Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
File:                     sg6f5krzzoyYJyXQEqFCknJjzvA.mft (raw, json)
Hash identifier:          HoZ2by2x16a4xgWnW/xA1wOpF+oney9adpBWeUA1x10=
Subject key identifier:   6E:39:25:37:32:8C:05:F5:FB:D6:9C:82:55:59:F2:2B:C8:B9:ED:0C
Authority key identifier: B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0
Certificate issuer:       /CN=A91477C3/serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0
Certificate serial:       0811
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
Manifest number:          0804
Signing time:             Sat 14 Jun 2025 20:43:43 +0000
Manifest this update:     Sat 14 Jun 2025 20:43:43 +0000
Manifest next update:     Sat 21 Jun 2025 20:43:43 +0000
Files and hashes:         1: sg6f5krzzoyYJyXQEqFCknJjzvA.crl (hash: vbxO/zo5AFjR5jBDrsT1PaVfgTC/OVKnQqLLGxoy3NQ=)
                          2: 5FB89FD4DA8511EEBD7AF854C4F9AE02.roa (hash: 7JHMwVjCROL2NO+MkxXgRxb2ZHCCwLSy/kLqZ1Og33E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl
                          rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2065 (0x811)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91477C3, serialNumber=B20E9FE64AF3CE8C982725D012A142927263CEF0
        Validity
            Not Before: Jun 14 20:43:43 2025 GMT
            Not After : Jun 21 20:43:43 2025 GMT
        Subject: CN=684ddeff-f150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:7c:19:26:6d:1b:1a:f5:42:88:77:de:d9:
                    81:66:57:00:d9:33:77:ad:af:7d:33:ca:d2:08:2d:
                    6b:84:55:e1:30:5d:df:1e:9b:cc:28:d6:42:03:31:
                    01:87:97:13:58:36:a6:ff:4b:2c:37:3b:26:18:72:
                    88:50:df:f5:22:96:14:2c:76:58:44:2f:5c:f5:3c:
                    37:73:39:df:f0:d3:8d:ad:bb:e2:23:ca:62:bb:d4:
                    07:18:fc:f3:08:55:96:5a:89:8f:93:b6:47:3a:90:
                    39:e4:93:c7:f6:19:69:60:ef:da:74:10:85:16:4d:
                    47:e7:dd:ac:7b:ac:6e:7c:5a:69:99:29:42:ef:4b:
                    9f:32:64:03:f5:36:54:44:0b:c1:cf:05:8c:7e:87:
                    1f:8d:05:18:27:f0:f1:7e:a4:73:79:69:eb:6c:36:
                    90:e3:6f:1e:87:5f:0f:1c:af:a5:ae:7e:04:95:c9:
                    d0:31:53:b4:bb:e0:75:c1:17:f5:ae:5e:88:49:f3:
                    d3:9a:42:d7:aa:0f:82:13:a3:32:64:02:de:d4:00:
                    3d:8f:49:75:20:93:51:47:36:83:fa:81:ab:a2:c4:
                    ad:4a:27:20:e4:8d:fe:70:11:74:86:e3:89:12:79:
                    22:fe:6f:29:a4:db:48:84:ca:34:dd:fa:ff:7f:97:
                    f8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:39:25:37:32:8C:05:F5:FB:D6:9C:82:55:59:F2:2B:C8:B9:ED:0C
            X509v3 Authority Key Identifier:
                keyid:B2:0E:9F:E6:4A:F3:CE:8C:98:27:25:D0:12:A1:42:92:72:63:CE:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sg6f5krzzoyYJyXQEqFCknJjzvA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91477C3/5DA48C20E76E11EA8142A839C4F9AE02/sg6f5krzzoyYJyXQEqFCknJjzvA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:80:96:2b:78:d7:ef:ee:e5:19:64:7b:31:d7:e0:81:03:a8:
         fb:26:14:32:3c:94:5c:1d:7d:00:9c:04:b6:e0:1b:63:56:aa:
         b2:41:40:8e:41:e8:bc:43:6f:99:c6:d9:07:30:cf:de:ec:73:
         46:2d:c8:eb:ad:ce:14:a5:41:e6:b7:9a:23:65:33:4b:4f:29:
         7b:5e:d8:54:e3:20:29:00:29:1c:cc:95:a2:71:f5:41:5d:47:
         84:ac:cc:fe:fc:44:2b:ff:78:a0:91:29:fa:4a:64:a7:d4:e5:
         2b:4b:a8:a2:7d:f2:41:f2:e7:87:1d:85:c7:53:11:90:50:72:
         e0:1f:5b:8c:e5:7b:4b:71:c8:6f:95:3c:53:64:2a:7f:51:11:
         aa:bf:60:09:6e:1a:0c:18:c0:30:24:a5:b0:67:3e:01:81:4e:
         aa:97:00:4e:4a:df:91:5b:77:04:f5:8d:0e:eb:b5:62:4f:c0:
         f1:f7:0b:46:8b:fc:4c:5a:2d:17:66:96:5a:a9:46:f8:17:68:
         f2:33:af:e3:a2:dc:95:0f:a2:cc:ec:12:b8:b5:73:48:c3:9b:
         36:4a:79:c8:bd:bb:c5:0d:8b:dd:69:79:51:c3:aa:da:ac:62:
         cb:a7:d3:18:4e:ce:07:e4:a4:cb:91:32:c1:bd:db:ba:33:bd:
         c8:e2:a2:d0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDc3QzMxMTAvBgNVBAUTKEIyMEU5RkU2NEFGM0NFOEM5ODI3MjVEMDEyQTE0Mjky
NzI2M0NFRjAwHhcNMjUwNjE0MjA0MzQzWhcNMjUwNjIxMjA0MzQzWjAYMRYwFAYD
VQQDEw02ODRkZGVmZi1mMTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAop98GSZtGxr1Qoh33tmBZlcA2TN3ra99M8rSCC1rhFXhMF3fHpvMKNZCAzEB
h5cTWDam/0ssNzsmGHKIUN/1IpYULHZYRC9c9Tw3cznf8NONrbviI8piu9QHGPzz
CFWWWomPk7ZHOpA55JPH9hlpYO/adBCFFk1H592se6xufFppmSlC70ufMmQD9TZU
RAvBzwWMfocfjQUYJ/DxfqRzeWnrbDaQ428eh18PHK+lrn4ElcnQMVO0u+B1wRf1
rl6ISfPTmkLXqg+CE6MyZALe1AA9j0l1IJNRRzaD+oGrosStSicg5I3+cBF0huOJ
Enki/m8ppNtIhMo03fr/f5f4SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG45JTcy
jAX1+9acglVZ8ivIue0MMB8GA1UdIwQYMBaAFLIOn+ZK886MmCcl0BKhQpJyY87w
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzdDMy81REE0OEMyMEU3
NkUxMUVBODE0MkE4MzlDNEY5QUUwMi9zZzZmNWtyenpveVlKeVhRRXFGQ2tuSmp6
dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NnNmY1a3J6em95WUp5WFFFcUZDa25Kanp2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NzdDMy81REE0OEMyMEU3NkUxMUVBODE0MkE4MzlDNEY5QUUwMi9zZzZmNWtyenpv
eVlKeVhRRXFGQ2tuSmp6dkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCmgJYreNfv7uUZZHsx1+CBA6j7JhQyPJRcHX0AnAS24BtjVqqyQUCO
Qei8Q2+ZxtkHMM/e7HNGLcjrrc4UpUHmt5ojZTNLTyl7XthU4yApACkczJWicfVB
XUeErMz+/EQr/3igkSn6SmSn1OUrS6iiffJB8ueHHYXHUxGQUHLgH1uM5XtLcchv
lTxTZCp/URGqv2AJbhoMGMAwJKWwZz4BgU6qlwBOSt+RW3cE9Y0O67ViT8Dx9wtG
i/xMWi0XZpZaqUb4F2jyM6/jotyVD6LM7BK4tXNIw5s2SnnIvbvFDYvdaXlRw6ra
rGLLp9MYTs4H5KTLkTLBvdu6M73I4qLQ
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:37:42 2025 by rpki-client