Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft
File:                     qC5jMev0T1j8ZZmG2wVExmFfJvE.mft (raw, json)
Hash identifier:          k4MOTAXQY3keLli2hzunnFuUIYW+WLxnGwG6+/dCCfI=
Subject key identifier:   A4:07:64:46:6C:FC:63:05:43:52:81:E5:74:7F:A7:A5:93:B7:59:D9
Authority key identifier: A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1
Certificate issuer:       /CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft
Manifest number:          E6
Signing time:             Tue 13 May 2025 04:40:17 +0000
Manifest this update:     Tue 13 May 2025 04:40:16 +0000
Manifest next update:     Tue 20 May 2025 04:40:16 +0000
Files and hashes:         1: qC5jMev0T1j8ZZmG2wVExmFfJvE.crl (hash: 67s1W4LFwcuUOi48d5SITh9ED0IpjC3ALr1rda7dpZ8=)
                          2: B57678E8D73711EEAECFA720C4F9AE02.roa (hash: 1mdRwvV5n8x0UgBPlIBjHnwgQhIGSx8VQkbewDudiQM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl
                          rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 04:40:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC415, serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1
        Validity
            Not Before: May 13 04:40:16 2025 GMT
            Not After : May 20 04:40:16 2025 GMT
        Subject: CN=6822cd30-b225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:66:41:8e:18:1a:67:9c:fe:14:9b:a2:06:d3:
                    21:80:68:04:41:ee:ab:15:0c:90:af:12:10:9b:0f:
                    cc:36:a2:11:0d:da:9a:c1:2a:83:8d:e0:86:69:10:
                    d6:06:1d:66:e4:7d:04:fb:6b:55:25:3c:95:80:6e:
                    74:85:07:e2:72:32:47:ee:14:f2:58:0e:2a:c5:20:
                    0f:10:81:1c:03:ee:e7:c2:30:1f:11:c4:af:21:20:
                    8a:45:9a:23:7a:ad:ab:a4:8c:af:a4:73:bf:a8:19:
                    79:bc:4e:f4:49:02:ff:d8:a5:15:97:8c:45:78:00:
                    05:02:23:dd:43:93:7b:0f:f9:ae:de:f1:af:b3:e4:
                    f6:6e:a5:88:bb:9c:33:e7:23:da:7f:c4:4d:cc:be:
                    a4:7f:1f:b7:13:a6:1d:a8:7c:b9:97:1b:c7:70:78:
                    cb:a3:9a:e2:40:a9:41:0f:9b:c5:de:3b:37:4a:08:
                    83:a8:8a:73:ed:73:b4:d8:da:e6:f2:16:e4:f9:46:
                    b1:8c:8f:13:41:29:b1:08:11:22:a2:34:68:40:7d:
                    0d:e9:8b:c1:c1:72:f4:2d:50:a3:60:23:1f:1a:9f:
                    2b:28:00:b4:52:55:9c:8c:c5:57:60:40:45:b7:01:
                    bf:2d:b7:b4:87:41:5f:00:1f:a0:d1:4c:21:bb:cd:
                    bb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:07:64:46:6C:FC:63:05:43:52:81:E5:74:7F:A7:A5:93:B7:59:D9
