Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
File:                     A4qG82KyVX-Uvncu4MX9MYRf4mM.mft (raw, json)
Hash identifier:          +w+r5KaCwAe26NHVk1EV5jv521Eg1jCD9n33WN+nge0=
Subject key identifier:   4F:27:30:AC:D5:82:E6:81:38:10:A1:D7:2D:46:FF:BB:23:17:CA:48
Authority key identifier: 03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63
Certificate issuer:       /CN=A91C4003/serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
Certificate serial:       0BEE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
Manifest number:          0BDB
Signing time:             Fri 30 May 2025 19:02:09 +0000
Manifest this update:     Fri 30 May 2025 19:02:08 +0000
Manifest next update:     Fri 06 Jun 2025 19:02:08 +0000
Files and hashes:         1: A4qG82KyVX-Uvncu4MX9MYRf4mM.crl (hash: J1c+6UBplaTWBs53VnzKj2T0i9F6gU2lKIg8xVvTV3Y=)
                          2: 711115241AD911EA97EF1C30C4F9AE02.roa (hash: d0pBZZ4RvHYAFaiTNU/2gKYjejf//tWF0XMSJbZsqXg=)
                          3: 398848523A0011EFB7007939C4F9AE02.roa (hash: g/48h2ExElnkoWctOHQeDXu24OxHb6yA2ORuNL7eIjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl
                          rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 19:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3054 (0xbee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4003, serialNumber=038A86F362B2557F94BE772EE0C5FD31845FE263
        Validity
            Not Before: May 30 19:02:08 2025 GMT
            Not After : Jun  6 19:02:08 2025 GMT
        Subject: CN=683a00b1-8d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ee:bf:92:36:18:1f:1e:10:c3:55:b5:9d:af:
                    48:28:b8:76:a7:3b:e2:53:73:0d:f6:57:1d:8d:d9:
                    30:64:9d:36:2a:81:f3:40:d2:36:b3:07:d8:a6:c6:
                    39:87:6b:21:92:07:62:b3:5e:e6:38:cf:da:ba:20:
                    4b:9f:6c:82:98:eb:0a:de:6a:24:f7:f7:a6:84:82:
                    bf:9e:c9:89:95:e6:3b:54:3b:cd:c2:b9:1a:79:a5:
                    a8:b7:61:9b:6e:cd:09:d1:aa:e8:35:dd:00:b3:d7:
                    f4:53:af:f3:7e:a4:e1:e6:4e:37:bb:e7:06:d7:e4:
                    16:71:b2:bc:39:9a:db:6a:90:ad:68:f0:6a:c7:24:
                    b7:64:59:df:bd:c5:31:2f:be:f4:84:de:d6:2e:32:
                    5a:10:ab:ff:f8:de:5f:52:3c:cf:5e:b4:54:75:2a:
                    4e:6b:c4:1f:8e:08:06:d7:6d:fc:99:92:ad:a7:f1:
                    eb:dc:b6:8b:e8:b1:7c:6f:65:97:91:ef:2f:50:e6:
                    32:14:72:cc:b2:de:8d:90:80:3c:16:ad:c1:0d:f5:
                    81:aa:22:b6:7d:60:48:89:6f:b1:82:17:c3:73:36:
                    c5:be:b3:92:94:09:ee:7e:c5:b7:3b:57:26:c5:8c:
                    56:1c:e3:1f:5a:bb:79:60:24:87:f4:67:53:3c:bc:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:27:30:AC:D5:82:E6:81:38:10:A1:D7:2D:46:FF:BB:23:17:CA:48
            X509v3 Authority Key Identifier:
