Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
File:                     emDAS4fWxsslHxUpfuJa0tpQXg4.mft (raw, json)
Hash identifier:          seNAg9jfrDhHMeNTwASIxnGIG6lvTes5nAq+dVnqKGA=
Subject key identifier:   E5:6D:0A:CD:08:62:1F:61:23:43:8D:A9:42:A8:33:2F:E3:79:34:A7
Authority key identifier: 7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E
Certificate issuer:       /CN=A91D0935/serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
Certificate serial:       0321
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
Manifest number:          0318
Signing time:             Sat 31 May 2025 01:23:11 +0000
Manifest this update:     Sat 31 May 2025 01:23:10 +0000
Manifest next update:     Sat 07 Jun 2025 01:23:10 +0000
Files and hashes:         1: emDAS4fWxsslHxUpfuJa0tpQXg4.crl (hash: viyRy9n6zesHa2Rk1ohAQ29isdPO8jZRcdR/zvUXfFM=)
                          2: 387AE648938B11EEA552D487C4F9AE02.roa (hash: n2JnUjdK1G3DKEtjobXUa5tJlDzoU7ugVziN4/cf1hI=)
                          3: 38043DF4938B11EEA552D487C4F9AE02.roa (hash: Z/v2dPSlVHtaS2gXVPwHt6zhX6qyLYHvPRCOMkLkMrI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl
                          rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 01:23:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 801 (0x321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0935, serialNumber=7A60C04B87D6C6CB251F15297EE25AD2DA505E0E
        Validity
            Not Before: May 31 01:23:10 2025 GMT
            Not After : Jun  7 01:23:10 2025 GMT
        Subject: CN=683a59fe-2af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:64:e4:c6:83:01:0c:36:6d:9a:33:24:91:60:
                    eb:5b:3d:4e:2f:61:30:8c:a5:3e:03:a8:2f:0f:d3:
                    9e:a8:dc:3c:0d:77:30:6b:cd:48:aa:ad:42:6d:73:
                    a7:0f:ea:04:99:32:e9:16:30:09:13:ba:06:9e:d8:
                    b9:4e:4b:a5:0b:4a:0f:9e:60:b8:5b:25:77:3a:91:
                    f0:05:de:0d:d3:dd:92:7b:2f:e7:2d:08:f5:70:ed:
                    ef:34:ee:5d:69:5c:a2:69:b7:56:d0:a1:77:4d:16:
                    7c:2b:39:e0:32:ed:09:8f:aa:d9:49:25:d6:44:66:
                    9c:02:d8:c6:d8:2b:9c:9e:1f:1c:f4:f3:38:8c:39:
                    f3:14:94:6b:20:35:a8:d4:d8:12:57:80:21:f9:54:
                    e5:10:84:03:67:1f:34:07:02:cc:41:2a:55:ef:d4:
                    2c:90:ea:a0:29:41:34:ed:ca:19:03:0b:f7:70:62:
                    d9:49:c0:e4:d6:8b:50:f8:42:58:6b:17:2f:5c:ee:
                    43:5d:35:14:d9:64:f3:f5:af:63:c1:10:6d:f5:d5:
                    bc:d0:cd:de:96:24:9c:fc:28:9f:da:61:bb:1b:08:
                    39:69:15:0a:0e:01:cc:6f:0d:92:f9:6d:b3:28:3a:
                    25:54:ba:ac:c6:54:4b:65:cd:de:bd:93:5f:63:c5:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6D:0A:CD:08:62:1F:61:23:43:8D:A9:42:A8:33:2F:E3:79:34:A7
            X509v3 Authority Key Identifier:
                keyid:7A:60:C0:4B:87:D6:C6:CB:25:1F:15:29:7E:E2:5A:D2:DA:50:5E:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/emDAS4fWxsslHxUpfuJa0tpQXg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0935/31B3D160D04811EC9E818135C4F9AE02/emDAS4fWxsslHxUpfuJa0tpQXg4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ea:f4:93:20:2d:eb:1a:f0:73:63:23:0d:93:0b:3f:04:0f:
         ff:63:cd:f7:d2:44:7e:83:6d:7e:99:7b:b6:35:16:57:49:ef:
         e8:ef:fe:f0:c3:51:14:b4:c0:4f:96:38:b3:3f:31:d7:19:49:
         b0:c0:ab:69:36:f2:27:0a:02:5b:5e:50:40:9e:ef:b1:c7:cb:
         c9:b3:c1:a7:e6:2e:e1:8f:f8:0b:2b:d0:1d:5d:ce:5e:ac:21:
         41:2c:34:99:1b:f4:82:09:45:bb:a0:8d:68:78:7f:08:4f:cd:
         e9:6b:a1:b8:f1:38:90:f7:85:de:2b:2f:53:f5:a7:f0:6b:bb:
         ef:e9:87:26:62:57:25:c0:6d:75:3d:b7:ec:e1:59:3e:98:d4:
         90:b9:7e:66:cc:c5:84:13:c2:11:68:16:a7:30:aa:af:db:e4:
         d5:c0:c4:51:18:a4:7f:53:5d:8c:45:a4:49:34:b5:59:9d:1b:
         d9:6e:38:26:8a:eb:7d:84:01:62:c6:5b:2a:1f:96:a4:0e:51:
         1e:34:31:83:ff:18:be:6d:65:25:cd:64:f2:9a:c0:4c:9c:67:
         86:5c:0c:14:1e:3c:1e:25:2b:39:68:72:54:17:08:72:69:66:
         09:2e:2d:68:0f:2b:f1:bc:cb:bc:a3:e7:78:1a:e5:8a:df:21:
         1c:62:fb:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAyEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDA5MzUxMTAvBgNVBAUTKDdBNjBDMDRCODdENkM2Q0IyNTFGMTUyOTdFRTI1QUQy
REE1MDVFMEUwHhcNMjUwNTMxMDEyMzEwWhcNMjUwNjA3MDEyMzEwWjAYMRYwFAYD
VQQDEw02ODNhNTlmZS0yYWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl2TkxoMBDDZtmjMkkWDrWz1OL2EwjKU+A6gvD9OeqNw8DXcwa81Iqq1CbXOn
D+oEmTLpFjAJE7oGnti5TkulC0oPnmC4WyV3OpHwBd4N092Sey/nLQj1cO3vNO5d
aVyiabdW0KF3TRZ8KzngMu0Jj6rZSSXWRGacAtjG2Cucnh8c9PM4jDnzFJRrIDWo
1NgSV4Ah+VTlEIQDZx80BwLMQSpV79QskOqgKUE07coZAwv3cGLZScDk1otQ+EJY
axcvXO5DXTUU2WTz9a9jwRBt9dW80M3eliSc/Cif2mG7Gwg5aRUKDgHMbw2S+W2z
KDolVLqsxlRLZc3evZNfY8UVawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVtCs0I
Yh9hI0ONqUKoMy/jeTSnMB8GA1UdIwQYMBaAFHpgwEuH1sbLJR8VKX7iWtLaUF4O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDkzNS8zMUIzRDE2MEQw
NDgxMUVDOUU4MTgxMzVDNEY5QUUwMi9lbURBUzRmV3hzc2xIeFVwZnVKYTB0cFFY
ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VtREFTNGZXeHNzbEh4VXBmdUphMHRwUVhnNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDkzNS8zMUIzRDE2MEQwNDgxMUVDOUU4MTgxMzVDNEY5QUUwMi9lbURBUzRmV3hz
c2xIeFVwZnVKYTB0cFFYZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBd6vSTIC3rGvBzYyMNkws/BA//Y8330kR+g21+mXu2NRZXSe/o7/7w
w1EUtMBPljizPzHXGUmwwKtpNvInCgJbXlBAnu+xx8vJs8Gn5i7hj/gLK9AdXc5e
rCFBLDSZG/SCCUW7oI1oeH8IT83pa6G48TiQ94XeKy9T9afwa7vv6YcmYlclwG11
Pbfs4Vk+mNSQuX5mzMWEE8IRaBanMKqv2+TVwMRRGKR/U12MRaRJNLVZnRvZbjgm
iut9hAFixlsqH5akDlEeNDGD/xi+bWUlzWTymsBMnGeGXAwUHjweJSs5aHJUFwhy
aWYJLi1oDyvxvMu8o+d4GuWK3yEcYvt6
-----END CERTIFICATE-----
Generated at Sat May 31 15:47:01 2025 by rpki-client