Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
File:                     tsJDxjmzEemHjsBr8kf3reVLCT4.mft (raw, json)
Hash identifier:          Pt5irS5A84IimY1cP0dlMobsTiuqfAx9bz2TB11MM3s=
Subject key identifier:   49:C3:16:67:B8:E9:46:0E:3C:81:AB:41:B2:15:26:66:BC:FF:11:99
Authority key identifier: B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E
Certificate issuer:       /CN=A91549E0/serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
Certificate serial:       1516
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
Manifest number:          14E2
Signing time:             Wed 02 Jul 2025 17:01:22 +0000
Manifest this update:     Wed 02 Jul 2025 17:01:22 +0000
Manifest next update:     Wed 09 Jul 2025 17:01:22 +0000
Files and hashes:         1: tsJDxjmzEemHjsBr8kf3reVLCT4.crl (hash: CSF2Wrb/NCljh94HA01viwujGDSiSNWcV1t9iQIvmN8=)
                          2: E944914AF0F111E999D61615C4F9AE02.roa (hash: XKJY2ruAbdxVwtFmFD8vDTB2DhG2dJOeU2QViXOeUk8=)
                          3: 0E171AA850D511F0B4943476C4F9AE02.roa (hash: 9AflqGyFKx05qIN4kyuCqzbSR97xKUg46U/Rr1tuz0g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl
                          rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5398 (0x1516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91549E0, serialNumber=B6C243C639B311E9878EC06BF247F7ADE54B093E
        Validity
            Not Before: Jul  2 17:01:22 2025 GMT
            Not After : Jul  9 17:01:22 2025 GMT
        Subject: CN=686565e2-b64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:86:7c:78:2d:8f:18:a7:f9:eb:d6:9f:56:8a:
                    bf:a8:44:f0:10:cc:c2:dd:31:15:43:d8:75:61:77:
                    be:5d:6e:70:66:5a:b6:f7:6e:97:d5:a8:3e:27:08:
                    85:ca:23:59:3e:f4:cf:66:d1:2d:f3:4b:b3:3c:c9:
                    13:d2:9e:4e:62:2c:34:9a:b1:97:0e:41:cf:a2:a3:
                    80:d7:87:4b:0e:7a:b2:08:b7:61:bf:94:c8:36:80:
                    86:db:e2:db:dd:ae:df:62:2d:92:ba:e3:37:74:6b:
                    3f:d8:83:8f:ea:f1:46:f0:40:40:28:06:5d:28:a8:
                    14:4a:3a:cf:11:25:1a:b2:86:1a:2a:30:f0:12:eb:
                    da:e0:ad:03:74:44:89:ed:07:17:93:60:85:24:8a:
                    5d:b5:9f:bd:30:7d:45:ba:41:18:c6:5b:04:27:ee:
                    63:fc:90:1d:e8:43:47:08:1e:4b:a0:58:03:b7:ad:
                    2c:56:7e:8a:37:32:30:e7:b0:a5:82:9c:5f:29:1f:
                    d0:66:03:dc:39:95:ca:5a:dc:36:5a:ac:18:fb:9f:
                    75:75:f2:64:6d:f2:27:d2:48:44:2d:0c:8f:49:71:
                    b7:8e:06:b3:82:f3:11:e4:4d:20:25:40:9e:d7:ad:
                    62:2c:8e:e9:05:57:5e:65:bc:ad:08:35:06:90:51:
                    1d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C3:16:67:B8:E9:46:0E:3C:81:AB:41:B2:15:26:66:BC:FF:11:99
            X509v3 Authority Key Identifier:
                keyid:B6:C2:43:C6:39:B3:11:E9:87:8E:C0:6B:F2:47:F7:AD:E5:4B:09:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsJDxjmzEemHjsBr8kf3reVLCT4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91549E0/5154A1105FFA11E887B56942C4F9AE02/tsJDxjmzEemHjsBr8kf3reVLCT4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:62:4c:66:18:3a:91:29:96:36:cb:7d:2d:b0:e1:05:ff:ab:
         68:ac:b6:79:10:cf:65:19:10:46:73:19:fb:05:b0:c7:84:38:
         ff:72:70:54:e8:e7:9b:e1:d3:b4:bb:fa:ab:c5:14:e9:1a:07:
         17:a4:35:49:52:96:c5:85:05:62:01:9c:16:85:89:45:d4:de:
         cb:f1:de:ab:e5:1f:53:02:46:ed:87:90:22:9f:3f:3f:41:ab:
         ee:6f:2d:24:30:27:30:ef:f8:03:77:fe:90:31:20:39:92:cf:
         cb:d9:13:18:f1:4c:9c:32:da:04:21:67:1e:6d:c9:86:3b:69:
         d0:e6:ce:64:5c:72:d9:9c:50:89:ac:18:7d:e1:51:7e:79:2e:
         3d:eb:76:aa:b5:9b:86:cb:7f:b3:ae:4c:80:22:12:8a:a3:a1:
         cf:76:00:71:ad:c3:e4:03:cf:3d:fb:cb:02:bd:f9:19:7b:2e:
         d6:90:04:3b:96:bf:01:8f:9d:45:6e:ca:25:0d:42:30:07:73:
         15:a8:e5:c7:20:0c:cb:5e:b8:38:a6:d1:af:71:03:1b:84:f5:
         af:de:7a:95:32:2d:77:ab:b4:a3:e5:de:20:8d:ef:cd:29:96:
         26:ce:53:6e:f5:d6:48:0c:42:56:74:48:f4:3d:6f:95:73:cb:
         62:4f:e1:fa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICFRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTQ5RTAxMTAvBgNVBAUTKEI2QzI0M0M2MzlCMzExRTk4NzhFQzA2QkYyNDdGN0FE
RTU0QjA5M0UwHhcNMjUwNzAyMTcwMTIyWhcNMjUwNzA5MTcwMTIyWjAYMRYwFAYD
VQQDEw02ODY1NjVlMi1iNjRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3YZ8eC2PGKf569afVoq/qETwEMzC3TEVQ9h1YXe+XW5wZlq2926X1ag+JwiF
yiNZPvTPZtEt80uzPMkT0p5OYiw0mrGXDkHPoqOA14dLDnqyCLdhv5TINoCG2+Lb
3a7fYi2SuuM3dGs/2IOP6vFG8EBAKAZdKKgUSjrPESUasoYaKjDwEuva4K0DdESJ
7QcXk2CFJIpdtZ+9MH1FukEYxlsEJ+5j/JAd6ENHCB5LoFgDt60sVn6KNzIw57Cl
gpxfKR/QZgPcOZXKWtw2WqwY+591dfJkbfIn0khELQyPSXG3jgazgvMR5E0gJUCe
161iLI7pBVdeZbytCDUGkFEdjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEnDFme4
6UYOPIGrQbIVJma8/xGZMB8GA1UdIwQYMBaAFLbCQ8Y5sxHph47Aa/JH963lSwk+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NDlFMC81MTU0QTExMDVG
RkExMUU4ODdCNTY5NDJDNEY5QUUwMi90c0pEeGptekVlbUhqc0JyOGtmM3JlVkxD
VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RzSkR4am16RWVtSGpzQnI4a2YzcmVWTENUNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NDlFMC81MTU0QTExMDVGRkExMUU4ODdCNTY5NDJDNEY5QUUwMi90c0pEeGptekVl
bUhqc0JyOGtmM3JlVkxDVDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABYkxmGDqRKZY2y30tsOEF/6torLZ5EM9lGRBGcxn7BbDHhDj/cnBU
6Oeb4dO0u/qrxRTpGgcXpDVJUpbFhQViAZwWhYlF1N7L8d6r5R9TAkbth5Ainz8/
Qavuby0kMCcw7/gDd/6QMSA5ks/L2RMY8UycMtoEIWcebcmGO2nQ5s5kXHLZnFCJ
rBh94VF+eS4963aqtZuGy3+zrkyAIhKKo6HPdgBxrcPkA889+8sCvfkZey7WkAQ7
lr8Bj51FbsolDUIwB3MVqOXHIAzLXrg4ptGvcQMbhPWv3nqVMi13q7Sj5d4gje/N
KZYmzlNu9dZIDEJWdEj0PW+Vc8tiT+H6
-----END CERTIFICATE-----
Generated at Thu Jul 3 10:15:17 2025 by rpki-client