Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
File:                     JISJt4GLAOcAQFurwao1bAoY85Q.mft (raw, json)
Hash identifier:          sYAQ4O5Da+22FwtDpXZFuBeBD5lgrGp4LhZ5To7XfoY=
Subject key identifier:   2B:EE:6E:73:67:6D:74:8A:2F:AD:F8:56:91:47:4C:AB:D7:F1:35:E5
Authority key identifier: 24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94
Certificate issuer:       /CN=A91A4BD6/serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
Manifest number:          0142
Signing time:             Sat 31 May 2025 03:58:04 +0000
Manifest this update:     Sat 31 May 2025 03:58:04 +0000
Manifest next update:     Sat 07 Jun 2025 03:58:04 +0000
Files and hashes:         1: JISJt4GLAOcAQFurwao1bAoY85Q.crl (hash: 9zpYxJyS5Aw1I9ISDXDjLXaO1mzrvpRCim47KRa6KxQ=)
                          2: F63AE024CFE111EE86A9477EC4F9AE02.roa (hash: IyPWuZN2CAoAoTar84CaLcssRy+6sPvCVGhYj/lXGDs=)
                          3: C2604920CFE011EE83247F7CC4F9AE02.roa (hash: 8T3yBHmtCqlB+aM8ej4zblFk+WNFmZ0LxXxnA03WiR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 03:58:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4BD6, serialNumber=248489B7818B00E700405BABC1AA356C0A18F394
        Validity
            Not Before: May 31 03:58:04 2025 GMT
            Not After : Jun  7 03:58:04 2025 GMT
        Subject: CN=683a7e4c-1264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6c:39:5f:f1:ee:54:9c:7e:f2:a0:34:6d:7f:
                    ed:ab:fe:5e:1c:07:0c:d5:7e:d7:4d:b9:08:80:f9:
                    24:75:90:98:72:68:d1:67:0c:71:81:7c:ec:f0:94:
                    32:02:3c:07:a1:2a:ed:25:ae:e0:16:79:4b:a7:98:
                    d0:26:79:98:87:a2:89:20:b7:74:2e:57:d0:e8:db:
                    eb:6b:7b:39:0d:bc:58:a0:ea:b1:49:74:f2:a9:63:
                    3f:7f:51:04:98:96:02:50:41:ba:d1:a1:9d:40:29:
                    d1:08:7e:08:d5:97:cd:71:c6:46:e6:49:c2:6a:ee:
                    7a:ff:d1:51:40:48:db:87:ef:3d:70:e8:24:49:66:
                    e0:05:68:8e:ac:f9:6c:82:e3:82:9d:09:d2:f2:e8:
                    fb:4e:e5:a7:9a:e8:92:ec:3e:08:94:57:06:88:95:
                    c5:19:21:1c:2f:4c:3f:56:c0:b7:d6:1a:9a:dd:fd:
                    5e:66:65:3b:2b:ed:96:dc:82:e7:16:d3:d2:cb:bd:
                    e1:59:b2:18:5d:36:e5:0b:fd:47:2e:a9:7e:38:70:
                    12:33:2f:18:84:5c:0b:52:62:5a:7f:e9:97:5c:bc:
                    08:36:ce:f9:ce:5e:fb:31:1d:b3:8e:37:f3:98:f2:
                    10:78:d5:a1:41:b7:56:ef:da:a9:05:3c:24:be:5e:
                    6e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:EE:6E:73:67:6D:74:8A:2F:AD:F8:56:91:47:4C:AB:D7:F1:35:E5
            X509v3 Authority Key Identifier:
