Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
File:                     G1Zt71944xm_wNFADedV4mSoK7w.mft (raw, json)
Hash identifier:          V3HMcmdHcJtyjTBy8VrDJECPAN87ev7CVsRnbnDmu/o=
Subject key identifier:   E0:ED:2D:43:7C:32:EA:30:7B:22:4B:23:9A:61:3D:23:79:DB:0F:B6
Authority key identifier: 1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC
Certificate issuer:       /CN=A91C20AB/serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
Certificate serial:       08EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
Manifest number:          08DC
Signing time:             Sat 14 Jun 2025 20:14:05 +0000
Manifest this update:     Sat 14 Jun 2025 20:14:05 +0000
Manifest next update:     Sat 21 Jun 2025 20:14:05 +0000
Files and hashes:         1: G1Zt71944xm_wNFADedV4mSoK7w.crl (hash: 3Xo08llw7jEBBVza8bajhd6ArpFPHwe8XhG7lGPeUxg=)
                          2: 28D36892B09411EAA964465EC4F9AE02.roa (hash: UfAX/Fj0JrJleqfsMcMBvDOpsY+oWvOczsjEMDPs474=)
                          3: 2979BC38B09411EAA964465EC4F9AE02.roa (hash: NUYwvd8XbnzOJ3mNMJWywPbsBYEeOEcLsau7uMQ+orY=)
                          4: AB659244056211EBAE3DBC4CC4F9AE02.roa (hash: Ptv1d6l4zCzsDfAGIqW3ARxnruAqZbwm3s5WFQRyBpQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl
                          rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 20:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2286 (0x8ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C20AB, serialNumber=1B566DEF5F78E319BFC0D1400DE755E264A82BBC
        Validity
            Not Before: Jun 14 20:14:05 2025 GMT
            Not After : Jun 21 20:14:05 2025 GMT
        Subject: CN=684dd80d-0d0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ae:02:02:e1:20:10:b0:46:18:15:26:78:c4:
                    f2:63:d3:75:85:ad:5b:b8:5e:6c:8d:b7:6f:e9:fd:
                    5b:08:59:44:8f:94:86:e4:26:ef:e5:9a:ff:69:db:
                    b7:ee:35:01:20:bd:4e:e9:6c:49:f7:8a:3d:52:b5:
                    31:48:41:6a:61:b5:a7:d5:0f:13:ca:f1:80:e9:1c:
                    2e:ea:b9:e5:7e:f5:87:53:1a:d6:6c:f7:04:a1:f6:
                    6b:ed:9b:2b:f6:56:57:5b:3f:8e:35:90:1b:cb:ea:
                    3e:a4:bf:8a:77:0a:bf:b2:f7:ad:b7:30:93:1a:2b:
                    45:6b:59:c1:66:63:6c:91:f2:74:70:4e:52:0c:3d:
                    04:d3:d2:a9:3c:3f:3e:91:69:bd:44:25:c9:19:23:
                    14:9b:8a:29:e5:05:8b:25:2f:71:d4:ff:24:6e:fe:
                    f2:c1:67:3e:a6:71:0b:c3:67:67:d9:bd:ac:31:37:
                    38:7a:bd:fc:1c:3b:ca:53:62:57:ff:87:38:fd:43:
                    39:33:dc:20:fe:92:ae:46:a2:cf:bf:bd:62:05:3d:
                    1c:60:40:9d:fe:0e:45:6f:c1:d2:97:86:58:9a:f6:
                    e7:a1:64:f6:27:07:47:20:7b:02:df:a1:c3:55:12:
                    23:dc:17:ed:78:45:49:0f:9f:b7:a1:fb:b4:75:ed:
                    ae:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:ED:2D:43:7C:32:EA:30:7B:22:4B:23:9A:61:3D:23:79:DB:0F:B6
