Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
File:                     Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft (raw, json)
Hash identifier:          pQSLiw7VpqB4DNSYQN8q5R8hKO7N+e7NVEI4BtHKolU=
Subject key identifier:   79:83:89:6A:35:2F:73:20:C4:03:F6:40:76:C0:6D:B0:B5:1F:CF:4D
Authority key identifier: 0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB
Certificate issuer:       /CN=A91DE5DA/serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB
Certificate serial:       090F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
Manifest number:          0907
Signing time:             Fri 30 May 2025 20:32:59 +0000
Manifest this update:     Fri 30 May 2025 20:32:58 +0000
Manifest next update:     Fri 06 Jun 2025 20:32:58 +0000
Files and hashes:         1: Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl (hash: qfcjcNceI+l2Xl9WTUbHAXA3oHlTfpdF3xezsiEmcgo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl
                          rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 20:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2319 (0x90f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE5DA, serialNumber=0EBDD2BF449EF334406351553F0ED6832E46E4CB
        Validity
            Not Before: May 30 20:32:58 2025 GMT
            Not After : Jun  6 20:32:58 2025 GMT
        Subject: CN=683a15fa-c31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1f:6f:52:31:03:27:9e:4e:f3:7d:07:0c:39:
                    5f:fa:aa:bc:37:e3:51:e0:23:12:4f:7d:81:54:3e:
                    56:16:fc:90:e7:c2:0b:96:0c:f1:90:ed:09:54:c0:
                    3a:ea:1d:5e:c3:99:23:54:91:45:50:87:e9:d7:ee:
                    7e:15:cc:0e:0c:5a:b2:1b:92:90:cd:bd:16:8d:01:
                    d6:58:7d:ef:05:e9:5d:4b:21:fc:7d:59:97:9c:e4:
                    19:5c:cd:24:7a:5f:2c:65:e8:b0:7e:8b:fb:6b:73:
                    a6:0a:98:6f:6c:de:91:d0:21:bb:53:3a:25:7c:b5:
                    65:fd:65:84:25:cb:08:27:c5:31:84:c2:a8:e7:db:
                    b8:51:1d:cb:5c:e8:19:c3:b7:9e:4c:3d:3c:a8:71:
                    2d:5d:db:b0:55:ae:b5:32:2b:df:0b:77:ec:eb:a3:
                    68:e2:f4:56:c0:60:eb:12:1d:c6:38:18:5a:52:0c:
                    ab:52:c3:bb:54:43:e1:33:75:4d:0e:37:73:03:87:
                    da:79:bf:2d:03:9e:47:4b:76:f9:48:08:6e:bf:3b:
                    6e:09:a4:12:7d:c1:4d:6a:c4:ad:1e:7d:d6:62:da:
                    a9:55:c5:a7:1a:d4:55:9a:1d:ef:5d:7c:69:32:a0:
                    34:21:54:a0:6d:97:18:15:9b:f4:0b:09:f7:9a:43:
                    f3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:83:89:6A:35:2F:73:20:C4:03:F6:40:76:C0:6D:B0:B5:1F:CF:4D
            X509v3 Authority Key Identifier:
