Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
File:                     sumTicSsA0jYrsh1t0aJ0E5wyDo.mft (raw, json)
Hash identifier:          zm7iNzR5umnzp4Nf8RUEXFLlVJsKWRmcQIgp+QOhLa0=
Subject key identifier:   A5:34:D9:EB:D7:47:53:A1:C5:CA:D7:A9:F4:F1:64:4C:C5:10:1C:A8
Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A
Certificate issuer:       /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
Certificate serial:       077B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
Manifest number:          0773
Signing time:             Wed 14 May 2025 21:35:36 +0000
Manifest this update:     Wed 14 May 2025 21:35:36 +0000
Manifest next update:     Wed 21 May 2025 21:35:36 +0000
Files and hashes:         1: sumTicSsA0jYrsh1t0aJ0E5wyDo.crl (hash: JBQI7uwV7/GDXdm44FZvIeJ3RZM+c0CZ4Ec1CZxAEbM=)
                          2: 4F7AD592169311EB89C20F1DC4F9AE02.roa (hash: 1PaL5t22VHHOGdbUhH+qGnaUlXQ1MvnbAc80idZHNIM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl
                          rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 21:35:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1915 (0x77b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E77A1, serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A
        Validity
            Not Before: May 14 21:35:36 2025 GMT
            Not After : May 21 21:35:36 2025 GMT
        Subject: CN=68250ca8-40d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:59:67:5c:bf:cb:36:41:9a:16:4e:18:e4:
                    ae:08:26:6b:3a:06:4d:4c:5e:b8:c6:64:2c:b9:5f:
                    eb:b2:e6:6e:f1:81:4f:70:7a:61:c0:85:e0:58:7f:
                    ee:7a:bb:87:bc:63:ec:f8:4c:33:74:cf:f4:93:c4:
                    99:0e:60:8a:5f:d4:4d:b8:21:a5:83:09:5d:6d:56:
                    26:f7:93:88:2b:03:65:b2:09:39:a8:57:38:64:6d:
                    44:64:9c:74:24:3a:a5:64:57:d5:6f:4f:54:30:7e:
                    cb:db:58:33:b9:d0:4c:54:92:aa:45:72:b0:1a:59:
                    9b:d6:44:5c:ce:d2:3c:84:25:f3:3e:27:42:13:9d:
                    9b:7d:6f:8b:1c:68:d5:ce:83:53:a3:3f:3b:c4:1d:
                    0c:95:21:bd:b3:38:68:64:54:f9:b6:fb:78:30:55:
                    c7:16:e8:de:0a:1d:4a:e3:69:d2:5f:a5:06:1d:d2:
                    b1:e8:47:0a:f3:77:6f:c8:77:bc:99:d1:1c:4a:3a:
                    ac:49:57:f0:20:73:38:30:73:16:a8:36:30:40:26:
                    c8:8a:21:ae:0d:76:63:ed:09:78:de:0d:f8:21:61:
                    b6:9f:64:33:6d:56:bc:56:13:64:da:12:04:c6:83:
                    6b:65:3b:b5:68:76:20:67:d5:44:29:76:1b:c9:6e:
                    15:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:34:D9:EB:D7:47:53:A1:C5:CA:D7:A9:F4:F1:64:4C:C5:10:1C:A8
            X509v3 Authority Key Identifier:
                keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:78:d2:c6:2c:78:fd:d5:5a:3b:40:b3:56:77:c3:7e:c5:e9:
         61:f8:a3:1a:a2:9b:07:51:1a:53:c5:c7:be:a8:44:dc:af:cf:
         df:fc:f8:4a:7d:c8:f5:1a:d9:c5:8d:28:52:18:0b:e4:bc:f9:
         91:a3:44:61:ba:c3:a2:b6:5b:38:cc:f7:50:60:91:cf:57:b2:
         50:6b:d8:31:70:b4:b6:32:cf:ae:f9:62:6f:9b:20:fb:3e:1e:
         53:8b:7c:fd:06:db:d5:a7:11:af:4d:e7:97:25:bd:ca:07:06:
         1c:12:e7:73:4f:95:44:30:b1:3c:73:e7:19:c3:43:43:71:06:
         36:bc:79:17:55:0a:ea:47:67:01:a0:5b:45:f2:b0:6c:fd:dd:
         d5:b0:ce:0e:9b:1b:a6:b8:e3:b6:21:b3:ab:d8:f9:c9:c1:f2:
         94:9f:a5:55:ab:e4:4d:44:fa:31:13:63:fb:88:ab:31:7a:c1:
         c2:97:ef:2c:f1:42:62:e5:13:06:cc:d3:5c:36:64:bb:63:77:
         0d:57:04:c6:79:26:b8:0a:8f:43:75:a2:e7:2c:cb:0b:6f:6a:
         2e:77:b5:99:a6:7b:df:31:8d:a6:7e:dc:3c:9a:8f:51:68:14:
         2d:8d:b7:3c:79:e8:12:ce:8a:09:2c:33:a3:f8:74:11:81:62:
         55:66:28:36
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB3swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc3QTExMTAvBgNVBAUTKEIyRTk5Mzg5QzRBQzAzNDhEOEFFQzg3NUI3NDY4OUQw
NEU3MEM4M0EwHhcNMjUwNTE0MjEzNTM2WhcNMjUwNTIxMjEzNTM2WjAYMRYwFAYD
VQQDEw02ODI1MGNhOC00MGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwrBZZ1y/yzZBmhZOGOSuCCZrOgZNTF64xmQsuV/rsuZu8YFPcHphwIXgWH/u
eruHvGPs+EwzdM/0k8SZDmCKX9RNuCGlgwldbVYm95OIKwNlsgk5qFc4ZG1EZJx0
JDqlZFfVb09UMH7L21gzudBMVJKqRXKwGlmb1kRcztI8hCXzPidCE52bfW+LHGjV
zoNToz87xB0MlSG9szhoZFT5tvt4MFXHFujeCh1K42nSX6UGHdKx6EcK83dvyHe8
mdEcSjqsSVfwIHM4MHMWqDYwQCbIiiGuDXZj7Ql43g34IWG2n2QzbVa8VhNk2hIE
xoNrZTu1aHYgZ9VEKXYbyW4VDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKU02evX
R1OhxcrXqfTxZEzFEByoMB8GA1UdIwQYMBaAFLLpk4nErANI2K7IdbdGidBOcMg6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdBMS9CNUMyN0E4QzE2
OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ewallyc2gxdDBhSjBFNXd5
RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3N1bVRpY1NzQTBqWXJzaDF0MGFKMEU1d3lEby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzdBMS9CNUMyN0E4QzE2OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ew
allyc2gxdDBhSjBFNXd5RG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBYeNLGLHj91Vo7QLNWd8N+xelh+KMaopsHURpTxce+qETcr8/f/PhK
fcj1GtnFjShSGAvkvPmRo0RhusOitls4zPdQYJHPV7JQa9gxcLS2Ms+u+WJvmyD7
Ph5Ti3z9BtvVpxGvTeeXJb3KBwYcEudzT5VEMLE8c+cZw0NDcQY2vHkXVQrqR2cB
oFtF8rBs/d3VsM4OmxumuOO2IbOr2PnJwfKUn6VVq+RNRPoxE2P7iKsxesHCl+8s
8UJi5RMGzNNcNmS7Y3cNVwTGeSa4Co9DdaLnLMsLb2oud7WZpnvfMY2mftw8mo9R
aBQtjbc8eegSzooJLDOj+HQRgWJVZig2
-----END CERTIFICATE-----
Generated at Thu May 15 10:59:56 2025 by rpki-client