Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
File:                     TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft (raw, json)
Hash identifier:          A5AJ9hUbUN8Q/YBfYy3M3AZ/dRGhESUlHPlvsWzOb8I=
Subject key identifier:   A8:5F:D0:21:C3:96:32:BA:0D:EC:D6:E6:6E:0E:5D:78:67:5D:BB:B9
Authority key identifier: 4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C
Certificate issuer:       /CN=A91EF590/serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
Certificate serial:       0721
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
Manifest number:          0715
Signing time:             Wed 14 May 2025 21:55:41 +0000
Manifest this update:     Wed 14 May 2025 21:55:41 +0000
Manifest next update:     Wed 21 May 2025 21:55:41 +0000
Files and hashes:         1: TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl (hash: WR61xfdqdjC+tSQn7MYBo1L7+uMCFaKomjYRUN/x9m4=)
                          2: E9573898390E11EBAC72036BC4F9AE02.roa (hash: 4/D7OWEWvpNqKmmHeJpyUpKKKiBuiIw+IrPZ5+9nq6A=)
                          3: E9E53D64390E11EBAC72036BC4F9AE02.roa (hash: /vqrkkBMkYSu1OpGYGktQRyNIb8KIlTV2u6tTj1RSqE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl
                          rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 21:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1825 (0x721)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF590, serialNumber=4D71A7A18A82ADD044BC28EF5DF2196B0FD21D5C
        Validity
            Not Before: May 14 21:55:41 2025 GMT
            Not After : May 21 21:55:41 2025 GMT
        Subject: CN=6825115d-bbe0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:27:f1:ec:12:1d:42:a7:d5:78:bd:16:8d:
                    f2:7b:80:e7:91:fb:bc:94:5e:23:f5:85:62:c6:4a:
                    e8:47:c0:4d:bd:f9:27:55:c1:da:1d:e4:95:44:6d:
                    99:bb:bb:5b:47:b3:50:d8:b6:75:f0:4b:14:06:b2:
                    18:c0:d3:66:a4:b3:78:bb:e3:a2:4e:c8:41:bc:5b:
                    90:15:ae:27:b9:df:0c:7f:aa:b1:57:57:26:03:2f:
                    b8:8d:b7:20:aa:25:aa:66:60:4e:81:76:53:df:29:
                    8e:07:76:01:21:77:26:d2:66:6f:d2:0a:d6:69:84:
                    82:e4:f1:0d:c8:8b:fb:a2:58:12:d7:d1:5b:a3:1d:
                    e1:f8:ef:27:44:83:7b:ab:ee:a0:c6:3b:55:2d:b9:
                    be:10:12:bb:03:61:34:93:ff:15:87:98:00:6b:c7:
                    a3:22:c4:f2:21:3d:dc:4b:d0:3c:c4:e2:c2:84:01:
                    c7:48:a1:8a:48:db:7d:89:b0:c5:79:c8:72:1d:ed:
                    9e:c6:1c:68:33:8d:d6:a4:f9:c9:bb:70:cc:4d:eb:
                    4f:51:b9:31:18:75:d1:46:4d:08:f2:71:15:ba:fe:
                    98:74:e0:f0:20:7f:d0:71:e9:ad:dc:01:31:13:de:
                    25:c1:02:a4:08:6d:5f:2e:cb:34:f5:b2:4f:40:c9:
                    e1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:5F:D0:21:C3:96:32:BA:0D:EC:D6:E6:6E:0E:5D:78:67:5D:BB:B9
