Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
File:                     Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft (raw, json)
Hash identifier:          EqwyJeietPkibtBUQ0S/l2AcSaOW1yAFFsHsn0cwqzA=
Subject key identifier:   5B:5D:AB:82:B9:42:33:3D:1B:54:04:99:96:22:0C:5D:BA:40:BB:6B
Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08
Certificate issuer:       /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
Certificate serial:       05EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
Manifest number:          05DA
Signing time:             Fri 30 May 2025 23:15:36 +0000
Manifest this update:     Fri 30 May 2025 23:15:35 +0000
Manifest next update:     Fri 06 Jun 2025 23:15:35 +0000
Files and hashes:         1: Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl (hash: ZCJF+3A9X/e7yuTbJG6wFM8Hn1g1cDVo3i2F6/p6808=)
                          2: 87BF5BF6BD3411EB99D25F26C4F9AE02.roa (hash: sbTShmIKKL0T6wr1tqxxOL+QE1luTX7NDd7NnR8wp7g=)
                          3: 49FAAD72591211EDA743880DC4F9AE02.roa (hash: krevIMI6IUNw/+chMIBio+O1qxsYHBvCeuqJ7cXD7Gc=)
                          4: 0E0DBEA4327411ED80554E32C4F9AE02.roa (hash: WXJDLjhJd3w6bj++/nA2IppIGCY5Tdg8yehmeKyxNgI=)
                          5: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (hash: 1NiFRWSUDBEKjygUm/VPv7UX405Nm7i1bZRm8rES/iU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl
                          rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:15:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08
        Validity
            Not Before: May 30 23:15:35 2025 GMT
            Not After : Jun  6 23:15:35 2025 GMT
        Subject: CN=683a3c18-cf6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:96:8e:5c:a4:f4:10:55:3b:2c:a4:e2:1f:50:
                    73:ed:5f:fa:6c:e1:07:11:9f:8f:b2:60:68:df:6b:
                    24:56:59:f1:cf:b7:4a:76:66:85:a1:91:04:4c:6e:
                    e0:3b:b6:7a:51:0c:76:2e:89:b3:91:9b:f4:5f:c8:
                    9a:c0:75:83:a5:16:38:56:76:d0:be:b0:40:8a:3a:
                    fa:1d:1c:35:c3:bd:fa:3e:26:1e:89:b8:27:05:f1:
                    23:6c:fd:0b:0e:7e:0e:33:50:e5:de:3d:7b:ae:94:
                    f1:ea:68:ca:7e:0a:ad:c4:8d:fa:e8:c0:11:06:fe:
                    2f:c0:32:78:40:0a:2f:f6:42:89:67:21:df:32:ec:
                    55:ec:4d:51:f5:87:ea:60:a3:68:73:26:28:0d:67:
                    0e:8a:f4:e5:a5:3b:39:81:46:13:47:3a:1a:48:f7:
                    3f:11:f0:58:a9:18:bc:ad:2a:75:81:93:ee:94:5c:
                    38:34:19:c8:27:fa:5c:bf:f5:8d:a9:1a:37:78:37:
                    e0:dd:57:5c:bd:5d:f0:4c:bf:b4:36:77:5d:77:b8:
                    85:86:52:2b:90:dc:b1:ef:0f:dd:47:f7:a5:2d:45:
                    dc:00:de:ad:6d:7e:4a:b3:56:0c:9d:44:b5:5a:54:
                    81:39:14:c3:dd:01:d8:78:d2:cb:b4:fd:e6:9d:4f:
                    7f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5D:AB:82:B9:42:33:3D:1B:54:04:99:96:22:0C:5D:BA:40:BB:6B
            X509v3 Authority Key Identifier:
                keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:66:15:cf:38:f1:b1:88:ad:df:48:b8:8a:6c:40:ad:33:d9:
         0f:3d:d3:bc:7e:b5:28:d3:e6:35:f2:98:c2:d2:81:df:c0:d8:
         5e:73:bb:f7:fb:83:cb:8d:92:dc:86:41:68:fe:eb:b9:ad:7d:
         d9:1b:8b:a6:1d:e3:ac:f2:df:9a:32:45:45:58:c9:4c:e3:3f:
         91:d7:d6:43:88:56:6a:27:5d:dd:c4:13:9f:67:91:33:30:bb:
         3d:aa:e6:9a:b7:39:60:c3:f8:06:89:de:b0:e4:44:cd:e1:b8:
         c6:9f:80:d2:c6:48:33:a6:92:97:ef:10:f4:6f:fc:1b:1e:1c:
         0f:f0:b5:5c:d6:b2:82:ff:21:66:5d:dc:27:a6:92:62:4c:1e:
         07:cb:82:f4:49:30:76:44:f8:06:2c:60:e3:58:1d:f4:05:4c:
         d0:18:a7:68:a6:2a:f1:9f:06:a0:89:99:ef:f1:66:69:bb:ad:
         b1:de:2c:61:ee:a9:e8:e8:3e:ed:2a:ee:0e:8f:0c:37:2a:22:
         01:5a:cd:fc:6a:1c:2d:26:54:63:41:56:15:63:ea:b6:71:4a:
         27:bf:f5:e1:a8:bd:c2:f6:97:fb:8c:3e:5e:70:d4:85:6f:d4:
         f9:70:03:e8:12:5d:2b:2f:52:c3:14:a8:43:c8:ee:ce:52:78:
         5e:08:36:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw
NzZFODhDMDgwHhcNMjUwNTMwMjMxNTM1WhcNMjUwNjA2MjMxNTM1WjAYMRYwFAYD
VQQDEw02ODNhM2MxOC1jZjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArZaOXKT0EFU7LKTiH1Bz7V/6bOEHEZ+PsmBo32skVlnxz7dKdmaFoZEETG7g
O7Z6UQx2LomzkZv0X8iawHWDpRY4VnbQvrBAijr6HRw1w736PiYeibgnBfEjbP0L
Dn4OM1Dl3j17rpTx6mjKfgqtxI366MARBv4vwDJ4QAov9kKJZyHfMuxV7E1R9Yfq
YKNocyYoDWcOivTlpTs5gUYTRzoaSPc/EfBYqRi8rSp1gZPulFw4NBnIJ/pcv/WN
qRo3eDfg3VdcvV3wTL+0Nnddd7iFhlIrkNyx7w/dR/elLUXcAN6tbX5Ks1YMnUS1
WlSBORTD3QHYeNLLtP3mnU9/LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFtdq4K5
QjM9G1QEmZYiDF26QLtrMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE
MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q
QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RTE0Ni9FNDFBQjQyQUJEMzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVho
OHMxb1FSWkVvRndIYm9qQWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAKZhXPOPGxiK3fSLiKbECtM9kPPdO8frUo0+Y18pjC0oHfwNhec7v3
+4PLjZLchkFo/uu5rX3ZG4umHeOs8t+aMkVFWMlM4z+R19ZDiFZqJ13dxBOfZ5Ez
MLs9quaatzlgw/gGid6w5ETN4bjGn4DSxkgzppKX7xD0b/wbHhwP8LVc1rKC/yFm
XdwnppJiTB4Hy4L0STB2RPgGLGDjWB30BUzQGKdopirxnwagiZnv8WZpu62x3ixh
7qno6D7tKu4Ojww3KiIBWs38ahwtJlRjQVYVY+q2cUonv/XhqL3C9pf7jD5ecNSF
b9T5cAPoEl0rL1LDFKhDyO7OUnheCDZJ
-----END CERTIFICATE-----
Generated at Sat May 31 15:43:39 2025 by rpki-client