Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft
File:                     rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft (raw, json)
Hash identifier:          6IU1hyjGX61f+qgK/1AIhGglyLKJPPKDlx7hijlCjNY=
Subject key identifier:   85:C5:DE:A9:11:3E:54:49:43:B0:E1:06:95:D7:33:4A:D2:94:1C:29
Authority key identifier: AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2
Certificate issuer:       /CN=A91EFFF0/serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2
Certificate serial:       1333
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft
Manifest number:          1323
Signing time:             Fri 30 May 2025 17:13:06 +0000
Manifest this update:     Fri 30 May 2025 17:13:06 +0000
Manifest next update:     Fri 06 Jun 2025 17:13:06 +0000
Files and hashes:         1: rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl (hash: xAo58WHZ/SqlL1XuWg72oY67gXJujhDcNDsaDOFWCDo=)
                          2: 8853B5C200FF11F09AD9E43CC4F9AE02.roa (hash: fDAbckuG9wFQsseJEFS548SLfcyPSORhEr8NleSSt0k=)
                          3: 2DD4424401A211F09D28335BC4F9AE02.roa (hash: /pUGpbO60Fe1yZM/qF6+zCst+2cZhcsURR33/zD2CVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl
                          rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 17:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4915 (0x1333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EFFF0, serialNumber=AEFCE4BA24DFA6ED64E41E4F2451C9E884AE69A2
        Validity
            Not Before: May 30 17:13:06 2025 GMT
            Not After : Jun  6 17:13:06 2025 GMT
        Subject: CN=6839e722-d71d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:87:dd:7a:8d:b0:92:d0:94:15:03:c5:44:d4:
                    65:78:b5:ce:be:ed:88:58:65:79:77:a9:6f:a7:71:
                    e4:a8:6a:a2:7a:08:7a:70:58:9c:be:2d:36:52:2c:
                    87:53:a3:0c:96:d1:16:75:91:e4:b4:d0:81:ec:76:
                    57:60:18:89:ae:5f:44:7d:44:b3:aa:78:e0:65:a6:
                    fe:01:57:4d:04:bf:5c:cc:e1:c3:e0:af:2e:f6:01:
                    76:2d:55:bb:c0:3a:e6:07:8c:29:ff:1c:b8:17:29:
                    15:8f:26:06:f6:a9:e9:d6:04:bb:aa:ed:3a:65:cd:
                    43:75:3d:13:6e:27:4a:0b:db:db:18:7f:5d:db:39:
                    f6:1e:d1:d5:f4:01:7c:c1:e4:4d:9d:5d:b4:bb:d1:
                    76:01:6e:b5:ca:77:4c:2b:1b:11:d0:d3:fc:54:71:
                    29:0b:13:47:9e:00:5e:99:36:49:21:76:dd:14:aa:
                    85:4c:5c:1c:6d:83:22:c5:19:b8:ca:ff:ba:8a:43:
                    47:5d:65:57:52:9b:6c:09:2e:e7:e5:8c:a5:a8:60:
                    ca:21:71:f4:d9:5c:53:c4:2e:71:a9:61:48:e7:15:
                    b6:4f:f2:0f:1f:2e:e6:b0:c2:5a:48:8e:ed:9f:00:
                    79:00:fa:8c:7b:2a:54:24:c1:5d:52:05:67:a2:2d:
                    59:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C5:DE:A9:11:3E:54:49:43:B0:E1:06:95:D7:33:4A:D2:94:1C:29
