Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
File:                     6qltynQw36Rxyim4Q4NsHIDlQ54.mft (raw, json)
Hash identifier:          XSl/d4TLYrtz73hkJWJ2nu7369t0tiMt7ytMr2vM7x4=
Subject key identifier:   38:5B:0B:CE:82:19:27:37:54:AE:A9:24:4A:68:D6:83:FA:2B:3C:99
Authority key identifier: EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E
Certificate issuer:       /CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E
Certificate serial:       0C96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
Manifest number:          0C83
Signing time:             Fri 30 May 2025 18:27:48 +0000
Manifest this update:     Fri 30 May 2025 18:27:48 +0000
Manifest next update:     Fri 06 Jun 2025 18:27:48 +0000
Files and hashes:         1: 6qltynQw36Rxyim4Q4NsHIDlQ54.crl (hash: EAZ7yCmtPLnUduQdOkVzYBqsiZeo3ksGPzXzeAnO/vE=)
                          2: 5B01916AD15911EE8B8BB151C4F9AE02.roa (hash: exEpVAv7OmSBv6nfn1Ng6Vrt5eD/dXr6N+PdK8CnaV0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl
                          rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 18:27:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3222 (0xc96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB87C, serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E
        Validity
            Not Before: May 30 18:27:48 2025 GMT
            Not After : Jun  6 18:27:48 2025 GMT
        Subject: CN=6839f8a4-ba84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d7:5a:29:e0:f3:44:ca:c0:20:91:90:e2:b1:
                    0a:1d:21:97:0e:68:c2:3e:f5:b8:32:19:c6:59:af:
                    a1:6f:4f:96:b2:38:2e:52:92:dc:c2:fe:c1:08:68:
                    46:de:44:b0:d5:0a:7b:a1:e7:81:14:fa:8d:07:5d:
                    a0:5a:83:51:15:e3:c2:55:44:6e:ce:2c:55:7e:fc:
                    a5:a9:a5:1f:e8:cd:a4:e7:cf:3e:b8:44:0a:ff:67:
                    54:ef:38:6f:2f:c5:16:ce:a8:1a:f5:de:41:bb:5e:
                    8a:73:8b:6c:f8:71:d7:22:8d:f5:02:06:5b:7e:a1:
                    f6:91:c0:b6:4a:2c:a5:63:91:6f:a0:38:20:d1:2e:
                    1d:20:40:90:d7:38:73:ad:51:ce:f8:90:7f:d2:94:
                    72:28:e2:e1:9c:b6:6e:de:31:69:74:c1:85:7a:cb:
                    78:e1:0b:a8:5c:88:35:d3:25:f1:7f:12:5b:52:b9:
                    b9:8e:cb:75:07:fa:2a:d5:fa:49:2b:5e:52:54:84:
                    09:07:21:24:25:b2:67:53:d0:a2:27:76:cf:b1:7b:
                    2e:d0:a1:70:ad:e8:48:36:23:e9:42:e5:12:04:2a:
                    64:94:62:3f:fc:00:48:87:c1:77:c6:c0:f6:81:82:
                    13:cd:0a:7e:e4:0d:9f:e9:96:cb:ba:49:94:e4:42:
                    30:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5B:0B:CE:82:19:27:37:54:AE:A9:24:4A:68:D6:83:FA:2B:3C:99
