Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft
File:                     15_6dyN1rrQCGo_1GC_qqjJZKP0.mft (raw, json)
Hash identifier:          KbRi3dVT/lySS/0vE+12dNjEkccr5Zfrka4ptGsyNjs=
Subject key identifier:   FF:D6:40:7D:57:89:48:B8:37:4F:6C:35:CA:30:98:A8:48:C0:AA:C1
Authority key identifier: D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD
Certificate issuer:       /CN=A91A95AB/serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD
Certificate serial:       0850
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft
Manifest number:          3CC8
Signing time:             Thu 08 May 2025 15:13:30 +0000
Manifest this update:     Thu 08 May 2025 15:13:30 +0000
Manifest next update:     Thu 15 May 2025 15:13:30 +0000
Files and hashes:         1: 15_6dyN1rrQCGo_1GC_qqjJZKP0.crl (hash: piDclikS0qNdiR1IqbAZ43VtXE6mRHeaxBXdWMhNRcM=)
                          2: D127B58CF8EF11EEA2537576C4F9AE02.roa (hash: bjYMDtpJZNg5Y2L6Uj46FEgAtSCkkttriVFUrF2NgNE=)
                          3: 355A29B8D6CC11EE99534F6EC4F9AE02.roa (hash: luZqCIjqnlKYbUcpH0XD0h67wo+vIREwLR7SC2P9HUQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl
                          rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 15 May 2025 15:13:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2128 (0x850)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A95AB, serialNumber=D79FFA772375AEB4021A8FF5182FEAAA325928FD
        Validity
            Not Before: May  8 15:13:30 2025 GMT
            Not After : May 15 15:13:30 2025 GMT
        Subject: CN=681cca1a-06fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ac:7d:e9:21:51:d1:87:1c:42:d0:98:99:74:
                    c0:bb:34:5f:0a:3a:65:b8:21:40:33:48:24:28:13:
                    c1:50:a7:bf:8a:64:03:04:7d:71:f4:6b:8b:b0:38:
                    ba:73:fb:c1:34:b0:19:e3:39:5f:1f:01:df:05:9e:
                    44:a9:a5:78:1f:cb:fa:5f:18:5c:60:74:49:61:81:
                    2b:59:f0:32:69:44:65:74:56:68:06:37:a0:b5:a2:
                    74:e3:97:b0:42:21:6b:9b:a4:50:7c:6a:ed:da:84:
                    85:c1:fa:d9:9e:b8:c5:93:59:87:63:a1:de:93:a4:
                    24:cf:09:7f:01:f6:79:f9:dd:fd:bf:4b:42:60:a3:
                    90:64:25:ae:27:84:cc:f7:ba:b1:12:7d:30:86:0d:
                    67:86:d0:1b:79:84:99:93:1a:d0:a3:1e:66:41:40:
                    3f:68:95:e4:f3:bd:ea:52:8d:aa:09:fb:2f:90:34:
                    89:e8:6a:4e:b3:1c:d7:66:07:eb:de:e1:8b:01:9e:
                    d7:c3:ad:d2:08:5a:0c:41:25:bc:4b:51:fd:a5:1c:
                    e9:c5:03:32:b5:59:4b:4b:b9:42:bb:76:cd:7b:94:
                    56:d4:05:06:7f:fe:60:11:79:6e:c7:64:5a:0c:ab:
                    c4:5c:af:09:95:38:dd:da:5e:c0:d6:4a:0b:67:e3:
                    39:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D6:40:7D:57:89:48:B8:37:4F:6C:35:CA:30:98:A8:48:C0:AA:C1
