Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
File:                     0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft (raw, json)
Hash identifier:          3zDVjkLA1TxuMHZ9/gu8NZbZ4nGYzC68eSyvB95zuaI=
Subject key identifier:   5C:AE:78:29:8A:E1:1A:7D:F0:71:15:19:B8:B5:DB:CB:03:6E:63:91
Authority key identifier: D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF
Certificate issuer:       /CN=A91D1691/serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
Certificate serial:       1893
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
Manifest number:          188D
Signing time:             Mon 02 Jun 2025 15:58:48 +0000
Manifest this update:     Mon 02 Jun 2025 15:58:47 +0000
Manifest next update:     Mon 09 Jun 2025 15:58:47 +0000
Files and hashes:         1: 0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl (hash: JP4sFHPoYVjKXhfH41NhBnHOicRbsmNNkvx7bb8wVhY=)
                          2: AE21A9C6818911EA81577016C4F9AE02.roa (hash: 7SxWILLdTrzJpYEt8Y/6XTCMP3sdZqZUyA4GDfqu88g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl
                          rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 05:53:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6291 (0x1893)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1691, serialNumber=D1479EF60341E39ECA172E4376443A471975CBEF
        Validity
            Not Before: Jun  2 15:58:47 2025 GMT
            Not After : Jun  9 15:58:47 2025 GMT
        Subject: CN=683dca38-6d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:03:5d:0d:9e:d6:dc:9f:6c:68:70:9d:8b:b4:
                    2e:5f:0c:16:30:e1:6d:24:51:14:7d:be:9e:43:a4:
                    4a:e9:4b:65:44:2a:0f:4a:05:4e:66:9b:72:ba:1d:
                    2e:20:9f:20:25:48:62:51:49:7f:bf:55:7b:eb:56:
                    da:e0:7b:ab:02:53:c5:8c:24:a2:7d:6c:5a:ef:26:
                    fb:e0:a8:57:32:c0:68:b9:3d:18:d9:91:2a:39:c9:
                    96:99:7d:46:03:cd:91:ea:10:14:48:3a:2c:f9:1d:
                    d3:cc:9a:e4:48:d3:56:b7:06:aa:07:38:0f:a8:27:
                    bb:dd:a1:52:55:45:81:3d:6b:f5:8a:06:a9:15:5e:
                    b0:72:f6:85:06:9e:72:1b:ae:0d:31:f8:d9:6c:cd:
                    65:88:f0:92:4f:21:7b:ab:45:81:81:4f:04:7f:cc:
                    ad:c1:8f:0f:1e:bb:06:ea:51:05:8e:0b:de:e5:a8:
                    33:28:43:86:f6:81:35:b8:c5:a5:36:f1:d1:49:93:
                    9a:4c:3d:3f:ff:70:eb:3c:65:67:86:3c:39:1d:03:
                    ca:0a:9d:e4:e4:00:8b:1c:f9:a5:a5:de:ea:15:e5:
                    f8:1d:f2:31:0d:de:25:83:83:f3:a6:a4:bd:e8:15:
                    ee:5c:78:6e:a5:dc:97:29:7e:97:89:57:a4:2b:5a:
                    b4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AE:78:29:8A:E1:1A:7D:F0:71:15:19:B8:B5:DB:CB:03:6E:63:91
            X509v3 Authority Key Identifier:
