Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
File:                     reE11eBNSWNwmzymv8AQttD5fK8.mft (raw, json)
Hash identifier:          Gc2VCzS8nAs13yamzG5vWZdQVFCcP2xRm4b9V/Wcg9o=
Subject key identifier:   66:79:A8:6A:CE:25:5F:71:9D:5E:C9:3F:80:55:29:83:33:02:88:84
Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF
Certificate issuer:       /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
Certificate serial:       12AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
Manifest number:          129D
Signing time:             Tue 10 Jun 2025 17:03:55 +0000
Manifest this update:     Tue 10 Jun 2025 17:03:54 +0000
Manifest next update:     Tue 17 Jun 2025 17:03:54 +0000
Files and hashes:         1: reE11eBNSWNwmzymv8AQttD5fK8.crl (hash: GjRsQ7XeCX0IPY41xq27nkl2EF7Fz8Nbv637qrkbT5Y=)
                          2: F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (hash: tYzlvKoaH6Iw/czt01Ia6uEcjkV7kohl/OzIkYhWPeY=)
                          3: F7B1497E987F11ED9E1F4D0FC4F9AE02.roa (hash: Gl4gKDf4aT96XGuS7DGEepsfpPgK8tonViSlMSSTaDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Jun 2025 17:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4779 (0x12ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
        Validity
            Not Before: Jun 10 17:03:54 2025 GMT
            Not After : Jun 17 17:03:54 2025 GMT
        Subject: CN=6848657b-0af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ac:dd:87:f0:b8:7e:20:89:e1:97:97:66:a0:
                    11:7e:47:05:fb:36:c7:1e:b6:92:22:e7:90:05:01:
                    b8:f1:34:c2:ad:cf:2b:8a:26:e8:de:f8:c9:a2:f7:
                    b0:4a:09:fb:3c:9b:a4:0e:ef:af:ad:7f:83:60:96:
                    3a:93:1b:2f:53:fb:81:23:71:b2:bf:f9:d0:04:ef:
                    6f:73:39:12:14:b0:c9:d3:8b:92:be:c6:ed:e7:2f:
                    f0:e1:ce:7f:4f:13:56:a1:29:ea:cb:34:d6:e2:04:
                    20:36:15:f4:38:33:1e:86:b2:76:a0:d6:da:f7:81:
                    ca:3f:20:7c:46:46:93:23:c8:2d:fc:96:64:28:19:
                    21:21:a0:1c:69:bb:77:35:05:6d:f3:e9:b9:00:43:
                    e3:cb:39:c5:12:85:fe:26:89:31:62:09:96:13:84:
                    08:c6:15:b1:81:88:7a:fd:6d:aa:cf:b4:b4:21:ae:
                    b0:cb:dc:15:de:87:9e:e7:15:2d:4a:65:92:b8:86:
                    51:70:31:ca:a5:e8:37:02:90:a8:3b:c6:91:cd:30:
                    3d:dd:a8:43:96:04:f5:f8:6e:2f:22:cf:76:e9:53:
                    6f:11:87:1b:3e:3a:dd:9e:dd:2a:2a:8b:1e:12:92:
                    fd:4d:e9:3f:74:bb:05:60:2c:ad:fc:4c:ac:76:46:
                    a9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:79:A8:6A:CE:25:5F:71:9D:5E:C9:3F:80:55:29:83:33:02:88:84