            X509v3 Authority Key Identifier:
                keyid:EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f4:43:b5:46:55:c3:06:f5:b4:1c:c4:92:b8:ec:05:8e:9b:
         8e:5f:a6:5b:4b:de:f1:64:7d:24:bc:7e:39:8c:8b:16:e3:2f:
         1e:d7:81:02:53:5d:46:0c:78:85:38:a7:f9:92:7a:16:b5:f6:
         da:f5:bd:cb:05:45:a5:f3:c2:f2:75:6a:33:b8:a3:be:7d:5c:
         b8:23:b9:f3:3b:d9:f0:f8:dd:13:0d:5b:bb:c2:a8:7d:03:af:
         8b:c7:d7:aa:5a:4c:48:c8:69:cb:bb:51:cc:63:bd:a9:18:ee:
         93:0b:a5:16:5f:06:ed:a3:71:dd:19:ff:67:e0:df:bc:20:60:
         80:5d:ca:72:e0:63:f5:55:4c:b2:cc:43:73:d5:30:f3:90:1f:
         47:c1:dd:6e:1a:ee:d8:f5:15:ed:2b:89:95:47:89:f3:13:ac:
         2e:d6:40:d9:0d:cb:87:47:1a:12:db:f2:9c:d4:af:37:8f:3d:
         20:b5:1c:85:33:d5:0d:c8:16:ea:14:b6:b7:26:7d:f6:c2:7c:
         83:00:9f:37:1b:c1:dd:53:29:ee:55:34:ac:54:e4:58:6b:c4:
         6e:4e:b3:23:4d:95:4a:e4:f1:14:64:ca:92:5f:e5:95:c5:cb:
         f1:c2:10:cc:d0:d5:37:05:75:08:00:c4:fc:ed:9b:c6:3e:1e:
         00:35:29:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkI4N0MxMTAvBgNVBAUTKEVBQTk2RENBNzQzMERGQTQ3MUNBMjlCODQzODM2QzFD
ODBFNTQzOUUwHhcNMjUwNTMwMTgyNzQ4WhcNMjUwNjA2MTgyNzQ4WjAYMRYwFAYD
VQQDEw02ODM5ZjhhNC1iYTg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy9daKeDzRMrAIJGQ4rEKHSGXDmjCPvW4MhnGWa+hb0+WsjguUpLcwv7BCGhG
3kSw1Qp7oeeBFPqNB12gWoNRFePCVURuzixVfvylqaUf6M2k588+uEQK/2dU7zhv
L8UWzqga9d5Bu16Kc4ts+HHXIo31AgZbfqH2kcC2SiylY5FvoDgg0S4dIECQ1zhz
rVHO+JB/0pRyKOLhnLZu3jFpdMGFest44QuoXIg10yXxfxJbUrm5jst1B/oq1fpJ
K15SVIQJByEkJbJnU9CiJ3bPsXsu0KFwrehINiPpQuUSBCpklGI//ABIh8F3xsD2
gYITzQp+5A2f6ZbLukmU5EIwSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhbC86C
GSc3VK6pJEpo1oP6KzyZMB8GA1UdIwQYMBaAFOqpbcp0MN+kccopuEODbByA5UOe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg3Qy82M0Q5MDMxMkZD
MDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2Unh5aW00UTROc0hJRGxR
NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZxbHR5blF3MzZSeHlpbTRRNE5zSElEbFE1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
Qjg3Qy82M0Q5MDMxMkZDMDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2
Unh5aW00UTROc0hJRGxRNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA99EO1RlXDBvW0HMSSuOwFjpuOX6ZbS97xZH0kvH45jIsW4y8e14EC
U11GDHiFOKf5knoWtfba9b3LBUWl88LydWozuKO+fVy4I7nzO9nw+N0TDVu7wqh9
A6+Lx9eqWkxIyGnLu1HMY72pGO6TC6UWXwbto3HdGf9n4N+8IGCAXcpy4GP1VUyy
zENz1TDzkB9Hwd1uGu7Y9RXtK4mVR4nzE6wu1kDZDcuHRxoS2/Kc1K83jz0gtRyF
M9UNyBbqFLa3Jn32wnyDAJ83G8HdUynuVTSsVORYa8RuTrMjTZVK5PEUZMqSX+WV
xcvxwhDM0NU3BXUIAMT87ZvGPh4ANSkD
-----END CERTIFICATE-----
Generated at Sat May 31 17:56:22 2025 by rpki-client