTFFOTMx
QURBRjdGNDAeFw0yNTA1MzAyMzUxNDZaFw0yNTA2MDYyMzUxNDZaMBgxFjAUBgNV
BAMTDTY4M2E0NDkyLTU4NWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCtxAQxTHM6x19eu/vcalKwyIjyXmmHXwg2EF8YdEtLTdNWpqrXqmAL7TF+5ecy
h1vzkhRa2zd8YysSO4uxmII1bSlYUhSh97ZYEOpur8LPz4OXG0NyCqknkKA8P0IL
40XxmJ7CTSOlclV1KRSC65TXnhPY3oVJNcFaFrMIUqPgSHCpfG897JbCKwmoo8Og
lU8C64rx/LNhBg63vZYTyd4nmb9ya+/pHF1XW7j+ZsqNKr/S9iOeWeFuTJ8cYWcQ
utMpa4tzyElRZfzvxiGTx6ebQoJO3QIO6QEfNUOBXwv2QN6c0AG5PCiO/FdHEQq+
rzBeCUaRD+C2VNAstFcf4I2hAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnUQh/GM6
YzmjLe0X2Bk3cp9x0hIwHwYDVR0jBBgwFoAUSJVLWyX5QTqoBU5UE8Eekxra9/Qw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGRDQwL0ZDMjE5NTVFMEJE
NjExRUM4Rjk5RDA2M0M0RjlBRTAyL1NKVkxXeVg1UVRxb0JVNVVFOEVla3hyYTlf
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvU0pWTFd5WDVRVHFvQlU1VUU4RWVreHJhOV9RLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdG
RDQwL0ZDMjE5NTVFMEJENjExRUM4Rjk5RDA2M0M0RjlBRTAyL1NKVkxXeVg1UVRx
b0JVNVVFOEVla3hyYTlfUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBADS9tS8vPiQ/WCkIXlCbxBgSJ7AuJOwAth+EfiiZ8VaNPE6skko2yhCN
/0/sbRoLJqwuW7fiNlJtSoFpfU8dxoQvYos0II7TzJARIn8HzWSXuFmGu7GeQltS
cOgcjlM3M/eY3Dcq5uuHrEio3dsatQLGOJUS0Z9KiQOJUz+euE3Njcll+Kt1YE7X
lbGhPUAqqGfetq6iQb6fHSkyDeBoDwU2eaKxvyq43QwL6lkkaFgUd6rxzsLNdhhO
QOi7spxaH2AHRvtqyfm2/hRO0/7pM5vPZVSLp5IiwultYEQ27tbCThJukEGT2/85
CYHUggZGbXdqa0iOQsz1JJs1Yf4oU4g=
-----END CERTIFICATE-----
Generated at Sat May 31 17:20:40 2025 by rpki-client