            X509v3 Authority Key Identifier:
                keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:68:be:57:36:10:7f:b1:8d:47:1e:5f:0c:7b:9a:fe:52:98:
         e5:5b:0d:b6:82:65:a1:0f:24:fb:d2:97:88:78:75:df:3a:7f:
         29:e1:06:41:48:65:7b:6e:2b:55:4a:bf:f6:fa:f8:d5:9b:06:
         d8:7a:82:31:c1:3c:2a:d2:cd:ce:ed:ae:16:4d:38:81:74:b5:
         9a:51:87:9c:bf:1c:39:29:ff:0d:a3:9d:61:de:19:0b:f6:a3:
         01:34:1b:67:09:61:0b:eb:17:7c:3a:e6:06:d4:1a:14:30:e3:
         b9:37:40:73:62:4a:3b:26:2b:9e:60:0d:60:4c:80:d0:8f:04:
         a4:56:33:76:b7:ec:93:bf:8e:78:79:c4:bd:a2:c2:bf:24:b6:
         03:51:9a:c3:be:35:62:c3:7a:86:2e:32:86:cd:41:0e:4c:a3:
         44:4a:8f:9b:e0:ca:90:03:62:17:ed:39:0b:ce:e2:80:0a:b1:
         92:04:17:8c:13:40:8b:a5:84:d7:ab:73:4d:f8:70:44:63:9f:
         8e:ca:c5:cf:3f:3d:20:ac:cf:a9:6d:cb:54:f1:5e:3b:59:71:
         78:e3:dd:f6:d4:a9:84:78:63:ca:82:c2:3b:ea:d5:a0:04:ea:
         79:ff:7e:d6:b8:34:cd:3f:7f:02:30:48:ea:1c:5a:10:53:42:
         fd:95:75:11
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjdBMDYxMTAvBgNVBAUTKEFERTEzNUQ1RTA0RDQ5NjM3MDlCM0NBNkJGQzAxMEI2
RDBGOTdDQUYwHhcNMjUwNjEwMTcwMzU0WhcNMjUwNjE3MTcwMzU0WjAYMRYwFAYD
VQQDEw02ODQ4NjU3Yi0wYWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqKzdh/C4fiCJ4ZeXZqARfkcF+zbHHraSIueQBQG48TTCrc8riibo3vjJovew
Sgn7PJukDu+vrX+DYJY6kxsvU/uBI3Gyv/nQBO9vczkSFLDJ04uSvsbt5y/w4c5/
TxNWoSnqyzTW4gQgNhX0ODMehrJ2oNba94HKPyB8RkaTI8gt/JZkKBkhIaAcabt3
NQVt8+m5AEPjyznFEoX+JokxYgmWE4QIxhWxgYh6/W2qz7S0Ia6wy9wV3oee5xUt
SmWSuIZRcDHKpeg3ApCoO8aRzTA93ahDlgT1+G4vIs926VNvEYcbPjrdnt0qKose
EpL9Tek/dLsFYCyt/EysdkapXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZ5qGrO
JV9xnV7JP4BVKYMzAoiEMB8GA1UdIwQYMBaAFK3hNdXgTUljcJs8pr/AELbQ+Xyv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0EwNi80OEY0RENEQUM2
QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNXTndtenltdjhBUXR0RDVm
SzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JlRTExZUJOU1dOd216eW12OEFRdHRENWZLOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
N0EwNi80OEY0RENEQUM2QzMxMUU4OEY3MUNDNTZDNEY5QUUwMi9yZUUxMWVCTlNX
TndtenltdjhBUXR0RDVmSzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZaL5XNhB/sY1HHl8Me5r+UpjlWw22gmWhDyT70peIeHXfOn8p4QZB
SGV7bitVSr/2+vjVmwbYeoIxwTwq0s3O7a4WTTiBdLWaUYecvxw5Kf8No51h3hkL
9qMBNBtnCWEL6xd8OuYG1BoUMOO5N0BzYko7JiueYA1gTIDQjwSkVjN2t+yTv454
ecS9osK/JLYDUZrDvjViw3qGLjKGzUEOTKNESo+b4MqQA2IX7TkLzuKACrGSBBeM
E0CLpYTXq3NN+HBEY5+OysXPPz0grM+pbctU8V47WXF449321KmEeGPKgsI76tWg
BOp5/37WuDTNP38CMEjqHFoQU0L9lXUR
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:09:06 2025 by rpki-client