Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
File:                     eF4L_we5A3xgM0st8zaSgaTcP1o.mft (raw, json)
Hash identifier:          pfi018qLBEDjhwzWDRgmkRsUUEKDWsdSUFyAUuoLXA0=
Subject key identifier:   81:DE:A3:82:DB:13:BC:08:B1:18:B3:9B:26:CD:14:EF:CC:AC:97:7A
Authority key identifier: 78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A
Certificate issuer:       /CN=A915465A/serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
Certificate serial:       0792
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
Manifest number:          076E
Signing time:             Mon 12 May 2025 21:23:05 +0000
Manifest this update:     Mon 12 May 2025 21:23:05 +0000
Manifest next update:     Mon 19 May 2025 21:23:05 +0000
Files and hashes:         1: eF4L_we5A3xgM0st8zaSgaTcP1o.crl (hash: RohxNct6IOHUjWGVTx47absHYHfvP2fWQuosZ7oHbaQ=)
                          2: 7E099DB21C5611EBB91D2683C4F9AE02.roa (hash: 5GuYDpWjP0H4MJ3DxdkwBn6X7wj5+kTU7yH+e2yV0zQ=)
                          3: 39FBB4168B9811EE9C0BA252C4F9AE02.roa (hash: 2iVUtqGygZmmPFfaI6hSltedKhRAuZW7CDGbz6IyeRI=)
                          4: 3ABCE5008B9811EE9C0BA252C4F9AE02.roa (hash: wlyD169BX96xOiFFRFEDGAmZtHB8cN4i1GCqPo9RNQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl
                          rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 21:23:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1938 (0x792)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915465A, serialNumber=785E0BFF07B9037C60334B2DF3369281A4DC3F5A
        Validity
            Not Before: May 12 21:23:05 2025 GMT
            Not After : May 19 21:23:05 2025 GMT
        Subject: CN=682266b9-e3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9a:87:1e:76:fa:ff:74:c5:cf:5a:32:96:2a:
                    83:7d:31:75:3d:06:c5:f3:6f:3b:ff:65:1c:09:09:
                    7a:73:30:c5:7e:d7:d9:3f:3e:53:b3:f8:64:0a:2e:
                    7d:d9:6c:1f:4a:a3:20:be:29:97:2f:b0:da:a1:d4:
                    15:58:61:8f:5a:9a:7c:f6:b0:13:50:84:d0:d6:c8:
                    77:19:75:d4:b6:13:59:f8:1f:06:e6:c2:91:21:44:
                    ea:ba:8c:df:09:47:0e:26:59:5a:77:97:5d:ee:bb:
                    02:c6:b4:8f:40:a2:a2:da:1b:08:3d:4e:83:7e:6a:
                    9a:7b:e0:01:f6:ae:08:b9:15:18:9f:e2:04:b9:7f:
                    4c:9e:6e:7c:6b:2a:d2:de:b0:47:db:2e:19:a2:2c:
                    1d:77:dc:88:d9:90:55:29:58:f0:65:2c:ae:d5:4e:
                    69:a6:c6:fc:32:8d:9e:04:83:bf:79:8a:c7:92:81:
                    2a:62:68:6e:32:65:a4:33:78:9c:fe:37:13:e7:9e:
                    df:84:63:0d:31:39:c8:21:f1:30:b5:1f:d4:55:22:
                    1c:c9:61:ec:21:a8:23:1f:50:fc:ef:de:b4:50:9a:
                    5c:2d:55:d9:88:08:8c:f7:89:e7:95:ed:5d:30:17:
                    64:44:a7:33:4e:41:fb:be:d3:a8:50:70:4f:8e:89:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DE:A3:82:DB:13:BC:08:B1:18:B3:9B:26:CD:14:EF:CC:AC:97:7A
