Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
File:                     RjnSkJhvTwBU_cBZAURBYh06u_8.mft (raw, json)
Hash identifier:          s0k87qEgqYgrTxCsd7FTNbKloqfv0Tso2LGE3QC7xFU=
Subject key identifier:   3B:4B:1F:E3:84:B8:86:C8:AA:E5:2B:2C:FD:3D:F9:F2:AB:AC:18:72
Authority key identifier: 46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF
Certificate issuer:       /CN=A9146B71/serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
Certificate serial:       0328
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
Manifest number:          0321
Signing time:             Tue 13 May 2025 00:58:09 +0000
Manifest this update:     Tue 13 May 2025 00:58:08 +0000
Manifest next update:     Tue 20 May 2025 00:58:08 +0000
Files and hashes:         1: RjnSkJhvTwBU_cBZAURBYh06u_8.crl (hash: VjSDE6qi7gevEqnA04DaMvq3gd4rKeEdpZJ0Rcny9+8=)
                          2: 8719518C26AD11EDA881874BC4F9AE02.roa (hash: KKyWmXe2YCJmonEpi+LRlbRY47Oe+frZ0gDIA6/MoNY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl
                          rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 00:58:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808 (0x328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B71, serialNumber=4639D290986F4F0054FDC059014441621D3ABBFF
        Validity
            Not Before: May 13 00:58:08 2025 GMT
            Not After : May 20 00:58:08 2025 GMT
        Subject: CN=68229921-227f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:83:3a:c8:05:2c:15:17:59:e8:11:fb:bf:f6:
                    b6:af:3d:b2:1d:78:9c:fc:0a:e7:75:af:3e:b5:0e:
                    ba:7d:1b:40:64:d2:1b:9a:72:0a:27:7e:01:2b:78:
                    43:f3:cc:57:4c:b4:24:cf:ad:ed:6f:28:62:45:3c:
                    f8:4a:e7:36:ca:65:a0:2e:a8:39:b7:33:d1:3c:bd:
                    f9:a6:f9:a6:dd:80:ab:16:ed:78:0c:c6:fd:c2:d5:
                    96:24:5a:0a:bd:a8:dc:3e:0c:25:08:fb:ee:e6:cc:
                    eb:f4:18:f4:26:96:f7:24:b4:a0:16:ba:ac:af:f5:
                    3b:f4:8a:62:d7:f7:e9:bc:9b:03:b9:2b:6e:fd:70:
                    3e:7a:df:b0:59:bb:ec:fb:bb:aa:38:d4:1f:79:e2:
                    b2:12:81:a4:d7:7b:f0:ba:a9:3e:8e:48:52:b8:6b:
                    00:58:5c:5d:fb:bf:de:39:38:65:95:1d:7a:04:83:
                    a2:5e:46:2a:f6:22:6c:15:9c:c4:cd:bf:a3:9d:0b:
                    29:b2:ae:be:1f:91:ba:a9:e2:a3:70:e0:78:0f:20:
                    8f:09:5c:19:b1:46:9f:98:0a:23:69:dd:c7:46:d9:
                    94:17:9e:1d:8b:67:93:b5:69:9e:2e:93:2d:60:4b:
                    4f:19:c5:27:65:0f:59:98:d9:c3:55:6b:10:08:06:
                    c7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4B:1F:E3:84:B8:86:C8:AA:E5:2B:2C:FD:3D:F9:F2:AB:AC:18:72
            X509v3 Authority Key Identifier:
                keyid:46:39:D2:90:98:6F:4F:00:54:FD:C0:59:01:44:41:62:1D:3A:BB:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjnSkJhvTwBU_cBZAURBYh06u_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B71/F5407D1CCAB811EC87893C56C4F9AE02/RjnSkJhvTwBU_cBZAURBYh06u_8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1f:a7:c6:6c:ad:b1:92:57:55:99:b4:92:b1:58:95:29:7a:
         97:60:91:f0:e2:fd:88:d2:bc:c3:c0:aa:4a:67:85:d7:7a:4e:
         18:0a:f7:b6:34:bf:37:f6:5c:a1:2c:9b:a5:27:dd:47:3f:b0:
         b3:84:42:26:37:3f:fb:89:88:bd:d1:96:02:ea:ea:12:36:36:
         ba:5b:ca:84:72:0b:a8:91:8d:ed:7b:2a:c0:6b:3d:a3:cb:63:
         c8:5d:06:89:c0:ad:d0:d1:d2:e6:76:ab:11:1e:79:a5:1d:20:
         65:85:bf:3a:4a:ae:64:49:11:01:c1:82:29:81:ae:b9:39:69:
         ea:a5:6e:e0:8e:d6:4a:32:70:c3:91:94:b5:11:19:74:d1:eb:
         bb:72:96:cd:05:1a:a1:80:5f:08:e9:76:aa:0c:dd:70:43:b7:
         5d:2c:4b:c1:80:58:15:8b:78:33:33:c4:18:dd:a4:4c:2f:e3:
         d6:d9:ad:cf:8c:1d:4b:08:dd:49:b1:bf:c4:ef:76:7a:15:75:
         76:54:a9:56:ed:f6:b5:4e:dc:80:c0:df:93:56:69:65:eb:ef:
         74:3b:80:92:11:7d:50:9f:31:9d:4a:f3:8c:a5:64:8b:5a:3e:
         a8:0e:e4:d1:a8:3e:f0:c7:16:69:40:5e:84:9d:e8:5f:fa:3d:
         f6:aa:c4:19
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCNzExMTAvBgNVBAUTKDQ2MzlEMjkwOTg2RjRGMDA1NEZEQzA1OTAxNDQ0MTYy
MUQzQUJCRkYwHhcNMjUwNTEzMDA1ODA4WhcNMjUwNTIwMDA1ODA4WjAYMRYwFAYD
VQQDEw02ODIyOTkyMS0yMjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsYM6yAUsFRdZ6BH7v/a2rz2yHXic/Arnda8+tQ66fRtAZNIbmnIKJ34BK3hD
88xXTLQkz63tbyhiRTz4Suc2ymWgLqg5tzPRPL35pvmm3YCrFu14DMb9wtWWJFoK
vajcPgwlCPvu5szr9Bj0Jpb3JLSgFrqsr/U79Ipi1/fpvJsDuStu/XA+et+wWbvs
+7uqONQfeeKyEoGk13vwuqk+jkhSuGsAWFxd+7/eOThllR16BIOiXkYq9iJsFZzE
zb+jnQspsq6+H5G6qeKjcOB4DyCPCVwZsUafmAojad3HRtmUF54di2eTtWmeLpMt
YEtPGcUnZQ9ZmNnDVWsQCAbHMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDtLH+OE
uIbIquUrLP09+fKrrBhyMB8GA1UdIwQYMBaAFEY50pCYb08AVP3AWQFEQWIdOrv/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3MS9GNTQwN0QxQ0NB
QjgxMUVDODc4OTNDNTZDNEY5QUUwMi9Sam5Ta0podlR3QlVfY0JaQVVSQlloMDZ1
XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JqblNrSmh2VHdCVV9jQlpBVVJCWWgwNnVfOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkI3MS9GNTQwN0QxQ0NBQjgxMUVDODc4OTNDNTZDNEY5QUUwMi9Sam5Ta0podlR3
QlVfY0JaQVVSQlloMDZ1XzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdH6fGbK2xkldVmbSSsViVKXqXYJHw4v2I0rzDwKpKZ4XXek4YCve2
NL839lyhLJulJ91HP7CzhEImNz/7iYi90ZYC6uoSNja6W8qEcguokY3teyrAaz2j
y2PIXQaJwK3Q0dLmdqsRHnmlHSBlhb86Sq5kSREBwYIpga65OWnqpW7gjtZKMnDD
kZS1ERl00eu7cpbNBRqhgF8I6XaqDN1wQ7ddLEvBgFgVi3gzM8QY3aRML+PW2a3P
jB1LCN1Jsb/E73Z6FXV2VKlW7fa1TtyAwN+TVmll6+90O4CSEX1QnzGdSvOMpWSL
Wj6oDuTRqD7wxxZpQF6Enehf+j32qsQZ
-----END CERTIFICATE-----
Generated at Tue May 13 05:42:41 2025 by rpki-client