Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
File:                     cJbvn454MDQ56aHksDgYgaQy9Ns.mft (raw, json)
Hash identifier:          utu1qruQbtf5LNAQ9uU/93KHo8u9L5DQngmk2BJIwzM=
Subject key identifier:   1A:81:D7:06:5E:E8:E9:2A:10:8A:7A:C1:F6:39:C5:F0:F6:10:06:A0
Authority key identifier: 70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB
Certificate issuer:       /CN=A91A8F8A/serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB
Certificate serial:       0390
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
Manifest number:          038C
Signing time:             Tue 13 May 2025 00:37:22 +0000
Manifest this update:     Tue 13 May 2025 00:37:22 +0000
Manifest next update:     Tue 20 May 2025 00:37:22 +0000
Files and hashes:         1: cJbvn454MDQ56aHksDgYgaQy9Ns.crl (hash: 5Gp45yzdY3AuUWHnWuZhkHLkoAW2v8SNUktgIjLbcDk=)
                          2: AFED106A9E1511ECA4B98E73C4F9AE02.roa (hash: IKsBlPoiBaV1Y/8FMivKysodYXv24LUe7kGHbrSaUFc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl
                          rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 00:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8F8A, serialNumber=7096EF9F8E78303439E9A1E4B0381881A432F4DB
        Validity
            Not Before: May 13 00:37:22 2025 GMT
            Not After : May 20 00:37:22 2025 GMT
        Subject: CN=68229442-ad86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:2e:aa:37:5a:46:30:44:b0:e9:23:01:e0:
                    21:b5:70:65:bd:41:e8:80:4d:02:af:3d:ed:d6:2d:
                    17:b2:42:1a:14:91:62:10:6b:3e:bd:cb:a1:82:a2:
                    62:12:fb:4b:35:59:77:b3:ed:c8:ad:96:8f:c0:ad:
                    f0:fc:f9:21:fc:89:5d:b0:e0:8b:1f:d9:ec:b7:44:
                    38:d2:bc:7e:e6:44:94:73:fc:cb:02:2b:65:2f:8d:
                    ea:00:a3:10:63:21:03:ab:f9:1d:a9:bb:f5:73:13:
                    4f:8c:a3:d8:68:0b:be:de:cd:a4:f8:79:35:e9:12:
                    24:7f:de:26:93:d9:eb:fb:83:e2:8d:d8:2e:32:bf:
                    69:53:bb:ba:43:ce:6e:79:c8:80:20:34:29:b5:66:
                    be:da:5e:9d:c5:b9:51:39:f6:63:c6:df:2f:04:04:
                    42:6e:d5:06:4c:fb:c5:37:a9:39:82:37:28:3d:a0:
                    1c:ae:65:40:6b:49:3b:06:5a:b5:76:df:02:88:71:
                    54:63:7b:12:2c:bc:41:46:f9:89:79:19:36:08:c8:
                    54:08:97:97:c6:4d:de:ba:28:71:a9:04:60:cb:9b:
                    d2:c4:7d:d1:f2:76:e8:9a:9d:54:0e:64:d5:7b:54:
                    f8:da:1c:ef:fc:9b:1b:dd:ab:7d:aa:97:8c:2a:12:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:81:D7:06:5E:E8:E9:2A:10:8A:7A:C1:F6:39:C5:F0:F6:10:06:A0
            X509v3 Authority Key Identifier:
