Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
File:                     5L99WWC2svPFIUHvK2Aq0RT0DKg.mft (raw, json)
Hash identifier:          dWH7d8mjM91YAhyQGlzI/aIn4lId082exHA8HYq8GtY=
Subject key identifier:   CA:A3:37:3A:FC:25:75:08:CF:F8:61:06:9D:83:68:A1:35:5C:2D:62
Authority key identifier: E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8
Certificate issuer:       /CN=A91F53A5/serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
Certificate serial:       0305
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
Manifest number:          0301
Signing time:             Fri 13 Jun 2025 00:46:28 +0000
Manifest this update:     Fri 13 Jun 2025 00:46:28 +0000
Manifest next update:     Fri 20 Jun 2025 00:46:28 +0000
Files and hashes:         1: 5L99WWC2svPFIUHvK2Aq0RT0DKg.crl (hash: 06RGJgYQHmcFOr2JSoXBv8N85ehomZ1vd+WwCPJLfyw=)
                          2: 99C51F96DA6D11EC86CE4D59C4F9AE02.roa (hash: nd3BoBWmWncY6CXZjinblw8tRKQ0C9HJdvIgBJwhEHY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl
                          rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 00:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 773 (0x305)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F53A5, serialNumber=E4BF7D5960B6B2F3C52141EF2B602AD114F40CA8
        Validity
            Not Before: Jun 13 00:46:28 2025 GMT
            Not After : Jun 20 00:46:28 2025 GMT
        Subject: CN=684b74e4-f764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:f5:76:d5:a5:2a:63:de:e8:f8:83:c6:a6:
                    87:73:72:30:22:c6:c8:ad:fd:01:b0:83:c5:45:2d:
                    74:5a:7f:ff:d0:17:27:9c:98:c6:d0:0f:72:c9:40:
                    60:07:48:59:f1:fa:30:40:c2:f9:8a:a9:c1:00:df:
                    f8:32:1b:06:c7:cf:d3:75:24:23:1b:d0:48:43:94:
                    ee:ca:c9:e3:38:6f:72:21:bb:54:5a:1e:54:50:0e:
                    de:30:e1:be:09:9d:47:d3:62:8e:dc:dc:d4:21:26:
                    bd:af:99:e4:51:d5:43:32:27:7d:ed:4c:fa:c8:d1:
                    e2:ea:e6:5c:bc:4f:b9:6c:ad:7e:50:ef:1b:7c:4e:
                    55:b2:02:88:0e:4a:9d:65:ec:26:fb:4e:32:0d:c3:
                    7a:f2:e1:97:6f:50:9b:19:a7:20:1c:b0:59:5a:1c:
                    ae:3b:40:cd:74:ca:97:8f:fb:d7:7e:26:bc:ef:1f:
                    ae:53:74:d7:c3:2d:9f:b7:d4:de:bb:d2:2e:ba:c7:
                    6a:70:fc:70:33:c4:03:3d:3f:6f:17:9b:8e:a9:e5:
                    25:24:e3:66:86:1e:3e:48:72:bb:7c:8c:13:8f:eb:
                    73:91:fe:08:50:40:4e:d0:ec:51:11:46:7d:d1:2e:
                    f7:2d:cd:78:9c:49:db:76:28:a7:54:9b:3e:81:26:
                    18:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A3:37:3A:FC:25:75:08:CF:F8:61:06:9D:83:68:A1:35:5C:2D:62
            X509v3 Authority Key Identifier:
                keyid:E4:BF:7D:59:60:B6:B2:F3:C5:21:41:EF:2B:60:2A:D1:14:F4:0C:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5L99WWC2svPFIUHvK2Aq0RT0DKg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F53A5/500CFE98DA6611EC80DFE736C4F9AE02/5L99WWC2svPFIUHvK2Aq0RT0DKg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:29:39:62:e3:ba:0a:17:b0:da:39:6c:78:fb:df:5e:ec:75:
         a3:a2:04:eb:2e:17:30:11:63:cb:09:93:d2:ea:b8:80:74:a1:
         32:c4:fa:07:d8:5c:8e:ed:42:0e:c0:59:33:68:6b:64:40:c0:
         9b:17:5a:75:82:a6:cf:46:12:57:85:f9:4c:3a:0f:d8:63:69:
         39:7f:5e:2e:67:4d:4c:b9:de:3f:04:b0:03:7f:7b:c2:e3:1c:
         6a:89:e2:f7:e7:d9:6c:3c:6f:a0:14:7e:77:bb:e4:f0:51:c8:
         24:e1:3e:3d:85:f6:98:71:e4:67:0e:9d:f3:ea:06:41:61:05:
         3c:b9:7f:56:ac:35:11:8f:13:5f:cd:69:d7:20:87:cf:6b:34:
         2a:28:18:16:66:d4:5c:dc:2a:46:4c:44:e2:4e:83:27:73:6c:
         b1:ba:34:7d:94:86:c3:95:77:60:3c:65:6b:c8:3b:ab:21:50:
         22:d0:31:4e:a0:b2:96:5d:f3:42:85:5a:12:c3:ab:e1:b9:f1:
         2d:81:e2:77:b7:32:b4:93:2b:8f:a0:77:13:41:2d:37:9b:d0:
         d2:d7:9c:ea:af:36:bd:8e:e3:c9:4a:4d:a8:f2:ef:01:e4:68:
         fa:6e:ec:7e:76:f4:29:b4:89:75:9f:4e:64:b3:7f:3c:2f:5b:
         82:b4:6c:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjUzQTUxMTAvBgNVBAUTKEU0QkY3RDU5NjBCNkIyRjNDNTIxNDFFRjJCNjAyQUQx
MTRGNDBDQTgwHhcNMjUwNjEzMDA0NjI4WhcNMjUwNjIwMDA0NjI4WjAYMRYwFAYD
VQQDEw02ODRiNzRlNC1mNzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAszj1dtWlKmPe6PiDxqaHc3IwIsbIrf0BsIPFRS10Wn//0BcnnJjG0A9yyUBg
B0hZ8fowQML5iqnBAN/4MhsGx8/TdSQjG9BIQ5TuysnjOG9yIbtUWh5UUA7eMOG+
CZ1H02KO3NzUISa9r5nkUdVDMid97Uz6yNHi6uZcvE+5bK1+UO8bfE5VsgKIDkqd
Zewm+04yDcN68uGXb1CbGacgHLBZWhyuO0DNdMqXj/vXfia87x+uU3TXwy2ft9Te
u9IuusdqcPxwM8QDPT9vF5uOqeUlJONmhh4+SHK7fIwTj+tzkf4IUEBO0OxREUZ9
0S73Lc14nEnbdiinVJs+gSYYnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMqjNzr8
JXUIz/hhBp2DaKE1XC1iMB8GA1UdIwQYMBaAFOS/fVlgtrLzxSFB7ytgKtEU9Ayo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTNBNS81MDBDRkU5OERB
NjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2UEZJVUh2SzJBcTBSVDBE
S2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVMOTlXV0Myc3ZQRklVSHZLMkFxMFJUMERLZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
NTNBNS81MDBDRkU5OERBNjYxMUVDODBERkU3MzZDNEY5QUUwMi81TDk5V1dDMnN2
UEZJVUh2SzJBcTBSVDBES2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCfKTli47oKF7DaOWx4+99e7HWjogTrLhcwEWPLCZPS6riAdKEyxPoH
2FyO7UIOwFkzaGtkQMCbF1p1gqbPRhJXhflMOg/YY2k5f14uZ01Mud4/BLADf3vC
4xxqieL359lsPG+gFH53u+TwUcgk4T49hfaYceRnDp3z6gZBYQU8uX9WrDURjxNf
zWnXIIfPazQqKBgWZtRc3CpGTETiToMnc2yxujR9lIbDlXdgPGVryDurIVAi0DFO
oLKWXfNChVoSw6vhufEtgeJ3tzK0kyuPoHcTQS03m9DS15zqrza9juPJSk2o8u8B
5Gj6bux+dvQptIl1n05ks388L1uCtGzZ
-----END CERTIFICATE-----
Generated at Sat Jun 14 00:01:33 2025 by rpki-client