Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
File:                     quxIh3HXuUGFyKkP420pfedshLw.mft (raw, json)
Hash identifier:          EIL5M05mHI1ZizQ3GRfeBgKqFgMAp+ITVu3wJJNfj7s=
Subject key identifier:   B0:A8:BC:D7:80:15:45:69:46:2D:F9:9B:35:F7:18:A4:62:B6:8D:D8
Authority key identifier: AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC
Certificate issuer:       /CN=A91C60A5/serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
Manifest number:          6D
Signing time:             Tue 13 May 2025 06:09:18 +0000
Manifest this update:     Tue 13 May 2025 06:09:18 +0000
Manifest next update:     Tue 20 May 2025 06:09:18 +0000
Files and hashes:         1: quxIh3HXuUGFyKkP420pfedshLw.crl (hash: jtOYHfYn05//P+0hnYNli8gfTusV02lLRN+eWPgRKUs=)
                          2: C5B7E29491F111EFA1C14C61C4F9AE02.roa (hash: id6HTAhbs7lkZSnmnWxvojaKrloCyVbBox6Qwy3+IY8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl
                          rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 06:09:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C60A5, serialNumber=AAEC488771D7B94185C8A90FE36D297DE76C84BC
        Validity
            Not Before: May 13 06:09:18 2025 GMT
            Not After : May 20 06:09:18 2025 GMT
        Subject: CN=6822e20e-9cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:16:82:f6:0e:5f:0c:16:7a:b1:6c:f9:45:09:
                    2f:8a:b6:48:e5:0a:d7:f4:ba:e3:ff:6f:26:3b:a5:
                    02:9c:e3:fe:e2:61:81:ef:19:63:fc:3b:6a:4b:08:
                    55:37:77:bf:d0:b4:52:f2:2b:50:c1:5d:f2:6c:b8:
                    a5:7e:60:6d:d4:14:6e:44:67:3f:29:4f:fd:34:3b:
                    fc:6a:00:a9:31:39:09:19:94:24:c9:95:1c:f8:a5:
                    7d:d7:e0:5a:db:0a:50:8d:4e:96:20:09:d7:a7:fb:
                    86:e0:f5:0e:11:a0:cd:ea:c5:54:36:19:c8:22:ab:
                    b0:b8:6e:1b:b2:00:63:75:a0:ff:ff:49:75:f4:bd:
                    2c:38:70:f3:d3:25:30:f1:33:23:5b:57:ce:36:73:
                    23:e7:75:80:6e:a0:05:d9:5f:43:bd:80:95:a8:24:
                    f0:53:87:52:1d:cd:4d:22:3b:5a:56:c5:db:64:ca:
                    00:c6:dd:60:d5:ee:02:5b:03:f4:14:40:ec:e8:74:
                    6e:6b:1f:51:bf:b8:78:bd:66:c5:74:f7:7c:f5:c1:
                    de:af:3f:9d:27:c9:7c:3a:6d:95:2b:82:eb:7c:18:
                    9e:00:58:6c:83:55:29:d1:df:9d:c5:66:56:59:ef:
                    69:f5:a6:30:bd:96:56:95:0b:e1:5b:3d:4b:7b:09:
                    d6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A8:BC:D7:80:15:45:69:46:2D:F9:9B:35:F7:18:A4:62:B6:8D:D8
            X509v3 Authority Key Identifier:
                keyid:AA:EC:48:87:71:D7:B9:41:85:C8:A9:0F:E3:6D:29:7D:E7:6C:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/quxIh3HXuUGFyKkP420pfedshLw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C60A5/997B366E91F011EFB6965C24C4F9AE02/quxIh3HXuUGFyKkP420pfedshLw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:59:51:79:b2:9b:cf:82:c6:de:c8:4e:1c:7b:af:22:2e:
         c9:b5:1a:19:95:b4:80:e1:9a:d4:c5:bf:10:05:c0:39:0b:b9:
         c4:d7:5b:3a:8c:70:9c:cd:64:28:ce:68:ae:a9:5a:15:8e:5c:
         9e:80:09:c5:81:71:ff:f3:2a:55:6a:46:bb:d1:51:a5:3a:68:
         fb:ba:ca:75:e6:d1:75:07:19:da:ed:07:ff:b2:18:23:26:b8:
         12:9f:59:14:34:62:41:6f:ac:55:85:62:a5:17:31:d8:49:76:
         fa:ad:e2:ce:9b:5a:60:31:92:02:fc:c7:ea:89:38:62:fb:d5:
         95:25:5a:85:ce:0f:24:4f:64:94:57:7d:e9:f2:a8:6f:68:3e:
         e9:cd:18:63:fa:ec:7d:10:2c:2c:5a:60:8b:81:e2:bc:fb:28:
         7e:b5:1a:96:e0:12:4b:75:e2:76:20:66:5a:b3:39:de:60:66:
         56:ea:a5:b7:7a:09:05:27:67:8b:68:4b:4c:a9:4b:3a:24:aa:
         73:fa:44:3a:fc:93:6e:be:b1:64:b7:71:da:f9:33:44:f3:2d:
         8f:27:4c:f5:bc:e1:78:5b:97:ff:07:a2:35:91:40:6c:67:34:
         cd:1f:09:59:52:71:43:49:c5:13:fa:1d:b9:ea:6c:d3:84:4c:
         3b:19:0f:25
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD
NjBBNTExMC8GA1UEBRMoQUFFQzQ4ODc3MUQ3Qjk0MTg1QzhBOTBGRTM2RDI5N0RF
NzZDODRCQzAeFw0yNTA1MTMwNjA5MThaFw0yNTA1MjAwNjA5MThaMBgxFjAUBgNV
BAMTDTY4MjJlMjBlLTljYjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYFoL2Dl8MFnqxbPlFCS+KtkjlCtf0uuP/byY7pQKc4/7iYYHvGWP8O2pLCFU3
d7/QtFLyK1DBXfJsuKV+YG3UFG5EZz8pT/00O/xqAKkxOQkZlCTJlRz4pX3X4Frb
ClCNTpYgCden+4bg9Q4RoM3qxVQ2Gcgiq7C4bhuyAGN1oP//SXX0vSw4cPPTJTDx
MyNbV842cyPndYBuoAXZX0O9gJWoJPBTh1IdzU0iO1pWxdtkygDG3WDV7gJbA/QU
QOzodG5rH1G/uHi9ZsV093z1wd6vP50nyXw6bZUrgut8GJ4AWGyDVSnR353FZlZZ
72n1pjC9llaVC+FbPUt7CdbRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsKi814AV
RWlGLfmbNfcYpGK2jdgwHwYDVR0jBBgwFoAUquxIh3HXuUGFyKkP420pfedshLww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2MEE1Lzk5N0IzNjZFOTFG
MDExRUZCNjk2NUMyNEM0RjlBRTAyL3F1eEloM0hYdVVHRnlLa1A0MjBwZmVkc2hM
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvcXV4SWgzSFh1VUdGeUtrUDQyMHBmZWRzaEx3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2
MEE1Lzk5N0IzNjZFOTFGMDExRUZCNjk2NUMyNEM0RjlBRTAyL3F1eEloM0hYdVVH
RnlLa1A0MjBwZmVkc2hMdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABzUWVF5spvPgsbeyE4ce68iLsm1GhmVtIDhmtTFvxAFwDkLucTXWzqM
cJzNZCjOaK6pWhWOXJ6ACcWBcf/zKlVqRrvRUaU6aPu6ynXm0XUHGdrtB/+yGCMm
uBKfWRQ0YkFvrFWFYqUXMdhJdvqt4s6bWmAxkgL8x+qJOGL71ZUlWoXODyRPZJRX
fenyqG9oPunNGGP67H0QLCxaYIuB4rz7KH61GpbgEkt14nYgZlqzOd5gZlbqpbd6
CQUnZ4toS0ypSzokqnP6RDr8k26+sWS3cdr5M0TzLY8nTPW84Xhbl/8HojWRQGxn
NM0fCVlScUNJxRP6HbnqbNOETDsZDyU=
-----END CERTIFICATE-----
Generated at Wed May 14 01:28:23 2025 by rpki-client