Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
File:                     ftCxNhmz84MH3uG0Dn8neTItvm4.mft (raw, json)
Hash identifier:          4J1WwUYRONcOMIJfIThHA6sQjYiRz1enmjWzdaaYrfg=
Subject key identifier:   4A:8F:EE:A5:A7:05:FF:1C:03:15:67:A3:14:F3:77:2C:FC:81:59:67
Authority key identifier: 7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E
Certificate issuer:       /CN=A91A7EA5/serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
Certificate serial:       0C73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
Manifest number:          0C5C
Signing time:             Wed 14 May 2025 18:31:46 +0000
Manifest this update:     Wed 14 May 2025 18:31:45 +0000
Manifest next update:     Wed 21 May 2025 18:31:45 +0000
Files and hashes:         1: ftCxNhmz84MH3uG0Dn8neTItvm4.crl (hash: d399XqXVpt6a1amrueu4Fd0qPJ6J/JF9sT8uBqTueNo=)
                          2: 93E73ABE833811ECA0A7120DC4F9AE02.roa (hash: s3cffiMnnn0qpE2XEuN7dLCpvHQisPqdoRFFwv4E0go=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 18:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3187 (0xc73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7EA5, serialNumber=7ED0B13619B3F38307DEE1B40E7F2779322DBE6E
        Validity
            Not Before: May 14 18:31:45 2025 GMT
            Not After : May 21 18:31:45 2025 GMT
        Subject: CN=6824e192-cab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fb:13:b3:ef:5b:2d:23:cf:e6:f1:77:9b:28:
                    10:1c:af:7c:ea:02:d4:d9:b3:9e:ee:79:04:8d:47:
                    74:c8:3f:0a:d1:df:3f:a8:cb:58:10:b6:7d:14:25:
                    df:5a:77:ae:75:3b:7c:88:7e:84:5d:0c:09:c0:a6:
                    29:2c:64:9f:ef:31:ed:e4:ca:3b:65:86:1a:62:a5:
                    b6:b4:71:e0:13:90:81:45:f5:ad:45:09:98:26:ab:
                    e3:9d:a1:c0:5d:91:64:2e:a6:5c:13:76:c9:68:82:
                    7e:e5:61:f9:ab:d3:34:08:84:48:a3:50:ae:f4:2d:
                    57:cc:6f:eb:05:c2:a3:06:23:74:90:95:b8:5e:24:
                    51:b9:0e:5f:7a:31:c3:0d:ed:d3:1a:16:cf:47:40:
                    c8:e8:8c:cc:0a:37:b1:7b:c6:48:bf:de:c1:ab:5d:
                    f3:bf:ee:38:97:78:b5:86:83:c2:85:de:fa:d8:56:
                    80:58:80:77:e6:cf:1e:a4:2d:e0:b6:95:4e:86:40:
                    bc:bd:97:45:85:29:8f:10:bf:de:4e:ea:3e:76:2b:
                    b1:58:50:10:36:55:37:58:84:cd:ce:1b:3b:4a:03:
                    3b:a3:f3:b7:71:07:ec:78:6f:f0:9d:b3:2c:49:fa:
                    81:1d:22:8d:c0:3f:e2:5f:36:55:41:43:d1:59:e0:
                    bc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8F:EE:A5:A7:05:FF:1C:03:15:67:A3:14:F3:77:2C:FC:81:59:67
            X509v3 Authority Key Identifier:
