Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
File:                     fSxGJ1bUkw5gMpuitqcGbzsImu0.mft (raw, json)
Hash identifier:          vtiEoXe0NiG5ESg6ICQwo6QRP1lAKbvjUQGKI3Oskjw=
Subject key identifier:   86:79:9D:1D:41:6E:38:7C:D0:B1:7A:9D:47:A3:E7:99:A9:06:5F:E4
Authority key identifier: 7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED
Certificate issuer:       /CN=A9151631/serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED
Certificate serial:       061D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
Manifest number:          0617
Signing time:             Wed 14 May 2025 22:51:33 +0000
Manifest this update:     Wed 14 May 2025 22:51:33 +0000
Manifest next update:     Wed 21 May 2025 22:51:33 +0000
Files and hashes:         1: fSxGJ1bUkw5gMpuitqcGbzsImu0.crl (hash: qVCw1Qh+APux/3cM8fTnpym7AAMn9JskUJWOCPvka+Y=)
                          2: 44F388569DA411EBA820C56AC4F9AE02.roa (hash: 71xWzWQEtjmsg9iGQHPh0f8acNegF6g7VmKGwD79bmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl
                          rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 22:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1565 (0x61d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151631, serialNumber=7D2C462756D4930E60329BA2B6A7066F3B089AED
        Validity
            Not Before: May 14 22:51:33 2025 GMT
            Not After : May 21 22:51:33 2025 GMT
        Subject: CN=68251e75-6691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:03:3a:03:c5:a3:0a:cb:54:0f:21:78:3b:
                    fe:c9:eb:d0:a6:e0:88:ab:a5:e1:be:03:c3:16:65:
                    c8:c9:0d:47:0f:b3:08:17:92:6a:70:5b:2e:e9:1d:
                    07:92:95:af:c0:f1:b2:75:7f:6f:91:59:21:74:37:
                    6d:64:f8:df:c1:a0:01:f6:61:45:68:49:69:e3:26:
                    1e:a3:3a:ea:3f:27:60:ed:ef:0f:22:65:04:78:c9:
                    7b:13:61:ae:8b:bf:40:19:65:48:6f:18:1c:2f:e6:
                    43:20:1e:f2:bd:a9:05:de:f8:1a:50:14:c7:3e:db:
                    48:79:ab:f5:71:6d:ff:3a:50:70:35:4e:6e:5c:11:
                    f1:fd:6d:c5:95:08:88:c5:e4:16:f6:85:5e:05:34:
                    e5:26:54:68:69:02:57:f5:bc:88:08:fd:42:4c:3a:
                    71:24:b2:1c:f6:f8:ad:ee:75:bc:cf:0b:d7:0b:63:
                    d7:01:b2:77:9a:6f:14:c8:3f:0f:08:c5:8f:12:c0:
                    71:23:5a:00:53:45:73:ea:ca:db:67:15:3a:c3:6e:
                    59:be:81:a6:6c:78:7c:b7:03:aa:4d:b7:bf:e6:ea:
                    26:5d:6e:34:bf:5e:81:f2:12:2a:25:12:be:96:8a:
                    b3:58:9e:83:c2:a0:1c:06:23:a2:ee:91:8a:94:e6:
                    24:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:79:9D:1D:41:6E:38:7C:D0:B1:7A:9D:47:A3:E7:99:A9:06:5F:E4
            X509v3 Authority Key Identifier:
                keyid:7D:2C:46:27:56:D4:93:0E:60:32:9B:A2:B6:A7:06:6F:3B:08:9A:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fSxGJ1bUkw5gMpuitqcGbzsImu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151631/F05158249DA211EBB439AA69C4F9AE02/fSxGJ1bUkw5gMpuitqcGbzsImu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ce:03:32:f6:20:52:84:17:a9:2f:14:30:a1:81:2a:21:63:
         3d:7d:e5:c1:6e:ba:af:7b:8d:cd:e2:08:b3:33:c9:78:68:23:
         26:f5:1a:f7:e0:77:0e:8b:46:50:76:b1:34:1a:48:97:27:e1:
         ed:5c:2e:d5:ce:06:8f:02:03:02:5b:0c:de:02:12:c5:fb:4d:
         0c:dc:8a:3e:cd:78:e6:ba:99:09:d0:ac:f3:b7:8a:0a:39:bd:
         e8:60:fd:ae:c4:04:e3:cf:f6:c8:7a:32:e5:48:05:dc:78:1e:
         f6:d6:5c:66:5a:fb:c2:64:bd:0b:6b:47:42:ae:a7:f9:89:aa:
         43:db:73:50:39:9f:04:84:2a:62:f3:19:ae:6f:11:cc:d9:3e:
         3e:d5:11:43:84:c1:de:1d:c2:de:27:c2:2d:41:8d:97:32:79:
         02:a7:9a:36:84:f5:3f:39:38:bb:f9:d2:60:50:fd:d2:c0:35:
         14:84:27:40:57:7d:8b:08:4c:c2:a7:ac:fb:5e:25:f8:9b:19:
         57:d0:f8:54:34:77:37:84:6e:0d:68:7a:db:aa:40:53:7a:bb:
         80:fc:e0:c0:fc:0b:14:0d:45:57:c5:16:8e:8d:cc:7a:59:e5:
         e0:44:14:82:24:b5:dd:95:42:ca:4e:d3:4c:34:2b:6d:83:b8:
         03:14:7e:52
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE2MzExMTAvBgNVBAUTKDdEMkM0NjI3NTZENDkzMEU2MDMyOUJBMkI2QTcwNjZG
M0IwODlBRUQwHhcNMjUwNTE0MjI1MTMzWhcNMjUwNTIxMjI1MTMzWjAYMRYwFAYD
VQQDEw02ODI1MWU3NS02NjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvxwDOgPFowrLVA8heDv+yevQpuCIq6XhvgPDFmXIyQ1HD7MIF5JqcFsu6R0H
kpWvwPGydX9vkVkhdDdtZPjfwaAB9mFFaElp4yYeozrqPydg7e8PImUEeMl7E2Gu
i79AGWVIbxgcL+ZDIB7yvakF3vgaUBTHPttIeav1cW3/OlBwNU5uXBHx/W3FlQiI
xeQW9oVeBTTlJlRoaQJX9byICP1CTDpxJLIc9vit7nW8zwvXC2PXAbJ3mm8UyD8P
CMWPEsBxI1oAU0Vz6srbZxU6w25ZvoGmbHh8twOqTbe/5uomXW40v16B8hIqJRK+
loqzWJ6DwqAcBiOi7pGKlOYkmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIZ5nR1B
bjh80LF6nUej55mpBl/kMB8GA1UdIwQYMBaAFH0sRidW1JMOYDKboranBm87CJrt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTYzMS9GMDUxNTgyNDlE
QTIxMUVCQjQzOUFBNjlDNEY5QUUwMi9mU3hHSjFiVWt3NWdNcHVpdHFjR2J6c0lt
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZTeEdKMWJVa3c1Z01wdWl0cWNHYnpzSW11MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTYzMS9GMDUxNTgyNDlEQTIxMUVCQjQzOUFBNjlDNEY5QUUwMi9mU3hHSjFiVWt3
NWdNcHVpdHFjR2J6c0ltdTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBszgMy9iBShBepLxQwoYEqIWM9feXBbrqve43N4gizM8l4aCMm9Rr3
4HcOi0ZQdrE0GkiXJ+HtXC7VzgaPAgMCWwzeAhLF+00M3Io+zXjmupkJ0Kzzt4oK
Ob3oYP2uxATjz/bIejLlSAXceB721lxmWvvCZL0La0dCrqf5iapD23NQOZ8EhCpi
8xmubxHM2T4+1RFDhMHeHcLeJ8ItQY2XMnkCp5o2hPU/OTi7+dJgUP3SwDUUhCdA
V32LCEzCp6z7XiX4mxlX0PhUNHc3hG4NaHrbqkBTeruA/ODA/AsUDUVXxRaOjcx6
WeXgRBSCJLXdlULKTtNMNCttg7gDFH5S
-----END CERTIFICATE-----
Generated at Sat May 17 00:02:18 2025 by rpki-client