Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
File:                     KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft (raw, json)
Hash identifier:          IvwqHGEBWajKw05OZBbnw0i0wvyPyCma732oO33wbpU=
Subject key identifier:   DC:EF:03:4A:17:ED:91:C5:60:3E:1D:64:46:03:EB:48:4B:71:4D:75
Authority key identifier: 28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8
Certificate issuer:       /CN=A91ED469/serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
Manifest number:          0113
Signing time:             Sat 31 May 2025 04:33:53 +0000
Manifest this update:     Sat 31 May 2025 04:33:52 +0000
Manifest next update:     Sat 07 Jun 2025 04:33:52 +0000
Files and hashes:         1: KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl (hash: EOwXtzvNFGUVCJjcI1YusquHUmahbj+HUf6t+m6VdCk=)
                          2: F259393A9CC211EEA3A14563C4F9AE02.roa (hash: H8jOBdWZy3BflOdKi2IUHX/jDGy3Qp76HCrr86p/kow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl
                          rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 04:33:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED469, serialNumber=28BA6E687F1FBD833B9A13AAD8C142AD8FAFBCA8
        Validity
            Not Before: May 31 04:33:52 2025 GMT
            Not After : Jun  7 04:33:52 2025 GMT
        Subject: CN=683a86b0-114a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6d:2a:d4:60:e4:0b:04:f0:a1:db:86:21:ec:
                    a2:47:d3:d4:65:86:8c:10:d7:b4:20:7f:92:93:68:
                    14:96:69:38:62:af:15:ed:ef:de:3c:d3:ca:1f:2b:
                    67:da:ea:53:0b:2c:c5:f7:fa:23:b0:80:c4:fd:d4:
                    b7:97:37:75:14:93:67:ef:8a:f7:d5:7c:14:4b:c1:
                    74:59:c4:01:37:b2:1c:15:8f:e0:b0:9d:2b:63:a1:
                    73:a6:b4:c5:f6:7a:d1:7d:da:58:a7:b5:d9:03:50:
                    df:01:1e:67:c7:8f:f0:3a:06:56:b0:11:da:8d:0d:
                    7b:23:f9:a6:99:a1:c2:20:60:b3:2d:69:0d:89:48:
                    75:73:84:1f:ad:c6:58:3b:c5:5b:ec:42:cb:6d:df:
                    fa:74:38:6f:27:54:4f:46:8b:9c:79:a0:3e:15:36:
                    a1:74:54:e7:80:cc:76:cf:bc:0a:06:16:08:97:5e:
                    08:9f:dc:10:2a:f9:5b:ec:3f:54:d0:24:dc:25:38:
                    65:41:9d:4f:34:5b:78:45:8c:f7:1c:c9:1e:10:72:
                    33:de:a4:75:3b:e2:97:22:9a:e1:2a:6e:6f:bd:14:
                    75:f5:a3:b1:27:2c:c7:60:df:67:dd:ec:d1:fa:d5:
                    df:bc:4f:7e:59:c4:7b:aa:24:b4:b7:af:66:1c:00:
                    5e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:03:4A:17:ED:91:C5:60:3E:1D:64:46:03:EB:48:4B:71:4D:75
            X509v3 Authority Key Identifier:
                keyid:28:BA:6E:68:7F:1F:BD:83:3B:9A:13:AA:D8:C1:42:AD:8F:AF:BC:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KLpuaH8fvYM7mhOq2MFCrY-vvKg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED469/97DE7A7E9CC211EEB302E061C4F9AE02/KLpuaH8fvYM7mhOq2MFCrY-vvKg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:03:7e:05:4e:24:51:5f:c0:b0:13:9e:f8:b7:91:13:e7:68:
         6f:ab:17:2c:1a:16:20:36:20:20:32:6a:9c:41:7d:c4:fd:64:
         8b:88:dd:73:14:1d:0b:95:fa:64:dc:4a:1f:b8:31:75:1a:71:
         18:e8:bd:d8:f5:37:d8:da:9d:f0:34:df:a6:17:0c:5d:62:92:
         9d:3c:24:6b:91:1b:d3:83:80:97:5b:4b:9b:19:ef:fc:e7:ab:
         1e:8d:a2:91:c0:ed:cd:3b:01:62:ff:93:f1:1a:79:69:b8:ca:
         00:4c:b9:aa:2f:5d:7d:79:7d:0f:d9:8a:fe:7c:27:16:9f:9e:
         10:4a:a6:0f:07:d9:15:75:37:25:12:53:b7:2d:70:99:ff:6f:
         68:39:42:a3:2c:af:0f:88:e7:be:34:e7:91:a5:fa:73:f3:27:
         47:59:20:7c:fa:9a:78:b9:f2:4e:95:85:9b:72:fc:eb:96:e3:
         c9:01:a5:60:45:ab:5a:65:1d:ab:f9:58:2a:be:d4:23:53:d5:
         9d:80:af:66:75:c4:b6:ad:f9:d6:f7:91:00:9b:8a:b9:e4:0c:
         96:ef:19:08:3d:74:5b:55:a9:48:77:a0:14:a5:ae:f8:a9:40:
         73:f3:45:70:72:89:38:e9:9e:71:23:88:a3:54:e1:a3:88:e1:
         ac:ac:2d:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUQ0NjkxMTAvBgNVBAUTKDI4QkE2RTY4N0YxRkJEODMzQjlBMTNBQUQ4QzE0MkFE
OEZBRkJDQTgwHhcNMjUwNTMxMDQzMzUyWhcNMjUwNjA3MDQzMzUyWjAYMRYwFAYD
VQQDEw02ODNhODZiMC0xMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzG0q1GDkCwTwoduGIeyiR9PUZYaMENe0IH+Sk2gUlmk4Yq8V7e/ePNPKHytn
2upTCyzF9/ojsIDE/dS3lzd1FJNn74r31XwUS8F0WcQBN7IcFY/gsJ0rY6FzprTF
9nrRfdpYp7XZA1DfAR5nx4/wOgZWsBHajQ17I/mmmaHCIGCzLWkNiUh1c4QfrcZY
O8Vb7ELLbd/6dDhvJ1RPRouceaA+FTahdFTngMx2z7wKBhYIl14In9wQKvlb7D9U
0CTcJThlQZ1PNFt4RYz3HMkeEHIz3qR1O+KXIprhKm5vvRR19aOxJyzHYN9n3ezR
+tXfvE9+WcR7qiS0t69mHABenwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNzvA0oX
7ZHFYD4dZEYD60hLcU11MB8GA1UdIwQYMBaAFCi6bmh/H72DO5oTqtjBQq2Pr7yo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDQ2OS85N0RFN0E3RTlD
QzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZTTdtaE9xMk1GQ3JZLXZ2
S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tMcHVhSDhmdllNN21oT3EyTUZDclktdnZLZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RDQ2OS85N0RFN0E3RTlDQzIxMUVFQjMwMkUwNjFDNEY5QUUwMi9LTHB1YUg4ZnZZ
TTdtaE9xMk1GQ3JZLXZ2S2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCcA34FTiRRX8CwE574t5ET52hvqxcsGhYgNiAgMmqcQX3E/WSLiN1z
FB0Llfpk3EofuDF1GnEY6L3Y9TfY2p3wNN+mFwxdYpKdPCRrkRvTg4CXW0ubGe/8
56sejaKRwO3NOwFi/5PxGnlpuMoATLmqL119eX0P2Yr+fCcWn54QSqYPB9kVdTcl
ElO3LXCZ/29oOUKjLK8PiOe+NOeRpfpz8ydHWSB8+pp4ufJOlYWbcvzrluPJAaVg
RataZR2r+VgqvtQjU9WdgK9mdcS2rfnW95EAm4q55AyW7xkIPXRbValId6AUpa74
qUBz80Vwcok46Z5xI4ijVOGjiOGsrC3g
-----END CERTIFICATE-----
Generated at Sat May 31 17:03:33 2025 by rpki-client