Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
File:                     VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft (raw, json)
Hash identifier:          IGd3Heid4rdDus4/Bkcumj5J7H3OzPGnQugQU9t71wU=
Subject key identifier:   E0:63:FD:54:A7:61:BB:78:73:2C:AA:D8:0B:5D:EF:F9:4F:5F:CB:0E
Authority key identifier: 54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14
Certificate issuer:       /CN=A91AEBFF/serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014
Certificate serial:       0473
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
Manifest number:          046D
Signing time:             Thu 03 Jul 2025 00:27:36 +0000
Manifest this update:     Thu 03 Jul 2025 00:27:36 +0000
Manifest next update:     Thu 10 Jul 2025 00:27:36 +0000
Files and hashes:         1: VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl (hash: f4zAQa3XEgCt6LaxGoP7YYd3q1vx8VG4uRD/zD6GY+8=)
                          2: FEE1AED6C77311EEB751AE2CC4F9AE02.roa (hash: VVFFKCHYbosvaaLrPx2vqSUqYAflv5w/HG528t1OXHo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 00:27:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1139 (0x473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AEBFF, serialNumber=54411FE7332D2EF4FF275E59D5DEFED1CCE96014
        Validity
            Not Before: Jul  3 00:27:36 2025 GMT
            Not After : Jul 10 00:27:36 2025 GMT
        Subject: CN=6865ce78-0824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dd:4f:94:8c:6b:2d:3f:8b:87:91:5b:47:aa:
                    0a:a0:8b:a0:c7:6d:50:f4:83:e3:00:b2:fc:c3:ad:
                    f6:ac:a7:dc:36:32:cf:87:05:a6:6c:0f:93:67:a3:
                    4d:35:94:8a:78:4d:ca:cc:52:b0:e2:c6:cd:69:9d:
                    97:88:ea:04:84:0f:e9:1b:37:30:4c:75:f7:f9:a4:
                    39:11:85:0e:7e:ce:9b:79:f0:85:33:82:19:1e:35:
                    c9:84:7f:66:9d:28:39:10:ad:8c:ec:ae:9b:72:be:
                    41:11:90:3c:6e:16:97:c5:94:26:fb:2b:bd:e0:94:
                    79:78:c0:bf:1e:87:e6:dd:83:d2:29:fe:2a:68:8e:
                    37:19:57:e7:77:d6:15:03:4e:04:ae:6c:c5:87:2a:
                    84:75:0b:68:7d:7c:83:11:5f:8f:93:de:ea:36:1c:
                    92:70:4c:96:dd:87:99:44:9f:0c:cb:2c:2f:43:36:
                    23:b6:e7:03:01:2c:ee:8f:49:2f:94:c9:64:7d:94:
                    c6:98:79:5f:f3:92:e6:b7:a5:01:68:2c:e0:09:38:
                    93:1d:78:10:f0:ca:24:c3:8a:84:d4:e7:ed:1c:04:
                    fd:c3:32:8f:de:d8:d4:d2:89:54:50:ec:bf:a8:62:
                    8a:4e:10:f0:98:9b:98:81:bd:45:77:c2:ed:07:ce:
                    50:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:63:FD:54:A7:61:BB:78:73:2C:AA:D8:0B:5D:EF:F9:4F:5F:CB:0E
            X509v3 Authority Key Identifier:
                keyid:54:41:1F:E7:33:2D:2E:F4:FF:27:5E:59:D5:DE:FE:D1:CC:E9:60:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VEEf5zMtLvT_J15Z1d7-0czpYBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AEBFF/E3DC29E650DC11EC9BF90E31C4F9AE02/VEEf5zMtLvT_J15Z1d7-0czpYBQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ca:37:82:e2:a7:38:cd:52:b7:ff:3c:8e:cf:6b:a6:a9:2e:
         56:35:4f:51:8b:94:12:7a:2e:6b:ab:9e:63:14:5d:15:36:85:
         b8:4b:4f:e9:95:eb:75:d2:8b:ff:88:4e:84:3d:e7:90:30:23:
         9e:3b:e3:33:5e:0a:69:85:9f:8b:6a:d5:90:58:16:18:f7:0b:
         cb:33:68:15:86:fd:e4:7d:7d:03:15:96:95:d1:25:86:c3:04:
         84:55:81:2a:78:12:b9:1d:37:66:f4:85:e2:02:16:ee:1b:79:
         23:de:f6:98:59:d4:6b:64:36:b4:96:d1:32:f8:04:05:68:b9:
         c7:2f:d7:09:d5:c1:e9:06:87:21:c0:07:37:9f:63:e7:63:56:
         78:09:d9:e5:06:7e:9e:72:1b:68:01:52:33:53:50:d7:ec:66:
         57:fe:c6:d5:47:af:20:69:ed:9d:99:08:bc:4c:7b:87:97:0c:
         3f:2f:68:3a:76:d2:14:89:36:0f:36:19:96:5f:8f:d5:34:91:
         9c:cb:dd:4d:fc:c7:21:f2:25:cb:78:cb:70:f0:9b:43:30:ab:
         82:26:3f:94:ea:8d:c9:b1:8f:1e:f8:5b:db:4f:fb:5e:9c:c5:
         99:bf:c3:af:bb:4e:ce:66:0a:09:d3:a2:4e:3e:01:0e:10:21:
         92:bb:be:49
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUVCRkYxMTAvBgNVBAUTKDU0NDExRkU3MzMyRDJFRjRGRjI3NUU1OUQ1REVGRUQx
Q0NFOTYwMTQwHhcNMjUwNzAzMDAyNzM2WhcNMjUwNzEwMDAyNzM2WjAYMRYwFAYD
VQQDEw02ODY1Y2U3OC0wODI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq91PlIxrLT+Lh5FbR6oKoIugx21Q9IPjALL8w632rKfcNjLPhwWmbA+TZ6NN
NZSKeE3KzFKw4sbNaZ2XiOoEhA/pGzcwTHX3+aQ5EYUOfs6befCFM4IZHjXJhH9m
nSg5EK2M7K6bcr5BEZA8bhaXxZQm+yu94JR5eMC/Hofm3YPSKf4qaI43GVfnd9YV
A04ErmzFhyqEdQtofXyDEV+Pk97qNhyScEyW3YeZRJ8MyywvQzYjtucDASzuj0kv
lMlkfZTGmHlf85Lmt6UBaCzgCTiTHXgQ8Mokw4qE1OftHAT9wzKP3tjU0olUUOy/
qGKKThDwmJuYgb1Fd8LtB85QIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOBj/VSn
Ybt4cyyq2Atd7/lPX8sOMB8GA1UdIwQYMBaAFFRBH+czLS70/ydeWdXe/tHM6WAU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRUJGRi9FM0RDMjlFNjUw
REMxMUVDOUJGOTBFMzFDNEY5QUUwMi9WRUVmNXpNdEx2VF9KMTVaMWQ3LTBjenBZ
QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZFRWY1ek10THZUX0oxNVoxZDctMGN6cFlCUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RUJGRi9FM0RDMjlFNjUwREMxMUVDOUJGOTBFMzFDNEY5QUUwMi9WRUVmNXpNdEx2
VF9KMTVaMWQ3LTBjenBZQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBUyjeC4qc4zVK3/zyOz2umqS5WNU9Ri5QSei5rq55jFF0VNoW4S0/p
let10ov/iE6EPeeQMCOeO+MzXgpphZ+LatWQWBYY9wvLM2gVhv3kfX0DFZaV0SWG
wwSEVYEqeBK5HTdm9IXiAhbuG3kj3vaYWdRrZDa0ltEy+AQFaLnHL9cJ1cHpBoch
wAc3n2PnY1Z4CdnlBn6echtoAVIzU1DX7GZX/sbVR68gae2dmQi8THuHlww/L2g6
dtIUiTYPNhmWX4/VNJGcy91N/Mch8iXLeMtw8JtDMKuCJj+U6o3JsY8e+FvbT/te
nMWZv8Ovu07OZgoJ06JOPgEOECGSu75J
-----END CERTIFICATE-----
Generated at Thu Jul 3 14:57:52 2025 by rpki-client