Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
File:                     v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft (raw, json)
Hash identifier:          OP0jqS9t+X/EjJP/xxQu09C2jPUMXP+M0xEyDNae4kk=
Subject key identifier:   02:9D:11:F8:6A:C1:77:32:0E:F5:3B:04:B4:D4:68:9D:FF:7B:A2:D5
Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77
Certificate issuer:       /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
Manifest number:          44
Signing time:             Sat 31 May 2025 07:07:21 +0000
Manifest this update:     Sat 31 May 2025 07:07:20 +0000
Manifest next update:     Sat 07 Jun 2025 07:07:20 +0000
Files and hashes:         1: v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl (hash: zHHhOSV+yIeKfjscPIVZA7ZD6Qn3tbJWJTuWtoHEYzM=)
                          2: 46602E62E99D11EFB8E6881DC4F9AE02.roa (hash: N2mU+Nf+OkWsydJNTigowac6C/kadZEo42ZXOPhaxXU=)
                          3: 465DA74CEE4C11EFBBD5275FC4F9AE02.roa (hash: SPPv4eq5g0hLSyvOMf5eiY3618RcXXiv7J3/H4BO4L4=)
                          4: 685B8598EE5711EFB6D57660C4F9AE02.roa (hash: 2ByPgzEPC85mGN14iqcQMrmFSzyBoiAoV4LILjdSwYs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl
                          rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 07:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D41AC, serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377
        Validity
            Not Before: May 31 07:07:20 2025 GMT
            Not After : Jun  7 07:07:20 2025 GMT
        Subject: CN=683aaaa9-b2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:77:b1:84:c1:59:40:a0:27:0f:b1:a3:38:11:
                    10:78:5c:a4:46:b8:fe:cf:2c:bf:b0:a6:82:2a:e6:
                    46:5d:39:34:57:29:37:5f:1c:d5:f6:be:a3:ef:59:
                    60:47:d6:82:95:32:65:9b:04:7e:f9:98:a8:73:c9:
                    44:81:b1:f8:2e:4d:ab:fa:ba:85:4c:ff:95:2f:08:
                    e1:06:0b:60:e5:f4:ff:c0:f9:fd:b8:b6:46:32:72:
                    70:fc:97:e3:b1:56:6b:c9:89:6a:eb:77:6c:29:80:
                    7b:f3:db:33:49:0d:ac:48:2f:42:45:5f:aa:c1:84:
                    a9:f3:0f:9f:ec:e4:b9:c4:2b:7d:43:4c:a3:b1:49:
                    32:d3:d3:0f:04:2b:4c:07:9d:1b:87:97:47:e0:b3:
                    85:4a:c1:0c:c3:cb:ff:8e:4a:a2:04:10:4d:23:9c:
                    84:71:51:5e:5f:bd:cc:b1:a5:22:90:09:56:c4:dd:
                    c2:94:66:72:70:c4:9c:fc:ce:aa:17:48:0a:79:90:
                    ec:9d:15:e8:81:b2:79:ac:10:c5:a3:ed:6c:40:f5:
                    c3:af:ba:cc:5c:10:a7:42:dc:a7:07:c7:1e:5c:6a:
                    5f:e4:e4:11:58:7c:e0:64:c8:ad:e8:fe:2b:d9:45:
                    56:3a:37:7a:24:0a:54:13:6f:0a:d3:20:71:4c:99:
