Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
File:                     j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft (raw, json)
Hash identifier:          iApxjG03EUirpFmucFQQorGAle3AvApFkaF9owOz4ug=
Subject key identifier:   91:5C:9D:EE:F6:54:8E:C6:5F:A1:8A:97:2A:FE:3A:36:69:D9:AF:CA
Authority key identifier: 8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E
Certificate issuer:       /CN=A913EF1D/serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
Certificate serial:       E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
Manifest number:          E4
Signing time:             Fri 13 Jun 2025 04:26:16 +0000
Manifest this update:     Fri 13 Jun 2025 04:26:16 +0000
Manifest next update:     Fri 20 Jun 2025 04:26:16 +0000
Files and hashes:         1: j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl (hash: kjmfEJItm9yvf1E6di/mXjychvlsJ8NV0UrcjiLskUo=)
                          2: 1AE7ED46ECE711EEB12F9A1FC4F9AE02.roa (hash: Ux7MrDkQdEj+Gtfnp0Wmpu2t6Z1MtA7yxD7lmndlZrU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl
                          rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 04:26:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EF1D, serialNumber=8FE5A7C998FB8B78AC331EAE83BC178623EE3C9E
        Validity
            Not Before: Jun 13 04:26:16 2025 GMT
            Not After : Jun 20 04:26:16 2025 GMT
        Subject: CN=684ba868-0bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:32:75:83:c5:d2:ce:91:5c:a2:a8:62:70:07:
                    f6:54:8d:94:38:db:54:f5:9d:b3:18:68:6d:28:3c:
                    23:f6:a4:96:e4:48:5c:47:58:37:65:1e:a7:04:a7:
                    e5:2e:d8:16:c4:08:85:a9:ec:fe:ac:54:c9:19:d1:
                    7b:0a:c1:d3:e3:f8:49:62:c6:48:77:37:49:43:43:
                    02:17:6c:93:62:73:1c:13:a8:3a:e3:8d:a1:04:1d:
                    f1:7b:d3:64:90:4b:ea:b9:b0:16:17:9e:fb:d7:7a:
                    8d:1b:37:a8:02:14:40:fd:f3:f4:e7:1d:7f:11:e3:
                    90:fc:e1:ee:b2:33:09:a5:04:c3:8a:0d:dc:d0:b3:
                    65:75:85:1c:0e:b7:f7:80:f8:0c:48:38:56:2a:40:
                    4c:99:23:89:11:ae:67:14:e9:b5:fe:9b:21:cf:33:
                    ca:0f:5f:52:d2:5c:32:3d:b1:0e:2d:60:3b:17:d0:
                    3c:b3:95:eb:81:35:9e:33:3a:a9:63:f7:5b:2a:06:
                    3d:0e:8f:2d:b5:fd:5c:b9:40:50:ff:43:b6:22:a3:
                    c8:d6:1e:31:10:a5:b3:b3:3e:bf:50:c3:73:c7:5a:
                    a6:16:d0:c5:95:fa:b3:32:04:10:d3:74:ab:f8:33:
                    c9:66:7d:67:2e:f2:61:6a:70:f1:48:61:84:95:fa:
                    0a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:5C:9D:EE:F6:54:8E:C6:5F:A1:8A:97:2A:FE:3A:36:69:D9:AF:CA
            X509v3 Authority Key Identifier:
