Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
File:                     WZp41LvOE9TYE975FnzTV0fqAmA.mft (raw, json)
Hash identifier:          omMens6P/iZRStH7rSIPnRrJBALR0kdTzQSO/L9m5TU=
Subject key identifier:   22:F6:4A:CF:E5:DB:81:F6:E2:C9:1B:AF:91:72:1F:F3:E0:90:93:97
Authority key identifier: 59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60
Certificate issuer:       /CN=A91AFF15/serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
Certificate serial:       09BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
Manifest number:          09A3
Signing time:             Thu 12 Jun 2025 19:52:10 +0000
Manifest this update:     Thu 12 Jun 2025 19:52:10 +0000
Manifest next update:     Thu 19 Jun 2025 19:52:10 +0000
Files and hashes:         1: WZp41LvOE9TYE975FnzTV0fqAmA.crl (hash: fbfzVna4QuDbF/ptzgMmG4i0fikyCfRHHWlFtq1qmi8=)
                          2: 4967CEF66AD311EF88752B40C4F9AE02.roa (hash: xmJbA6IxBO4/+GmddqWiUZSxhJO/ZzoQBxBDrxW+61c=)
                          3: B67BE8ECC13C11EE80101E73C4F9AE02.roa (hash: 1aQRLZv1BGCnnNcNnCRaokdzw4E8uFS548+f2rZZdFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl
                          rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 19:52:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2491 (0x9bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFF15, serialNumber=599A78D4BBCE13D4D813DEF9167CD35747EA0260
        Validity
            Not Before: Jun 12 19:52:10 2025 GMT
            Not After : Jun 19 19:52:10 2025 GMT
        Subject: CN=684b2fea-95cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a6:9c:26:15:34:10:e8:a3:37:1e:1d:c4:73:
                    0a:6b:34:c1:9b:56:1f:fa:d4:01:99:c1:12:ae:21:
                    30:ef:20:d4:71:51:e1:a8:d6:9e:ed:ab:a5:9f:c4:
                    98:f3:9f:31:ee:67:c5:9e:7c:ce:c7:2f:36:f6:1f:
                    72:98:25:e1:75:8e:da:2c:d4:01:a3:a3:4d:e0:10:
                    f1:1a:08:fc:c7:d8:64:c9:56:f0:ae:7b:00:d2:69:
                    ef:40:1c:3f:96:2c:dc:0b:75:d9:db:9a:f7:3b:75:
                    10:1e:2c:00:ef:d0:09:f5:5a:71:17:8e:df:aa:c3:
                    e6:9f:d5:62:23:02:88:99:83:28:7c:0e:bf:ed:48:
                    ec:88:de:f4:ec:19:c1:ad:bd:9c:19:d5:dd:d6:63:
                    78:ef:5f:2e:af:b5:7c:7e:74:96:9c:33:ca:62:f9:
                    ef:57:26:95:27:3d:be:64:05:ff:4c:5b:ad:15:df:
                    d8:ac:c5:2d:51:16:d7:17:16:56:37:27:70:e0:51:
                    f6:c5:9b:a1:7a:47:63:59:c5:9c:0d:15:47:fc:97:
                    c6:7e:e5:a2:21:a3:8b:90:02:40:a9:1b:47:a7:f1:
                    04:98:e1:db:6e:94:5d:28:be:4b:b4:71:e0:cd:1d:
                    1f:d2:e7:6e:60:16:44:8b:43:e5:de:6b:c8:a2:89:
                    a9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F6:4A:CF:E5:DB:81:F6:E2:C9:1B:AF:91:72:1F:F3:E0:90:93:97