            X509v3 Authority Key Identifier:
                keyid:1B:56:6D:EF:5F:78:E3:19:BF:C0:D1:40:0D:E7:55:E2:64:A8:2B:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G1Zt71944xm_wNFADedV4mSoK7w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C20AB/6BE550B0B09311EA8AF3175EC4F9AE02/G1Zt71944xm_wNFADedV4mSoK7w.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:31:3d:b7:fd:70:3b:87:9e:73:ba:5c:7d:c7:e8:a1:ea:94:
         de:3c:cd:1f:0d:32:fb:48:84:23:e7:f2:0c:6f:01:8a:72:2d:
         f7:a2:18:ab:1e:62:a0:93:2e:b3:82:9e:ad:b8:64:0c:f0:ae:
         8d:a3:0d:bd:ac:0a:b0:a5:4f:eb:d3:72:e2:21:7d:ae:85:cc:
         8a:8a:13:9a:46:c1:01:95:a9:16:90:d6:60:f9:2c:01:00:4b:
         e8:ae:cc:29:b1:9b:fb:aa:e1:2b:11:41:24:3a:b9:34:74:84:
         ed:f5:39:a3:fc:65:15:5d:5d:6a:4e:27:56:d4:08:66:29:15:
         8d:71:a4:8f:47:94:e9:5a:bc:c2:6c:79:61:64:b0:34:37:27:
         84:a8:87:ab:72:97:a7:76:2f:58:4f:c4:9d:15:0a:20:ef:25:
         a2:13:53:a9:ee:8f:45:16:a2:b7:6b:df:ba:63:18:66:fe:e5:
         c3:86:a1:4d:84:a7:2e:95:5f:57:c9:79:d6:74:93:a9:bb:48:
         8c:77:d0:4f:a6:d8:df:a2:c9:3e:fb:58:fc:37:59:a5:8b:b4:
         d3:57:56:cc:4c:dd:36:f4:6a:54:ee:06:07:b8:86:5e:86:d7:
         d9:17:fe:20:69:ae:1d:3b:d5:ff:9e:3c:cd:8a:45:fd:1f:bd:
         5f:f9:63:53
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzIwQUIxMTAvBgNVBAUTKDFCNTY2REVGNUY3OEUzMTlCRkMwRDE0MDBERTc1NUUy
NjRBODJCQkMwHhcNMjUwNjE0MjAxNDA1WhcNMjUwNjIxMjAxNDA1WjAYMRYwFAYD
VQQDEw02ODRkZDgwZC0wZDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwq4CAuEgELBGGBUmeMTyY9N1ha1buF5sjbdv6f1bCFlEj5SG5Cbv5Zr/adu3
7jUBIL1O6WxJ94o9UrUxSEFqYbWn1Q8TyvGA6Rwu6rnlfvWHUxrWbPcEofZr7Zsr
9lZXWz+ONZAby+o+pL+Kdwq/svettzCTGitFa1nBZmNskfJ0cE5SDD0E09KpPD8+
kWm9RCXJGSMUm4op5QWLJS9x1P8kbv7ywWc+pnELw2dn2b2sMTc4er38HDvKU2JX
/4c4/UM5M9wg/pKuRqLPv71iBT0cYECd/g5Fb8HSl4ZYmvbnoWT2JwdHIHsC36HD
VRIj3BfteEVJD5+3ofu0de2uiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFODtLUN8
MuoweyJLI5phPSN52w+2MB8GA1UdIwQYMBaAFBtWbe9feOMZv8DRQA3nVeJkqCu8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMjBBQi82QkU1NTBCMEIw
OTMxMUVBOEFGMzE3NUVDNEY5QUUwMi9HMVp0NzE5NDR4bV93TkZBRGVkVjRtU29L
N3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0cxWnQ3MTk0NHhtX3dORkFEZWRWNG1Tb0s3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
MjBBQi82QkU1NTBCMEIwOTMxMUVBOEFGMzE3NUVDNEY5QUUwMi9HMVp0NzE5NDR4
bV93TkZBRGVkVjRtU29LN3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAiMT23/XA7h55zulx9x+ih6pTePM0fDTL7SIQj5/IMbwGKci33ohir
HmKgky6zgp6tuGQM8K6Now29rAqwpU/r03LiIX2uhcyKihOaRsEBlakWkNZg+SwB
AEvorswpsZv7quErEUEkOrk0dITt9Tmj/GUVXV1qTidW1AhmKRWNcaSPR5TpWrzC
bHlhZLA0NyeEqIercpendi9YT8SdFQog7yWiE1Op7o9FFqK3a9+6Yxhm/uXDhqFN
hKculV9XyXnWdJOpu0iMd9BPptjfosk++1j8N1mli7TTV1bMTN029GpU7gYHuIZe
htfZF/4gaa4dO9X/njzNikX9H71f+WNT
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:47:56 2025 by rpki-client