Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
File:                     LoI9WUls-sc3j6gr-E3faE2TK50.mft (raw, json)
Hash identifier:          /enB1ggazZkHQpVHzWG+CIjHqfb9DkPmY9Hwewq6tQ8=
Subject key identifier:   E4:F0:DE:16:E8:6D:3C:BA:DA:15:70:AF:12:88:6E:4A:E1:F8:34:E8
Authority key identifier: 2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D
Certificate issuer:       /CN=A91E1A60/serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
Certificate serial:       0B1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
Manifest number:          0B19
Signing time:             Mon 12 May 2025 19:04:11 +0000
Manifest this update:     Mon 12 May 2025 19:04:10 +0000
Manifest next update:     Mon 19 May 2025 19:04:10 +0000
Files and hashes:         1: LoI9WUls-sc3j6gr-E3faE2TK50.crl (hash: +EldebKy7I7jQOL4DigCIUJpNeGP57FwYD9JsO/NgHk=)
                          2: 33A8447E3D0111EA9B37B256C4F9AE02.roa (hash: dhmOvv7uMkUQoCzxXTfQXJHUTAQuNuYH/MTOVQ2M8Fw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl
                          rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 19:04:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2847 (0xb1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1A60, serialNumber=2E823D59496CFAC7378FA82BF84DDF684D932B9D
        Validity
            Not Before: May 12 19:04:10 2025 GMT
            Not After : May 19 19:04:10 2025 GMT
        Subject: CN=6822462b-f5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cb:ca:7c:e9:ce:45:3a:ef:52:f0:b3:0f:8e:
                    96:52:72:1d:d2:04:80:5c:af:06:75:f4:0c:6e:41:
                    09:5d:20:9e:34:9b:45:7f:8b:70:3a:74:ca:25:c2:
                    c4:3e:4b:d9:23:e7:e8:60:1e:56:95:23:ec:05:67:
                    42:43:0b:06:e7:f3:2c:4d:93:99:17:a2:c5:5b:77:
                    76:1a:a9:95:0e:68:cf:18:7a:3b:b5:cf:cd:62:af:
                    3d:84:a8:94:25:f8:32:1d:d8:5a:28:0c:70:7b:fa:
                    dc:2e:0c:ce:02:36:0b:61:e3:c0:6a:69:bd:2e:d2:
                    70:8e:0a:49:a0:fe:4c:ee:d4:2a:52:a4:4a:8f:1c:
                    41:2c:de:37:9b:08:83:11:4b:32:8c:43:43:b3:7f:
                    10:0a:92:47:e7:b7:13:9e:21:fa:a4:be:06:37:8b:
                    ab:bf:1d:80:de:7d:c3:57:f9:09:20:1d:cd:fd:3e:
                    96:0c:74:f1:0e:13:7f:2d:52:72:5d:e4:61:cf:cf:
                    90:3b:a9:be:c3:fd:c8:21:81:8c:d9:00:fa:f9:7b:
                    03:ad:cd:0f:17:9e:7c:b8:e2:86:af:99:cb:03:e2:
                    3a:1d:2e:17:39:dc:6f:c5:77:df:92:05:2e:2e:16:
                    01:d5:8f:69:7c:24:c4:bd:38:dd:9e:8f:36:d1:c5:
                    5e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:F0:DE:16:E8:6D:3C:BA:DA:15:70:AF:12:88:6E:4A:E1:F8:34:E8
            X509v3 Authority Key Identifier:
                keyid:2E:82:3D:59:49:6C:FA:C7:37:8F:A8:2B:F8:4D:DF:68:4D:93:2B:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LoI9WUls-sc3j6gr-E3faE2TK50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1A60/80314F863CFF11EA82108253C4F9AE02/LoI9WUls-sc3j6gr-E3faE2TK50.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ad:ae:34:be:ab:a8:96:f0:2a:b0:f3:b9:2c:10:41:9b:8f:
         72:3e:ad:df:dd:fe:9f:de:09:d3:bf:f3:33:d9:72:63:2a:b5:
         69:b6:9d:2a:e7:7f:b5:83:65:fa:d6:33:4d:4b:e7:61:95:40:
         4f:e4:c4:20:20:b5:53:d3:54:a2:35:3c:e1:41:27:ae:e4:c0:
         53:fc:fa:b7:ee:10:44:37:45:5f:b1:6b:bb:f3:03:aa:03:49:
         89:f3:4f:aa:a3:93:ab:a1:f1:e1:4d:5e:e7:ee:84:71:7a:75:
         46:89:64:dc:a0:db:71:1b:8e:e5:59:7a:91:99:c3:19:2a:48:
         e8:59:1c:1f:45:75:24:8b:07:25:fa:b6:94:2d:78:9a:73:b9:
         bd:cc:dd:4f:9d:9b:3d:cb:23:77:92:e7:2b:4d:94:5e:63:06:
         fc:d7:d5:99:6d:23:d3:b6:e8:08:41:22:6e:15:b6:f2:88:17:
         73:20:b3:7b:a3:6b:09:e7:e1:90:d3:d3:21:ed:dd:ff:b2:3b:
         5e:ea:3b:7e:14:dc:95:63:cf:d7:2d:dd:53:3a:4f:0e:0b:c1:
         7b:16:e9:c4:fd:f8:dc:ad:19:29:28:ef:c9:16:b6:c3:2f:c6:
         91:83:e4:9d:51:69:58:71:b0:3d:ff:ae:2b:65:87:d6:b2:89:
         b3:84:a7:08
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCx8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFBNjAxMTAvBgNVBAUTKDJFODIzRDU5NDk2Q0ZBQzczNzhGQTgyQkY4NERERjY4
NEQ5MzJCOUQwHhcNMjUwNTEyMTkwNDEwWhcNMjUwNTE5MTkwNDEwWjAYMRYwFAYD
VQQDEw02ODIyNDYyYi1mNWExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu8vKfOnORTrvUvCzD46WUnId0gSAXK8GdfQMbkEJXSCeNJtFf4twOnTKJcLE
PkvZI+foYB5WlSPsBWdCQwsG5/MsTZOZF6LFW3d2GqmVDmjPGHo7tc/NYq89hKiU
JfgyHdhaKAxwe/rcLgzOAjYLYePAamm9LtJwjgpJoP5M7tQqUqRKjxxBLN43mwiD
EUsyjENDs38QCpJH57cTniH6pL4GN4urvx2A3n3DV/kJIB3N/T6WDHTxDhN/LVJy
XeRhz8+QO6m+w/3IIYGM2QD6+XsDrc0PF558uOKGr5nLA+I6HS4XOdxvxXffkgUu
LhYB1Y9pfCTEvTjdno820cVe/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOTw3hbo
bTy62hVwrxKIbkrh+DToMB8GA1UdIwQYMBaAFC6CPVlJbPrHN4+oK/hN32hNkyud
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUE2MC84MDMxNEY4NjND
RkYxMUVBODIxMDgyNTNDNEY5QUUwMi9Mb0k5V1Vscy1zYzNqNmdyLUUzZmFFMlRL
NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xvSTlXVWxzLXNjM2o2Z3ItRTNmYUUyVEs1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUE2MC84MDMxNEY4NjNDRkYxMUVBODIxMDgyNTNDNEY5QUUwMi9Mb0k5V1Vscy1z
YzNqNmdyLUUzZmFFMlRLNTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAqra40vquolvAqsPO5LBBBm49yPq3f3f6f3gnTv/Mz2XJjKrVptp0q
53+1g2X61jNNS+dhlUBP5MQgILVT01SiNTzhQSeu5MBT/Pq37hBEN0VfsWu78wOq
A0mJ80+qo5OrofHhTV7n7oRxenVGiWTcoNtxG47lWXqRmcMZKkjoWRwfRXUkiwcl
+raULXiac7m9zN1PnZs9yyN3kucrTZReYwb819WZbSPTtugIQSJuFbbyiBdzILN7
o2sJ5+GQ09Mh7d3/sjte6jt+FNyVY8/XLd1TOk8OC8F7FunE/fjcrRkpKO/JFrbD
L8aRg+SdUWlYcbA9/64rZYfWsomzhKcI
-----END CERTIFICATE-----
Generated at Wed May 14 05:26:34 2025 by rpki-client