Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
File:                     RWr15WZ94kipzwzrkMbRs9Ptb6g.mft (raw, json)
Hash identifier:          nB900J+wiFR0mYdBapvd+2pcENCjVaePvicBk3337kI=
Subject key identifier:   06:02:74:58:18:3A:33:1D:0E:19:F9:EE:87:BA:DC:C8:94:2B:F0:C3
Authority key identifier: 45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8
Certificate issuer:       /CN=A91E8903/serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
Certificate serial:       01D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
Manifest number:          01C6
Signing time:             Fri 09 May 2025 02:17:45 +0000
Manifest this update:     Fri 09 May 2025 02:17:44 +0000
Manifest next update:     Fri 16 May 2025 02:17:44 +0000
Files and hashes:         1: RWr15WZ94kipzwzrkMbRs9Ptb6g.crl (hash: 57duZ8Pr69lQGK41brke/5mKWs3o6wkBf6jmyUsxGIw=)
                          2: 5AFFB9E48C2211EDAE44DD87C4F9AE02.roa (hash: i5f17u0APuwWVrNQJwRvrSbhYIzk4h0SdlZzDluJdHE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl
                          rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 02:17:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8903, serialNumber=456AF5E5667DE248A9CF0CEB90C6D1B3D3ED6FA8
        Validity
            Not Before: May  9 02:17:44 2025 GMT
            Not After : May 16 02:17:44 2025 GMT
        Subject: CN=681d65c8-3a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dc:63:2b:93:61:d5:5e:32:57:9c:02:06:d9:
                    aa:0e:db:a7:41:61:95:4d:08:7a:ee:71:41:e2:39:
                    ef:5d:e6:2c:a8:bd:93:b5:10:d0:50:bb:02:f5:b5:
                    bc:d6:88:78:c1:fe:ef:85:a8:33:51:d7:29:fb:6a:
                    b7:e0:73:30:35:66:b3:b2:0a:77:15:b1:8f:58:0a:
                    cf:72:c4:72:c5:3a:06:57:8d:95:65:23:68:22:bd:
                    1a:0e:85:6b:e5:82:12:14:a3:7c:9d:ff:b5:d0:c8:
                    1f:49:a9:57:85:20:78:11:17:f0:d0:ee:a1:60:4c:
                    b6:cc:bd:bd:25:37:7c:8f:ca:18:d2:a0:0e:5c:cf:
                    a6:6a:c3:b5:86:77:42:7e:23:c6:32:eb:4d:2d:82:
                    78:4b:d4:b1:0c:0f:d8:4a:2b:6a:87:2d:df:6a:e5:
                    47:99:35:1e:e5:87:71:f1:a8:f8:b1:c3:80:18:84:
                    c6:d1:91:6b:ba:99:55:41:22:72:c4:25:d1:df:b3:
                    a3:b7:57:c3:25:53:90:02:95:58:cb:8c:c6:a0:a5:
                    13:fc:67:5d:f7:b8:e3:22:84:cc:56:13:73:20:77:
                    62:5f:12:39:82:8d:aa:8c:76:af:3f:4c:9c:4f:dd:
                    89:56:56:5b:1a:6d:ef:5d:83:ad:43:22:2b:28:68:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:02:74:58:18:3A:33:1D:0E:19:F9:EE:87:BA:DC:C8:94:2B:F0:C3
            X509v3 Authority Key Identifier:
                keyid:45:6A:F5:E5:66:7D:E2:48:A9:CF:0C:EB:90:C6:D1:B3:D3:ED:6F:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RWr15WZ94kipzwzrkMbRs9Ptb6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8903/D898265A8C1F11EDAE441D87C4F9AE02/RWr15WZ94kipzwzrkMbRs9Ptb6g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:31:5f:31:8a:71:5b:e9:5f:5e:c1:b7:84:5d:de:87:07:67:
         34:aa:27:b4:53:b9:c4:a9:8e:00:55:0d:28:4a:d5:ab:97:e9:
         3f:8c:6d:07:7d:1a:48:b1:d9:2a:55:7c:15:06:02:e5:e6:36:
         25:3e:15:26:02:bc:e3:06:7e:8b:98:f6:43:d1:46:44:27:ea:
         33:db:a1:74:28:20:8e:33:ce:67:6a:b6:92:62:e5:99:c0:4b:
         af:35:6e:df:23:bc:42:48:dc:1e:72:8a:2a:41:ac:ce:a7:31:
         12:3d:db:75:11:1f:22:e7:73:e7:9d:bf:ec:21:3b:c8:8a:c9:
         67:31:dd:7f:5e:7c:25:e1:bf:86:a9:25:0d:5b:9a:68:b7:69:
         a7:09:f5:20:61:1f:9a:b6:74:d3:7f:3e:cf:3a:68:2a:e1:2b:
         70:04:7b:a2:c6:d4:f2:37:73:5c:24:18:6a:35:15:55:7f:c1:
         a2:9a:15:a3:52:f4:a3:23:31:dc:a8:58:01:9e:dc:47:25:b6:
         a0:f9:e7:79:84:ef:fd:ef:52:a0:b1:e6:07:f2:fc:55:a0:00:
         25:af:e0:f5:c3:db:29:25:b8:4c:04:ba:20:b1:54:43:7f:9a:
         85:f2:f4:21:e9:4d:dc:3b:bc:66:d4:06:4f:75:bd:b3:1f:3a:
         35:db:55:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTg5MDMxMTAvBgNVBAUTKDQ1NkFGNUU1NjY3REUyNDhBOUNGMENFQjkwQzZEMUIz
RDNFRDZGQTgwHhcNMjUwNTA5MDIxNzQ0WhcNMjUwNTE2MDIxNzQ0WjAYMRYwFAYD
VQQDEw02ODFkNjVjOC0zYTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApdxjK5Nh1V4yV5wCBtmqDtunQWGVTQh67nFB4jnvXeYsqL2TtRDQULsC9bW8
1oh4wf7vhagzUdcp+2q34HMwNWazsgp3FbGPWArPcsRyxToGV42VZSNoIr0aDoVr
5YISFKN8nf+10MgfSalXhSB4ERfw0O6hYEy2zL29JTd8j8oY0qAOXM+masO1hndC
fiPGMutNLYJ4S9SxDA/YSitqhy3fauVHmTUe5Ydx8aj4scOAGITG0ZFruplVQSJy
xCXR37Ojt1fDJVOQApVYy4zGoKUT/Gdd97jjIoTMVhNzIHdiXxI5go2qjHavP0yc
T92JVlZbGm3vXYOtQyIrKGjlyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYCdFgY
OjMdDhn57oe63MiUK/DDMB8GA1UdIwQYMBaAFEVq9eVmfeJIqc8M65DG0bPT7W+o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODkwMy9EODk4MjY1QThD
MUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRraXB6d3pya01iUnM5UHRi
NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JXcjE1V1o5NGtpcHp3enJrTWJSczlQdGI2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
ODkwMy9EODk4MjY1QThDMUYxMUVEQUU0NDFEODdDNEY5QUUwMi9SV3IxNVdaOTRr
aXB6d3pya01iUnM5UHRiNmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCeMV8xinFb6V9ewbeEXd6HB2c0qie0U7nEqY4AVQ0oStWrl+k/jG0H
fRpIsdkqVXwVBgLl5jYlPhUmArzjBn6LmPZD0UZEJ+oz26F0KCCOM85naraSYuWZ
wEuvNW7fI7xCSNwecooqQazOpzESPdt1ER8i53Pnnb/sITvIislnMd1/Xnwl4b+G
qSUNW5pot2mnCfUgYR+atnTTfz7POmgq4StwBHuixtTyN3NcJBhqNRVVf8GimhWj
UvSjIzHcqFgBntxHJbag+ed5hO/971KgseYH8vxVoAAlr+D1w9spJbhMBLogsVRD
f5qF8vQh6U3cO7xm1AZPdb2zHzo121UV
-----END CERTIFICATE-----
Generated at Sat May 10 22:32:06 2025 by rpki-client