Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
File:                     2x93mMABF7IMbzvDKZSALPIJSDc.mft (raw, json)
Hash identifier:          Li3z+6ToWq0Z4OCm3sfKALzgB7dGJjag2AzqrgeeKyA=
Subject key identifier:   71:20:1C:FA:D6:3F:50:7E:CD:3D:7F:BA:3D:37:83:BF:52:E2:13:A1
Authority key identifier: DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37
Certificate issuer:       /CN=A91BA594/serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
Certificate serial:       06F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
Manifest number:          06E4
Signing time:             Tue 06 May 2025 21:55:04 +0000
Manifest this update:     Tue 06 May 2025 21:55:04 +0000
Manifest next update:     Tue 13 May 2025 21:55:04 +0000
Files and hashes:         1: 2x93mMABF7IMbzvDKZSALPIJSDc.crl (hash: s5iv5EYMQDUEaPW2pBdbSoctvC7/bifak5WXYzwANzE=)
                          2: 1B713E1C554F11EB99946233C4F9AE02.roa (hash: px8vPMMaIW71viSZHvwgIDzN828jdKyVwys/IvDu8b8=)
                          3: D0EAEA3EB85811EF96935B81C4F9AE02.roa (hash: Nbyc9rPbEVQJKGo8N91eHTaOUJwwDIylew69dKgtqpM=)
                          4: 1AC0CFAA554F11EB99946233C4F9AE02.roa (hash: M4wskVyxngrHuY03UIwusYbtRWJWk73Kf7frzvsTsis=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl
                          rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 21:55:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1781 (0x6f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA594, serialNumber=DB1F7798C00117B20C6F3BC32994802CF2094837
        Validity
            Not Before: May  6 21:55:04 2025 GMT
            Not After : May 13 21:55:04 2025 GMT
        Subject: CN=681a8538-7328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:82:3d:a1:6e:c9:36:65:f3:17:42:da:eb:3f:
                    bb:79:ef:03:e1:0c:59:0a:74:a6:9f:b3:9a:73:46:
                    f8:15:de:87:c7:7c:b5:77:fc:01:ef:93:05:a9:f7:
                    09:fe:9d:a5:6b:13:fc:8c:9b:5c:e0:93:12:72:52:
                    c6:93:12:af:a6:cf:ae:06:2e:4c:e5:4c:3c:1e:e9:
                    5b:55:d7:6c:3f:1f:ac:0c:0f:d7:10:79:94:a3:c8:
                    5e:75:a0:d5:71:d2:e3:57:cf:d8:fb:cc:23:b9:be:
                    ea:cd:c1:45:05:d4:04:03:ca:c4:54:22:a3:1d:89:
                    ce:a7:97:08:b1:b5:c2:e7:c8:01:f6:ea:41:d4:9c:
                    64:79:fb:25:13:a9:06:45:3e:4e:f4:e4:76:17:9a:
                    3d:de:16:23:93:8d:33:4d:e4:87:19:0b:d9:6f:4f:
                    19:87:40:9b:90:bf:8d:05:ff:0d:6a:b8:ab:0f:62:
                    04:5b:a2:8c:ca:d0:df:81:80:e0:63:68:cc:ee:d7:
                    95:ea:a9:df:cb:3a:6d:51:a0:05:79:54:6c:c8:fa:
                    d8:7c:dc:df:a3:4b:2d:55:54:73:3f:7c:4e:d4:46:
                    88:65:58:bd:83:53:54:83:fb:ed:7d:80:1a:d2:ec:
                    96:87:c7:ef:7f:72:3b:52:13:d0:97:e7:3d:0c:95:
                    b2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:20:1C:FA:D6:3F:50:7E:CD:3D:7F:BA:3D:37:83:BF:52:E2:13:A1