            X509v3 Authority Key Identifier:
                keyid:59:9A:78:D4:BB:CE:13:D4:D8:13:DE:F9:16:7C:D3:57:47:EA:02:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WZp41LvOE9TYE975FnzTV0fqAmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFF15/B4785BE88D4C11EABBDD3A74C4F9AE02/WZp41LvOE9TYE975FnzTV0fqAmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:06:5d:88:7f:32:22:7e:79:92:53:98:17:df:6f:3d:e2:0b:
         bc:d9:4e:d7:fb:7a:7e:ac:27:96:95:34:75:8f:7e:cc:fe:32:
         92:f7:32:d4:b0:4a:a9:3f:b0:99:1c:a5:a8:26:89:85:91:d0:
         b4:ce:b7:87:4c:13:2a:17:df:cf:4e:50:ba:aa:f8:3f:15:f4:
         fe:3e:d1:a8:46:b9:95:df:57:3d:9b:0a:fd:6c:56:e4:77:dd:
         ab:42:31:55:21:62:80:11:1c:11:ce:ff:d5:a6:b3:c4:c6:ca:
         a2:c7:ae:03:0a:fd:ed:ec:d1:46:30:c6:15:ca:0b:31:a6:e6:
         9b:79:9b:f1:b9:ce:94:56:05:8f:4c:ca:78:76:73:ec:d2:68:
         b9:54:8f:e7:f7:16:e1:b1:d9:69:dc:1d:2f:8d:e7:2e:fb:3d:
         8f:b8:2b:75:75:3c:47:53:49:42:ff:69:37:64:0f:fe:27:96:
         c7:86:fc:61:e7:11:c4:5b:39:f8:7d:07:fc:7c:a4:d5:6f:35:
         03:4b:4a:3a:6f:aa:20:76:9a:63:da:6e:61:5a:e9:d6:4a:1b:
         ac:07:51:c1:4a:c0:bc:6d:78:15:a9:89:46:64:b0:9c:4b:45:
         f5:8b:a4:0f:2b:c4:a4:6a:f4:0c:2d:e2:3f:34:08:a1:7a:83:
         01:30:f7:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUZGMTUxMTAvBgNVBAUTKDU5OUE3OEQ0QkJDRTEzRDREODEzREVGOTE2N0NEMzU3
NDdFQTAyNjAwHhcNMjUwNjEyMTk1MjEwWhcNMjUwNjE5MTk1MjEwWjAYMRYwFAYD
VQQDEw02ODRiMmZlYS05NWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA26acJhU0EOijNx4dxHMKazTBm1Yf+tQBmcESriEw7yDUcVHhqNae7auln8SY
858x7mfFnnzOxy829h9ymCXhdY7aLNQBo6NN4BDxGgj8x9hkyVbwrnsA0mnvQBw/
lizcC3XZ25r3O3UQHiwA79AJ9VpxF47fqsPmn9ViIwKImYMofA6/7UjsiN707BnB
rb2cGdXd1mN4718ur7V8fnSWnDPKYvnvVyaVJz2+ZAX/TFutFd/YrMUtURbXFxZW
Nydw4FH2xZuhekdjWcWcDRVH/JfGfuWiIaOLkAJAqRtHp/EEmOHbbpRdKL5LtHHg
zR0f0uduYBZEi0Pl3mvIoompfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCL2Ss/l
24H24skbr5FyH/PgkJOXMB8GA1UdIwQYMBaAFFmaeNS7zhPU2BPe+RZ801dH6gJg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRkYxNS9CNDc4NUJFODhE
NEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5VFlFOTc1Rm56VFYwZnFB
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1dacDQxTHZPRTlUWUU5NzVGbnpUVjBmcUFtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
RkYxNS9CNDc4NUJFODhENEMxMUVBQkJERDNBNzRDNEY5QUUwMi9XWnA0MUx2T0U5
VFlFOTc1Rm56VFYwZnFBbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYBl2IfzIifnmSU5gX32894gu82U7X+3p+rCeWlTR1j37M/jKS9zLU
sEqpP7CZHKWoJomFkdC0zreHTBMqF9/PTlC6qvg/FfT+PtGoRrmV31c9mwr9bFbk
d92rQjFVIWKAERwRzv/VprPExsqix64DCv3t7NFGMMYVygsxpuabeZvxuc6UVgWP
TMp4dnPs0mi5VI/n9xbhsdlp3B0vjecu+z2PuCt1dTxHU0lC/2k3ZA/+J5bHhvxh
5xHEWzn4fQf8fKTVbzUDS0o6b6ogdppj2m5hWunWShusB1HBSsC8bXgVqYlGZLCc
S0X1i6QPK8SkavQMLeI/NAiheoMBMPcA
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:27:34 2025 by rpki-client