            X509v3 Authority Key Identifier:
                keyid:4D:71:A7:A1:8A:82:AD:D0:44:BC:28:EF:5D:F2:19:6B:0F:D2:1D:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TXGnoYqCrdBEvCjvXfIZaw_SHVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF590/2F7B17C4390D11EB88BC6165C4F9AE02/TXGnoYqCrdBEvCjvXfIZaw_SHVw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:4f:91:b8:9a:b9:52:27:6e:4f:98:48:9a:e2:15:4f:3f:6c:
         61:8b:4f:6a:6a:d3:c1:f4:81:42:e4:13:66:7f:9c:68:0a:23:
         c2:41:a4:99:3b:55:4f:9d:c1:3e:53:24:46:5d:1d:61:20:2b:
         ed:d8:37:70:69:f2:2d:8a:b0:5a:4e:34:60:dc:a4:03:50:18:
         b6:98:92:87:47:73:0c:ae:7b:5f:35:77:2a:c6:b8:7d:70:43:
         fe:29:54:14:9e:d1:7a:ca:b0:6e:27:f4:d4:c7:93:c4:05:d6:
         ed:d9:42:67:c7:08:b8:d9:87:57:9c:76:8e:53:41:4e:47:53:
         5c:b8:81:b7:9b:b8:18:7b:3b:69:9f:a1:c6:73:8d:46:53:bc:
         cc:06:33:dc:37:4b:75:b1:81:4b:77:5e:05:a1:73:95:18:ac:
         88:2b:61:f5:36:84:66:68:4c:37:91:ae:15:61:fc:fc:cf:e2:
         e9:92:37:72:13:fa:d4:ee:9c:82:4f:ea:26:42:0f:70:53:ca:
         3b:5d:0a:9f:43:64:0b:0a:ad:56:72:82:af:33:65:e3:b8:b3:
         1f:3e:43:ca:b4:6e:cf:85:99:c7:90:c6:88:3d:4a:e5:fb:0e:
         a0:f6:71:34:7a:eb:3a:51:06:5c:d5:58:fa:ba:0a:35:3c:3e:
         ec:76:fc:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICByEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY1OTAxMTAvBgNVBAUTKDRENzFBN0ExOEE4MkFERDA0NEJDMjhFRjVERjIxOTZC
MEZEMjFENUMwHhcNMjUwNTE0MjE1NTQxWhcNMjUwNTIxMjE1NTQxWjAYMRYwFAYD
VQQDEw02ODI1MTE1ZC1iYmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxrkn8ewSHUKn1Xi9Fo3ye4Dnkfu8lF4j9YVixkroR8BNvfknVcHaHeSVRG2Z
u7tbR7NQ2LZ18EsUBrIYwNNmpLN4u+OiTshBvFuQFa4nud8Mf6qxV1cmAy+4jbcg
qiWqZmBOgXZT3ymOB3YBIXcm0mZv0grWaYSC5PENyIv7olgS19Fbox3h+O8nRIN7
q+6gxjtVLbm+EBK7A2E0k/8Vh5gAa8ejIsTyIT3cS9A8xOLChAHHSKGKSNt9ibDF
echyHe2exhxoM43WpPnJu3DMTetPUbkxGHXRRk0I8nEVuv6YdODwIH/Qcemt3AEx
E94lwQKkCG1fLss09bJPQMnhUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhf0CHD
ljK6DezW5m4OXXhnXbu5MB8GA1UdIwQYMBaAFE1xp6GKgq3QRLwo713yGWsP0h1c
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU5MC8yRjdCMTdDNDM5
MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3JkQkV2Q2p2WGZJWmF3X1NI
VncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RYR25vWXFDcmRCRXZDanZYZklaYXdfU0hWdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjU5MC8yRjdCMTdDNDM5MEQxMUVCODhCQzYxNjVDNEY5QUUwMi9UWEdub1lxQ3Jk
QkV2Q2p2WGZJWmF3X1NIVncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQArT5G4mrlSJ25PmEia4hVPP2xhi09qatPB9IFC5BNmf5xoCiPCQaSZ
O1VPncE+UyRGXR1hICvt2DdwafItirBaTjRg3KQDUBi2mJKHR3MMrntfNXcqxrh9
cEP+KVQUntF6yrBuJ/TUx5PEBdbt2UJnxwi42YdXnHaOU0FOR1NcuIG3m7gYeztp
n6HGc41GU7zMBjPcN0t1sYFLd14FoXOVGKyIK2H1NoRmaEw3ka4VYfz8z+Lpkjdy
E/rU7pyCT+omQg9wU8o7XQqfQ2QLCq1WcoKvM2XjuLMfPkPKtG7PhZnHkMaIPUrl
+w6g9nE0eus6UQZc1Vj6ugo1PD7sdvzu
-----END CERTIFICATE-----
Generated at Fri May 16 17:45:14 2025 by rpki-client