Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
File:                     Mgs39ulwReOJhGEP-kfpaEqEZ30.mft (raw, json)
Hash identifier:          q6o3qy9TUsczYTs0JrjfhmskuP8nFno6N95XPQ/YsKA=
Subject key identifier:   67:89:13:D8:BA:89:5C:7C:50:66:7D:9D:F2:B3:3B:3A:5C:5E:FA:4C
Authority key identifier: 32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D
Certificate issuer:       /CN=A911918E/serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
Certificate serial:       25A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
Manifest number:          258D
Signing time:             Sat 14 Jun 2025 15:42:00 +0000
Manifest this update:     Sat 14 Jun 2025 15:42:00 +0000
Manifest next update:     Sat 21 Jun 2025 15:42:00 +0000
Files and hashes:         1: Mgs39ulwReOJhGEP-kfpaEqEZ30.crl (hash: bXBFTX87RTwTetTAj9kUTSy0pDpT0CLzY50mJpRU4mM=)
                          2: 34FC96E8CFE711EB93714D2FC4F9AE02.roa (hash: ZTjcZNGWNBFnqimSC0hZgDjcbOf3sFUClKajeqFLy/U=)
                          3: 08B3B40EB14311E58FF2C717C4F9AE02.roa (hash: sAmTypMf5/yjgtAyFRTnQXafX3UsjEyUxFVjaKwVwKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl
                          rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:41:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9634 (0x25a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911918E, serialNumber=320B37F6E97045E38984610FFA47E9684A84677D
        Validity
            Not Before: Jun 14 15:42:00 2025 GMT
            Not After : Jun 21 15:42:00 2025 GMT
        Subject: CN=684d9848-8090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:17:3a:8b:03:c7:e8:0f:4a:8e:75:f3:3c:ea:
                    ca:d3:29:ca:10:62:62:83:35:86:0e:d3:db:9d:75:
                    b7:55:23:d6:c5:33:2d:e4:df:5a:89:e6:9a:2c:4b:
                    02:1d:13:69:70:32:16:42:c0:74:13:e6:7d:60:f8:
                    00:1a:5a:3e:fa:cb:23:0d:cf:4f:f2:e2:a1:07:5a:
                    64:5c:85:27:b7:21:e6:f5:81:71:14:45:4f:db:af:
                    fe:0b:7b:3d:9e:33:79:19:f5:79:4b:70:0a:d8:51:
                    1d:3c:51:0c:27:e6:98:3f:f7:69:e2:1b:c2:48:ec:
                    5b:c4:12:6e:e3:62:9c:0a:33:71:b5:63:44:65:8b:
                    a8:33:c4:e8:d6:dd:eb:8a:00:53:c0:cb:f0:eb:14:
                    61:c3:11:e0:4c:ef:cf:92:9b:0f:ba:1c:89:9c:dc:
                    6c:64:05:1d:e2:c5:f6:b9:6d:1a:5b:c8:95:a8:c6:
                    ec:f6:c4:9e:6b:23:36:0c:0a:86:65:3b:5f:0e:f6:
                    01:8a:dc:11:d7:94:ab:b6:2e:f7:fe:9d:35:5d:5e:
                    df:12:f3:f1:8d:fd:d0:26:43:a9:d4:8f:57:9a:c5:
                    95:63:23:be:05:de:f6:f8:ef:46:28:2e:9e:f6:f9:
                    61:09:ff:58:62:ee:b0:a0:54:2b:fa:3c:82:d7:b5:
                    63:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:89:13:D8:BA:89:5C:7C:50:66:7D:9D:F2:B3:3B:3A:5C:5E:FA:4C
