Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
File:                     S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft (raw, json)
Hash identifier:          jhsPVXJdsZ7a/31Fsn2S6ctKwEzATQKbQXLQu5lp6dE=
Subject key identifier:   30:99:29:B0:B3:88:E0:DD:48:D6:D1:03:CA:54:8F:D3:4B:8F:95:FC
Authority key identifier: 4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7
Certificate issuer:       /CN=A91EF8D6/serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
Certificate serial:       07EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
Manifest number:          07E4
Signing time:             Sat 28 Jun 2025 20:40:15 +0000
Manifest this update:     Sat 28 Jun 2025 20:40:14 +0000
Manifest next update:     Sat 05 Jul 2025 20:40:14 +0000
Files and hashes:         1: S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl (hash: oON/QbgbhDPidTUDz1YmYc+b1gtKI+m1TFMMveOeb6M=)
                          2: 6E603522F1AB11EA9F82A23DC4F9AE02.roa (hash: T4mDZ210SpDVRfUxvUs173RpQ0D7OXBy/5JPPZDEJ78=)
                          3: 3DA25C7A036811F0A14CC938C4F9AE02.roa (hash: 6wXXxuIxd9enMsyVcB9pxqsVVca0vy4SEk/LuQef8jA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl
                          rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Jul 2025 20:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027 (0x7eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF8D6, serialNumber=4B978415E167DB263EF2649A1C3B8BB2D43F61B7
        Validity
            Not Before: Jun 28 20:40:14 2025 GMT
            Not After : Jul  5 20:40:14 2025 GMT
        Subject: CN=6860532f-513f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9b:bd:6b:24:99:e1:f7:6b:b2:1a:6a:90:e3:
                    b2:fa:69:f4:6d:db:39:bc:1f:f2:a3:50:1d:76:a6:
                    1d:ee:22:1b:d7:de:1d:30:55:08:43:16:14:ae:6d:
                    50:c7:1d:28:a6:8a:e8:ce:9f:57:dd:5e:a6:83:c6:
                    3c:a4:4e:64:3c:aa:26:74:e0:87:4d:84:94:e6:28:
                    08:2b:12:a2:6b:bc:e9:a8:84:a4:ed:c3:04:b8:54:
                    35:32:43:13:f4:0b:b8:b0:8e:c9:37:65:7a:68:7c:
                    7f:8b:72:af:1f:04:d8:85:5a:de:ad:97:af:f7:13:
                    ab:21:1f:e2:ff:28:34:81:70:44:0f:c0:63:39:7b:
                    95:57:3c:58:39:94:cf:97:b7:1c:df:82:d6:75:cd:
                    30:c5:27:9a:be:2c:97:3a:b9:d4:b0:da:cf:bc:67:
                    fd:81:c7:32:f9:8f:14:85:2c:7d:75:8a:69:b7:4e:
                    c1:5b:ce:77:32:e0:a1:75:d3:e9:62:b3:49:cf:ed:
                    a9:24:9e:ec:20:d4:db:e0:d1:bf:b5:60:f1:8f:16:
                    09:74:66:4a:86:ba:0e:4a:a6:04:e6:c6:10:2a:25:
                    dc:d6:bc:5c:cb:c1:c7:a9:bd:8a:9b:69:4f:c6:dc:
                    e6:85:56:7f:a2:b9:45:4b:12:22:e3:cd:ce:a6:cf:
                    88:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:99:29:B0:B3:88:E0:DD:48:D6:D1:03:CA:54:8F:D3:4B:8F:95:FC
