Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
File:                     L-bMC5qdlV4-LFnV2fjukZcYAG8.mft (raw, json)
Hash identifier:          WcgzhaV87LyRGGYMjGCsqeRW2ADwnyao8LN9WDGcGsE=
Subject key identifier:   E1:B7:C0:4C:29:65:7D:E1:B3:1E:D3:4D:4D:ED:C7:9D:D9:DC:5A:6E
Authority key identifier: 2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F
Certificate issuer:       /CN=A91FAC84/serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
Manifest number:          0164
Signing time:             Mon 09 Jun 2025 03:02:56 +0000
Manifest this update:     Mon 09 Jun 2025 03:02:55 +0000
Manifest next update:     Mon 16 Jun 2025 03:02:55 +0000
Files and hashes:         1: L-bMC5qdlV4-LFnV2fjukZcYAG8.crl (hash: GXlhZDTi1WZqHXowYeIoI7NmiVV4DBWu7+6uT+5o8ZU=)
                          2: C4CA725C687011EFA523204EC4F9AE02.roa (hash: bB5I0J8DTK3q/hJblz4A/ucUMBmJS2GVLM6wagxtpQo=)
                          3: 9E0E36BC687011EFB37CF04DC4F9AE02.roa (hash: xWgHy7isZUitDTjnS0WDq6EA62pHQrt2pMCDvawXwME=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl
                          rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 16 Jun 2025 03:02:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAC84, serialNumber=2FE6CC0B9A9D955E3E2C59D5D9F8EE919718006F
        Validity
            Not Before: Jun  9 03:02:55 2025 GMT
            Not After : Jun 16 03:02:55 2025 GMT
        Subject: CN=68464ee0-a093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6a:92:ec:51:5a:50:03:45:7b:0c:9f:c4:17:
                    d3:c8:5c:01:30:fd:da:e2:73:be:c7:f7:51:cb:72:
                    62:53:59:cd:1c:a8:55:26:45:c7:07:05:2c:8a:88:
                    78:87:2f:19:54:d9:3a:8c:88:ea:66:50:95:6c:ef:
                    0c:a9:bd:83:3e:3f:95:9b:24:72:b2:45:e3:3c:fa:
                    f9:24:b6:49:1f:34:0a:56:c3:80:6c:01:c0:be:31:
                    4a:13:2b:2c:5a:31:2a:2d:5c:79:ba:51:93:12:59:
                    b6:db:f3:e1:fc:d4:02:10:d0:78:a9:3e:ce:b6:68:
                    f5:1e:d9:c1:d0:0f:71:b3:a9:e3:45:5c:b9:45:d8:
                    39:b2:fb:5b:6d:f7:39:60:37:3e:69:29:48:27:a8:
                    49:85:92:c4:df:b1:b3:26:d9:c4:fc:b5:16:43:f0:
                    53:7f:e9:2e:63:97:87:f0:ff:cb:07:f3:7e:c0:ad:
                    fd:de:0d:29:ef:ad:4f:ea:a4:b5:18:b6:cd:dc:39:
                    39:13:cd:85:5f:b8:95:e5:95:36:51:fd:eb:10:1f:
                    62:20:b2:06:05:45:11:e9:29:c1:17:00:ac:8c:02:
                    15:f3:80:0b:05:11:c0:10:66:b2:af:57:a0:43:0c:
                    b1:e2:77:4f:41:dc:fd:83:fc:61:cd:06:17:1e:0d:
                    25:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B7:C0:4C:29:65:7D:E1:B3:1E:D3:4D:4D:ED:C7:9D:D9:DC:5A:6E
            X509v3 Authority Key Identifier:
                keyid:2F:E6:CC:0B:9A:9D:95:5E:3E:2C:59:D5:D9:F8:EE:91:97:18:00:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L-bMC5qdlV4-LFnV2fjukZcYAG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAC84/DD5C9EBC2B8611EEA69F4B17C4F9AE02/L-bMC5qdlV4-LFnV2fjukZcYAG8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9f:bf:e8:9a:f2:96:9f:35:02:83:4b:c0:14:ad:37:50:f6:
         a8:37:5b:72:ee:d3:84:89:ae:75:35:7c:c6:ed:fd:b6:08:73:
         dd:cd:1f:95:7b:f9:16:f4:4e:f2:03:c2:ee:b6:1b:5c:c1:96:
         ea:d3:d4:21:f0:c7:a7:bf:df:56:8a:b1:25:b1:de:33:7f:af:
         d6:4c:e7:0d:31:ef:5d:46:10:32:46:4b:70:88:78:a1:95:f4:
         29:1a:13:52:72:e0:95:99:9a:5a:f8:64:07:4e:ff:5b:57:16:
         97:48:1d:3b:bf:bd:4e:93:f2:a9:85:d0:73:6b:e1:1c:bf:78:
         84:66:0d:87:47:e5:ec:65:c9:96:63:7e:5a:e5:80:38:53:ec:
         fa:9f:95:fe:bc:f9:1a:a0:9a:4b:33:9b:c2:8d:d2:0e:7d:68:
         b8:c0:47:d8:10:b8:4b:49:85:bd:0e:fe:17:a2:0a:7e:31:e0:
         bc:ff:99:22:82:02:ce:46:e6:53:5d:45:45:76:45:10:67:01:
         2b:ab:6e:70:e4:ae:d3:45:01:10:b5:19:ad:60:17:17:e7:67:
         6c:00:59:ff:0c:a7:f3:1c:7a:20:23:72:dd:5a:06:45:b9:11:
         e9:fa:9e:94:40:c0:6b:0f:18:2d:5d:f5:00:5b:38:2e:ad:be:
         99:33:1a:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkFDODQxMTAvBgNVBAUTKDJGRTZDQzBCOUE5RDk1NUUzRTJDNTlENUQ5RjhFRTkx
OTcxODAwNkYwHhcNMjUwNjA5MDMwMjU1WhcNMjUwNjE2MDMwMjU1WjAYMRYwFAYD
VQQDEw02ODQ2NGVlMC1hMDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0mqS7FFaUANFewyfxBfTyFwBMP3a4nO+x/dRy3JiU1nNHKhVJkXHBwUsioh4
hy8ZVNk6jIjqZlCVbO8Mqb2DPj+VmyRyskXjPPr5JLZJHzQKVsOAbAHAvjFKEyss
WjEqLVx5ulGTElm22/Ph/NQCENB4qT7Otmj1HtnB0A9xs6njRVy5Rdg5svtbbfc5
YDc+aSlIJ6hJhZLE37GzJtnE/LUWQ/BTf+kuY5eH8P/LB/N+wK393g0p761P6qS1
GLbN3Dk5E82FX7iV5ZU2Uf3rEB9iILIGBUUR6SnBFwCsjAIV84ALBRHAEGayr1eg
Qwyx4ndPQdz9g/xhzQYXHg0lIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOG3wEwp
ZX3hsx7TTU3tx53Z3FpuMB8GA1UdIwQYMBaAFC/mzAuanZVePixZ1dn47pGXGABv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUM4NC9ERDVDOUVCQzJC
ODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxWNC1MRm5WMmZqdWtaY1lB
RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0wtYk1DNXFkbFY0LUxGblYyZmp1a1pjWUFHOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QUM4NC9ERDVDOUVCQzJCODYxMUVFQTY5RjRCMTdDNEY5QUUwMi9MLWJNQzVxZGxW
NC1MRm5WMmZqdWtaY1lBRzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCBn7/omvKWnzUCg0vAFK03UPaoN1ty7tOEia51NXzG7f22CHPdzR+V
e/kW9E7yA8LuthtcwZbq09Qh8Menv99WirElsd4zf6/WTOcNMe9dRhAyRktwiHih
lfQpGhNScuCVmZpa+GQHTv9bVxaXSB07v71Ok/KphdBza+Ecv3iEZg2HR+XsZcmW
Y35a5YA4U+z6n5X+vPkaoJpLM5vCjdIOfWi4wEfYELhLSYW9Dv4Xogp+MeC8/5ki
ggLORuZTXUVFdkUQZwErq25w5K7TRQEQtRmtYBcX52dsAFn/DKfzHHogI3LdWgZF
uRHp+p6UQMBrDxgtXfUAWzgurb6ZMxrP
-----END CERTIFICATE-----
Generated at Tue Jun 10 22:21:35 2025 by rpki-client