            X509v3 Authority Key Identifier:
                keyid:D7:9F:FA:77:23:75:AE:B4:02:1A:8F:F5:18:2F:EA:AA:32:59:28:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15_6dyN1rrQCGo_1GC_qqjJZKP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A95AB/2AAFF5781DA711E2A1F2CCA008B02CD2/15_6dyN1rrQCGo_1GC_qqjJZKP0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:95:cd:f0:fb:da:1a:8f:f9:8a:3e:ef:d9:16:99:fc:62:4b:
         4c:f9:d3:68:53:21:f0:67:0f:52:02:25:2a:6e:5c:a5:10:8a:
         4f:74:1d:31:bf:5b:7c:75:8b:e3:50:ee:d1:c4:19:23:3c:7f:
         7e:55:08:51:0d:40:cd:73:2e:d1:4d:f0:cc:df:1f:3f:b7:da:
         be:77:cb:d7:12:6a:40:84:12:95:63:6a:b3:85:87:01:39:16:
         50:f2:ea:5c:8a:48:6f:70:c8:02:7d:51:ac:b8:70:bc:1c:45:
         7e:e7:35:18:07:5e:d3:29:fb:64:33:22:74:20:b1:fd:97:26:
         38:b2:48:c2:cb:50:ff:c2:19:f1:95:fc:4a:37:29:c2:98:a8:
         fb:77:ec:48:f5:e9:f2:f5:8e:1b:f6:0d:2f:17:7b:93:56:1f:
         cd:c4:8c:d4:05:2a:d0:f4:fe:29:21:6d:8f:3e:2a:77:d2:82:
         3a:d2:0b:52:c2:e3:6a:5a:b8:27:45:58:46:30:8f:b7:c7:fa:
         46:e1:7c:aa:e4:2f:10:ec:33:12:2b:4c:17:f0:c4:36:09:ba:
         25:c2:cf:11:d8:28:5f:89:18:3f:14:59:00:22:a2:5e:3f:c1:
         b4:6f:f2:39:92:2b:bd:01:76:8a:60:d7:88:ad:89:fe:45:5e:
         86:1f:e6:5f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTk1QUIxMTAvBgNVBAUTKEQ3OUZGQTc3MjM3NUFFQjQwMjFBOEZGNTE4MkZFQUFB
MzI1OTI4RkQwHhcNMjUwNTA4MTUxMzMwWhcNMjUwNTE1MTUxMzMwWjAYMRYwFAYD
VQQDEw02ODFjY2ExYS0wNmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwqx96SFR0YccQtCYmXTAuzRfCjpluCFAM0gkKBPBUKe/imQDBH1x9GuLsDi6
c/vBNLAZ4zlfHwHfBZ5EqaV4H8v6XxhcYHRJYYErWfAyaURldFZoBjegtaJ045ew
QiFrm6RQfGrt2oSFwfrZnrjFk1mHY6Hek6Qkzwl/AfZ5+d39v0tCYKOQZCWuJ4TM
97qxEn0whg1nhtAbeYSZkxrQox5mQUA/aJXk873qUo2qCfsvkDSJ6GpOsxzXZgfr
3uGLAZ7Xw63SCFoMQSW8S1H9pRzpxQMytVlLS7lCu3bNe5RW1AUGf/5gEXlux2Ra
DKvEXK8JlTjd2l7A1koLZ+M5rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/WQH1X
iUi4N09sNcowmKhIwKrBMB8GA1UdIwQYMBaAFNef+ncjda60AhqP9Rgv6qoyWSj9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTVBQi8yQUFGRjU3ODFE
QTcxMUUyQTFGMkNDQTAwOEIwMkNEMi8xNV82ZHlOMXJyUUNHb18xR0NfcXFqSlpL
UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE1XzZkeU4xcnJRQ0dvXzFHQ19xcWpKWktQMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
OTVBQi8yQUFGRjU3ODFEQTcxMUUyQTFGMkNDQTAwOEIwMkNEMi8xNV82ZHlOMXJy
UUNHb18xR0NfcXFqSlpLUDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAvlc3w+9oaj/mKPu/ZFpn8YktM+dNoUyHwZw9SAiUqblylEIpPdB0x
v1t8dYvjUO7RxBkjPH9+VQhRDUDNcy7RTfDM3x8/t9q+d8vXEmpAhBKVY2qzhYcB
ORZQ8upcikhvcMgCfVGsuHC8HEV+5zUYB17TKftkMyJ0ILH9lyY4skjCy1D/whnx
lfxKNynCmKj7d+xI9eny9Y4b9g0vF3uTVh/NxIzUBSrQ9P4pIW2PPip30oI60gtS
wuNqWrgnRVhGMI+3x/pG4Xyq5C8Q7DMSK0wX8MQ2Cbolws8R2ChfiRg/FFkAIqJe
P8G0b/I5kiu9AXaKYNeIrYn+RV6GH+Zf
-----END CERTIFICATE-----
Generated at Sat May 10 13:12:18 2025 by rpki-client