Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
File:                     fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft (raw, json)
Hash identifier:          e6YyjQaLXv4hvcTWmVXILSxvxtWRe4F9UaFs4rb71AE=
Subject key identifier:   10:B0:77:F8:2E:DC:AD:A7:BE:0D:D9:D2:F0:8B:F5:01:20:5E:89:56
Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
Certificate issuer:       /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Certificate serial:       0344
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
Manifest number:          0336
Signing time:             Thu 19 Jun 2025 00:56:21 +0000
Manifest this update:     Thu 19 Jun 2025 00:56:21 +0000
Manifest next update:     Thu 26 Jun 2025 00:56:21 +0000
Files and hashes:         1: fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl (hash: 1A5kprcT4u6gQUpf2ahVdigG5tJ+GC19Hq4ASlBHZrM=)
                          2: 121437B45ABB11EF8C696E58C4F9AE02.roa (hash: Sr1dJPYf4TMlmdyHmkZ3DvPV6/M5+cUFUvIXCjxQ2mk=)
                          3: 245B417CADD411EE95FF6C6DC4F9AE02.roa (hash: bivJnwcabrf/iwZuZLc+oQKC0osH7DqM8uD5h0VU2hw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
                          rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 00:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 836 (0x344)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380B5, serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
        Validity
            Not Before: Jun 19 00:56:21 2025 GMT
            Not After : Jun 26 00:56:21 2025 GMT
        Subject: CN=68536035-73cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:69:f1:9b:40:4f:10:c0:67:c6:a6:10:79:
                    21:c3:bb:03:c5:45:41:6c:46:ec:4c:84:de:56:89:
                    a2:88:f9:05:4f:28:07:dd:d9:c3:55:1f:0b:5b:80:
                    8b:9e:ac:3a:d7:4c:16:09:fd:8c:26:77:3a:44:a8:
                    5f:98:ef:5e:a9:c0:b0:0e:6b:04:5d:50:09:46:93:
                    6a:d9:ea:7c:d0:90:51:30:5d:4a:23:32:b0:f3:af:
                    5e:2f:f8:24:70:fb:41:dc:c0:39:9c:74:fd:3a:98:
                    a1:59:a9:59:ed:c8:dc:15:52:42:7a:d5:db:66:54:
                    87:dd:c4:49:f8:f0:6a:6e:16:dd:d9:ee:f3:9b:ce:
                    19:76:df:39:c5:19:b3:71:6b:2b:04:98:7e:26:6d:
                    87:07:a4:ec:e2:57:6d:c6:8d:01:c1:d4:64:99:45:
                    52:6a:28:e8:b3:bf:2f:6d:16:e8:ac:3d:40:c8:ad:
                    3c:a6:51:27:59:2d:a8:af:3a:83:d4:8f:22:1e:16:
                    76:c8:15:d2:1e:1a:3a:44:15:e5:cd:e7:4a:46:55:
                    29:7e:4d:73:f1:4a:bb:f4:bf:12:4f:7d:a0:a7:7e:
                    c5:e1:db:6c:1f:5f:ac:51:88:28:05:24:77:5d:2e:
                    aa:94:6e:dc:e6:76:68:f3:cc:18:58:16:a8:f2:1c:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B0:77:F8:2E:DC:AD:A7:BE:0D:D9:D2:F0:8B:F5:01:20:5E:89:56
            X509v3 Authority Key Identifier:
                keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:db:9f:d4:74:23:60:75:17:fe:75:a2:e8:b7:4e:cd:73:4c:
         84:04:29:3a:e4:ef:81:c8:12:f8:28:f1:4a:3c:56:69:56:87:
         65:82:37:4e:d3:6a:e6:62:ac:ce:03:64:93:18:d2:80:55:eb:
         0b:a0:50:9c:71:2e:8a:e2:ab:42:4e:36:bd:08:b9:b2:58:75:
         40:2a:1b:f5:f7:91:b3:53:13:a9:c7:f2:29:ec:1e:5f:07:36:
         d3:1c:29:3e:98:47:72:52:a7:d5:0e:bd:15:fa:40:48:f2:60:
         f6:d4:4e:23:06:67:e1:c2:85:08:94:15:f0:06:04:05:2b:4a:
         b0:6f:38:4c:c9:7d:1f:2b:ec:89:15:90:98:d2:7f:e1:7f:c5:
         f4:5c:bd:ef:95:33:fc:56:54:72:bd:53:eb:39:e9:1b:cd:d0:
         c6:2f:d5:65:b4:79:0a:03:f8:9d:1f:83:9b:d1:fc:46:53:c1:
         43:9b:e6:b2:0c:de:9e:7a:9a:bb:8c:84:94:22:34:c0:8c:17:
         49:c8:fb:a9:83:3a:ee:a2:de:57:f9:06:c2:c7:67:e5:2e:08:
         f9:e8:ff:52:be:1c:86:74:ad:f0:97:83:75:2f:f7:db:cd:52:
         6e:31:5e:39:d1:9a:69:9e:a1:99:8f:ac:f6:e5:7a:0a:45:0e:
         a1:9c:47:7d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA0QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgwQjUxMTAvBgNVBAUTKDdFNjVDNThGQTM0M0ExMEM1MzQzNTBBQjQ5N0ZEMDkw
Q0VFRkJGQkIwHhcNMjUwNjE5MDA1NjIxWhcNMjUwNjI2MDA1NjIxWjAYMRYwFAYD
VQQDEw02ODUzNjAzNS03M2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsN1p8ZtATxDAZ8amEHkhw7sDxUVBbEbsTITeVomiiPkFTygH3dnDVR8LW4CL
nqw610wWCf2MJnc6RKhfmO9eqcCwDmsEXVAJRpNq2ep80JBRMF1KIzKw869eL/gk
cPtB3MA5nHT9OpihWalZ7cjcFVJCetXbZlSH3cRJ+PBqbhbd2e7zm84Zdt85xRmz
cWsrBJh+Jm2HB6Ts4ldtxo0BwdRkmUVSaijos78vbRborD1AyK08plEnWS2orzqD
1I8iHhZ2yBXSHho6RBXlzedKRlUpfk1z8Uq79L8ST32gp37F4dtsH1+sUYgoBSR3
XS6qlG7c5nZo88wYWBao8hxWsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBCwd/gu
3K2nvg3Z0vCL9QEgXolWMB8GA1UdIwQYMBaAFH5lxY+jQ6EMU0NQq0l/0JDO77+7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBCNS82OTQ2M0QwNENB
M0QxMUVDOTFBQzQyNkRDNEY5QUUwMi9mbVhGajZORG9ReFRRMUNyU1hfUWtNN3Z2
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZtWEZqNk5Eb1F4VFExQ3JTWF9Ra003dnY3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODBCNS82OTQ2M0QwNENBM0QxMUVDOTFBQzQyNkRDNEY5QUUwMi9mbVhGajZORG9R
eFRRMUNyU1hfUWtNN3Z2N3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBo25/UdCNgdRf+daLot07Nc0yEBCk65O+ByBL4KPFKPFZpVodlgjdO
02rmYqzOA2STGNKAVesLoFCccS6K4qtCTja9CLmyWHVAKhv195GzUxOpx/Ip7B5f
BzbTHCk+mEdyUqfVDr0V+kBI8mD21E4jBmfhwoUIlBXwBgQFK0qwbzhMyX0fK+yJ
FZCY0n/hf8X0XL3vlTP8VlRyvVPrOekbzdDGL9VltHkKA/idH4Ob0fxGU8FDm+ay
DN6eepq7jISUIjTAjBdJyPupgzruot5X+QbCx2flLgj56P9SvhyGdK3wl4N1L/fb
zVJuMV450ZppnqGZj6z25XoKRQ6hnEd9
-----END CERTIFICATE-----
Generated at Fri Jun 20 05:35:45 2025 by rpki-client