Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
File:                     7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft (raw, json)
Hash identifier:          jqPDg2dqp/tD6h0i8Bpy3QB+8UJBHtpCzRM12HD9TN0=
Subject key identifier:   1F:58:F5:39:3B:FF:23:C5:4D:1E:4E:0F:D7:98:5A:73:06:08:B9:8B
Authority key identifier: ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB
Certificate issuer:       /CN=A91E96BC/serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
Manifest number:          FD
Signing time:             Sat 07 Jun 2025 13:49:44 +0000
Manifest this update:     Sat 07 Jun 2025 13:49:43 +0000
Manifest next update:     Sat 14 Jun 2025 13:49:43 +0000
Files and hashes:         1: 7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl (hash: BV86JUiIEVAOEJYT3UTp2gDGQdCi80dbgidyMkDOutE=)
                          2: F89ECDC443A511F09D656024C4F9AE02.roa (hash: WmYOIdHhJmp20fF6Ocugd6eKuqM04EWvfaYLSQzq950=)
                          3: 7E77D4BEB78211EF81A95D76C4F9AE02.roa (hash: IC6M+/u5KfLety+dxGrRg+P8xY1I5/miRXL3+Y22Y3k=)
                          4: 4257053043A611F0820E8527C4F9AE02.roa (hash: XbT+3cuif/paCabTkMdc9T61fms2dwiji/AHhYWy82A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl
                          rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Jun 2025 13:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E96BC, serialNumber=ED11EB4C34804199EA77500EDDBBEEE10B7549AB
        Validity
            Not Before: Jun  7 13:49:43 2025 GMT
            Not After : Jun 14 13:49:43 2025 GMT
        Subject: CN=68444378-c766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:2f:41:c0:3f:f0:fd:95:38:4b:5a:d3:1c:
                    e7:ee:61:3c:5a:05:a6:77:a1:78:89:04:fc:a0:4e:
                    dd:7c:47:37:16:f5:37:12:de:18:af:c9:63:02:58:
                    60:e8:9b:2c:72:4e:94:4c:95:bc:82:c9:67:12:65:
                    f0:de:03:57:d6:e9:ef:ed:82:70:5e:bd:58:f5:48:
                    b9:71:a9:f6:bd:9f:2f:44:8e:df:df:5a:3e:01:f1:
                    e5:e3:75:7d:3d:ce:c4:a3:c1:4b:63:bc:b0:fc:23:
                    4a:f5:76:9d:0b:8e:37:f2:4e:81:82:76:df:44:ca:
                    5e:7e:02:ff:4d:18:86:ce:4f:74:64:50:33:eb:19:
                    33:a0:3e:7d:fc:e1:4b:4c:44:22:cc:fb:83:f1:55:
                    cd:bf:aa:f9:2b:86:e3:ae:28:e2:04:64:a5:10:0a:
                    7b:94:f3:c2:f9:51:6b:5c:19:b7:e1:9f:64:c6:f9:
                    18:2d:0e:9e:ba:3c:78:c2:25:28:4a:fa:ce:64:d7:
                    4c:8e:d0:46:18:42:0a:e3:58:66:94:68:ef:9c:91:
                    23:d4:04:49:cf:7d:fc:c7:8e:b8:52:b3:18:6b:d0:
                    94:9d:d4:98:30:96:b7:65:85:46:1c:f8:a6:c7:a1:
                    6c:25:5f:5a:de:be:96:3f:93:40:20:3a:0f:17:5e:
                    dc:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:58:F5:39:3B:FF:23:C5:4D:1E:4E:0F:D7:98:5A:73:06:08:B9:8B
