Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
File:                     a81u0JpBbl_k7lre97FQ8syr6To.mft (raw, json)
Hash identifier:          HlS86UwfLR0RVYIF4z54IUgDhZ1UOqZWdl8vDLak+Kg=
Subject key identifier:   3B:6E:71:4E:39:FA:89:C0:AD:59:3B:1E:7A:A2:80:C8:20:D6:DC:71
Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
Certificate issuer:       /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Certificate serial:       0B9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
Manifest number:          0B90
Signing time:             Fri 30 May 2025 19:12:50 +0000
Manifest this update:     Fri 30 May 2025 19:12:49 +0000
Manifest next update:     Fri 06 Jun 2025 19:12:49 +0000
Files and hashes:         1: a81u0JpBbl_k7lre97FQ8syr6To.crl (hash: Ja8GQy5yaMot99+MireaZbMf4FPXyCabW2wKchmfrDQ=)
                          2: 84B6E12A312911EEBE440C7FC4F9AE02.roa (hash: i5Nf027GIvkDTNfygplCNBH1Tfi56MOYYL7UyT8iFDw=)
                          3: 777A546212E511EFB071A31CC4F9AE02.roa (hash: yxZWVQX9GhcgWV+yYaDkt3bP+W4v1/S4wiH9fdwmAXw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl
                          rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 19:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2974 (0xb9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADF12, serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
        Validity
            Not Before: May 30 19:12:49 2025 GMT
            Not After : Jun  6 19:12:49 2025 GMT
        Subject: CN=683a0332-08f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:45:96:82:18:70:16:7b:d3:9e:fd:d6:37:
                    47:99:80:62:de:75:dd:bf:b7:3a:dc:20:e7:0a:f2:
                    79:9a:1d:24:ae:a7:bf:f5:6a:8a:bc:62:85:0c:a9:
                    b0:44:89:51:f7:29:82:bd:e0:09:a6:b1:6b:aa:d9:
                    b6:ee:7e:04:92:b6:e6:2c:36:e4:a1:51:ec:03:7f:
                    0f:59:22:ae:e0:58:4e:7e:7f:a9:38:e5:b1:b1:f0:
                    7f:e5:d4:19:c8:92:f9:83:88:6d:e7:46:74:c3:8a:
                    45:58:50:e4:67:d8:8a:2d:55:e3:64:ec:4a:a6:f0:
                    43:18:66:13:8e:6c:38:c7:74:4e:76:98:f8:09:32:
                    66:a2:49:2c:c1:14:cf:36:24:d8:74:5e:bd:70:57:
                    81:02:47:ef:5f:34:3a:35:83:05:52:d2:7f:7a:1a:
                    70:a4:0f:13:7a:05:f5:0e:28:9e:ea:e9:b4:38:b4:
                    f0:84:d8:65:d3:a1:b8:28:2b:3e:c2:ca:66:2e:68:
                    96:99:a2:90:a0:0f:98:18:65:5f:33:af:e6:99:af:
                    6f:3e:9e:bb:bd:6a:1d:4f:14:50:f2:d9:b9:f2:db:
                    15:19:59:94:5b:1b:95:a4:34:36:93:2e:39:dc:c4:
                    7b:37:e3:21:ab:7e:c0:e8:a8:db:a3:ad:5b:9a:69:
                    55:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6E:71:4E:39:FA:89:C0:AD:59:3B:1E:7A:A2:80:C8:20:D6:DC:71