                    dd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:9D:11:F8:6A:C1:77:32:0E:F5:3B:04:B4:D4:68:9D:FF:7B:A2:D5
            X509v3 Authority Key Identifier:
                keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e8:29:7a:7f:57:db:93:7c:30:d6:42:3f:7f:f5:99:c5:59:
         03:76:5c:4a:78:39:e1:f7:6b:8b:8f:d3:26:cd:b6:54:b5:11:
         02:9a:04:98:56:f8:f5:de:28:77:c1:3f:65:b6:e0:76:4a:e2:
         c0:ed:5a:7f:ad:57:bd:b0:c4:cc:4e:fa:89:d1:43:bd:17:05:
         ff:71:76:1c:1e:05:ad:a4:ca:1d:55:43:86:80:6c:9a:b7:e6:
         6d:59:a4:37:cd:0c:c2:67:00:3a:8a:cf:07:c1:81:67:df:18:
         9c:a4:16:41:24:04:72:79:f5:98:01:ac:6e:24:b1:60:45:b1:
         92:a8:30:e7:a3:0f:8f:29:92:0f:1c:53:30:bd:63:14:90:68:
         ad:f7:08:17:1d:35:56:5d:83:db:a6:64:24:0e:b2:b7:23:b8:
         e6:d7:24:67:18:a5:56:6e:54:ea:64:cf:8d:c1:66:f8:a7:bb:
         66:eb:c7:58:f0:d0:f4:5e:bd:df:14:7b:14:48:ab:37:f4:99:
         4f:22:2c:47:24:b3:ce:17:a7:cd:4e:e9:f3:01:94:37:fa:c9:
         35:5f:12:f9:d3:03:75:50:25:36:c8:de:dc:35:a1:6b:9a:b1:
         2f:c1:5f:a3:f1:05:71:26:86:f6:35:10:af:d2:d9:a5:08:93:
         cb:15:b8:82
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
NDFBQzExMC8GA1UEBRMoQkY5ODY4OEU5OEIwMUU4NEQ3MzY2RjY3ODY0Q0U4RjNF
QkJENDM3NzAeFw0yNTA1MzEwNzA3MjBaFw0yNTA2MDcwNzA3MjBaMBgxFjAUBgNV
BAMTDTY4M2FhYWE5LWIyZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQd7GEwVlAoCcPsaM4ERB4XKRGuP7PLL+wpoIq5kZdOTRXKTdfHNX2vqPvWWBH
1oKVMmWbBH75mKhzyUSBsfguTav6uoVM/5UvCOEGC2Dl9P/A+f24tkYycnD8l+Ox
VmvJiWrrd2wpgHvz2zNJDaxIL0JFX6rBhKnzD5/s5LnEK31DTKOxSTLT0w8EK0wH
nRuHl0fgs4VKwQzDy/+OSqIEEE0jnIRxUV5fvcyxpSKQCVbE3cKUZnJwxJz8zqoX
SAp5kOydFeiBsnmsEMWj7WxA9cOvusxcEKdC3KcHxx5cal/k5BFYfOBkyK3o/ivZ
RVY6N3okClQTbwrTIHFMmd0LAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUAp0R+GrB
dzIO9TsEtNRonf97otUwHwYDVR0jBBgwFoAUv5hojpiwHoTXNm9nhkzo8+u9Q3cw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MUFDLzI0NDVCQ0UyRTkz
RjExRUY4REYxRTAzNUM0RjlBRTAyL3Y1aG9qcGl3SG9UWE5tOW5oa3pvOC11OVEz
Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdjVob2pwaXdIb1RYTm05bmhrem84LXU5UTNjLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0
MUFDLzI0NDVCQ0UyRTkzRjExRUY4REYxRTAzNUM0RjlBRTAyL3Y1aG9qcGl3SG9U
WE5tOW5oa3pvOC11OVEzYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAzoKXp/V9uTfDDWQj9/9ZnFWQN2XEp4OeH3a4uP0ybNtlS1EQKaBJhW
+PXeKHfBP2W24HZK4sDtWn+tV72wxMxO+onRQ70XBf9xdhweBa2kyh1VQ4aAbJq3
5m1ZpDfNDMJnADqKzwfBgWffGJykFkEkBHJ59ZgBrG4ksWBFsZKoMOejD48pkg8c
UzC9YxSQaK33CBcdNVZdg9umZCQOsrcjuObXJGcYpVZuVOpkz43BZvinu2brx1jw
0PRevd8UexRIqzf0mU8iLEcks84Xp81O6fMBlDf6yTVfEvnTA3VQJTbI3tw1oWua
sS/BX6PxBXEmhvY1EK/S2aUIk8sVuII=
-----END CERTIFICATE-----
Generated at Sat May 31 16:42:05 2025 by rpki-client