                keyid:24:84:89:B7:81:8B:00:E7:00:40:5B:AB:C1:AA:35:6C:0A:18:F3:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JISJt4GLAOcAQFurwao1bAoY85Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4BD6/ABF8730250DC11EEA3F3D34EC4F9AE02/JISJt4GLAOcAQFurwao1bAoY85Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:27:77:c3:32:4e:fd:77:4a:ca:3a:4c:7e:75:62:98:31:51:
         1d:c9:a2:b7:5e:2f:bf:1c:b6:a6:2a:0c:c0:ba:f3:d2:05:c7:
         63:e2:e9:e8:9c:a9:5c:fe:56:29:ad:18:59:d9:9f:56:f2:39:
         20:2e:02:fd:52:70:f5:68:fa:2e:53:b0:b1:26:01:be:f6:3c:
         72:6b:00:01:d9:25:de:30:b6:52:df:22:3d:af:77:55:85:8c:
         29:31:64:c2:92:2d:08:3f:90:24:8f:b4:53:b6:02:d4:8a:40:
         63:81:c5:9f:34:d2:70:df:9b:a7:8d:4f:b0:6a:d3:1c:f0:a3:
         ff:e5:0e:0b:58:5a:3c:dc:a3:29:83:18:1a:1d:d4:31:a3:d2:
         de:c6:50:26:d0:34:d7:8a:2c:9b:47:fe:25:2c:e9:22:6d:65:
         72:e4:96:e5:53:3a:03:14:c4:f6:1e:80:13:60:47:2a:6f:57:
         22:50:fd:65:0f:fc:d6:52:ba:24:b2:1c:6f:1a:7d:7f:a1:ba:
         c2:10:d2:e3:58:53:d9:aa:bd:56:66:92:93:39:3e:9a:8b:0d:
         ad:98:d1:b9:35:ac:0e:8a:c2:3b:e8:a1:06:45:65:53:35:28:
         f1:21:57:97:f9:07:4f:fe:01:a9:90:f7:6c:0c:d2:c8:06:31:
         cd:6a:92:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTRCRDYxMTAvBgNVBAUTKDI0ODQ4OUI3ODE4QjAwRTcwMDQwNUJBQkMxQUEzNTZD
MEExOEYzOTQwHhcNMjUwNTMxMDM1ODA0WhcNMjUwNjA3MDM1ODA0WjAYMRYwFAYD
VQQDEw02ODNhN2U0Yy0xMjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2w5X/HuVJx+8qA0bX/tq/5eHAcM1X7XTbkIgPkkdZCYcmjRZwxxgXzs8JQy
AjwHoSrtJa7gFnlLp5jQJnmYh6KJILd0LlfQ6Nvra3s5DbxYoOqxSXTyqWM/f1EE
mJYCUEG60aGdQCnRCH4I1ZfNccZG5knCau56/9FRQEjbh+89cOgkSWbgBWiOrPls
guOCnQnS8uj7TuWnmuiS7D4IlFcGiJXFGSEcL0w/VsC31hqa3f1eZmU7K+2W3ILn
FtPSy73hWbIYXTblC/1HLql+OHASMy8YhFwLUmJaf+mXXLwINs75zl77MR2zjjfz
mPIQeNWhQbdW79qpBTwkvl5uVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvubnNn
bXSKL634VpFHTKvX8TXlMB8GA1UdIwQYMBaAFCSEibeBiwDnAEBbq8GqNWwKGPOU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEJENi9BQkY4NzMwMjUw
REMxMUVFQTNGM0QzNEVDNEY5QUUwMi9KSVNKdDRHTEFPY0FRRnVyd2FvMWJBb1k4
NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pJU0p0NEdMQU9jQVFGdXJ3YW8xYkFvWTg1US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NEJENi9BQkY4NzMwMjUwREMxMUVFQTNGM0QzNEVDNEY5QUUwMi9KSVNKdDRHTEFP
Y0FRRnVyd2FvMWJBb1k4NVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDUJ3fDMk79d0rKOkx+dWKYMVEdyaK3Xi+/HLamKgzAuvPSBcdj4uno
nKlc/lYprRhZ2Z9W8jkgLgL9UnD1aPouU7CxJgG+9jxyawAB2SXeMLZS3yI9r3dV
hYwpMWTCki0IP5Akj7RTtgLUikBjgcWfNNJw35unjU+watMc8KP/5Q4LWFo83KMp
gxgaHdQxo9LexlAm0DTXiiybR/4lLOkibWVy5JblUzoDFMT2HoATYEcqb1ciUP1l
D/zWUrokshxvGn1/obrCENLjWFPZqr1WZpKTOT6aiw2tmNG5NawOisI76KEGRWVT
NSjxIVeX+QdP/gGpkPdsDNLIBjHNapIz
-----END CERTIFICATE-----
Generated at Sat May 31 17:26:17 2025 by rpki-client