                keyid:7E:D0:B1:36:19:B3:F3:83:07:DE:E1:B4:0E:7F:27:79:32:2D:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ftCxNhmz84MH3uG0Dn8neTItvm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7EA5/C784CF4E045011EA9B328819C4F9AE02/ftCxNhmz84MH3uG0Dn8neTItvm4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:88:c0:95:f5:84:9a:d1:cc:f4:2f:92:3e:4b:a4:da:a8:e0:
         74:2e:ce:c4:23:fb:2a:15:e1:12:5b:66:4f:03:92:63:96:f8:
         d6:4e:c8:57:0b:80:96:82:ef:de:6e:ce:50:fe:8c:50:01:b1:
         ab:b4:83:f8:9b:d0:0d:38:af:32:5c:73:ef:35:8a:ee:42:15:
         db:cf:50:d7:58:53:03:9b:b8:7e:f1:44:e6:3b:77:38:e9:5c:
         96:fc:48:ce:72:ab:99:e5:58:41:89:44:19:4b:1c:7c:d2:ed:
         16:e7:59:4c:5c:8f:ee:b1:e7:e2:ff:7f:9a:c1:b3:7e:8c:69:
         4e:d4:b7:92:7e:dd:0c:12:be:b1:72:ee:bc:8f:f6:4a:0f:00:
         82:ec:f0:36:bd:8a:fe:43:8d:58:cd:e5:09:2b:72:18:72:65:
         8a:6b:ff:27:15:ea:f3:b3:cf:dd:2f:8c:a2:bf:5e:25:d5:13:
         97:a7:ee:56:44:b8:b9:17:09:66:47:98:7b:0d:03:63:64:01:
         94:3d:13:45:df:79:83:a0:ba:04:63:8e:87:62:46:65:61:e0:
         00:9b:ef:24:dc:21:09:2c:2c:b3:8e:0e:b0:aa:ea:d9:d2:1c:
         80:1a:12:6f:62:db:c4:16:02:6f:9e:8c:da:26:46:d6:a2:d3:
         27:41:df:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTdFQTUxMTAvBgNVBAUTKDdFRDBCMTM2MTlCM0YzODMwN0RFRTFCNDBFN0YyNzc5
MzIyREJFNkUwHhcNMjUwNTE0MTgzMTQ1WhcNMjUwNTIxMTgzMTQ1WjAYMRYwFAYD
VQQDEw02ODI0ZTE5Mi1jYWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqPsTs+9bLSPP5vF3mygQHK986gLU2bOe7nkEjUd0yD8K0d8/qMtYELZ9FCXf
WneudTt8iH6EXQwJwKYpLGSf7zHt5Mo7ZYYaYqW2tHHgE5CBRfWtRQmYJqvjnaHA
XZFkLqZcE3bJaIJ+5WH5q9M0CIRIo1Cu9C1XzG/rBcKjBiN0kJW4XiRRuQ5fejHD
De3TGhbPR0DI6IzMCjexe8ZIv97Bq13zv+44l3i1hoPChd762FaAWIB35s8epC3g
tpVOhkC8vZdFhSmPEL/eTuo+diuxWFAQNlU3WITNzhs7SgM7o/O3cQfseG/wnbMs
SfqBHSKNwD/iXzZVQUPRWeC8EQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqP7qWn
Bf8cAxVnoxTzdyz8gVlnMB8GA1UdIwQYMBaAFH7QsTYZs/ODB97htA5/J3kyLb5u
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0VBNS9DNzg0Q0Y0RTA0
NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0TUgzdUcwRG44bmVUSXR2
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z0Q3hOaG16ODRNSDN1RzBEbjhuZVRJdHZtNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
N0VBNS9DNzg0Q0Y0RTA0NTAxMUVBOUIzMjg4MTlDNEY5QUUwMi9mdEN4Tmhtejg0
TUgzdUcwRG44bmVUSXR2bTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDViMCV9YSa0cz0L5I+S6TaqOB0Ls7EI/sqFeESW2ZPA5JjlvjWTshX
C4CWgu/ebs5Q/oxQAbGrtIP4m9ANOK8yXHPvNYruQhXbz1DXWFMDm7h+8UTmO3c4
6VyW/EjOcquZ5VhBiUQZSxx80u0W51lMXI/usefi/3+awbN+jGlO1LeSft0MEr6x
cu68j/ZKDwCC7PA2vYr+Q41YzeUJK3IYcmWKa/8nFerzs8/dL4yiv14l1ROXp+5W
RLi5FwlmR5h7DQNjZAGUPRNF33mDoLoEY46HYkZlYeAAm+8k3CEJLCyzjg6wqurZ
0hyAGhJvYtvEFgJvnozaJkbWotMnQd+T
-----END CERTIFICATE-----
Generated at Fri May 16 03:23:36 2025 by rpki-client