                keyid:70:96:EF:9F:8E:78:30:34:39:E9:A1:E4:B0:38:18:81:A4:32:F4:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cJbvn454MDQ56aHksDgYgaQy9Ns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8F8A/72195AD49E1311ECB091CE72C4F9AE02/cJbvn454MDQ56aHksDgYgaQy9Ns.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:38:02:b3:40:7d:cd:3e:57:01:76:75:73:3f:d1:4b:92:15:
         c1:ac:28:33:52:99:1a:cf:52:ef:38:8d:fe:de:03:65:f5:e0:
         8b:c9:18:d3:8b:1f:53:6f:37:20:d5:00:c2:5a:c0:42:89:31:
         d1:da:12:21:b2:15:09:56:f4:6d:fd:be:e3:93:8f:36:91:48:
         0f:83:39:1f:44:a7:8a:e3:9e:3f:01:76:5a:1f:b5:12:e0:50:
         40:18:91:a6:52:e8:5f:13:5a:f2:5d:e7:4f:36:f0:bb:14:ea:
         39:98:3c:74:6a:0e:ce:94:04:0f:b6:40:37:c4:5c:ae:d7:1e:
         df:71:fb:e6:a8:e9:fe:97:d3:1f:4f:f4:b4:d3:3e:69:6f:2e:
         82:89:fe:63:7c:9c:14:12:84:ff:ee:cc:0d:0f:80:80:66:43:
         7c:6f:ef:cf:aa:4f:ab:00:05:d4:f5:79:de:2a:67:26:81:fe:
         46:0d:70:6e:49:67:57:e0:ba:28:3c:ce:b6:7f:06:a6:2a:52:
         e1:22:2c:53:81:63:c2:13:2f:30:eb:9a:8e:ec:78:d2:71:22:
         26:58:aa:fb:81:64:ef:3f:86:f6:ed:d8:68:44:3e:8c:e8:a2:
         c7:4d:33:06:f6:4a:c5:62:7b:5c:f5:2b:60:9a:ef:99:21:57:
         ca:43:cc:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QThGOEExMTAvBgNVBAUTKDcwOTZFRjlGOEU3ODMwMzQzOUU5QTFFNEIwMzgxODgx
QTQzMkY0REIwHhcNMjUwNTEzMDAzNzIyWhcNMjUwNTIwMDAzNzIyWjAYMRYwFAYD
VQQDEw02ODIyOTQ0Mi1hZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwA4uqjdaRjBEsOkjAeAhtXBlvUHogE0Crz3t1i0XskIaFJFiEGs+vcuhgqJi
EvtLNVl3s+3IrZaPwK3w/Pkh/IldsOCLH9nst0Q40rx+5kSUc/zLAitlL43qAKMQ
YyEDq/kdqbv1cxNPjKPYaAu+3s2k+Hk16RIkf94mk9nr+4PijdguMr9pU7u6Q85u
eciAIDQptWa+2l6dxblROfZjxt8vBARCbtUGTPvFN6k5gjcoPaAcrmVAa0k7Blq1
dt8CiHFUY3sSLLxBRvmJeRk2CMhUCJeXxk3euihxqQRgy5vSxH3R8nbomp1UDmTV
e1T42hzv/Jsb3at9qpeMKhL2SQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqB1wZe
6OkqEIp6wfY5xfD2EAagMB8GA1UdIwQYMBaAFHCW75+OeDA0Oemh5LA4GIGkMvTb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOEY4QS83MjE5NUFENDlF
MTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1EUTU2YUhrc0RnWWdhUXk5
TnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NKYnZuNDU0TURRNTZhSGtzRGdZZ2FReTlOcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OEY4QS83MjE5NUFENDlFMTMxMUVDQjA5MUNFNzJDNEY5QUUwMi9jSmJ2bjQ1NE1E
UTU2YUhrc0RnWWdhUXk5TnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQASOAKzQH3NPlcBdnVzP9FLkhXBrCgzUpkaz1LvOI3+3gNl9eCLyRjT
ix9Tbzcg1QDCWsBCiTHR2hIhshUJVvRt/b7jk482kUgPgzkfRKeK454/AXZaH7US
4FBAGJGmUuhfE1ryXedPNvC7FOo5mDx0ag7OlAQPtkA3xFyu1x7fcfvmqOn+l9Mf
T/S00z5pby6Cif5jfJwUEoT/7swND4CAZkN8b+/Pqk+rAAXU9XneKmcmgf5GDXBu
SWdX4LooPM62fwamKlLhIixTgWPCEy8w65qO7HjScSImWKr7gWTvP4b27dhoRD6M
6KLHTTMG9krFYntc9Stgmu+ZIVfKQ8yv
-----END CERTIFICATE-----
Generated at Tue May 13 05:49:42 2025 by rpki-client