Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
File:                     KxUe1JZstlaQzZqoJiuKau0G5EM.mft (raw, json)
Hash identifier:          n/R24ayXMP+aSF8hvFgDpIyl0uTyHem+8jl6GaWlTqg=
Subject key identifier:   F5:3F:A5:57:4A:2F:6A:E7:8A:76:AB:A2:84:4B:16:F4:75:40:BB:B3
Authority key identifier: 2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43
Certificate issuer:       /CN=A911B871/serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
Certificate serial:       076D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
Manifest number:          075D
Signing time:             Wed 14 May 2025 21:41:23 +0000
Manifest this update:     Wed 14 May 2025 21:41:23 +0000
Manifest next update:     Wed 21 May 2025 21:41:23 +0000
Files and hashes:         1: KxUe1JZstlaQzZqoJiuKau0G5EM.crl (hash: SKjzSjfm8Zl1/dHtX6Ljy5rQKxwY1bHswZaqA7Y/Huo=)
                          2: 440FC47687C211EEA6A0667BC4F9AE02.roa (hash: bPVen4Q79bQMysYZB+1SSkGirdnYsj/wax4oaPllL9M=)
                          3: C4EEE8EE24E011EBA4C87F7DC4F9AE02.roa (hash: U4O6uXSOF+3gB8WDqXNclHvwBePMcUEtPgGRnogD3Pk=)
                          4: 8A01BCDC1DA811EBAFA5B44FC4F9AE02.roa (hash: EPNFm1X8MnpnhMfq1ASr/F02aUDuHCY7XYN9aoUZxhY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl
                          rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 21:41:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1901 (0x76d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B871, serialNumber=2B151ED4966CB65690CD9AA8262B8A6AED06E443
        Validity
            Not Before: May 14 21:41:23 2025 GMT
            Not After : May 21 21:41:23 2025 GMT
        Subject: CN=68250e03-d69b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3a:d0:73:9e:1f:27:ef:a4:85:95:69:3f:68:
                    ca:9d:a0:34:2a:4b:93:b2:21:8b:12:cc:40:40:79:
                    eb:f4:f4:ef:2f:2b:0a:b9:02:e5:35:6d:25:74:62:
                    53:c1:3f:83:67:89:cf:a7:df:1e:76:56:bd:94:f7:
                    b6:6a:28:33:d7:6c:e2:75:f9:c9:11:85:7f:28:49:
                    cf:51:75:e7:46:53:03:58:66:c3:28:1e:4d:10:37:
                    cb:15:f1:cf:06:f2:3a:d8:b6:c6:d9:66:29:ed:b0:
                    c3:ea:80:59:88:e2:f5:08:6e:f6:61:f0:1b:db:9d:
                    82:98:4b:4a:37:5d:9b:c5:a5:a4:ed:7c:d0:83:33:
                    a2:08:c2:d2:fb:32:d7:22:6b:3f:2c:6f:f5:cf:1a:
                    3c:65:73:c5:c9:11:1a:a7:d6:a7:83:d5:d7:9d:ce:
                    e9:89:54:1b:8f:90:77:e4:f2:35:64:c2:ad:00:a0:
                    a7:d8:c5:b7:90:da:b9:60:c7:f2:77:b6:91:87:b6:
                    ac:e6:d5:c6:08:4a:58:e6:4a:f3:74:b1:18:dc:90:
                    7c:81:22:34:a1:ca:1d:cc:b9:c4:11:17:57:a9:6a:
                    47:79:e3:79:e5:47:65:9f:9b:13:35:59:b2:a7:52:
                    47:ef:d9:7b:79:b9:c0:3d:8d:4e:85:47:ac:05:c4:
                    d4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3F:A5:57:4A:2F:6A:E7:8A:76:AB:A2:84:4B:16:F4:75:40:BB:B3