            X509v3 Authority Key Identifier:
                keyid:A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e6:3f:ee:2b:17:0a:4c:50:6c:9a:2f:e9:3c:b2:91:87:1b:
         80:e0:f0:e8:05:cb:51:5f:17:71:43:12:9e:66:43:db:c4:81:
         4a:3b:f2:6d:78:b3:49:0b:42:27:09:10:e1:a6:3c:38:55:b2:
         74:b0:8c:ff:98:6d:b3:34:8a:23:01:1a:4d:be:7d:45:b2:7d:
         1a:6c:1a:a7:12:f9:65:20:33:4b:01:43:cf:e2:ca:be:05:a2:
         ad:bd:9a:e0:0e:fc:ab:9a:e9:c8:54:f2:d1:03:45:9a:53:2a:
         4c:03:90:26:11:4a:ed:63:de:bc:f2:52:72:e7:39:78:b3:9d:
         9d:b3:c0:06:ee:02:23:ed:24:2a:1c:70:49:4e:b2:a4:c5:84:
         8a:9d:c2:8d:b3:c8:b1:58:63:9f:95:5a:f1:3a:d9:a9:25:27:
         43:84:83:9b:83:13:b7:3c:35:93:82:f6:90:2e:ef:b1:f7:44:
         da:83:91:21:b1:fb:80:02:24:9e:9c:1f:8d:51:96:af:f0:b5:
         32:3f:d0:8b:6a:17:d2:36:bb:a1:41:af:2f:ac:a2:03:96:78:
         c8:74:c8:9d:ee:3a:79:20:0d:c2:a3:db:2f:e0:63:21:a8:b7:
         e1:eb:be:1a:22:ec:52:ab:30:74:2a:19:ce:0f:2b:5b:54:c6:
         2b:03:0f:0d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUM0MTUxMTAvBgNVBAUTKEE4MkU2MzMxRUJGNDRGNThGQzY1OTk4NkRCMDU0NEM2
NjE1RjI2RjEwHhcNMjUwNTEzMDQ0MDE2WhcNMjUwNTIwMDQ0MDE2WjAYMRYwFAYD
VQQDEw02ODIyY2QzMC1iMjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2WZBjhgaZ5z+FJuiBtMhgGgEQe6rFQyQrxIQmw/MNqIRDdqawSqDjeCGaRDW
Bh1m5H0E+2tVJTyVgG50hQficjJH7hTyWA4qxSAPEIEcA+7nwjAfEcSvISCKRZoj
eq2rpIyvpHO/qBl5vE70SQL/2KUVl4xFeAAFAiPdQ5N7D/mu3vGvs+T2bqWIu5wz
5yPaf8RNzL6kfx+3E6YdqHy5lxvHcHjLo5riQKlBD5vF3js3SgiDqIpz7XO02Nrm
8hbk+UaxjI8TQSmxCBEiojRoQH0N6YvBwXL0LVCjYCMfGp8rKAC0UlWcjMVXYEBF
twG/Lbe0h0FfAB+g0Uwhu827AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQHZEZs
/GMFQ1KB5XR/p6WTt1nZMB8GA1UdIwQYMBaAFKguYzHr9E9Y/GWZhtsFRMZhXybx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzQxNS9CRDFDOTM1Q0Q3
MzIxMUVFQTE4M0Y1MEFDNEY5QUUwMi9xQzVqTWV2MFQxajhaWm1HMndWRXhtRmZK
dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FDNWpNZXYwVDFqOFpabUcyd1ZFeG1GZkp2RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QzQxNS9CRDFDOTM1Q0Q3MzIxMUVFQTE4M0Y1MEFDNEY5QUUwMi9xQzVqTWV2MFQx
ajhaWm1HMndWRXhtRmZKdkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBw5j/uKxcKTFBsmi/pPLKRhxuA4PDoBctRXxdxQxKeZkPbxIFKO/Jt
eLNJC0InCRDhpjw4VbJ0sIz/mG2zNIojARpNvn1Fsn0abBqnEvllIDNLAUPP4sq+
BaKtvZrgDvyrmunIVPLRA0WaUypMA5AmEUrtY9688lJy5zl4s52ds8AG7gIj7SQq
HHBJTrKkxYSKncKNs8ixWGOflVrxOtmpJSdDhIObgxO3PDWTgvaQLu+x90Tag5Eh
sfuAAiSenB+NUZav8LUyP9CLahfSNruhQa8vrKIDlnjIdMid7jp5IA3Co9sv4GMh
qLfh674aIuxSqzB0KhnODytbVMYrAw8N
-----END CERTIFICATE-----
Generated at Wed May 14 05:07:13 2025 by rpki-client