Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
File:                     4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json)
Hash identifier:          13p/Au5cOEt2q55INZ6LUCweHZdA40RO1SWI7go6tQQ=
Subject key identifier:   CD:1A:75:86:52:00:3D:0A:63:78:FA:77:E3:2F:2D:1B:ED:9F:60:0E
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Certificate issuer:       /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
Manifest number:          91
Signing time:             Fri 13 Jun 2025 05:27:53 +0000
Manifest this update:     Fri 13 Jun 2025 05:27:53 +0000
Manifest next update:     Fri 20 Jun 2025 05:27:53 +0000
Files and hashes:         1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: UgWq1qtv5t7a4Nt66W1wLkM5en4x68LnWpyBk3TnmkM=)
                          2: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: naM1jWBBF1HgB1gzetomIgtwuH6iwO3twg6Wvbh3nCU=)
                          3: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: HEoFn428OSrwoj9FY9UBG8roOsE7KCgrYxU/d2SrcQg=)
                          4: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: LfnrEoRSy98kq5+Het7TGQh6Md9GIYKtrywQQ+4Cqlg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
                          rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 05:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
        Validity
            Not Before: Jun 13 05:27:53 2025 GMT
            Not After : Jun 20 05:27:53 2025 GMT
        Subject: CN=684bb6d9-3428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:0f:54:b2:cb:f9:a2:40:08:36:67:25:1b:af:
                    12:ac:4a:cc:5b:91:b1:0e:b6:5c:56:32:db:5f:7e:
                    1c:dc:4f:35:92:32:b0:70:5e:42:a2:53:f9:fd:12:
                    b8:c7:04:70:7b:3a:43:18:a3:5d:1f:e7:35:7f:f9:
                    70:3e:6c:f4:e1:70:31:b4:6e:f2:52:f1:5a:79:33:
                    34:c5:8d:44:b3:f6:54:1a:1a:40:62:f8:7b:ee:11:
                    fd:ee:56:51:54:33:06:f2:0b:a2:8e:49:a1:6e:0b:
                    2d:28:54:73:c5:5e:57:6e:e0:05:21:36:e0:27:80:
                    50:18:fa:c3:b2:2c:3f:c4:14:0c:5f:14:68:f0:24:
                    e3:a7:8d:37:6e:13:53:36:7c:ca:14:54:ef:d5:ea:
                    2c:a7:20:e1:0a:f1:d6:c6:2a:75:0a:c8:9c:39:5c:
                    74:d1:3d:51:86:21:79:89:9c:38:c4:07:8b:d0:0d:
                    72:bf:ab:d6:2a:68:85:2c:e7:15:86:45:bb:35:b4:
                    8e:05:cc:6b:d7:69:b0:ab:3c:20:47:68:58:aa:f5:
                    a2:37:38:9b:85:9d:d6:54:b3:f9:24:eb:8f:61:66:
                    42:bf:2b:7f:12:ca:e1:4b:16:ee:b2:e4:88:2a:de:
                    b4:4c:4c:8e:b3:3f:3a:1a:02:7c:b5:93:38:2f:5b:
                    7c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1A:75:86:52:00:3D:0A:63:78:FA:77:E3:2F:2D:1B:ED:9F:60:0E
            X509v3 Authority Key Identifier:
                keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:da:64:5d:52:e9:9e:b0:8c:49:3c:2f:e5:31:82:a5:7f:de:
         cc:50:f1:ad:f2:ce:8d:64:0a:57:8a:e7:9d:18:7a:b5:f2:ed:
         0e:36:2b:05:bc:6f:bf:d3:c9:c5:8c:29:60:69:fe:7f:27:f0:
         fa:08:e6:fc:95:17:4a:b8:fb:8c:6a:42:f5:21:2c:aa:b0:5d:
         cb:15:53:95:b0:1a:07:94:75:b4:5d:db:87:2e:2c:0a:71:d2:
         2e:df:a1:07:a5:17:8a:3e:20:25:f6:c9:75:5a:e5:6d:2d:10:
         1c:e1:8f:48:65:4e:89:52:58:ed:b2:1e:22:db:5d:aa:1f:cb:
         c8:5f:5c:ef:e6:af:50:b3:b9:9b:f5:b5:20:dd:2a:d2:22:32:
         db:5d:c7:e4:60:3a:d3:e5:1d:41:32:23:7b:af:48:0c:0a:73:
         36:e8:89:e0:82:fa:38:b5:b2:3c:73:93:a7:f4:7a:5c:03:00:
         0b:f2:b2:b1:b3:e9:1d:33:ff:e2:b0:c6:5a:09:6f:0b:a2:fe:
         d4:f5:6b:2f:44:13:6e:5a:99:72:a5:0b:eb:76:f1:59:a3:42:
         5b:03:f6:70:6f:7d:b3:89:26:99:7d:89:f5:4a:7c:5b:eb:de:
         98:2e:0f:a2:25:d1:f1:75:ec:6e:d9:b3:5b:7e:a9:62:08:dd:
         3f:8c:97:32
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Y4NTQxMTAvBgNVBAUTKEUxMUE0NzJGODQ5RkEzRDY2M0NBODdDQTY2MzNFQ0U3
RDhEMDA3NjIwHhcNMjUwNjEzMDUyNzUzWhcNMjUwNjIwMDUyNzUzWjAYMRYwFAYD
VQQDEw02ODRiYjZkOS0zNDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9w9Ussv5okAINmclG68SrErMW5GxDrZcVjLbX34c3E81kjKwcF5ColP5/RK4
xwRwezpDGKNdH+c1f/lwPmz04XAxtG7yUvFaeTM0xY1Es/ZUGhpAYvh77hH97lZR
VDMG8guijkmhbgstKFRzxV5XbuAFITbgJ4BQGPrDsiw/xBQMXxRo8CTjp403bhNT
NnzKFFTv1eospyDhCvHWxip1CsicOVx00T1RhiF5iZw4xAeL0A1yv6vWKmiFLOcV
hkW7NbSOBcxr12mwqzwgR2hYqvWiNzibhZ3WVLP5JOuPYWZCvyt/EsrhSxbusuSI
Kt60TEyOsz86GgJ8tZM4L1t8IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0adYZS
AD0KY3j6d+MvLRvtn2AOMB8GA1UdIwQYMBaAFOEaRy+En6PWY8qHymYz7OfY0Adi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Rjg1NC9BODk2NDY2MDc5
OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85Wmp5b2ZLWmpQczU5alFC
MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRScEhMNFNmbzlaanlvZktaalBzNTlqUUIySS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
Rjg1NC9BODk2NDY2MDc5OUIxMUVGODExRjkwMTlDNEY5QUUwMi80UnBITDRTZm85
Wmp5b2ZLWmpQczU5alFCMkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBn2mRdUumesIxJPC/lMYKlf97MUPGt8s6NZApXiuedGHq18u0ONisF
vG+/08nFjClgaf5/J/D6COb8lRdKuPuMakL1ISyqsF3LFVOVsBoHlHW0XduHLiwK
cdIu36EHpReKPiAl9sl1WuVtLRAc4Y9IZU6JUljtsh4i212qH8vIX1zv5q9Qs7mb
9bUg3SrSIjLbXcfkYDrT5R1BMiN7r0gMCnM26Inggvo4tbI8c5On9HpcAwAL8rKx
s+kdM//isMZaCW8Lov7U9WsvRBNuWplypQvrdvFZo0JbA/Zwb32ziSaZfYn1Snxb
696YLg+iJdHxdexu2bNbfqliCN0/jJcy
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:40:45 2025 by rpki-client