            X509v3 Authority Key Identifier:
                keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:b6:2a:cc:fc:d6:1b:d0:cc:af:27:f3:e1:a3:2e:9c:71:9f:
         a0:fd:b4:d5:03:bc:8a:06:8f:7d:20:21:a9:71:97:3c:cf:0e:
         e9:5d:14:8e:40:53:ef:f2:e1:fb:9f:6d:48:48:ad:e8:49:17:
         c6:53:91:b0:f1:53:e8:28:4c:f2:23:2a:f4:30:ad:29:85:f7:
         0e:b1:33:bf:be:f6:5c:db:74:0b:c4:d2:f7:aa:1d:3e:2e:5d:
         ea:9d:16:66:c0:67:a6:f3:75:93:9c:19:d0:cf:37:cf:f3:6b:
         c7:77:82:28:dc:40:58:b9:91:8a:b6:37:de:28:d3:56:14:8a:
         d2:09:27:fb:22:96:72:0f:6f:c3:93:ba:a2:34:f6:cb:ee:7d:
         69:08:83:c5:a5:c1:42:1f:2f:1a:11:a4:94:d3:8c:77:fe:be:
         d5:2d:b2:19:fc:78:75:df:95:7c:3f:d0:60:b8:f2:a2:ef:36:
         e0:03:5a:bb:7f:83:53:84:ff:be:46:88:c9:a5:99:0e:29:1e:
         28:91:83:39:68:1b:da:70:00:70:27:6c:1c:92:e1:04:7a:c1:
         45:2a:84:ac:5b:67:ae:36:3c:f6:74:ac:09:dc:68:b2:ee:fe:
         73:f8:ba:57:68:9c:44:b5:0f:9d:07:7a:c7:85:6d:f8:57:2f:
         e2:b8:43:ab
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC54wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QURGMTIxMTAvBgNVBAUTKDZCQ0Q2RUQwOUE0MTZFNUZFNEVFNUFERUY3QjE1MEYy
Q0NBQkU5M0EwHhcNMjUwNTMwMTkxMjQ5WhcNMjUwNjA2MTkxMjQ5WjAYMRYwFAYD
VQQDEw02ODNhMDMzMi0wOGYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt9VFloIYcBZ705791jdHmYBi3nXdv7c63CDnCvJ5mh0krqe/9WqKvGKFDKmw
RIlR9ymCveAJprFrqtm27n4EkrbmLDbkoVHsA38PWSKu4FhOfn+pOOWxsfB/5dQZ
yJL5g4ht50Z0w4pFWFDkZ9iKLVXjZOxKpvBDGGYTjmw4x3ROdpj4CTJmokkswRTP
NiTYdF69cFeBAkfvXzQ6NYMFUtJ/ehpwpA8TegX1Diie6um0OLTwhNhl06G4KCs+
wspmLmiWmaKQoA+YGGVfM6/mma9vPp67vWodTxRQ8tm58tsVGVmUWxuVpDQ2ky45
3MR7N+Mhq37A6Kjbo61bmmlVxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtucU45
+onArVk7HnqigMgg1txxMB8GA1UdIwQYMBaAFGvNbtCaQW5f5O5a3vexUPLMq+k6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREYxMi9DRkE1MjU5QTI4
QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJsX2s3bHJlOTdGUThzeXI2
VG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2E4MXUwSnBCYmxfazdscmU5N0ZROHN5cjZUby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
REYxMi9DRkE1MjU5QTI4QzAxMUVBQUFFMjRFNDhDNEY5QUUwMi9hODF1MEpwQmJs
X2s3bHJlOTdGUThzeXI2VG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBstirM/NYb0MyvJ/Phoy6ccZ+g/bTVA7yKBo99ICGpcZc8zw7pXRSO
QFPv8uH7n21ISK3oSRfGU5Gw8VPoKEzyIyr0MK0phfcOsTO/vvZc23QLxNL3qh0+
Ll3qnRZmwGem83WTnBnQzzfP82vHd4Io3EBYuZGKtjfeKNNWFIrSCSf7IpZyD2/D
k7qiNPbL7n1pCIPFpcFCHy8aEaSU04x3/r7VLbIZ/Hh135V8P9BguPKi7zbgA1q7
f4NThP++RojJpZkOKR4okYM5aBvacABwJ2wckuEEesFFKoSsW2euNjz2dKwJ3Giy
7v5z+LpXaJxEtQ+dB3rHhW34Vy/iuEOr
-----END CERTIFICATE-----
Generated at Sat May 31 16:45:45 2025 by rpki-client