                keyid:0E:BD:D2:BF:44:9E:F3:34:40:63:51:55:3F:0E:D6:83:2E:46:E4:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5DA/B848DF68A62911EA8726707FC4F9AE02/Dr3Sv0Se8zRAY1FVPw7Wgy5G5Ms.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:20:03:96:d4:92:80:d5:43:39:3d:7e:26:ed:58:96:e1:a5:
         7f:da:90:ce:16:5d:8e:c3:05:ad:b8:40:63:7f:37:56:78:49:
         2c:0c:a1:6b:de:ce:83:a2:6a:2b:87:38:10:95:48:bd:6f:01:
         37:45:d4:a8:33:c1:87:1c:c1:64:35:e6:2a:6b:64:f9:69:42:
         f0:f2:50:cc:e4:5c:44:ad:d0:f0:32:8a:ed:f0:5c:7d:4e:e7:
         a9:e3:f1:c4:e9:8e:b2:e4:b3:f5:8c:8e:0a:92:fb:71:37:5e:
         27:a4:54:0e:6c:27:3f:5f:6d:09:cf:93:41:4a:6b:cd:71:b5:
         ce:b4:e8:bf:0f:75:2d:d2:7a:18:9a:c5:4f:27:ca:2f:6b:2d:
         5d:d6:34:de:4c:b8:4e:61:b6:c1:62:25:03:35:8f:15:87:18:
         a8:e6:d4:ca:58:78:60:c5:55:50:ea:74:4b:d5:47:03:b2:e5:
         e1:1b:30:1b:db:df:d5:f0:be:ee:8f:85:cc:f5:4a:14:23:a4:
         8a:cc:a0:a7:e2:9d:b7:20:1d:0f:ba:6a:23:d3:93:ed:1e:55:
         f6:51:5a:2a:43:81:20:15:a5:68:e3:eb:b1:9d:68:bc:15:67:
         75:f0:e1:99:81:b1:02:af:4e:67:e6:6c:85:10:42:a9:54:87:
         a2:37:ad:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REU1REExMTAvBgNVBAUTKDBFQkREMkJGNDQ5RUYzMzQ0MDYzNTE1NTNGMEVENjgz
MkU0NkU0Q0IwHhcNMjUwNTMwMjAzMjU4WhcNMjUwNjA2MjAzMjU4WjAYMRYwFAYD
VQQDEw02ODNhMTVmYS1jMzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvx9vUjEDJ55O830HDDlf+qq8N+NR4CMST32BVD5WFvyQ58ILlgzxkO0JVMA6
6h1ew5kjVJFFUIfp1+5+FcwODFqyG5KQzb0WjQHWWH3vBeldSyH8fVmXnOQZXM0k
el8sZeiwfov7a3OmCphvbN6R0CG7UzolfLVl/WWEJcsIJ8UxhMKo59u4UR3LXOgZ
w7eeTD08qHEtXduwVa61MivfC3fs66No4vRWwGDrEh3GOBhaUgyrUsO7VEPhM3VN
DjdzA4faeb8tA55HS3b5SAhuvztuCaQSfcFNasStHn3WYtqpVcWnGtRVmh3vXXxp
MqA0IVSgbZcYFZv0Cwn3mkPzWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHmDiWo1
L3MgxAP2QHbAbbC1H89NMB8GA1UdIwQYMBaAFA690r9EnvM0QGNRVT8O1oMuRuTL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTVEQS9CODQ4REY2OEE2
MjkxMUVBODcyNjcwN0ZDNEY5QUUwMi9EcjNTdjBTZTh6UkFZMUZWUHc3V2d5NUc1
TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RyM1N2MFNlOHpSQVkxRlZQdzdXZ3k1RzVNcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RTVEQS9CODQ4REY2OEE2MjkxMUVBODcyNjcwN0ZDNEY5QUUwMi9EcjNTdjBTZTh6
UkFZMUZWUHc3V2d5NUc1TXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBhIAOW1JKA1UM5PX4m7ViW4aV/2pDOFl2OwwWtuEBjfzdWeEksDKFr
3s6DomorhzgQlUi9bwE3RdSoM8GHHMFkNeYqa2T5aULw8lDM5FxErdDwMort8Fx9
Tuep4/HE6Y6y5LP1jI4KkvtxN14npFQObCc/X20Jz5NBSmvNcbXOtOi/D3Ut0noY
msVPJ8ovay1d1jTeTLhOYbbBYiUDNY8Vhxio5tTKWHhgxVVQ6nRL1UcDsuXhGzAb
29/V8L7uj4XM9UoUI6SKzKCn4p23IB0Pumoj05PtHlX2UVoqQ4EgFaVo4+uxnWi8
FWd18OGZgbECr05n5myFEEKpVIeiN60l
-----END CERTIFICATE-----
Generated at Sat May 31 15:07:54 2025 by rpki-client