            X509v3 Authority Key Identifier:
                keyid:ED:11:EB:4C:34:80:41:99:EA:77:50:0E:DD:BB:EE:E1:0B:75:49:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E96BC/6687EF22D14D11EE9DB4180FC4F9AE02/7RHrTDSAQZnqd1AO3bvu4Qt1Sas.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:a0:f7:a6:eb:54:4b:77:aa:f9:6c:b0:8e:9a:97:ae:80:9f:
         42:1e:12:d0:b7:6e:3a:4d:6f:18:29:b2:2f:7f:a2:19:0e:6c:
         dd:60:e8:04:83:9c:ec:b0:0f:68:fd:68:44:b1:0c:b2:53:e6:
         39:7a:b5:09:94:d2:e4:ae:62:7d:81:ff:2e:da:af:77:97:af:
         b8:1d:de:f4:39:90:c1:ac:f7:e6:92:f7:62:cd:0b:1d:3f:55:
         98:46:5c:55:3c:be:44:9a:8d:d2:72:58:fe:f1:17:b2:a5:45:
         36:6e:dc:ca:d7:3e:35:3e:14:83:ff:34:9f:d0:51:a3:90:cb:
         24:ee:ec:56:87:50:15:00:f0:b4:a9:e6:a7:8f:d3:95:5c:8a:
         9e:b4:84:ef:5e:d7:d3:2d:1a:4d:54:e0:6d:e8:70:39:53:56:
         d3:74:ef:2f:53:72:db:9d:ee:6a:48:4b:9f:3c:ab:24:eb:5a:
         cd:7d:98:ba:11:e3:81:f5:91:61:e5:1f:69:e0:f8:28:5d:63:
         29:94:2d:9e:29:02:22:b2:1b:92:81:54:b6:26:f0:97:37:7e:
         44:34:8c:bf:47:8e:94:ca:8d:ca:26:e7:f6:b5:ee:48:b5:05:
         ed:cf:45:b6:08:97:cb:b0:85:d1:be:99:ba:95:b0:69:7e:6f:
         81:60:30:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTk2QkMxMTAvBgNVBAUTKEVEMTFFQjRDMzQ4MDQxOTlFQTc3NTAwRUREQkJFRUUx
MEI3NTQ5QUIwHhcNMjUwNjA3MTM0OTQzWhcNMjUwNjE0MTM0OTQzWjAYMRYwFAYD
VQQDEw02ODQ0NDM3OC1jNzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnRgvQcA/8P2VOEta0xzn7mE8WgWmd6F4iQT8oE7dfEc3FvU3Et4Yr8ljAlhg
6Jssck6UTJW8gslnEmXw3gNX1unv7YJwXr1Y9Ui5can2vZ8vRI7f31o+AfHl43V9
Pc7Eo8FLY7yw/CNK9XadC4438k6BgnbfRMpefgL/TRiGzk90ZFAz6xkzoD59/OFL
TEQizPuD8VXNv6r5K4bjrijiBGSlEAp7lPPC+VFrXBm34Z9kxvkYLQ6eujx4wiUo
SvrOZNdMjtBGGEIK41hmlGjvnJEj1ARJz338x464UrMYa9CUndSYMJa3ZYVGHPim
x6FsJV9a3r6WP5NAIDoPF17cZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9Y9Tk7
/yPFTR5OD9eYWnMGCLmLMB8GA1UdIwQYMBaAFO0R60w0gEGZ6ndQDt277uELdUmr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTZCQy82Njg3RUYyMkQx
NEQxMUVFOURCNDE4MEZDNEY5QUUwMi83UkhyVERTQVFabnFkMUFPM2J2dTRRdDFT
YXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdSSHJURFNBUVpucWQxQU8zYnZ1NFF0MVNhcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
OTZCQy82Njg3RUYyMkQxNEQxMUVFOURCNDE4MEZDNEY5QUUwMi83UkhyVERTQVFa
bnFkMUFPM2J2dTRRdDFTYXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB+oPem61RLd6r5bLCOmpeugJ9CHhLQt246TW8YKbIvf6IZDmzdYOgE
g5zssA9o/WhEsQyyU+Y5erUJlNLkrmJ9gf8u2q93l6+4Hd70OZDBrPfmkvdizQsd
P1WYRlxVPL5Emo3Sclj+8ReypUU2btzK1z41PhSD/zSf0FGjkMsk7uxWh1AVAPC0
qeanj9OVXIqetITvXtfTLRpNVOBt6HA5U1bTdO8vU3Lbne5qSEufPKsk61rNfZi6
EeOB9ZFh5R9p4PgoXWMplC2eKQIishuSgVS2JvCXN35ENIy/R46Uyo3KJuf2te5I
tQXtz0W2CJfLsIXRvpm6lbBpfm+BYDDO
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:39:38 2025 by rpki-client