                keyid:D1:47:9E:F6:03:41:E3:9E:CA:17:2E:43:76:44:3A:47:19:75:CB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0Uee9gNB457KFy5DdkQ6Rxl1y-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1691/482BA1729D2411E7861A226BC4F9AE02/0Uee9gNB457KFy5DdkQ6Rxl1y-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:37:77:08:02:96:f7:60:6e:0d:9a:50:d3:47:0a:06:5f:64:
         d6:58:b2:2c:b7:a3:12:1e:62:d1:8b:15:93:c7:2d:42:ad:98:
         97:00:f7:6f:94:a9:ac:8e:e0:42:32:8f:78:95:b3:e6:d8:ec:
         f4:32:08:84:7b:7a:40:d4:5e:c5:c8:0a:ec:32:bb:8c:09:5c:
         e7:85:8d:8b:d4:e8:d9:bf:ca:2c:f9:e5:ce:37:30:b2:21:57:
         91:c9:08:e5:2d:4a:0e:3c:50:3f:80:4f:ac:dc:32:3c:a2:32:
         0c:5a:7d:c2:14:cd:8c:98:6f:6e:6a:cb:5f:ea:46:db:d7:8c:
         a0:01:31:44:c9:5b:2c:83:36:9a:ad:b4:3a:b4:4a:c4:37:7a:
         dc:f3:26:bf:e3:50:49:0a:26:e4:9f:2f:e1:54:48:48:1b:68:
         3e:a7:7b:2a:b4:5f:f8:35:a6:95:b3:65:c3:79:6a:c0:46:fd:
         61:7d:5e:1d:31:75:2c:3a:86:de:dd:88:5e:a6:16:35:69:b5:
         ab:5b:88:e5:c6:55:a7:ba:68:a4:2e:1b:6a:0a:dd:0e:d2:d9:
         90:b1:e0:5a:dd:03:43:5d:22:4b:b5:63:92:93:48:c0:2e:54:
         4d:46:76:6b:6e:48:7b:76:95:86:8a:f3:23:fb:25:3f:ac:e3:
         45:3a:86:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICGJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDE2OTExMTAvBgNVBAUTKEQxNDc5RUY2MDM0MUUzOUVDQTE3MkU0Mzc2NDQzQTQ3
MTk3NUNCRUYwHhcNMjUwNjAyMTU1ODQ3WhcNMjUwNjA5MTU1ODQ3WjAYMRYwFAYD
VQQDEw02ODNkY2EzOC02ZDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwQNdDZ7W3J9saHCdi7QuXwwWMOFtJFEUfb6eQ6RK6UtlRCoPSgVOZptyuh0u
IJ8gJUhiUUl/v1V761ba4HurAlPFjCSifWxa7yb74KhXMsBouT0Y2ZEqOcmWmX1G
A82R6hAUSDos+R3TzJrkSNNWtwaqBzgPqCe73aFSVUWBPWv1igapFV6wcvaFBp5y
G64NMfjZbM1liPCSTyF7q0WBgU8Ef8ytwY8PHrsG6lEFjgve5agzKEOG9oE1uMWl
NvHRSZOaTD0//3DrPGVnhjw5HQPKCp3k5ACLHPmlpd7qFeX4HfIxDd4lg4PzpqS9
6BXuXHhupdyXKX6XiVekK1q0awIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyueCmK
4Rp98HEVGbi128sDbmORMB8GA1UdIwQYMBaAFNFHnvYDQeOeyhcuQ3ZEOkcZdcvv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTY5MS80ODJCQTE3MjlE
MjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1N0tGeTVEZGtRNlJ4bDF5
LTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzBVZWU5Z05CNDU3S0Z5NURka1E2UnhsMXktOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MTY5MS80ODJCQTE3MjlEMjQxMUU3ODYxQTIyNkJDNEY5QUUwMi8wVWVlOWdOQjQ1
N0tGeTVEZGtRNlJ4bDF5LTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBjN3cIApb3YG4NmlDTRwoGX2TWWLIst6MSHmLRixWTxy1CrZiXAPdv
lKmsjuBCMo94lbPm2Oz0MgiEe3pA1F7FyArsMruMCVznhY2L1OjZv8os+eXONzCy
IVeRyQjlLUoOPFA/gE+s3DI8ojIMWn3CFM2MmG9uastf6kbb14ygATFEyVssgzaa
rbQ6tErEN3rc8ya/41BJCibkny/hVEhIG2g+p3sqtF/4NaaVs2XDeWrARv1hfV4d
MXUsOobe3YhephY1abWrW4jlxlWnumikLhtqCt0O0tmQseBa3QNDXSJLtWOSk0jA
LlRNRnZrbkh7dpWGivMj+yU/rONFOoZo
-----END CERTIFICATE-----
Generated at Mon Jun 2 20:27:50 2025 by rpki-client