Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
File:                     b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft (raw, json)
Hash identifier:          uzRTnLtg9ExhbdKxk1UNPDY/qu5HPt4yeQ6ceYzHdZI=
Subject key identifier:   CE:E9:EF:23:2C:C4:9C:12:FB:47:97:08:C7:A7:52:F2:B8:80:DE:3C
Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8
Certificate issuer:       /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
Manifest number:          C6
Signing time:             Fri 25 Apr 2025 04:51:18 +0000
Manifest this update:     Fri 25 Apr 2025 04:51:17 +0000
Manifest next update:     Fri 02 May 2025 04:51:17 +0000
Files and hashes:         1: b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl (hash: zj3dt3Z1hmCbtfyMlLlBy9uxEXxhN4qXDqQVl+Xm8Ss=)
                          2: CD24A702015411EF83144341C4F9AE02.roa (hash: IQlxGBDm0ccdjlpT18ECed9Odt+DoMhDg+up6Oc4ECg=)
                          3: CC9ED4E2015411EF83144341C4F9AE02.roa (hash: J2KwLe8SPWIWD1mMVkmMfy+3ZRxSXbUQ7iUXVfTcvng=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl
                          rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8
        Validity
            Not Before: Apr 25 04:51:17 2025 GMT
            Not After : May  2 04:51:17 2025 GMT
        Subject: CN=680b14c5-7fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0f:52:dd:55:f6:e9:2b:c8:0d:af:da:6e:45:
                    23:38:d5:9f:15:ee:43:7a:cd:5b:75:04:a2:9c:cf:
                    9b:56:0c:7f:b3:87:e1:1a:ea:02:a8:61:63:60:79:
                    03:88:8a:b5:94:0d:02:f2:e9:eb:0b:34:8c:81:9d:
                    1b:20:d0:0f:1f:bb:73:b1:df:cc:99:c3:fa:e5:5c:
                    f5:0b:d0:fd:fa:4f:bb:27:dc:ff:03:66:7b:50:be:
                    3d:8c:45:e0:70:2c:e1:66:f2:9d:4d:24:64:90:db:
                    31:1a:53:57:13:b3:f1:1b:f4:64:7f:60:96:b1:11:
                    26:1a:98:81:64:ad:27:6f:fa:64:7d:23:f0:2a:b1:
                    b7:e1:9a:85:0b:e9:5b:e3:19:ff:bb:85:d7:4b:ec:
                    80:de:fb:df:99:06:9f:d4:92:b7:b5:fd:eb:22:b9:
                    cf:46:b9:ae:d2:71:08:27:3e:2b:68:b8:51:08:1d:
                    92:1a:3f:03:71:77:cc:9b:bc:63:e5:57:f8:3f:94:
                    53:e1:3e:c9:6b:d9:e0:da:f6:6c:dc:42:66:ba:c5:
                    e4:53:03:d8:34:da:6e:93:c3:52:96:58:1b:d8:dd:
                    d4:0d:85:1d:6c:ff:73:e1:04:b3:4e:28:40:56:81:
                    a4:fe:08:64:2b:ee:b0:4e:c9:fa:a2:1e:c3:32:a3:
                    6c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E9:EF:23:2C:C4:9C:12:FB:47:97:08:C7:A7:52:F2:B8:80:DE:3C
            X509v3 Authority Key Identifier:
                keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:64:ea:e1:ef:8e:8a:8e:2f:09:8c:fc:66:47:5f:dc:28:a1:
         2d:56:7d:c6:5c:91:77:77:78:6a:7e:c5:4e:38:61:9f:5e:da:
         fc:28:71:86:f6:7f:2b:9a:73:ae:6f:0e:45:1f:b5:6f:ca:ef:
         d0:2d:df:2f:72:93:e6:1c:06:51:e1:33:1e:2f:a0:b6:79:5c:
         c0:a5:0c:6f:27:1a:3c:56:aa:a1:41:6b:ec:10:d1:fc:6a:97:
         2a:ee:b6:f4:25:2d:b5:b1:87:82:03:c0:2a:ee:fd:f0:b7:24:
         84:9f:2f:50:08:62:c2:b9:65:60:e4:69:c9:da:52:a9:1e:13:
         e4:4e:8d:73:07:35:cc:cd:3e:45:38:9f:29:3c:1a:fd:72:e1:
         39:89:46:f2:3b:8d:42:7a:4d:43:9e:52:26:69:85:9f:c6:e4:
         58:58:73:90:aa:01:a5:68:50:5b:35:12:6b:51:21:75:58:da:
         9b:5b:e6:47:49:2e:a5:3d:47:b2:64:3c:f5:4c:12:62:5b:41:
         fb:3f:05:10:b3:ed:ae:e4:38:be:4c:63:6c:06:94:ed:1c:ee:
         a5:9e:30:3d:ca:1e:7f:52:35:fd:55:7b:36:34:07:5d:35:62:
         92:f4:aa:a4:13:b7:9b:8a:13:3a:4e:ec:44:6c:f5:21:38:55:
         19:71:ad:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB
NEQ4NTcyQjgwHhcNMjUwNDI1MDQ1MTE3WhcNMjUwNTAyMDQ1MTE3WjAYMRYwFAYD
VQQDEw02ODBiMTRjNS03ZmNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuA9S3VX26SvIDa/abkUjONWfFe5Des1bdQSinM+bVgx/s4fhGuoCqGFjYHkD
iIq1lA0C8unrCzSMgZ0bINAPH7tzsd/MmcP65Vz1C9D9+k+7J9z/A2Z7UL49jEXg
cCzhZvKdTSRkkNsxGlNXE7PxG/Rkf2CWsREmGpiBZK0nb/pkfSPwKrG34ZqFC+lb
4xn/u4XXS+yA3vvfmQaf1JK3tf3rIrnPRrmu0nEIJz4raLhRCB2SGj8DcXfMm7xj
5Vf4P5RT4T7Ja9ng2vZs3EJmusXkUwPYNNpuk8NSllgb2N3UDYUdbP9z4QSzTihA
VoGk/ghkK+6wTsn6oh7DMqNsswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7p7yMs
xJwS+0eXCMenUvK4gN48MB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2
RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj
cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NTRGRS9ENjExN0RGNkY2RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlG
T1VVZ2taTXNSZi1rMkZjcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB1ZOrh746Kji8JjPxmR1/cKKEtVn3GXJF3d3hqfsVOOGGfXtr8KHGG
9n8rmnOubw5FH7Vvyu/QLd8vcpPmHAZR4TMeL6C2eVzApQxvJxo8VqqhQWvsENH8
apcq7rb0JS21sYeCA8Aq7v3wtySEny9QCGLCuWVg5GnJ2lKpHhPkTo1zBzXMzT5F
OJ8pPBr9cuE5iUbyO41Cek1DnlImaYWfxuRYWHOQqgGlaFBbNRJrUSF1WNqbW+ZH
SS6lPUeyZDz1TBJiW0H7PwUQs+2u5Di+TGNsBpTtHO6lnjA9yh5/UjX9VXs2NAdd
NWKS9KqkE7ebihM6TuxEbPUhOFUZca2I
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:33:35 2025 by rpki-client