Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
File:                     gSJD5rXQ3hGucMcns50fIeOurAM.mft (raw, json)
Hash identifier:          mA8rxyKRzEKjjvce+xgUtKm48dWzN1lUBk22LHSiyws=
Subject key identifier:   6D:AB:FE:EC:0F:55:E2:16:E1:AE:A2:25:69:B6:1F:85:0B:57:FE:3A
Authority key identifier: 81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03
Certificate issuer:       /CN=A916E44B/serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
Certificate serial:       9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
Manifest number:          97
Signing time:             Tue 13 May 2025 05:33:23 +0000
Manifest this update:     Tue 13 May 2025 05:33:23 +0000
Manifest next update:     Tue 20 May 2025 05:33:23 +0000
Files and hashes:         1: gSJD5rXQ3hGucMcns50fIeOurAM.crl (hash: irV6NUnxJleBZwfZZyMcjSYjaY1kfZrq5zP5NqnSmnQ=)
                          2: 546C4C7C4E1911EFA1FB9E57C4F9AE02.roa (hash: HfmavC5K7XmmBi7YqluoXVde8wlSngfJdddN9xmZWm4=)
                          3: B02CCB344E0C11EF9175067FC4F9AE02.roa (hash: cG4bHCwSBKH1chVLOqeULJS86kAJ2XDxlWDeiDKP3Os=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl
                          rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 05:33:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E44B, serialNumber=812243E6B5D0DE11AE70C727B39D1F21E3AEAC03
        Validity
            Not Before: May 13 05:33:23 2025 GMT
            Not After : May 20 05:33:23 2025 GMT
        Subject: CN=6822d9a3-4180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ca:ca:81:d8:68:d1:cf:db:90:a3:d5:a3:7d:
                    ed:17:a3:e3:2e:77:b9:c9:31:f0:4e:4b:d7:6c:b5:
                    df:30:52:67:b2:0b:1c:33:b8:1c:7b:84:dd:0a:bf:
                    cd:e1:f6:68:da:3e:af:9f:90:a3:dc:24:3d:2a:ee:
                    81:b7:53:d4:a9:60:2f:d3:6d:f5:8d:30:33:7b:81:
                    33:e3:8a:ae:f5:24:eb:b4:a7:ac:d6:38:18:b3:8c:
                    ba:30:7d:19:12:7c:00:fe:7a:a3:cd:40:9f:3a:67:
                    e5:40:77:51:4c:32:fc:53:85:a4:cd:d9:38:f2:19:
                    2e:6e:3e:1e:4d:c7:7a:f1:da:61:63:27:69:61:f9:
                    50:57:14:86:79:a2:86:33:d2:79:c0:58:69:ef:bf:
                    0a:8e:01:59:79:18:46:49:16:af:10:93:0d:cf:64:
                    0d:54:95:80:b6:7a:83:6f:63:b2:17:a0:c3:d5:fb:
                    79:03:65:58:b6:cf:eb:67:c9:61:ae:69:9a:9a:11:
                    05:7d:c2:b0:ac:c3:9c:1f:33:ce:d2:a8:1b:42:a0:
                    2c:87:62:9b:63:80:45:f3:c8:c4:92:b4:ff:58:2b:
                    e7:25:b3:fb:3c:30:6b:d0:06:4d:9c:02:a8:73:de:
                    19:01:74:83:2c:8b:4b:fc:29:05:d2:36:9c:a1:68:
                    b8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AB:FE:EC:0F:55:E2:16:E1:AE:A2:25:69:B6:1F:85:0B:57:FE:3A
            X509v3 Authority Key Identifier:
                keyid:81:22:43:E6:B5:D0:DE:11:AE:70:C7:27:B3:9D:1F:21:E3:AE:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gSJD5rXQ3hGucMcns50fIeOurAM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E44B/6350694C4E0C11EF9218747EC4F9AE02/gSJD5rXQ3hGucMcns50fIeOurAM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:fb:1e:3d:04:92:8f:cc:c2:03:bd:39:6e:0d:d0:5e:91:dc:
         31:df:76:7b:6f:e5:3d:a8:e9:8a:f5:04:95:21:5c:41:df:61:
         6a:d8:1c:bc:48:0f:68:5d:ce:ad:6d:9b:e9:1a:00:d0:14:11:
         dd:58:da:e6:ed:dd:2d:90:c4:5c:a3:c3:51:52:d3:34:61:d1:
         03:67:03:0c:4b:9e:14:b8:3a:93:b9:4c:00:9a:bc:03:be:57:
         de:f7:97:10:c0:07:c4:ec:91:e3:8a:f0:1f:4b:47:15:fb:fc:
         69:5e:61:ad:86:ee:a7:21:2e:2f:6e:05:b6:b4:73:bc:1b:49:
         f6:a8:b9:72:ad:16:64:69:ab:09:9e:6b:9e:a2:48:e5:c3:a5:
         0d:73:02:3e:12:be:dd:da:41:53:63:0b:11:fc:6d:33:1f:f9:
         e0:3f:68:73:11:43:76:a3:ba:7e:f5:c3:52:8d:5e:a6:b6:80:
         e3:56:fb:e6:86:52:43:a1:a0:f5:c5:5a:d1:ec:a9:99:4a:c6:
         4d:39:a9:5c:32:34:b2:84:88:09:4a:f5:1d:fc:97:4a:94:31:
         42:f4:59:de:69:fb:f8:45:af:1c:28:be:69:13:8a:dd:4c:a4:
         a8:0e:5f:d5:68:29:a0:4b:1e:93:04:1c:b4:a4:99:ac:68:d3:
         ce:e3:91:f2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkU0NEIxMTAvBgNVBAUTKDgxMjI0M0U2QjVEMERFMTFBRTcwQzcyN0IzOUQxRjIx
RTNBRUFDMDMwHhcNMjUwNTEzMDUzMzIzWhcNMjUwNTIwMDUzMzIzWjAYMRYwFAYD
VQQDEw02ODIyZDlhMy00MTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqcrKgdho0c/bkKPVo33tF6PjLne5yTHwTkvXbLXfMFJnsgscM7gce4TdCr/N
4fZo2j6vn5Cj3CQ9Ku6Bt1PUqWAv0231jTAze4Ez44qu9STrtKes1jgYs4y6MH0Z
EnwA/nqjzUCfOmflQHdRTDL8U4Wkzdk48hkubj4eTcd68dphYydpYflQVxSGeaKG
M9J5wFhp778KjgFZeRhGSRavEJMNz2QNVJWAtnqDb2OyF6DD1ft5A2VYts/rZ8lh
rmmamhEFfcKwrMOcHzPO0qgbQqAsh2KbY4BF88jEkrT/WCvnJbP7PDBr0AZNnAKo
c94ZAXSDLItL/CkF0jacoWi4GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG2r/uwP
VeIW4a6iJWm2H4ULV/46MB8GA1UdIwQYMBaAFIEiQ+a10N4RrnDHJ7OdHyHjrqwD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTQ0Qi82MzUwNjk0QzRF
MEMxMUVGOTIxODc0N0VDNEY5QUUwMi9nU0pENXJYUTNoR3VjTWNuczUwZkllT3Vy
QU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dTSkQ1clhRM2hHdWNNY25zNTBmSWVPdXJBTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RTQ0Qi82MzUwNjk0QzRFMEMxMUVGOTIxODc0N0VDNEY5QUUwMi9nU0pENXJYUTNo
R3VjTWNuczUwZkllT3VyQU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCa+x49BJKPzMIDvTluDdBekdwx33Z7b+U9qOmK9QSVIVxB32Fq2By8
SA9oXc6tbZvpGgDQFBHdWNrm7d0tkMRco8NRUtM0YdEDZwMMS54UuDqTuUwAmrwD
vlfe95cQwAfE7JHjivAfS0cV+/xpXmGthu6nIS4vbgW2tHO8G0n2qLlyrRZkaasJ
nmueokjlw6UNcwI+Er7d2kFTYwsR/G0zH/ngP2hzEUN2o7p+9cNSjV6mtoDjVvvm
hlJDoaD1xVrR7KmZSsZNOalcMjSyhIgJSvUd/JdKlDFC9Fneafv4Ra8cKL5pE4rd
TKSoDl/VaCmgSx6TBBy0pJmsaNPO45Hy
-----END CERTIFICATE-----
Generated at Wed May 14 16:31:52 2025 by rpki-client