Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
File:                     M_iOrx5M4PGhh31J75fA5_7cA5o.mft (raw, json)
Hash identifier:          +g0XO0yszR8Cr88SLUbmFkOWBYKlvgepK9iebxD3hdg=
Subject key identifier:   34:41:C6:38:87:D0:06:AC:9F:83:FB:02:A0:2A:E1:3E:22:CE:88:4D
Authority key identifier: 33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A
Certificate issuer:       /CN=A91758DF/serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
Certificate serial:       047E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
Manifest number:          0474
Signing time:             Mon 28 Apr 2025 21:21:14 +0000
Manifest this update:     Mon 28 Apr 2025 21:21:13 +0000
Manifest next update:     Mon 05 May 2025 21:21:13 +0000
Files and hashes:         1: M_iOrx5M4PGhh31J75fA5_7cA5o.crl (hash: jVhmV9e9/b+VmWbCCXyy8UsW0uaNzg1QejPq0fBcqVA=)
                          2: E763AA76A3E811EC8665D621C4F9AE02.roa (hash: Ao2xYTosLdprmQ1iWk+n5IxTYfK7aKOeNtfro7ROk4k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl
                          rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 21:21:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1150 (0x47e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91758DF, serialNumber=33F88EAF1E4CE0F1A1877D49EF97C0E7FEDC039A
        Validity
            Not Before: Apr 28 21:21:13 2025 GMT
            Not After : May  5 21:21:13 2025 GMT
        Subject: CN=680ff149-49bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:5b:4d:9f:5a:10:42:13:d7:58:0b:cd:77:
                    e3:81:d5:aa:89:e1:cf:72:ee:d9:b0:13:97:ad:a1:
                    0b:b9:39:b6:a4:ad:03:76:4d:e8:a5:bb:80:d3:38:
                    fa:90:fa:dc:b7:85:aa:c1:f6:00:9f:07:6d:22:b4:
                    13:e4:04:c5:31:9a:4f:0b:3a:b2:9a:71:8f:a5:f5:
                    8b:ae:38:3a:e2:a3:07:97:5d:4c:5f:aa:58:ca:13:
                    ec:3c:28:38:01:4d:b0:03:50:d0:e8:db:2e:3f:b9:
                    74:21:a2:cb:ea:fc:c4:5b:23:37:e0:cc:ef:82:98:
                    5f:6e:ce:51:0b:e7:70:9d:dc:14:e0:a9:90:f0:a8:
                    d1:d8:18:68:a4:cb:a3:c0:f7:84:79:3d:11:e7:65:
                    88:f6:1c:e6:4d:1c:7f:ee:37:c9:0d:76:2c:5d:a3:
                    b4:b5:68:ce:ea:bf:96:9e:ba:29:4d:72:15:53:82:
                    ae:bd:29:a5:34:bb:a7:9e:7e:08:67:bb:b6:93:70:
                    c7:51:3a:c6:fe:9c:84:48:26:3a:26:1b:ca:de:95:
                    dc:46:cc:23:ee:48:54:82:69:f2:69:04:1f:a6:b3:
                    35:1f:6c:cc:2c:d6:44:39:2e:8f:e6:a2:2e:f3:6d:
                    3b:98:a4:0c:32:4b:db:e6:1b:c2:de:fe:8e:17:0d:
                    7a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:41:C6:38:87:D0:06:AC:9F:83:FB:02:A0:2A:E1:3E:22:CE:88:4D
            X509v3 Authority Key Identifier:
                keyid:33:F8:8E:AF:1E:4C:E0:F1:A1:87:7D:49:EF:97:C0:E7:FE:DC:03:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/M_iOrx5M4PGhh31J75fA5_7cA5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91758DF/8673608047FE11EC9CDF4B0AC4F9AE02/M_iOrx5M4PGhh31J75fA5_7cA5o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c7:95:f6:69:a0:28:27:5b:21:a9:72:29:f4:93:f2:75:64:
         d1:fd:fd:c8:7d:97:2a:dd:fb:c0:7a:46:fd:b1:94:4e:98:1a:
         a9:55:1a:51:45:2d:9f:18:72:b2:3a:db:dd:1a:d8:b0:6e:d3:
         fe:db:2f:f2:b7:18:d2:bb:c2:33:d0:dc:ad:22:0a:e7:61:00:
         75:4e:b4:da:51:73:0a:d4:38:cc:60:b9:7b:35:ab:0d:16:40:
         ed:34:39:f0:e8:93:5d:ef:0c:d7:02:1e:8a:2c:d8:33:7f:64:
         aa:7e:03:49:7b:eb:46:c8:96:b8:c9:0d:13:0a:be:d2:00:0a:
         65:c9:fe:db:4d:56:61:fd:61:a2:e0:f8:9c:31:ed:0e:6d:27:
         fc:a3:40:70:20:89:01:aa:c5:c1:f7:85:9c:ea:9c:29:99:76:
         0c:92:0e:84:86:ed:2d:ac:18:32:d9:a1:8f:29:e2:d6:b7:89:
         39:09:c3:ec:3a:a4:d7:75:91:27:67:ed:84:31:ad:b2:39:55:
         5f:56:17:3a:69:14:82:57:64:49:31:1e:dd:6c:5b:b2:8c:4f:
         44:48:2f:a6:3a:40:6a:4a:0a:0a:4b:4f:e2:c7:f7:c0:55:41:
         ee:92:7c:f5:a2:02:a1:19:93:ac:a2:fb:90:32:f3:35:ae:3e:
         94:6f:65:d7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzU4REYxMTAvBgNVBAUTKDMzRjg4RUFGMUU0Q0UwRjFBMTg3N0Q0OUVGOTdDMEU3
RkVEQzAzOUEwHhcNMjUwNDI4MjEyMTEzWhcNMjUwNTA1MjEyMTEzWjAYMRYwFAYD
VQQDEw02ODBmZjE0OS00OWJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArRtbTZ9aEEIT11gLzXfjgdWqieHPcu7ZsBOXraELuTm2pK0Ddk3opbuA0zj6
kPrct4WqwfYAnwdtIrQT5ATFMZpPCzqymnGPpfWLrjg64qMHl11MX6pYyhPsPCg4
AU2wA1DQ6NsuP7l0IaLL6vzEWyM34Mzvgphfbs5RC+dwndwU4KmQ8KjR2BhopMuj
wPeEeT0R52WI9hzmTRx/7jfJDXYsXaO0tWjO6r+WnropTXIVU4KuvSmlNLunnn4I
Z7u2k3DHUTrG/pyESCY6JhvK3pXcRswj7khUgmnyaQQfprM1H2zMLNZEOS6P5qIu
8207mKQMMkvb5hvC3v6OFw161wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRBxjiH
0Aasn4P7AqAq4T4izohNMB8GA1UdIwQYMBaAFDP4jq8eTODxoYd9Se+XwOf+3AOa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NThERi84NjczNjA4MDQ3
RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQR2hoMzFKNzVmQTVfN2NB
NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL01faU9yeDVNNFBHaGgzMUo3NWZBNV83Y0E1by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NThERi84NjczNjA4MDQ3RkUxMUVDOUNERjRCMEFDNEY5QUUwMi9NX2lPcng1TTRQ
R2hoMzFKNzVmQTVfN2NBNW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA1x5X2aaAoJ1shqXIp9JPydWTR/f3IfZcq3fvAekb9sZROmBqpVRpR
RS2fGHKyOtvdGtiwbtP+2y/ytxjSu8Iz0NytIgrnYQB1TrTaUXMK1DjMYLl7NasN
FkDtNDnw6JNd7wzXAh6KLNgzf2SqfgNJe+tGyJa4yQ0TCr7SAAplyf7bTVZh/WGi
4PicMe0ObSf8o0BwIIkBqsXB94Wc6pwpmXYMkg6Ehu0trBgy2aGPKeLWt4k5CcPs
OqTXdZEnZ+2EMa2yOVVfVhc6aRSCV2RJMR7dbFuyjE9ESC+mOkBqSgoKS0/ix/fA
VUHuknz1ogKhGZOsovuQMvM1rj6Ub2XX
-----END CERTIFICATE-----
Generated at Tue Apr 29 10:21:03 2025 by rpki-client