            X509v3 Authority Key Identifier:
                keyid:78:5E:0B:FF:07:B9:03:7C:60:33:4B:2D:F3:36:92:81:A4:DC:3F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eF4L_we5A3xgM0st8zaSgaTcP1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915465A/8894A70A1C5511EBAB88C182C4F9AE02/eF4L_we5A3xgM0st8zaSgaTcP1o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:f1:2e:a2:1c:b2:92:93:8b:81:58:0a:d4:9e:c3:2f:db:ce:
         59:34:a5:c7:b3:1a:02:0d:4c:7c:a3:86:1d:52:28:34:74:80:
         a6:1e:69:9d:6c:99:4d:f8:d7:7e:80:ba:9a:5a:25:da:bb:7a:
         b3:42:7c:5a:2b:ae:3e:89:84:83:f1:23:20:44:94:92:f3:79:
         ab:a3:92:93:4d:de:23:f5:3c:53:86:ac:21:8f:85:70:66:18:
         2e:84:6b:54:78:c5:25:23:9e:b2:45:32:c1:45:ad:c6:36:24:
         93:ed:d3:11:c3:6d:14:80:96:6e:d6:79:23:c5:4b:14:31:63:
         87:6b:8d:16:58:80:35:c7:a3:4f:02:77:e9:62:5a:90:06:c2:
         d8:1d:a8:1f:a6:e0:fa:a5:96:26:cd:81:65:04:2c:89:1f:39:
         2a:62:0c:c1:d2:10:70:8f:b5:ac:3b:a6:a0:d6:a2:8e:34:96:
         74:84:b5:20:32:4f:30:05:1d:7c:7a:bc:b9:fc:d2:08:ed:1c:
         b8:c1:bd:1b:9d:b9:3e:65:2c:35:0e:9d:84:9a:7e:c3:31:54:
         b0:cc:fa:4c:cc:b8:05:5d:ae:b4:4e:ec:b9:8b:08:b5:87:b1:
         75:cf:86:d0:e5:8a:10:a5:57:a0:d2:0e:3f:56:b9:94:ed:2d:
         74:73:6d:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ2NUExMTAvBgNVBAUTKDc4NUUwQkZGMDdCOTAzN0M2MDMzNEIyREYzMzY5Mjgx
QTREQzNGNUEwHhcNMjUwNTEyMjEyMzA1WhcNMjUwNTE5MjEyMzA1WjAYMRYwFAYD
VQQDEw02ODIyNjZiOS1lM2NhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArJqHHnb6/3TFz1oyliqDfTF1PQbF8287/2UcCQl6czDFftfZPz5Ts/hkCi59
2WwfSqMgvimXL7DaodQVWGGPWpp89rATUITQ1sh3GXXUthNZ+B8G5sKRIUTquozf
CUcOJllad5dd7rsCxrSPQKKi2hsIPU6Dfmqae+AB9q4IuRUYn+IEuX9Mnm58ayrS
3rBH2y4Zoiwdd9yI2ZBVKVjwZSyu1U5ppsb8Mo2eBIO/eYrHkoEqYmhuMmWkM3ic
/jcT557fhGMNMTnIIfEwtR/UVSIcyWHsIagjH1D87960UJpcLVXZiAiM94nnle1d
MBdkRKczTkH7vtOoUHBPjok70wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIHeo4Lb
E7wIsRizmybNFO/MrJd6MB8GA1UdIwQYMBaAFHheC/8HuQN8YDNLLfM2koGk3D9a
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDY1QS84ODk0QTcwQTFD
NTUxMUVCQUI4OEMxODJDNEY5QUUwMi9lRjRMX3dlNUEzeGdNMHN0OHphU2dhVGNQ
MW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VGNExfd2U1QTN4Z00wc3Q4emFTZ2FUY1Axby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDY1QS84ODk0QTcwQTFDNTUxMUVCQUI4OEMxODJDNEY5QUUwMi9lRjRMX3dlNUEz
eGdNMHN0OHphU2dhVGNQMW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDo8S6iHLKSk4uBWArUnsMv285ZNKXHsxoCDUx8o4YdUig0dICmHmmd
bJlN+Nd+gLqaWiXau3qzQnxaK64+iYSD8SMgRJSS83mro5KTTd4j9TxThqwhj4Vw
ZhguhGtUeMUlI56yRTLBRa3GNiST7dMRw20UgJZu1nkjxUsUMWOHa40WWIA1x6NP
AnfpYlqQBsLYHagfpuD6pZYmzYFlBCyJHzkqYgzB0hBwj7WsO6ag1qKONJZ0hLUg
Mk8wBR18ery5/NII7Ry4wb0bnbk+ZSw1Dp2Emn7DMVSwzPpMzLgFXa60Tuy5iwi1
h7F1z4bQ5YoQpVeg0g4/VrmU7S10c20V
-----END CERTIFICATE-----
Generated at Wed May 14 10:28:12 2025 by rpki-client