Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
File:                     _eDYrIjb_GreZ9__WjrC7yZsXNw.mft (raw, json)
Hash identifier:          90DUgWKdAXURPc1v66dwYzfDmgNihxGPt74qU/0SrV4=
Subject key identifier:   DC:0C:99:A4:16:4E:66:A9:0A:B9:91:95:3A:51:47:23:A1:92:BD:D2
Authority key identifier: FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC
Certificate issuer:       /CN=A91E7FA1/serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
Manifest number:          0C
Signing time:             Sat 31 May 2025 07:40:16 +0000
Manifest this update:     Sat 31 May 2025 07:40:15 +0000
Manifest next update:     Sat 07 Jun 2025 07:40:15 +0000
Files and hashes:         1: _eDYrIjb_GreZ9__WjrC7yZsXNw.crl (hash: sL6QSUQ3FaBcQNAc6/uMh6YOclHuEEvdtJIzqRbc0/w=)
                          2: 292A3CF0376511F0A9D2D035C4F9AE02.roa (hash: qQ/o26aFQ3fCsqKdZcgYj7qgKbMCzj8e65hKr1gdKM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl
                          rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 07:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7FA1, serialNumber=FDE0D8AC88DBFC6ADE67DFFF5A3AC2EF266C5CDC
        Validity
            Not Before: May 31 07:40:15 2025 GMT
            Not After : Jun  7 07:40:15 2025 GMT
        Subject: CN=683ab260-5b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:09:32:82:76:b8:03:d0:35:e1:8d:d3:85:0b:
                    c5:bf:f9:63:46:06:e5:ae:11:c8:76:6e:40:54:bb:
                    f6:cf:f1:cb:5d:0e:3b:89:14:f7:3d:d1:8e:56:d9:
                    f9:16:a5:5d:27:df:00:05:19:1d:4a:2a:bc:a6:40:
                    e4:e4:cb:60:e3:83:b2:3b:61:05:46:31:6f:45:a4:
                    76:d4:94:e8:52:f0:60:24:9a:f3:42:3b:19:8b:7f:
                    e9:65:ec:83:05:db:71:a5:7f:85:a8:c0:7f:2e:7e:
                    52:0d:73:b8:45:f2:f7:9c:29:68:48:5e:cd:1b:f7:
                    10:3f:c0:8a:17:bc:cb:d6:24:ca:32:01:67:fb:c2:
                    81:ae:23:f0:3d:f5:0e:c1:91:c4:6a:01:01:74:da:
                    c9:df:d6:c2:d4:f7:c8:96:5e:ad:43:f7:d3:60:97:
                    c9:ea:8a:d0:43:f5:65:cc:8d:b9:d1:6f:cb:3a:d9:
                    88:54:81:e4:45:ed:87:1c:62:3e:21:71:ea:c8:63:
                    57:39:18:e2:ca:3a:45:6e:76:8d:22:89:20:51:bb:
                    ab:45:33:9b:7a:88:78:9e:64:4a:c3:86:1a:93:d8:
                    d5:74:04:68:77:12:ee:71:81:05:b8:b6:16:2e:1f:
                    ac:22:51:1e:43:c5:db:fe:13:04:34:26:c9:94:16:
                    f2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0C:99:A4:16:4E:66:A9:0A:B9:91:95:3A:51:47:23:A1:92:BD:D2
            X509v3 Authority Key Identifier:
                keyid:FD:E0:D8:AC:88:DB:FC:6A:DE:67:DF:FF:5A:3A:C2:EF:26:6C:5C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_eDYrIjb_GreZ9__WjrC7yZsXNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7FA1/BF9074E22FA011F08A06C057C4F9AE02/_eDYrIjb_GreZ9__WjrC7yZsXNw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:1a:5d:5a:f6:3d:50:76:9b:84:83:59:63:81:f9:89:08:b1:
         39:3f:20:9c:49:9e:81:20:6e:e7:bd:aa:3a:4f:a8:19:c2:f7:
         f2:2b:3a:86:52:27:f9:bb:a5:c1:bb:ed:91:bb:df:5c:f7:9f:
         75:70:7f:91:22:8d:18:10:21:2f:2f:58:85:f8:11:8f:5c:e5:
         62:ad:75:be:23:88:c7:42:b6:c2:ff:36:0a:b8:e1:86:fc:bd:
         12:d9:3e:e3:82:aa:c2:ab:80:f4:fc:80:24:36:6a:c7:d1:6e:
         f8:79:40:06:5f:ec:70:4b:95:cf:75:88:41:42:f5:a7:6e:ca:
         b1:19:4c:3f:f2:96:f8:9f:a6:7f:c3:73:2e:21:a6:c6:a2:92:
         57:f7:af:27:9f:92:dc:ec:34:aa:d8:b4:cd:9e:80:a8:06:0d:
         0d:df:d1:36:a2:e5:4d:fc:2f:75:ac:c3:8d:40:cb:13:0a:f3:
         ba:46:07:f1:00:b6:63:c2:86:85:f2:e7:72:2f:5e:fc:15:ae:
         64:a9:69:55:65:1b:7a:23:ef:89:dc:fa:8a:bc:92:e1:16:36:
         91:ab:36:ea:4f:b8:80:3f:06:d3:f4:2d:54:c8:7d:ec:a6:71:
         a2:8e:40:8a:0d:7e:e2:f2:a3:df:e6:ba:20:ee:3b:e3:e6:69:
         50:d1:94:e9
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF
N0ZBMTExMC8GA1UEBRMoRkRFMEQ4QUM4OERCRkM2QURFNjdERkZGNUEzQUMyRUYy
NjZDNUNEQzAeFw0yNTA1MzEwNzQwMTVaFw0yNTA2MDcwNzQwMTVaMBgxFjAUBgNV
BAMTDTY4M2FiMjYwLTViMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDCCTKCdrgD0DXhjdOFC8W/+WNGBuWuEch2bkBUu/bP8ctdDjuJFPc90Y5W2fkW
pV0n3wAFGR1KKrymQOTky2Djg7I7YQVGMW9FpHbUlOhS8GAkmvNCOxmLf+ll7IMF
23Glf4WowH8uflINc7hF8vecKWhIXs0b9xA/wIoXvMvWJMoyAWf7woGuI/A99Q7B
kcRqAQF02snf1sLU98iWXq1D99Ngl8nqitBD9WXMjbnRb8s62YhUgeRF7YccYj4h
cerIY1c5GOLKOkVudo0iiSBRu6tFM5t6iHieZErDhhqT2NV0BGh3Eu5xgQW4thYu
H6wiUR5Dxdv+EwQ0JsmUFvLtAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3AyZpBZO
ZqkKuZGVOlFHI6GSvdIwHwYDVR0jBBgwFoAU/eDYrIjb/GreZ9//WjrC7yZsXNww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3RkExL0JGOTA3NEUyMkZB
MDExRjA4QTA2QzA1N0M0RjlBRTAyL19lRFlySWpiX0dyZVo5X19XanJDN3lac1hO
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvX2VEWXJJamJfR3JlWjlfX1dqckM3eVpzWE53LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3
RkExL0JGOTA3NEUyMkZBMDExRjA4QTA2QzA1N0M0RjlBRTAyL19lRFlySWpiX0dy
ZVo5X19XanJDN3lac1hOdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAEcaXVr2PVB2m4SDWWOB+YkIsTk/IJxJnoEgbue9qjpPqBnC9/IrOoZS
J/m7pcG77ZG731z3n3Vwf5EijRgQIS8vWIX4EY9c5WKtdb4jiMdCtsL/Ngq44Yb8
vRLZPuOCqsKrgPT8gCQ2asfRbvh5QAZf7HBLlc91iEFC9aduyrEZTD/ylvifpn/D
cy4hpsaiklf3ryefktzsNKrYtM2egKgGDQ3f0Tai5U38L3Wsw41AyxMK87pGB/EA
tmPChoXy53IvXvwVrmSpaVVlG3oj74nc+oq8kuEWNpGrNupPuIA/BtP0LVTIfeym
caKOQIoNfuLyo9/muiDuO+PmaVDRlOk=
-----END CERTIFICATE-----
Generated at Sat May 31 16:55:07 2025 by rpki-client