                keyid:03:8A:86:F3:62:B2:55:7F:94:BE:77:2E:E0:C5:FD:31:84:5F:E2:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A4qG82KyVX-Uvncu4MX9MYRf4mM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4003/B8E8AD721AD811EA82E74B2FC4F9AE02/A4qG82KyVX-Uvncu4MX9MYRf4mM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:55:83:65:59:4d:26:91:5d:78:17:fb:ea:67:fa:e6:96:0b:
         97:d7:c5:62:13:e7:55:f2:98:34:86:69:05:36:3e:32:d8:9f:
         f3:16:ad:7e:b6:dc:ae:ec:c0:ce:db:bf:50:46:55:73:2b:8a:
         e2:6b:45:82:c4:77:10:c0:65:d2:ba:a8:52:57:d2:2e:50:d9:
         a0:c3:d9:ea:c6:b2:3c:3d:4b:2e:39:b8:11:e7:e9:38:f6:66:
         6f:d9:d1:95:5b:5f:6e:e6:29:6a:3c:dc:9d:6f:e0:0d:68:bf:
         eb:4d:e5:ea:71:1f:9a:62:d8:6c:6e:84:cc:6c:6f:19:98:cd:
         ac:43:0a:38:de:34:57:d6:18:aa:70:fb:57:c5:be:43:79:e2:
         c6:1b:94:0f:c4:9e:7b:08:3a:6d:50:77:01:6e:63:0b:ac:69:
         87:50:a5:ce:fe:b5:d4:4c:cb:a9:2d:dc:b2:fb:65:f7:0a:05:
         2c:1a:17:10:2e:71:09:f1:4d:a8:2d:ec:ca:f8:0e:24:4e:ec:
         47:ff:44:ff:e8:0b:de:77:bf:f3:b8:68:9c:4b:f0:9b:49:ba:
         9a:d6:30:ac:18:d1:37:35:df:ae:f9:87:85:ea:bf:3a:72:77:
         ce:f5:22:87:a8:63:8d:99:c2:87:ea:18:ed:35:1f:4d:a8:fe:
         73:e7:b0:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC+4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzQwMDMxMTAvBgNVBAUTKDAzOEE4NkYzNjJCMjU1N0Y5NEJFNzcyRUUwQzVGRDMx
ODQ1RkUyNjMwHhcNMjUwNTMwMTkwMjA4WhcNMjUwNjA2MTkwMjA4WjAYMRYwFAYD
VQQDEw02ODNhMDBiMS04ZDYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz+6/kjYYHx4Qw1W1na9IKLh2pzviU3MN9lcdjdkwZJ02KoHzQNI2swfYpsY5
h2shkgdis17mOM/auiBLn2yCmOsK3mok9/emhIK/nsmJleY7VDvNwrkaeaWot2Gb
bs0J0aroNd0As9f0U6/zfqTh5k43u+cG1+QWcbK8OZrbapCtaPBqxyS3ZFnfvcUx
L770hN7WLjJaEKv/+N5fUjzPXrRUdSpOa8QfjggG1238mZKtp/Hr3LaL6LF8b2WX
ke8vUOYyFHLMst6NkIA8Fq3BDfWBqiK2fWBIiW+xghfDczbFvrOSlAnufsW3O1cm
xYxWHOMfWrt5YCSH9GdTPLyjdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8nMKzV
guaBOBCh1y1G/7sjF8pIMB8GA1UdIwQYMBaAFAOKhvNislV/lL53LuDF/TGEX+Jj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDAwMy9COEU4QUQ3MjFB
RDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZYLVV2bmN1NE1YOU1ZUmY0
bU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0E0cUc4Mkt5VlgtVXZuY3U0TVg5TVlSZjRtTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NDAwMy9COEU4QUQ3MjFBRDgxMUVBODJFNzRCMkZDNEY5QUUwMi9BNHFHODJLeVZY
LVV2bmN1NE1YOU1ZUmY0bU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB/VYNlWU0mkV14F/vqZ/rmlguX18ViE+dV8pg0hmkFNj4y2J/zFq1+
ttyu7MDO279QRlVzK4ria0WCxHcQwGXSuqhSV9IuUNmgw9nqxrI8PUsuObgR5+k4
9mZv2dGVW19u5ilqPNydb+ANaL/rTeXqcR+aYthsboTMbG8ZmM2sQwo43jRX1hiq
cPtXxb5DeeLGG5QPxJ57CDptUHcBbmMLrGmHUKXO/rXUTMupLdyy+2X3CgUsGhcQ
LnEJ8U2oLezK+A4kTuxH/0T/6Aved7/zuGicS/CbSbqa1jCsGNE3Nd+u+YeF6r86
cnfO9SKHqGONmcKH6hjtNR9NqP5z57Cx
-----END CERTIFICATE-----
Generated at Sat May 31 17:14:36 2025 by rpki-client