Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File:                     mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier:          3OlcVlWd8IzjFGLD1QUU1+kvkFrYjWsq5aEUf9kCgYE=
Subject key identifier:   02:D2:2A:06:5F:B5:6F:C9:DD:65:4D:51:E0:53:73:D2:FC:25:97:4B
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0A87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number:          0A56
Signing time:             Wed 14 May 2025 19:51:10 +0000
Manifest this update:     Wed 14 May 2025 19:51:09 +0000
Manifest next update:     Wed 21 May 2025 19:51:09 +0000
Files and hashes:         1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: xVjUTcBgptaHQTHfmo7gyoyvVw8kLLJuOcwmL6XEyrE=)
                          2: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: b0jHLruEtRzyhGWKnuBBIEAeyGPvSkQqNURAHY7x5fE=)
                          3: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: gbSrDMCrPI8A3+3d0sfCicNLcWdleMd0w7YOfrmP/TI=)
                          4: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: Zd7NoechSfahxSRsj2v3JsOwSTFCMebH21LUprHvV20=)
                          5: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: SFbvxZ2XG8g69o3YZw4mocDKsXgtaeblyR+TN86Ur60=)
                          6: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: y31kJqG82XvEmO9/QRkcWiRFKFh5zoKjaSnnJfP7MyE=)
                          7: 8A533506C9DC11EE8B24C55EC4F9AE02.roa (hash: L2UnCfNPLgYDfL3nmk5SGHkno1H3kXJJBZN9FhtxlXQ=)
                          8: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: GMZ//QDkBiynojhpbrl7EytSa00iqEIB/AB0/Z7GlXI=)
                          9: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: mvVRFtNTY10bq4ZO+LKEMEdrzCb/tsvmp6na5wzt45Q=)
                          10: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: yd/SOlvp9mrxaUSwn8FcZ74+WiXfNeapwvKAhRJ4Sx8=)
                          11: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: 4HveBCpHvV1swaBGF9e6bY77B+cKbG0JrVqTZsmASrs=)
                          12: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 2GC7KAVMhvV+YXc4GAZ/vzQonWiNlY6zwWOHBpULon8=)
                          13: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: MEzvVgdoK3WuLUFmv9SwilQrCS7SZE01USmJAX6/Oss=)
                          14: 8B8856F4C9DC11EE8B24C55EC4F9AE02.roa (hash: 9pxxuNY/fuCdOuU7dA3COe6L1OGNmS3muKknh0X0O9M=)
                          15: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: Mm2/BkteGaDDz+jKCOQ2/1mPEBu0lMlfQI/ZFwneEPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 19:41:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2695 (0xa87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: May 14 19:51:09 2025 GMT
            Not After : May 21 19:51:09 2025 GMT
        Subject: CN=6824f42e-9a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:97:b9:8d:55:3f:3d:95:b9:70:82:af:de:de:
                    ee:d6:cf:5c:e0:4a:cd:1c:53:e3:5e:80:33:ff:35:
                    a6:2f:6c:37:35:0c:af:80:d5:24:80:9c:db:2c:0c:
                    23:5a:7a:b9:8e:96:e8:55:b6:af:d6:f6:94:72:2f:
                    fa:37:e3:12:bc:b7:f6:35:fd:3c:f3:2a:a7:a2:64:
                    6f:7b:e3:af:6d:4d:b6:1c:64:f8:89:0f:7d:dc:2a:
                    f7:a9:31:c7:ff:34:a6:d8:16:06:ab:42:1d:07:0e:
                    2e:ab:42:67:3c:4b:fa:53:ea:93:af:62:88:fd:27:
                    a9:1a:f7:31:1f:68:a6:f1:2f:62:f3:7b:c6:52:8b:
                    c5:39:bf:50:8f:2a:36:00:f8:4e:f3:8d:de:f1:ec:
                    9f:0d:c4:5c:ba:45:40:32:32:2d:25:16:74:dd:03:
                    bf:6b:3f:5e:9f:c9:09:77:9a:32:f4:a1:54:08:f4:
                    74:d0:c4:ee:bc:fd:42:1a:37:d5:79:50:14:c8:cb:
                    02:79:f2:25:29:1a:5c:98:05:e5:b3:f8:57:54:42:
                    f8:ae:dd:82:41:d5:cc:ef:d6:46:ec:fc:63:12:32:
                    5e:ac:1d:2e:b4:eb:d2:0c:3c:7e:0d:e5:ee:a3:7a:
                    fc:b4:82:e2:41:f4:57:3c:84:40:89:d5:08:de:23:
                    e1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D2:2A:06:5F:B5:6F:C9:DD:65:4D:51:E0:53:73:D2:FC:25:97:4B
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:51:6b:bc:96:ad:1e:09:8e:f6:bb:e4:4a:ed:99:2c:b1:74:
         e0:55:60:ab:96:89:f0:81:0b:71:44:22:bc:27:64:a1:62:a4:
         26:ba:19:1d:bf:66:09:48:65:c5:6a:ff:e6:56:09:3a:50:84:
         11:3a:c8:3a:89:c1:45:11:59:51:fb:93:a1:9a:77:07:38:5f:
         d0:b7:a6:e6:92:90:89:24:b6:02:d5:59:a0:a9:8b:5e:b9:8c:
         2d:b5:79:2b:05:cd:3c:66:b7:ac:7b:bb:ab:0e:44:62:0c:c7:
         69:c0:5c:9e:58:57:67:44:79:7b:22:6c:98:18:fe:53:85:a6:
         45:dd:4a:78:48:ca:82:3a:a6:0b:6d:93:1c:b2:a0:9e:7f:a7:
         35:09:73:28:e3:f5:27:cd:a0:cb:9b:20:e8:90:e7:86:44:91:
         6d:65:e0:19:49:6f:c9:ca:4a:3d:92:c7:dc:d3:53:c4:1a:8e:
         4d:44:61:fb:38:85:bd:97:a4:34:4e:44:3a:86:48:2e:d9:94:
         ee:f0:e0:eb:3d:a6:8c:df:91:a1:06:e7:62:c2:d0:96:f3:54:
         69:9a:8b:35:82:26:8f:a7:f0:3d:63:f7:1f:92:a9:9b:46:a0:
         59:84:c7:2d:a2:33:c3:70:b0:8b:04:ff:bf:f7:bd:35:bf:5f:
         d7:d9:3f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:37:43 2025 by rpki-client