Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
File:                     ftF6_XNwpqkI2CYrhtq8fu09YUA.mft (raw, json)
Hash identifier:          xuKG/y1tBaUmHBbAyduy1k7ewzXhz1rK+O/NXG6h0QU=
Subject key identifier:   F7:CC:7F:34:06:06:6D:66:90:74:90:A3:DD:74:70:11:48:E9:67:21
Authority key identifier: 7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40
Certificate issuer:       /CN=A91B6F87/serialNumber=7ED17AFD7370A6A908D8262B86DABC7EED3D6140
Certificate serial:       0723
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
Manifest number:          071C
Signing time:             Fri 14 Feb 2025 22:52:45 +0000
Manifest this update:     Fri 14 Feb 2025 22:52:44 +0000
Manifest next update:     Fri 21 Feb 2025 22:52:44 +0000
Files and hashes:         1: ftF6_XNwpqkI2CYrhtq8fu09YUA.crl (hash: kPhiWQai5A1U5D/nV/glugQQinsvm9hD4w+1FvjJ5iw=)
                          2: 69BA51482C9C11EBB49A3A32C4F9AE02.roa (hash: 61ebvHln7P8JgHVIjhyuvS6INNaPluy8PBDesNazLu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1827 (0x723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B6F87
        Validity
            Not Before: Feb 14 22:52:44 2025 GMT
            Not After : Feb 21 22:52:44 2025 GMT
        Subject: CN=67afc93d-983d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:13:37:8a:9b:ff:bd:ed:da:de:b1:5b:e8:
                    91:86:a9:61:97:d5:3d:73:96:35:fa:f3:7f:96:43:
                    da:59:68:9c:28:56:81:7d:73:87:5f:c0:41:da:ee:
                    93:7c:eb:85:59:07:24:6b:70:7d:c6:e0:6d:50:89:
                    cf:80:a0:7f:38:38:f9:34:d0:bf:56:f4:88:dd:0e:
                    39:7c:2b:9c:08:20:a4:0b:d7:a3:49:76:63:2a:93:
                    18:1e:33:ef:73:98:17:e6:71:3a:00:04:e4:5e:8f:
                    96:4f:fc:69:85:33:f5:25:3e:5b:bc:9c:f9:ef:04:
                    b4:fd:08:23:a2:34:90:67:9f:b0:47:af:bb:1c:51:
                    8e:c7:cc:bf:3d:02:cb:a0:c7:5a:b0:4d:20:28:89:
                    41:c7:2f:c2:c1:41:25:18:f3:f2:38:79:2e:05:7e:
                    ee:c8:cf:c7:b2:93:41:9a:c2:0b:4a:d6:c0:5e:45:
                    46:3e:a6:55:38:4f:43:fb:4e:8d:2d:c5:d5:7e:7e:
                    d6:58:e8:41:15:da:a2:20:b9:de:f8:94:c4:5b:a6:
                    06:f1:2a:b5:2c:54:6b:62:d7:2b:4f:3c:64:90:3d:
                    93:5f:10:c9:07:4e:96:07:5b:65:cb:c2:81:1e:2f:
                    0c:e3:ec:a3:ba:df:c5:8b:a8:41:85:95:09:00:a1:
                    61:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:CC:7F:34:06:06:6D:66:90:74:90:A3:DD:74:70:11:48:E9:67:21
            X509v3 Authority Key Identifier:
                keyid:7E:D1:7A:FD:73:70:A6:A9:08:D8:26:2B:86:DA:BC:7E:ED:3D:61:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ftF6_XNwpqkI2CYrhtq8fu09YUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6F87/A7EA755C268811EBBE7C682BC4F9AE02/ftF6_XNwpqkI2CYrhtq8fu09YUA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b6:9c:71:88:e5:fd:b5:ee:c0:9d:de:ac:0e:6d:f3:88:3d:
         ab:3e:4c:68:7f:d1:0f:32:40:39:bd:93:36:1f:07:4c:ec:cd:
         28:19:a2:ed:a6:bf:17:b4:b5:2c:cc:55:ac:fe:79:22:aa:de:
         51:30:b8:e6:d1:ba:80:b0:a9:29:22:d7:12:6c:bb:e7:9c:35:
         22:10:93:38:3d:9c:15:9b:5a:36:d8:19:29:97:88:b0:c4:23:
         b6:d0:db:9d:13:f6:01:df:f3:6d:3f:22:7b:b9:3d:95:e9:e5:
         6b:f9:2c:45:33:5b:fd:e7:f3:0a:e6:53:8c:9f:25:37:cc:c6:
         88:c1:77:64:72:a9:df:45:6d:aa:82:e9:8b:9f:0e:09:5a:4d:
         34:10:a6:69:a4:0b:9c:75:9d:1d:5c:3f:74:0b:9c:6e:0d:3c:
         38:5b:1f:69:50:ab:6a:c7:c5:20:ad:c2:22:2f:78:d9:62:53:
         b5:f0:2e:6e:ff:0a:fa:b2:36:fc:99:f7:44:f3:a6:3a:cc:91:
         a5:a9:84:46:e3:b8:15:44:95:e3:29:81:e4:da:61:1a:74:d1:
         51:02:8a:69:8a:b8:f8:ea:7b:0e:15:85:67:3f:44:3b:9e:bf:
         d0:ff:3c:ca:24:9d:a0:dc:d2:c4:4c:85:e1:5d:9b:4a:1a:df:
         c6:e8:f4:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICByMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjZGODcxMTAvBgNVBAUTKDdFRDE3QUZENzM3MEE2QTkwOEQ4MjYyQjg2REFCQzdF
RUQzRDYxNDAwHhcNMjUwMjE0MjI1MjQ0WhcNMjUwMjIxMjI1MjQ0WjAYMRYwFAYD
VQQDEw02N2FmYzkzZC05ODNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApDwTN4qb/73t2t6xW+iRhqlhl9U9c5Y1+vN/lkPaWWicKFaBfXOHX8BB2u6T
fOuFWQcka3B9xuBtUInPgKB/ODj5NNC/VvSI3Q45fCucCCCkC9ejSXZjKpMYHjPv
c5gX5nE6AATkXo+WT/xphTP1JT5bvJz57wS0/QgjojSQZ5+wR6+7HFGOx8y/PQLL
oMdasE0gKIlBxy/CwUElGPPyOHkuBX7uyM/HspNBmsILStbAXkVGPqZVOE9D+06N
LcXVfn7WWOhBFdqiILne+JTEW6YG8Sq1LFRrYtcrTzxkkD2TXxDJB06WB1tly8KB
Hi8M4+yjut/Fi6hBhZUJAKFhPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPfMfzQG
Bm1mkHSQo910cBFI6WchMB8GA1UdIwQYMBaAFH7Rev1zcKapCNgmK4bavH7tPWFA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkY4Ny9BN0VBNzU1QzI2
ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9mdEY2X1hOd3Bxa0kyQ1lyaHRxOGZ1MDlZ
VUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2Z0RjZfWE53cHFrSTJDWXJodHE4ZnUwOVlVQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NkY4Ny9BN0VBNzU1QzI2ODgxMUVCQkU3QzY4MkJDNEY5QUUwMi9mdEY2X1hOd3Bx
a0kyQ1lyaHRxOGZ1MDlZVUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBttpxxiOX9te7And6sDm3ziD2rPkxof9EPMkA5vZM2HwdM7M0oGaLt
pr8XtLUszFWs/nkiqt5RMLjm0bqAsKkpItcSbLvnnDUiEJM4PZwVm1o22Bkpl4iw
xCO20NudE/YB3/NtPyJ7uT2V6eVr+SxFM1v95/MK5lOMnyU3zMaIwXdkcqnfRW2q
gumLnw4JWk00EKZppAucdZ0dXD90C5xuDTw4Wx9pUKtqx8UgrcIiL3jZYlO18C5u
/wr6sjb8mfdE86Y6zJGlqYRG47gVRJXjKYHk2mEadNFRAoppirj46nsOFYVnP0Q7
nr/Q/zzKJJ2g3NLETIXhXZtKGt/G6PQu
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:58 2025 by rpki-client