Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
File:                     AduB721jlOZtOzIxW0eevteZyTc.mft (raw, json)
Hash identifier:          vTimFbmBz9cyV0YbO4OxuP10g/U4u7qnO3S1f8/b58E=
Subject key identifier:   FA:03:D0:19:8E:12:79:04:AE:25:79:C5:84:E7:9F:CE:FC:8D:A8:0D
Authority key identifier: 01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37
Certificate issuer:       /CN=A91FECDA/serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937
Certificate serial:       0F4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
Manifest number:          0F42
Signing time:             Fri 30 May 2025 17:46:47 +0000
Manifest this update:     Fri 30 May 2025 17:46:47 +0000
Manifest next update:     Fri 06 Jun 2025 17:46:47 +0000
Files and hashes:         1: AduB721jlOZtOzIxW0eevteZyTc.crl (hash: 6pUpNmyNMui0W+AbWCfSfGeJDVVVqz61WTRMUwONwQ4=)
                          2: 85B9F090F35011EFAE695322C4F9AE02.roa (hash: lww/ZRWFPgZIaev9PDmaV5kjaByxeNEFJJYVjFLwNzI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl
                          rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 17:46:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3915 (0xf4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FECDA, serialNumber=01DB81EF6D6394E66D3B32315B479EBED799C937
        Validity
            Not Before: May 30 17:46:47 2025 GMT
            Not After : Jun  6 17:46:47 2025 GMT
        Subject: CN=6839ef07-1815
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:aa:aa:2b:c9:a9:a5:97:60:71:2a:d2:ca:
                    e0:23:fa:b1:5e:35:80:9f:73:4b:ea:b6:42:fd:e3:
                    5a:70:06:86:c0:bd:45:2c:b4:c4:99:fd:31:24:36:
                    14:54:c1:73:3f:46:a1:00:b3:bb:15:b5:6d:1d:8c:
                    69:d0:6f:30:5d:0c:e7:cf:e9:22:31:4b:39:5d:59:
                    0d:b6:2b:f3:71:a5:cd:ff:e9:19:e4:51:db:6c:75:
                    98:02:39:b0:76:0e:a2:30:ac:3b:d0:a8:5b:df:ce:
                    f6:1c:e1:03:c0:37:98:c5:a4:5e:bc:b6:9d:32:2f:
                    cf:11:b8:62:86:79:1b:cf:b2:e0:78:e3:e6:27:4e:
                    c9:e6:64:b0:aa:21:a9:cf:94:d7:1d:70:ff:81:9c:
                    ea:fe:87:61:de:a5:76:02:ca:cf:3b:0a:2e:6d:9a:
                    a3:ca:20:24:15:38:64:c6:3c:38:59:fd:c4:35:f2:
                    0a:9b:0f:04:32:40:34:b9:08:2d:7f:d7:51:9c:05:
                    4a:1a:a3:c0:8c:98:1c:57:b1:dc:81:f4:44:3d:dd:
                    3b:69:3c:d8:3d:c8:9c:c2:b2:d9:70:5b:e3:77:3d:
                    b0:ba:91:25:9b:fc:35:fc:7e:6a:a1:f5:2a:06:55:
                    a1:30:06:57:73:90:28:b9:72:47:2c:64:a6:67:26:
                    c2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:03:D0:19:8E:12:79:04:AE:25:79:C5:84:E7:9F:CE:FC:8D:A8:0D
            X509v3 Authority Key Identifier:
                keyid:01:DB:81:EF:6D:63:94:E6:6D:3B:32:31:5B:47:9E:BE:D7:99:C9:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AduB721jlOZtOzIxW0eevteZyTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FECDA/8A88F1046F9C11E9A5074B2FC4F9AE02/AduB721jlOZtOzIxW0eevteZyTc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ea:9f:e0:7c:26:b1:96:00:09:65:98:05:e6:dc:3c:75:73:
         6d:2e:10:f9:94:ee:fb:5d:22:0c:d0:9d:67:cc:36:4c:bc:79:
         b8:d8:04:b2:44:67:34:b8:90:57:0b:50:c4:8c:8d:08:cd:97:
         16:44:aa:89:65:10:d2:c5:77:95:92:4c:21:6b:47:a7:ca:2e:
         0c:40:a6:d6:07:b1:6c:97:c8:93:ee:12:6b:f8:dc:6f:84:96:
         4f:9a:e7:2f:58:bd:a3:dd:1b:fc:29:20:89:e9:22:97:b4:8d:
         f7:2f:ab:fc:8b:f7:2f:46:28:8f:f8:cf:38:b4:ea:d0:4a:af:
         6d:ef:25:bb:13:95:59:41:a6:37:d0:c5:7f:0d:19:46:36:92:
         8c:fb:88:2d:2e:81:35:ff:79:05:e8:4d:90:8e:3d:7f:40:4f:
         41:80:5a:90:d2:55:b4:2f:3e:c9:35:b9:7b:aa:85:ad:2a:3f:
         29:8a:4a:07:e6:9b:c8:e3:b2:b4:6d:93:65:f1:bc:5c:fb:80:
         6b:95:a9:2f:4d:b6:55:61:b4:63:e4:b6:c2:53:77:b7:3a:79:
         c8:c5:38:3c:0f:f1:01:39:ee:1b:d3:e8:4e:f5:2e:09:ac:dd:
         0b:be:7a:78:23:b3:59:7a:1e:da:9b:91:ff:58:82:63:2b:b9:
         92:3d:49:96
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkVDREExMTAvBgNVBAUTKDAxREI4MUVGNkQ2Mzk0RTY2RDNCMzIzMTVCNDc5RUJF
RDc5OUM5MzcwHhcNMjUwNTMwMTc0NjQ3WhcNMjUwNjA2MTc0NjQ3WjAYMRYwFAYD
VQQDEw02ODM5ZWYwNy0xODE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv+6qqivJqaWXYHEq0srgI/qxXjWAn3NL6rZC/eNacAaGwL1FLLTEmf0xJDYU
VMFzP0ahALO7FbVtHYxp0G8wXQznz+kiMUs5XVkNtivzcaXN/+kZ5FHbbHWYAjmw
dg6iMKw70Khb3872HOEDwDeYxaRevLadMi/PEbhihnkbz7LgeOPmJ07J5mSwqiGp
z5TXHXD/gZzq/odh3qV2AsrPOwoubZqjyiAkFThkxjw4Wf3ENfIKmw8EMkA0uQgt
f9dRnAVKGqPAjJgcV7HcgfREPd07aTzYPcicwrLZcFvjdz2wupElm/w1/H5qofUq
BlWhMAZXc5AouXJHLGSmZybC+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoD0BmO
EnkEriV5xYTnn878jagNMB8GA1UdIwQYMBaAFAHbge9tY5TmbTsyMVtHnr7Xmck3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUNEQS84QTg4RjEwNDZG
OUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxPWnRPekl4VzBlZXZ0ZVp5
VGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FkdUI3MjFqbE9adE96SXhXMGVldnRlWnlUYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUNEQS84QTg4RjEwNDZGOUMxMUU5QTUwNzRCMkZDNEY5QUUwMi9BZHVCNzIxamxP
WnRPekl4VzBlZXZ0ZVp5VGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAg6p/gfCaxlgAJZZgF5tw8dXNtLhD5lO77XSIM0J1nzDZMvHm42ASy
RGc0uJBXC1DEjI0IzZcWRKqJZRDSxXeVkkwha0enyi4MQKbWB7Fsl8iT7hJr+Nxv
hJZPmucvWL2j3Rv8KSCJ6SKXtI33L6v8i/cvRiiP+M84tOrQSq9t7yW7E5VZQaY3
0MV/DRlGNpKM+4gtLoE1/3kF6E2Qjj1/QE9BgFqQ0lW0Lz7JNbl7qoWtKj8pikoH
5pvI47K0bZNl8bxc+4BrlakvTbZVYbRj5LbCU3e3OnnIxTg8D/EBOe4b0+hO9S4J
rN0Lvnp4I7NZeh7am5H/WIJjK7mSPUmW
-----END CERTIFICATE-----
Generated at Sat May 31 14:33:35 2025 by rpki-client