Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
File:                     Spk_-E9gKQOjF-KIvRm52iCTVYo.mft (raw, json)
Hash identifier:          rNk8v0pB8CUyA5jMxh0DaFT7TGJ9RYn1V4v9uTRh3so=
Subject key identifier:   60:56:2F:5B:8A:39:A1:92:6A:0D:F0:30:20:BE:10:3A:44:18:57:7D
Authority key identifier: 4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A
Certificate issuer:       /CN=A9163998/serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
Certificate serial:       02A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
Manifest number:          0291
Signing time:             Tue 13 May 2025 01:27:26 +0000
Manifest this update:     Tue 13 May 2025 01:27:25 +0000
Manifest next update:     Tue 20 May 2025 01:27:25 +0000
Files and hashes:         1: Spk_-E9gKQOjF-KIvRm52iCTVYo.crl (hash: swnZeu3NKVR941+gh6W5yvU5DcHGIFS1NwACrAoifrM=)
                          2: 85C2FDAA08E011ED9C3DCB7AC4F9AE02.roa (hash: R8BTOL86V2lkOQsbW+rQ8pt2tHQCxt6FoHVMOBZZhL4=)
                          3: 933D446C0BCA11ED888E5616C4F9AE02.roa (hash: 7CKylBpxKWewvw1jHj+wa1g1s5Juhm7MXUJtNktQtY4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl
                          rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 01:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163998, serialNumber=4A993FF84F602903A317E288BD19B9DA2093558A
        Validity
            Not Before: May 13 01:27:25 2025 GMT
            Not After : May 20 01:27:25 2025 GMT
        Subject: CN=68229ffd-66d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ed:63:7d:a3:e0:0a:03:ce:a3:9b:78:33:91:
                    20:31:e1:ba:6e:a5:35:9e:32:d7:a7:36:f3:49:d0:
                    1b:d1:8a:6f:77:99:37:04:95:f0:e4:3b:d6:db:ad:
                    86:0e:c5:54:46:97:84:a3:4f:31:08:61:a4:e2:05:
                    7f:19:b4:34:fc:ae:57:11:c2:03:ba:b5:4a:23:21:
                    39:2b:a2:1f:d1:d2:11:6e:24:79:a3:50:35:36:a9:
                    4d:4b:45:eb:47:31:92:fb:53:ea:a3:5d:11:ee:63:
                    78:03:54:4f:46:99:ec:48:08:54:c0:34:be:87:3f:
                    59:7e:e8:8e:45:0d:71:9a:39:8c:3b:12:d5:11:32:
                    3a:8c:6d:7d:c3:c3:70:ff:b8:af:db:19:23:88:cf:
                    ba:a1:c9:84:3d:eb:09:31:78:40:dd:7b:55:7d:d3:
                    a5:f3:a1:8b:a5:2f:12:c3:a6:97:15:00:4d:5a:50:
                    16:84:38:07:75:c6:cf:13:d4:4c:72:78:62:e6:b0:
                    3b:d7:95:7d:67:52:d2:90:4f:51:ea:46:e3:10:8b:
                    e8:f1:e2:81:4a:fe:0e:e3:a7:51:76:9d:19:33:e2:
                    15:68:70:33:ca:3c:03:fa:f3:c7:8b:88:da:94:97:
                    31:77:0a:07:f7:f6:e6:03:08:0f:25:ac:33:c1:56:
                    21:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:56:2F:5B:8A:39:A1:92:6A:0D:F0:30:20:BE:10:3A:44:18:57:7D
            X509v3 Authority Key Identifier:
                keyid:4A:99:3F:F8:4F:60:29:03:A3:17:E2:88:BD:19:B9:DA:20:93:55:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Spk_-E9gKQOjF-KIvRm52iCTVYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/3A417D7408DC11EDBEDE612BC4F9AE02/Spk_-E9gKQOjF-KIvRm52iCTVYo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:1c:f0:56:ef:d8:be:cd:50:08:b9:80:4a:8c:a1:e9:ee:30:
         0c:b2:95:af:d5:f4:88:98:65:b3:30:51:dc:fa:94:0a:11:80:
         b1:eb:b3:9f:2d:f5:fb:25:4a:8a:90:78:9d:f6:a7:8d:dd:06:
         47:9f:b2:c8:da:e7:a2:11:32:36:58:c0:3e:02:e0:b0:62:b4:
         42:24:80:3b:16:ae:2f:3e:a3:c4:50:26:95:2f:50:87:5d:df:
         4d:d6:b2:15:8b:52:53:6f:86:c3:36:ae:b5:65:3f:b9:ed:e5:
         16:98:da:40:2f:02:73:de:e8:ef:38:e3:d9:9b:42:2d:26:9c:
         27:d1:3e:62:4f:ba:2b:0e:17:64:ee:93:f1:9f:24:30:5c:4d:
         bc:f0:eb:79:e6:aa:37:e6:9e:c3:c1:ae:dc:65:b1:ea:85:4d:
         ef:ba:f6:da:27:d8:82:4c:73:a3:8f:0c:3a:cf:fa:d1:bd:35:
         92:1e:af:90:4e:cd:ca:8f:b9:9d:af:f7:25:8e:30:e5:99:f7:
         2f:e7:34:ec:db:68:65:0b:45:24:70:74:98:49:10:e6:19:82:
         35:96:fa:86:a6:f6:a0:38:4c:fe:ae:67:44:f6:cb:d6:3a:76:
         5a:ca:17:27:97:20:70:da:f9:bf:14:0e:5f:c8:13:7c:dc:01:
         c7:11:a3:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM5OTgxMTAvBgNVBAUTKDRBOTkzRkY4NEY2MDI5MDNBMzE3RTI4OEJEMTlCOURB
MjA5MzU1OEEwHhcNMjUwNTEzMDEyNzI1WhcNMjUwNTIwMDEyNzI1WjAYMRYwFAYD
VQQDEw02ODIyOWZmZC02NmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq+1jfaPgCgPOo5t4M5EgMeG6bqU1njLXpzbzSdAb0Ypvd5k3BJXw5DvW262G
DsVURpeEo08xCGGk4gV/GbQ0/K5XEcIDurVKIyE5K6If0dIRbiR5o1A1NqlNS0Xr
RzGS+1Pqo10R7mN4A1RPRpnsSAhUwDS+hz9ZfuiORQ1xmjmMOxLVETI6jG19w8Nw
/7iv2xkjiM+6ocmEPesJMXhA3XtVfdOl86GLpS8Sw6aXFQBNWlAWhDgHdcbPE9RM
cnhi5rA715V9Z1LSkE9R6kbjEIvo8eKBSv4O46dRdp0ZM+IVaHAzyjwD+vPHi4ja
lJcxdwoH9/bmAwgPJawzwVYhpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGBWL1uK
OaGSag3wMCC+EDpEGFd9MB8GA1UdIwQYMBaAFEqZP/hPYCkDoxfiiL0Zudogk1WK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zQTQxN0Q3NDA4
REMxMUVEQkVERTYxMkJDNEY5QUUwMi9TcGtfLUU5Z0tRT2pGLUtJdlJtNTJpQ1RW
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1Nwa18tRTlnS1FPakYtS0l2Um01MmlDVFZZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
Mzk5OC8zQTQxN0Q3NDA4REMxMUVEQkVERTYxMkJDNEY5QUUwMi9TcGtfLUU5Z0tR
T2pGLUtJdlJtNTJpQ1RWWW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBEHPBW79i+zVAIuYBKjKHp7jAMspWv1fSImGWzMFHc+pQKEYCx67Of
LfX7JUqKkHid9qeN3QZHn7LI2ueiETI2WMA+AuCwYrRCJIA7Fq4vPqPEUCaVL1CH
Xd9N1rIVi1JTb4bDNq61ZT+57eUWmNpALwJz3ujvOOPZm0ItJpwn0T5iT7orDhdk
7pPxnyQwXE288Ot55qo35p7Dwa7cZbHqhU3vuvbaJ9iCTHOjjww6z/rRvTWSHq+Q
Ts3Kj7mdr/cljjDlmfcv5zTs22hlC0UkcHSYSRDmGYI1lvqGpvagOEz+rmdE9svW
OnZayhcnlyBw2vm/FA5fyBN83AHHEaNK
-----END CERTIFICATE-----
Generated at Tue May 13 04:46:33 2025 by rpki-client