            X509v3 Authority Key Identifier:
                keyid:DB:1F:77:98:C0:01:17:B2:0C:6F:3B:C3:29:94:80:2C:F2:09:48:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2x93mMABF7IMbzvDKZSALPIJSDc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA594/522B6D6E553C11EB8F085C71C4F9AE02/2x93mMABF7IMbzvDKZSALPIJSDc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f0:aa:ab:e5:84:b3:29:77:9d:d3:7d:84:6d:21:2f:2c:b2:
         7f:5d:9e:1e:ab:6e:0e:4b:39:30:78:05:ed:89:7e:f5:69:7f:
         55:5a:ef:e2:bd:e2:c0:5a:1b:dd:42:64:cf:d4:90:87:70:1a:
         06:68:f8:3c:7f:a4:df:ec:b3:c7:83:3e:14:d4:df:92:03:ad:
         95:ca:86:db:0f:b9:b7:1a:6e:86:d3:0a:b4:e8:20:67:9c:50:
         9a:fb:b0:45:fd:9a:a8:47:77:de:02:43:3d:ee:df:32:c1:35:
         25:f4:88:2b:98:50:50:74:8f:64:4f:c4:46:48:99:c4:06:ed:
         4a:4e:72:47:6d:b2:45:bb:d3:ab:4c:1f:7e:a3:a8:73:06:ef:
         2a:a3:44:04:11:0b:e7:ef:51:c5:ef:27:12:95:d7:e1:ae:22:
         21:5f:16:56:c2:14:cd:e9:4f:5b:33:ea:12:7f:26:89:8a:79:
         45:0b:c1:d5:1f:8e:8c:41:8a:4c:5e:b5:ff:21:38:3c:86:2f:
         5f:ea:f5:78:62:d4:6b:95:92:f9:42:cf:ba:81:d7:26:9e:38:
         99:a2:2a:4d:52:05:20:a4:94:72:21:7d:a1:ab:fd:47:9a:3a:
         77:5f:3a:ba:db:50:92:95:62:a4:27:98:e2:92:b4:77:6c:25:
         bc:e1:80:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkE1OTQxMTAvBgNVBAUTKERCMUY3Nzk4QzAwMTE3QjIwQzZGM0JDMzI5OTQ4MDJD
RjIwOTQ4MzcwHhcNMjUwNTA2MjE1NTA0WhcNMjUwNTEzMjE1NTA0WjAYMRYwFAYD
VQQDEw02ODFhODUzOC03MzI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuYI9oW7JNmXzF0La6z+7ee8D4QxZCnSmn7Oac0b4Fd6Hx3y1d/wB75MFqfcJ
/p2laxP8jJtc4JMSclLGkxKvps+uBi5M5Uw8HulbVddsPx+sDA/XEHmUo8hedaDV
cdLjV8/Y+8wjub7qzcFFBdQEA8rEVCKjHYnOp5cIsbXC58gB9upB1JxkefslE6kG
RT5O9OR2F5o93hYjk40zTeSHGQvZb08Zh0CbkL+NBf8NarirD2IEW6KMytDfgYDg
Y2jM7teV6qnfyzptUaAFeVRsyPrYfNzfo0stVVRzP3xO1EaIZVi9g1NUg/vtfYAa
0uyWh8fvf3I7UhPQl+c9DJWymwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHEgHPrW
P1B+zT1/uj03g79S4hOhMB8GA1UdIwQYMBaAFNsfd5jAAReyDG87wymUgCzyCUg3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTU5NC81MjJCNkQ2RTU1
M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3SU1ienZES1pTQUxQSUpT
RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ4OTNtTUFCRjdJTWJ6dkRLWlNBTFBJSlNEYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
QTU5NC81MjJCNkQ2RTU1M0MxMUVCOEYwODVDNzFDNEY5QUUwMi8yeDkzbU1BQkY3
SU1ienZES1pTQUxQSUpTRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAx8Kqr5YSzKXed032EbSEvLLJ/XZ4eq24OSzkweAXtiX71aX9VWu/i
veLAWhvdQmTP1JCHcBoGaPg8f6Tf7LPHgz4U1N+SA62VyobbD7m3Gm6G0wq06CBn
nFCa+7BF/ZqoR3feAkM97t8ywTUl9IgrmFBQdI9kT8RGSJnEBu1KTnJHbbJFu9Or
TB9+o6hzBu8qo0QEEQvn71HF7ycSldfhriIhXxZWwhTN6U9bM+oSfyaJinlFC8HV
H46MQYpMXrX/ITg8hi9f6vV4YtRrlZL5Qs+6gdcmnjiZoipNUgUgpJRyIX2hq/1H
mjp3Xzq621CSlWKkJ5jikrR3bCW84YCN
-----END CERTIFICATE-----
Generated at Thu May 8 14:46:00 2025 by rpki-client