                keyid:8F:E5:A7:C9:98:FB:8B:78:AC:33:1E:AE:83:BC:17:86:23:EE:3C:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j-WnyZj7i3isMx6ug7wXhiPuPJ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EF1D/BA9CD8ACECE611EEAAE9E81EC4F9AE02/j-WnyZj7i3isMx6ug7wXhiPuPJ4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ad:72:aa:c8:4b:2c:e7:93:f7:d1:77:de:d3:54:1f:89:c3:
         a2:b3:d5:78:a0:06:64:e1:12:ee:53:b7:3b:ae:0c:d8:65:67:
         ac:30:22:ed:5e:fc:22:79:36:95:0a:b0:37:3a:78:db:a2:34:
         ca:87:ab:b4:66:53:44:0f:61:82:f3:b0:b7:1a:1d:1e:45:32:
         b5:41:d6:14:6a:ea:9b:53:44:79:6c:1c:a3:67:42:a5:59:af:
         2f:e5:34:08:56:ab:52:db:fa:32:a8:c6:3d:29:cd:22:4b:fa:
         cc:d1:82:6c:b9:f6:dc:00:0e:cb:8e:71:be:d4:87:79:4a:01:
         e4:2c:45:c2:8f:24:77:de:f1:0d:9a:4f:c8:b8:a5:45:34:f5:
         f8:83:92:1f:f7:89:97:7a:57:4f:91:76:1e:c5:b6:be:a8:df:
         ca:25:2f:d0:ed:32:e3:d3:04:c7:07:8c:bb:7a:cf:39:46:c8:
         72:99:8e:58:b4:d5:02:95:cc:bf:ed:c0:82:63:e8:e7:5c:c0:
         c6:3a:7c:5a:17:39:18:5b:cd:12:a0:f3:89:1d:e3:d9:ec:17:
         0f:46:a4:f4:c3:e8:a2:93:e5:fb:b3:4c:35:7d:bb:34:19:ba:
         a9:52:93:4f:6e:f9:eb:d8:f9:10:09:d3:fe:05:37:c0:0e:fc:
         c2:00:7a:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VGMUQxMTAvBgNVBAUTKDhGRTVBN0M5OThGQjhCNzhBQzMzMUVBRTgzQkMxNzg2
MjNFRTNDOUUwHhcNMjUwNjEzMDQyNjE2WhcNMjUwNjIwMDQyNjE2WjAYMRYwFAYD
VQQDEw02ODRiYTg2OC0wYmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqTJ1g8XSzpFcoqhicAf2VI2UONtU9Z2zGGhtKDwj9qSW5EhcR1g3ZR6nBKfl
LtgWxAiFqez+rFTJGdF7CsHT4/hJYsZIdzdJQ0MCF2yTYnMcE6g6442hBB3xe9Nk
kEvqubAWF57713qNGzeoAhRA/fP05x1/EeOQ/OHusjMJpQTDig3c0LNldYUcDrf3
gPgMSDhWKkBMmSOJEa5nFOm1/pshzzPKD19S0lwyPbEOLWA7F9A8s5XrgTWeMzqp
Y/dbKgY9Do8ttf1cuUBQ/0O2IqPI1h4xEKWzsz6/UMNzx1qmFtDFlfqzMgQQ03Sr
+DPJZn1nLvJhanDxSGGElfoKQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJFcne72
VI7GX6GKlyr+OjZp2a/KMB8GA1UdIwQYMBaAFI/lp8mY+4t4rDMeroO8F4Yj7jye
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUYxRC9CQTlDRDhBQ0VD
RTYxMUVFQUFFOUU4MUVDNEY5QUUwMi9qLVdueVpqN2kzaXNNeDZ1Zzd3WGhpUHVQ
SjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2otV255Wmo3aTNpc014NnVnN3dYaGlQdVBKNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUYxRC9CQTlDRDhBQ0VDRTYxMUVFQUFFOUU4MUVDNEY5QUUwMi9qLVdueVpqN2kz
aXNNeDZ1Zzd3WGhpUHVQSjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBErXKqyEss55P30Xfe01QficOis9V4oAZk4RLuU7c7rgzYZWesMCLt
XvwieTaVCrA3OnjbojTKh6u0ZlNED2GC87C3Gh0eRTK1QdYUauqbU0R5bByjZ0Kl
Wa8v5TQIVqtS2/oyqMY9Kc0iS/rM0YJsufbcAA7LjnG+1Id5SgHkLEXCjyR33vEN
mk/IuKVFNPX4g5If94mXeldPkXYexba+qN/KJS/Q7TLj0wTHB4y7es85RshymY5Y
tNUClcy/7cCCY+jnXMDGOnxaFzkYW80SoPOJHePZ7BcPRqT0w+iik+X7s0w1fbs0
GbqpUpNPbvnr2PkQCdP+BTfADvzCAHoz
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:08:49 2025 by rpki-client