Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
File:                     FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft (raw, json)
Hash identifier:          wh17czJ6Lh+XScqk5xolbQmJQBQEdMUZmQgAKfESbIU=
Subject key identifier:   C0:BA:94:67:1D:98:BF:32:29:2E:0B:04:31:D6:82:AD:79:5C:48:5C
Authority key identifier: 14:AD:15:CB:3F:2B:4B:F2:49:B0:AC:F4:A1:FF:DB:F4:A5:01:32:5C
Certificate issuer:       /CN=A91BDB80/serialNumber=14AD15CB3F2B4BF249B0ACF4A1FFDBF4A501325C
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
Manifest number:          019E
Signing time:             Sat 31 May 2025 03:02:43 +0000
Manifest this update:     Sat 31 May 2025 03:02:43 +0000
Manifest next update:     Sat 07 Jun 2025 03:02:43 +0000
Files and hashes:         1: FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl (hash: wuglDtDLh4LkvQVXniUa/eWtLsCktkAhrda/IsNxXD8=)
                          2: AD633F28C2C611ED86556036C4F9AE02.roa (hash: MS7NWq0UAnEQeKvAZaw7UobWiB8w/tScY/6YvlxdzAc=)
                          3: ACA62AC8C2C611ED86556036C4F9AE02.roa (hash: 75H6iOtyKg/g21bWinoaWQqrg0ybarH3XmE2m+ZDXWE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl
                          rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 03:02:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB80, serialNumber=14AD15CB3F2B4BF249B0ACF4A1FFDBF4A501325C
        Validity
            Not Before: May 31 03:02:43 2025 GMT
            Not After : Jun  7 03:02:43 2025 GMT
        Subject: CN=683a7153-49b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f6:6a:9d:7c:5f:7f:ff:69:07:24:a3:69:e5:
                    de:10:86:0b:74:49:79:cb:fc:f7:05:7e:82:8d:2b:
                    bb:c3:be:14:b2:79:34:a4:5e:63:73:ca:67:e8:b5:
                    c8:3f:d6:eb:37:f4:9b:75:5b:de:3f:26:a3:75:2a:
                    90:d5:82:f0:2c:13:1f:ff:1c:e8:9e:e6:ab:12:7a:
                    2a:31:3f:bb:5f:ed:77:af:33:c3:7a:9b:45:1e:18:
                    24:a1:d6:0f:2d:f6:0d:86:8d:20:e2:0c:2d:2b:ec:
                    d1:87:8f:e7:11:77:ae:f0:63:a3:07:35:5a:f1:6a:
                    be:52:6f:a7:fb:46:70:4a:95:03:65:63:36:10:07:
                    12:e3:b8:58:a4:ea:32:2f:58:13:e5:7b:73:a5:e0:
                    54:d0:ec:7d:4b:b7:e4:bd:aa:ff:b3:76:64:07:5e:
                    4c:c6:a4:e1:d7:7b:f0:d7:31:0a:a0:9b:21:8a:35:
                    f9:59:76:a9:5b:48:d6:75:a3:79:7f:3e:43:9b:2b:
                    a1:ef:4d:77:0b:ee:3a:63:ce:2c:71:e7:14:8b:7c:
                    67:ab:e6:dd:b4:54:25:75:9c:76:2c:30:a3:f6:7c:
                    d1:70:db:4e:ca:53:c3:d4:b5:5b:71:f3:9f:c3:8c:
                    1f:75:e8:c7:3e:0f:41:21:4b:06:c6:3f:bb:c4:b5:
                    48:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BA:94:67:1D:98:BF:32:29:2E:0B:04:31:D6:82:AD:79:5C:48:5C
            X509v3 Authority Key Identifier:
                keyid:14:AD:15:CB:3F:2B:4B:F2:49:B0:AC:F4:A1:FF:DB:F4:A5:01:32:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7b:aa:f6:fe:d4:7f:96:fb:b4:3a:81:57:4e:08:9b:0b:60:
         91:62:16:90:cb:d5:bb:95:46:18:bc:41:61:cc:02:4b:67:ca:
         79:d9:6a:29:d5:c6:09:e9:5c:a3:62:3b:35:9e:37:72:76:40:
         f2:9d:4f:fc:37:06:24:bb:03:72:94:7e:97:44:f9:4e:e8:f7:
         71:fe:09:3f:1c:af:3d:95:ab:4f:d7:97:69:9a:17:6e:0b:af:
         69:d3:c8:10:9b:8f:a1:7a:3a:77:49:be:ce:04:7e:a3:53:97:
         11:8a:38:88:84:70:bb:f2:67:e0:c0:39:67:33:3d:6f:fd:2c:
         b2:ac:78:e5:0a:4b:94:4e:f8:c1:e1:8c:fd:ac:44:bf:23:ec:
         08:fc:21:1a:ab:f7:03:d6:98:98:98:09:89:6c:57:a1:05:60:
         42:39:23:52:51:6d:91:c6:41:f4:59:41:58:6d:1f:0d:a5:b5:
         7e:fc:6b:f2:ec:b5:be:e7:ab:4e:fb:6f:78:e2:03:50:4d:0a:
         ba:c6:73:94:48:d5:3f:06:84:af:12:bf:8c:43:f4:32:ce:d4:
         03:a0:be:8d:27:21:9f:4b:50:9d:73:bd:ab:ca:1e:5c:b3:d0:
         c8:56:9a:dc:e8:b8:a7:1e:47:10:2a:b4:5c:73:22:c4:01:58:
         9c:36:ef:04
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkRCODAxMTAvBgNVBAUTKDE0QUQxNUNCM0YyQjRCRjI0OUIwQUNGNEExRkZEQkY0
QTUwMTMyNUMwHhcNMjUwNTMxMDMwMjQzWhcNMjUwNjA3MDMwMjQzWjAYMRYwFAYD
VQQDEw02ODNhNzE1My00OWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0PZqnXxff/9pBySjaeXeEIYLdEl5y/z3BX6CjSu7w74Usnk0pF5jc8pn6LXI
P9brN/SbdVvePyajdSqQ1YLwLBMf/xzonuarEnoqMT+7X+13rzPDeptFHhgkodYP
LfYNho0g4gwtK+zRh4/nEXeu8GOjBzVa8Wq+Um+n+0ZwSpUDZWM2EAcS47hYpOoy
L1gT5XtzpeBU0Ox9S7fkvar/s3ZkB15MxqTh13vw1zEKoJshijX5WXapW0jWdaN5
fz5Dmyuh7013C+46Y84scecUi3xnq+bdtFQldZx2LDCj9nzRcNtOylPD1LVbcfOf
w4wfdejHPg9BIUsGxj+7xLVIMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMC6lGcd
mL8yKS4LBDHWgq15XEhcMB8GA1UdIwQYMBaAFBStFcs/K0vySbCs9KH/2/SlATJc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREI4MC83QTNGMEJBOEMy
QzIxMUVEQTIyMkY3MkVDNEY5QUUwMi9GSzBWeXo4clNfSkpzS3owb2ZfYjlLVUJN
bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZLMFZ5ejhyU19KSnNLejBvZl9iOUtVQk1sdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
REI4MC83QTNGMEJBOEMyQzIxMUVEQTIyMkY3MkVDNEY5QUUwMi9GSzBWeXo4clNf
SkpzS3owb2ZfYjlLVUJNbHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBye6r2/tR/lvu0OoFXTgibC2CRYhaQy9W7lUYYvEFhzAJLZ8p52Wop
1cYJ6VyjYjs1njdydkDynU/8NwYkuwNylH6XRPlO6Pdx/gk/HK89latP15dpmhdu
C69p08gQm4+hejp3Sb7OBH6jU5cRijiIhHC78mfgwDlnMz1v/SyyrHjlCkuUTvjB
4Yz9rES/I+wI/CEaq/cD1piYmAmJbFehBWBCOSNSUW2RxkH0WUFYbR8NpbV+/Gvy
7LW+56tO+2944gNQTQq6xnOUSNU/BoSvEr+MQ/QyztQDoL6NJyGfS1Cdc72ryh5c
s9DIVprc6LinHkcQKrRccyLEAVicNu8E
-----END CERTIFICATE-----
Generated at Sat May 31 17:07:40 2025 by rpki-client