            X509v3 Authority Key Identifier:
                keyid:32:0B:37:F6:E9:70:45:E3:89:84:61:0F:FA:47:E9:68:4A:84:67:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mgs39ulwReOJhGEP-kfpaEqEZ30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911918E/95507384133211E59BC0D379C4F9AE02/Mgs39ulwReOJhGEP-kfpaEqEZ30.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b9:7f:37:b2:18:df:bc:3d:42:84:de:d2:6f:9a:89:10:cf:
         16:4e:92:16:1f:96:ef:a0:e8:dc:a9:ee:da:00:fb:1c:56:95:
         8b:f5:71:b3:27:ff:93:fd:6c:15:24:4e:ac:e8:37:24:47:ff:
         27:71:b0:7c:92:14:e1:84:8e:4a:f6:50:32:1f:c8:44:e6:33:
         f3:82:c6:ad:7c:68:7e:34:44:d4:b3:ba:8e:2b:0d:c7:39:39:
         37:1f:9c:79:58:19:d2:8c:0d:3a:f5:1d:9d:d4:1b:b4:3e:d9:
         35:ab:d0:8c:53:f1:a7:77:84:09:ce:3d:8e:78:70:5c:bf:c7:
         f5:c8:ef:28:d2:99:17:77:ce:8a:a8:06:b1:7f:97:73:c3:ec:
         7d:91:bb:59:6c:7e:16:50:db:16:b8:35:1a:70:cd:b6:bc:4b:
         c8:c5:dd:47:b9:48:9a:58:26:dd:f6:61:a6:c1:41:43:8e:9b:
         cc:d0:97:63:e9:fc:a2:5a:4d:34:d6:27:89:4a:51:da:d9:7d:
         73:30:11:fe:3f:7e:b1:86:ed:1c:9c:70:0e:d8:42:48:61:83:
         5e:70:38:c9:4c:61:4f:3a:2e:02:7e:35:ed:03:70:64:9b:90:
         c5:b3:0f:35:e0:f0:b6:6e:08:9d:01:79:05:fb:dc:c3:c8:16:
         e6:8b:2c:96
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTkxOEUxMTAvBgNVBAUTKDMyMEIzN0Y2RTk3MDQ1RTM4OTg0NjEwRkZBNDdFOTY4
NEE4NDY3N0QwHhcNMjUwNjE0MTU0MjAwWhcNMjUwNjIxMTU0MjAwWjAYMRYwFAYD
VQQDEw02ODRkOTg0OC04MDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2hc6iwPH6A9KjnXzPOrK0ynKEGJigzWGDtPbnXW3VSPWxTMt5N9aieaaLEsC
HRNpcDIWQsB0E+Z9YPgAGlo++ssjDc9P8uKhB1pkXIUntyHm9YFxFEVP26/+C3s9
njN5GfV5S3AK2FEdPFEMJ+aYP/dp4hvCSOxbxBJu42KcCjNxtWNEZYuoM8To1t3r
igBTwMvw6xRhwxHgTO/PkpsPuhyJnNxsZAUd4sX2uW0aW8iVqMbs9sSeayM2DAqG
ZTtfDvYBitwR15Srti73/p01XV7fEvPxjf3QJkOp1I9XmsWVYyO+Bd72+O9GKC6e
9vlhCf9YYu6woFQr+jyC17Vj9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGeJE9i6
iVx8UGZ9nfKzOzpcXvpMMB8GA1UdIwQYMBaAFDILN/bpcEXjiYRhD/pH6WhKhGd9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTE4RS85NTUwNzM4NDEz
MzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1JlT0poR0VQLWtmcGFFcUVa
MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01nczM5dWx3UmVPSmhHRVAta2ZwYUVxRVozMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
OTE4RS85NTUwNzM4NDEzMzIxMUU1OUJDMEQzNzlDNEY5QUUwMi9NZ3MzOXVsd1Jl
T0poR0VQLWtmcGFFcUVaMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB2uX83shjfvD1ChN7Sb5qJEM8WTpIWH5bvoOjcqe7aAPscVpWL9XGz
J/+T/WwVJE6s6DckR/8ncbB8khThhI5K9lAyH8hE5jPzgsatfGh+NETUs7qOKw3H
OTk3H5x5WBnSjA069R2d1Bu0Ptk1q9CMU/Gnd4QJzj2OeHBcv8f1yO8o0pkXd86K
qAaxf5dzw+x9kbtZbH4WUNsWuDUacM22vEvIxd1HuUiaWCbd9mGmwUFDjpvM0Jdj
6fyiWk001ieJSlHa2X1zMBH+P36xhu0cnHAO2EJIYYNecDjJTGFPOi4CfjXtA3Bk
m5DFsw814PC2bgidAXkF+9zDyBbmiyyW
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:24:39 2025 by rpki-client