Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
File:                     ALcq1TM86q4aWFyCgInERVmZY_I.mft (raw, json)
Hash identifier:          2X1iYhnMeT0TH5b7T9UjhqhpGjo/SOI9hw47wIkyNnw=
Subject key identifier:   CB:23:36:EC:D2:8C:53:68:5B:86:6D:71:25:8B:F8:77:35:5F:FB:A8
Authority key identifier: 00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2
Certificate issuer:       /CN=A91380F7/serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
Certificate serial:       5E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
Manifest number:          5B
Signing time:             Fri 09 May 2025 06:11:00 +0000
Manifest this update:     Fri 09 May 2025 06:11:00 +0000
Manifest next update:     Fri 16 May 2025 06:11:00 +0000
Files and hashes:         1: ALcq1TM86q4aWFyCgInERVmZY_I.crl (hash: t+7avRgoBABxIcZcHOZGXEMgUmNj8TxTEmjO2AndUJw=)
                          2: 5D117282A7F911EF8E7B1773C4F9AE02.roa (hash: J45sLiwW4UVC5sdSS+IxX3cBMgJ0HE+7WdnowtCp0yk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl
                          rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 06:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380F7, serialNumber=00B72AD5333CEAAE1A585C828089C445599963F2
        Validity
            Not Before: May  9 06:11:00 2025 GMT
            Not After : May 16 06:11:00 2025 GMT
        Subject: CN=681d9c74-aeac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:63:44:50:b1:d4:d3:3c:27:ff:7f:45:b4:
                    61:c9:b7:b2:d6:05:47:84:8f:a9:16:20:35:6c:2a:
                    a9:66:70:36:f4:f3:65:ee:ca:8b:67:53:55:76:26:
                    64:1f:fb:ab:4d:70:bf:b1:b6:79:40:a9:99:e1:73:
                    68:68:84:3c:83:c6:16:c1:b2:a8:62:22:52:3f:a9:
                    0b:0b:a5:b2:aa:b0:f7:d6:34:b3:de:03:e0:2a:15:
                    f7:b2:3c:ae:33:24:15:bf:67:ba:4e:df:5a:72:e0:
                    b5:0e:fd:76:22:59:89:87:47:30:98:64:0d:56:27:
                    4f:9f:0c:27:f6:a9:7f:ea:67:30:06:80:be:b8:c5:
                    05:d6:bb:50:13:9c:3f:72:54:f1:0b:ba:6d:61:61:
                    28:26:1f:20:6a:64:2e:1c:35:bd:63:8c:21:fc:ee:
                    51:1e:6a:d6:48:83:45:e6:8e:d4:2f:53:e4:ef:54:
                    a5:9c:64:2f:25:6e:aa:4a:ec:ca:0a:99:3f:11:7b:
                    c3:2b:05:35:c5:2a:5b:1b:a1:52:81:c0:2e:67:73:
                    54:e1:d5:01:e5:65:eb:8e:a7:4e:da:c6:29:93:dd:
                    8f:6c:9d:22:36:7f:62:1e:f6:61:e0:60:93:fb:1d:
                    7b:2e:cf:f6:0b:ff:15:90:c9:9a:c7:8c:c2:6b:8a:
                    17:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:23:36:EC:D2:8C:53:68:5B:86:6D:71:25:8B:F8:77:35:5F:FB:A8
            X509v3 Authority Key Identifier:
                keyid:00:B7:2A:D5:33:3C:EA:AE:1A:58:5C:82:80:89:C4:45:59:99:63:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ALcq1TM86q4aWFyCgInERVmZY_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380F7/9F768AFAA7F811EFBB44F371C4F9AE02/ALcq1TM86q4aWFyCgInERVmZY_I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:0d:a6:25:e2:a2:2d:87:dc:8e:db:a3:34:26:60:fb:98:e5:
         96:81:70:25:c9:f3:e0:d9:03:cf:02:46:c8:8c:c5:cb:d5:e7:
         b9:67:9d:fd:2e:4b:79:2f:04:d7:b8:56:8c:fc:f6:39:45:d0:
         d9:9d:f2:b8:57:e1:59:d8:38:4c:54:ad:33:1d:e5:61:45:83:
         03:00:cb:a4:0d:d2:0a:ee:6e:44:e3:6e:a5:9c:04:8c:ad:34:
         02:10:9a:e4:fb:bb:2f:fe:f0:fd:2d:75:1e:bb:99:35:c9:eb:
         05:15:ae:d5:eb:c0:2e:0b:67:63:d7:8b:3f:b7:f5:79:a6:76:
         10:44:fb:81:df:bb:ad:0d:a0:1b:1c:56:53:f7:df:1f:dd:aa:
         bf:c5:44:83:dd:bc:b4:d9:c0:90:27:ac:95:56:42:5c:ea:8a:
         fb:91:68:1b:0f:98:c3:91:39:5e:d7:cd:fd:89:5e:b4:39:36:
         b5:66:6f:71:d3:d6:28:9b:33:b9:40:04:13:97:db:22:87:e2:
         76:28:ca:83:d9:25:e2:aa:76:75:84:a0:a8:e8:7f:a5:db:8f:
         d9:6a:e8:9a:8c:0b:50:54:68:53:9d:09:52:16:4e:34:6b:0f:
         b0:83:0c:fa:5b:20:47:fe:2c:04:f0:46:81:e2:3e:46:c8:79:
         5e:d0:4d:73
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz
ODBGNzExMC8GA1UEBRMoMDBCNzJBRDUzMzNDRUFBRTFBNTg1QzgyODA4OUM0NDU1
OTk5NjNGMjAeFw0yNTA1MDkwNjExMDBaFw0yNTA1MTYwNjExMDBaMBgxFjAUBgNV
BAMTDTY4MWQ5Yzc0LWFlYWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTmWNEULHU0zwn/39FtGHJt7LWBUeEj6kWIDVsKqlmcDb082XuyotnU1V2JmQf
+6tNcL+xtnlAqZnhc2hohDyDxhbBsqhiIlI/qQsLpbKqsPfWNLPeA+AqFfeyPK4z
JBW/Z7pO31py4LUO/XYiWYmHRzCYZA1WJ0+fDCf2qX/qZzAGgL64xQXWu1ATnD9y
VPELum1hYSgmHyBqZC4cNb1jjCH87lEeatZIg0XmjtQvU+TvVKWcZC8lbqpK7MoK
mT8Re8MrBTXFKlsboVKBwC5nc1Th1QHlZeuOp07aximT3Y9snSI2f2Ie9mHgYJP7
HXsuz/YL/xWQyZrHjMJrihcZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUyyM27NKM
U2hbhm1xJYv4dzVf+6gwHwYDVR0jBBgwFoAUALcq1TM86q4aWFyCgInERVmZY/Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4MEY3LzlGNzY4QUZBQTdG
ODExRUZCQjQ0RjM3MUM0RjlBRTAyL0FMY3ExVE04NnE0YVdGeUNnSW5FUlZtWllf
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvQUxjcTFUTTg2cTRhV0Z5Q2dJbkVSVm1aWV9JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4
MEY3LzlGNzY4QUZBQTdGODExRUZCQjQ0RjM3MUM0RjlBRTAyL0FMY3ExVE04NnE0
YVdGeUNnSW5FUlZtWllfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFQNpiXioi2H3I7bozQmYPuY5ZaBcCXJ8+DZA88CRsiMxcvV57lnnf0u
S3kvBNe4Voz89jlF0Nmd8rhX4VnYOExUrTMd5WFFgwMAy6QN0grubkTjbqWcBIyt
NAIQmuT7uy/+8P0tdR67mTXJ6wUVrtXrwC4LZ2PXiz+39XmmdhBE+4Hfu60NoBsc
VlP33x/dqr/FRIPdvLTZwJAnrJVWQlzqivuRaBsPmMOROV7Xzf2JXrQ5NrVmb3HT
1iibM7lABBOX2yKH4nYoyoPZJeKqdnWEoKjof6Xbj9lq6JqMC1BUaFOdCVIWTjRr
D7CDDPpbIEf+LATwRoHiPkbIeV7QTXM=
-----END CERTIFICATE-----
Generated at Sat May 10 05:22:29 2025 by rpki-client