            X509v3 Authority Key Identifier:
                keyid:2B:15:1E:D4:96:6C:B6:56:90:CD:9A:A8:26:2B:8A:6A:ED:06:E4:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KxUe1JZstlaQzZqoJiuKau0G5EM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B871/8A2DABE01DA711EB80712A4FC4F9AE02/KxUe1JZstlaQzZqoJiuKau0G5EM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:60:cc:e1:a1:5e:7f:fa:46:74:02:21:d3:96:e7:ce:f4:f6:
         73:30:41:a9:6f:cb:04:74:d8:f2:29:51:12:2d:88:1c:d1:cb:
         8e:e5:c7:63:2e:07:00:59:aa:21:b6:71:6d:3b:09:56:46:00:
         81:21:b7:68:4d:8a:5c:42:04:70:9b:9b:4e:f9:31:f2:da:dd:
         02:a8:73:64:cc:8f:9e:a0:63:13:97:01:e8:26:70:ae:53:be:
         9e:69:1c:2a:6c:af:ba:8f:5d:61:ed:13:61:e9:a4:09:8c:fb:
         f3:7d:0a:0d:c4:65:86:9d:bf:84:26:d2:4c:00:4f:e7:fd:d4:
         45:2f:4c:b4:15:7f:77:c7:cf:9b:34:94:fe:34:c4:bf:5c:96:
         43:6f:cb:1d:cf:3c:46:db:87:59:ac:f2:0d:81:d3:9f:ed:6f:
         92:5d:96:3c:f6:e3:62:d6:31:49:97:2b:8d:c4:13:f3:a1:a8:
         f8:0b:62:da:4d:3e:ab:e5:d7:58:d5:fa:2e:1a:3f:e5:b0:1f:
         0c:b1:81:c6:dc:98:97:fe:a2:f6:bc:15:33:dc:d1:b0:98:3c:
         df:7c:b5:38:7b:af:3a:3b:16:61:7d:a2:72:db:7d:10:2a:b7:
         8a:13:a2:b0:fd:93:1c:13:a7:e6:4d:e7:03:5e:3b:18:2c:eb:
         85:73:4d:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB20wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUI4NzExMTAvBgNVBAUTKDJCMTUxRUQ0OTY2Q0I2NTY5MENEOUFBODI2MkI4QTZB
RUQwNkU0NDMwHhcNMjUwNTE0MjE0MTIzWhcNMjUwNTIxMjE0MTIzWjAYMRYwFAYD
VQQDEw02ODI1MGUwMy1kNjliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0TrQc54fJ++khZVpP2jKnaA0KkuTsiGLEsxAQHnr9PTvLysKuQLlNW0ldGJT
wT+DZ4nPp98edla9lPe2aigz12zidfnJEYV/KEnPUXXnRlMDWGbDKB5NEDfLFfHP
BvI62LbG2WYp7bDD6oBZiOL1CG72YfAb252CmEtKN12bxaWk7XzQgzOiCMLS+zLX
Ims/LG/1zxo8ZXPFyREap9ang9XXnc7piVQbj5B35PI1ZMKtAKCn2MW3kNq5YMfy
d7aRh7as5tXGCEpY5krzdLEY3JB8gSI0ocodzLnEERdXqWpHeeN55Udln5sTNVmy
p1JH79l7ebnAPY1OhUesBcTUYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPU/pVdK
L2rninarooRLFvR1QLuzMB8GA1UdIwQYMBaAFCsVHtSWbLZWkM2aqCYrimrtBuRD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjg3MS84QTJEQUJFMDFE
QTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3RsYVF6WnFvSml1S2F1MEc1
RU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0t4VWUxSlpzdGxhUXpacW9KaXVLYXUwRzVFTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Qjg3MS84QTJEQUJFMDFEQTcxMUVCODA3MTJBNEZDNEY5QUUwMi9LeFVlMUpac3Rs
YVF6WnFvSml1S2F1MEc1RU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQChYMzhoV5/+kZ0AiHTlufO9PZzMEGpb8sEdNjyKVESLYgc0cuO5cdj
LgcAWaohtnFtOwlWRgCBIbdoTYpcQgRwm5tO+THy2t0CqHNkzI+eoGMTlwHoJnCu
U76eaRwqbK+6j11h7RNh6aQJjPvzfQoNxGWGnb+EJtJMAE/n/dRFL0y0FX93x8+b
NJT+NMS/XJZDb8sdzzxG24dZrPINgdOf7W+SXZY89uNi1jFJlyuNxBPzoaj4C2La
TT6r5ddY1fouGj/lsB8MsYHG3JiX/qL2vBUz3NGwmDzffLU4e686OxZhfaJy230Q
KreKE6Kw/ZMcE6fmTecDXjsYLOuFc000
-----END CERTIFICATE-----
Generated at Fri May 16 19:13:50 2025 by rpki-client