            X509v3 Authority Key Identifier:
                keyid:4B:97:84:15:E1:67:DB:26:3E:F2:64:9A:1C:3B:8B:B2:D4:3F:61:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF8D6/4D42F56CF1A311EAB5FD9824C4F9AE02/S5eEFeFn2yY-8mSaHDuLstQ_Ybc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ab:9f:73:3a:36:04:d6:90:92:7f:ce:08:f1:5e:49:60:c7:
         0e:7b:1a:6e:d7:8a:9e:54:54:45:28:8a:e5:69:21:ea:5a:12:
         cb:b7:ab:78:9b:e2:ff:01:a8:2a:b3:d4:0a:35:ff:1e:26:98:
         3c:30:82:75:c0:b1:de:b6:ec:ac:3e:a9:a9:8f:27:07:88:57:
         40:8f:b5:4d:ef:0c:d5:f3:a9:f1:17:aa:a4:a3:45:1f:bd:c1:
         ed:36:11:ac:b8:36:1a:2e:44:f4:fd:db:ab:29:d8:76:8e:8a:
         94:01:bc:f6:74:5a:d0:27:74:41:bc:51:88:5b:d8:76:d4:dd:
         32:7d:6e:c5:8e:f8:c1:d3:76:af:ad:f4:e3:dd:06:bc:16:9d:
         a0:3f:63:30:c2:c1:d5:1f:71:69:54:b3:20:40:73:d6:05:57:
         f8:da:b8:0a:16:10:45:7d:fe:db:d6:1e:af:57:8b:0d:c4:39:
         ae:c1:e7:25:22:b7:03:19:41:25:98:0f:19:8d:1c:5a:20:54:
         87:8f:c4:6c:c2:26:96:e0:34:41:6b:5f:65:42:48:46:a6:8e:
         50:97:3a:e1:4f:2a:e1:ec:7c:0f:bd:ee:93:10:a5:be:09:c9:
         2b:93:ae:ea:f8:a9:cd:7a:17:ae:88:4f:01:4d:a9:5b:3c:90:
         75:4e:d8:bb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUY4RDYxMTAvBgNVBAUTKDRCOTc4NDE1RTE2N0RCMjYzRUYyNjQ5QTFDM0I4QkIy
RDQzRjYxQjcwHhcNMjUwNjI4MjA0MDE0WhcNMjUwNzA1MjA0MDE0WjAYMRYwFAYD
VQQDEw02ODYwNTMyZi01MTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxZu9aySZ4fdrshpqkOOy+mn0bds5vB/yo1AddqYd7iIb194dMFUIQxYUrm1Q
xx0oporozp9X3V6mg8Y8pE5kPKomdOCHTYSU5igIKxKia7zpqISk7cMEuFQ1MkMT
9Au4sI7JN2V6aHx/i3KvHwTYhVrerZev9xOrIR/i/yg0gXBED8BjOXuVVzxYOZTP
l7cc34LWdc0wxSeaviyXOrnUsNrPvGf9gccy+Y8UhSx9dYppt07BW853MuChddPp
YrNJz+2pJJ7sINTb4NG/tWDxjxYJdGZKhroOSqYE5sYQKiXc1rxcy8HHqb2Km2lP
xtzmhVZ/orlFSxIi483Ops+IGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCZKbCz
iODdSNbRA8pUj9NLj5X8MB8GA1UdIwQYMBaAFEuXhBXhZ9smPvJkmhw7i7LUP2G3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjhENi80RDQyRjU2Q0Yx
QTMxMUVBQjVGRDk4MjRDNEY5QUUwMi9TNWVFRmVGbjJ5WS04bVNhSER1THN0UV9Z
YmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M1ZUVGZUZuMnlZLThtU2FIRHVMc3RRX1liYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RjhENi80RDQyRjU2Q0YxQTMxMUVBQjVGRDk4MjRDNEY5QUUwMi9TNWVFRmVGbjJ5
WS04bVNhSER1THN0UV9ZYmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsq59zOjYE1pCSf84I8V5JYMcOexpu14qeVFRFKIrlaSHqWhLLt6t4
m+L/Aagqs9QKNf8eJpg8MIJ1wLHetuysPqmpjycHiFdAj7VN7wzV86nxF6qko0Uf
vcHtNhGsuDYaLkT0/durKdh2joqUAbz2dFrQJ3RBvFGIW9h21N0yfW7FjvjB03av
rfTj3Qa8Fp2gP2MwwsHVH3FpVLMgQHPWBVf42rgKFhBFff7b1h6vV4sNxDmuwecl
IrcDGUElmA8ZjRxaIFSHj8RswiaW4DRBa19lQkhGpo5QlzrhTyrh7HwPve6TEKW+
Cckrk67q+KnNeheuiE8BTalbPJB1Tti7
-----END CERTIFICATE-----
Generated at Sun Jun 29 20:21:45 2025 by rpki-client