            X509v3 Authority Key Identifier:
                keyid:AE:FC:E4:BA:24:DF:A6:ED:64:E4:1E:4F:24:51:C9:E8:84:AE:69:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFFF0/44FEBC92ADB211E89C9B4553C4F9AE02/rvzkuiTfpu1k5B5PJFHJ6ISuaaI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8c:31:74:53:05:5d:d2:41:fd:02:73:e4:67:82:46:31:42:
         81:c2:47:59:0f:99:a4:2a:f2:ad:2b:e6:2e:83:a0:b2:65:fc:
         b4:c2:9a:b9:78:09:47:bb:97:5d:cf:8a:78:87:8e:88:dd:65:
         71:fd:4b:3b:1e:3c:36:63:f6:71:c0:d5:39:09:a6:70:a0:db:
         dd:e6:c7:67:64:e7:94:d5:2c:51:fd:f7:1f:1c:f3:61:e3:2b:
         6d:1c:a8:7c:41:25:0d:b8:7a:aa:e6:ee:c7:8e:d4:a5:99:37:
         1f:d9:64:eb:32:5f:74:4e:6f:9c:50:37:64:c9:8f:bd:af:9e:
         1e:7b:1c:87:32:d1:ff:b0:f1:4a:47:fc:40:e1:a7:23:df:67:
         a1:c9:04:af:9f:f6:23:0c:25:22:9e:21:2a:b0:b3:22:3b:27:
         4b:17:c2:a4:5b:21:4a:47:a4:c7:a5:74:b8:fa:7f:70:ab:66:
         dd:d5:2a:3f:0a:6a:fd:07:ac:8c:5e:d6:5a:98:d1:13:66:37:
         ec:86:06:79:27:f4:71:a7:70:12:e2:13:fa:c9:b9:03:21:14:
         f9:a9:69:99:2e:50:fb:58:83:0a:da:5a:a7:ad:35:e1:17:3b:
         f6:cb:20:bb:07:e4:db:d9:5e:30:f7:47:be:94:2d:c9:8a:ea:
         c1:66:68:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUZGRjAxMTAvBgNVBAUTKEFFRkNFNEJBMjRERkE2RUQ2NEU0MUU0RjI0NTFDOUU4
ODRBRTY5QTIwHhcNMjUwNTMwMTcxMzA2WhcNMjUwNjA2MTcxMzA2WjAYMRYwFAYD
VQQDEw02ODM5ZTcyMi1kNzFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnIfdeo2wktCUFQPFRNRleLXOvu2IWGV5d6lvp3HkqGqiegh6cFicvi02UiyH
U6MMltEWdZHktNCB7HZXYBiJrl9EfUSzqnjgZab+AVdNBL9czOHD4K8u9gF2LVW7
wDrmB4wp/xy4FykVjyYG9qnp1gS7qu06Zc1DdT0TbidKC9vbGH9d2zn2HtHV9AF8
weRNnV20u9F2AW61yndMKxsR0NP8VHEpCxNHngBemTZJIXbdFKqFTFwcbYMixRm4
yv+6ikNHXWVXUptsCS7n5YylqGDKIXH02VxTxC5xqWFI5xW2T/IPHy7msMJaSI7t
nwB5APqMeypUJMFdUgVnoi1ZIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIXF3qkR
PlRJQ7DhBpXXM0rSlBwpMB8GA1UdIwQYMBaAFK785Lok36btZOQeTyRRyeiErmmi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkZGMC80NEZFQkM5MkFE
QjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1MWs1QjVQSkZISjZJU3Vh
YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3J2emt1aVRmcHUxazVCNVBKRkhKNklTdWFhSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RkZGMC80NEZFQkM5MkFEQjIxMUU4OUM5QjQ1NTNDNEY5QUUwMi9ydnprdWlUZnB1
MWs1QjVQSkZISjZJU3VhYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQALjDF0UwVd0kH9AnPkZ4JGMUKBwkdZD5mkKvKtK+Yug6CyZfy0wpq5
eAlHu5ddz4p4h46I3WVx/Us7Hjw2Y/ZxwNU5CaZwoNvd5sdnZOeU1SxR/fcfHPNh
4yttHKh8QSUNuHqq5u7HjtSlmTcf2WTrMl90Tm+cUDdkyY+9r54eexyHMtH/sPFK
R/xA4acj32ehyQSvn/YjDCUiniEqsLMiOydLF8KkWyFKR6THpXS4+n9wq2bd1So/
Cmr9B6yMXtZamNETZjfshgZ5J/Rxp3AS4hP6ybkDIRT5qWmZLlD7WIMK2lqnrTXh
Fzv2yyC7B+Tb2V4w90e+lC3JiurBZmjw
-----END CERTIFICATE-----
Generated at Sat May 31 16:25:48 2025 by rpki-client