Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft
File:                     g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft (raw, json)
Hash identifier:          PZe2PrWVww3cg8GDlnLVSJX2KZIhkVfjWSijJ9c3mRg=
Subject key identifier:   18:48:E4:0A:56:8E:22:1A:27:D1:92:4B:3A:4C:B5:0F:E2:05:12:E1
Authority key identifier: 83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1
Certificate issuer:       /CN=A91C705E/serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1
Certificate serial:       02C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft
Manifest number:          02BE
Signing time:             Tue 17 Jun 2025 01:00:14 +0000
Manifest this update:     Tue 17 Jun 2025 01:00:13 +0000
Manifest next update:     Tue 24 Jun 2025 01:00:13 +0000
Files and hashes:         1: g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl (hash: Hgt1c5Y+atn8a6M1K2gDJS1fxijVxt+BWXHY5ZF9fl0=)
                          2: CB5ED75AF62811EC9205771CC4F9AE02.roa (hash: NW6HBZRtebEmp/7i48MrWPcyNaPh4Ushzt7ufQ/dX6A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl
                          rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 01:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708 (0x2c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C705E, serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1
        Validity
            Not Before: Jun 17 01:00:13 2025 GMT
            Not After : Jun 24 01:00:13 2025 GMT
        Subject: CN=6850be1d-7196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:49:bf:8f:20:17:dc:81:7e:c6:01:da:2d:
                    76:cd:2e:fa:b9:72:db:e1:25:7e:83:e9:c8:a3:e9:
                    55:86:43:a2:60:8b:8c:e0:56:a0:c3:72:21:b3:0f:
                    09:7d:48:08:2a:d7:b7:b7:dd:58:22:67:ee:1d:bf:
                    32:d4:40:b8:46:1e:05:e3:48:66:87:bf:7a:45:6f:
                    fe:d4:39:cb:4c:e8:b6:c1:3b:48:33:b3:59:23:4f:
                    85:14:9e:26:19:fe:68:e2:07:36:f5:86:cd:17:a2:
                    b0:0b:a5:0f:1d:56:fd:dd:71:4f:ff:35:14:b7:65:
                    61:98:48:b1:39:b5:df:89:59:4d:90:c7:db:da:e3:
                    fd:a0:28:d6:a2:a3:1e:8d:72:7e:a7:34:17:1f:78:
                    f8:0c:fe:d0:00:66:d6:9a:c2:e8:f6:56:2f:c5:c8:
                    2c:18:e6:15:83:72:3c:ff:de:96:31:b2:78:16:e5:
                    aa:fd:84:f0:e7:e7:4e:6f:03:62:f1:b6:46:a6:25:
                    31:90:98:5a:ee:4f:5d:8b:32:81:c0:ba:7e:88:2d:
                    d6:36:af:2c:e2:52:cf:b6:2b:66:a8:43:d0:3e:d0:
                    e7:80:a8:d1:45:a4:cf:cf:17:c4:03:21:a4:36:f4:
                    4e:51:6b:ef:d0:e5:75:8a:d4:ab:65:1d:0f:db:07:
                    ae:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:48:E4:0A:56:8E:22:1A:27:D1:92:4B:3A:4C:B5:0F:E2:05:12:E1
            X509v3 Authority Key Identifier:
                keyid:83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:aa:2a:e1:cd:98:6a:17:32:b3:3e:b8:bf:eb:8b:83:1b:03:
         d0:af:60:a8:6f:87:ff:b8:c3:92:ab:ee:7a:89:8e:14:99:ff:
         ce:60:a8:3f:27:2f:f0:00:29:db:ab:31:c8:23:cb:cc:0b:c4:
         f2:f2:2f:0e:1e:e9:0a:60:93:6d:01:d9:3f:c8:72:50:5a:0d:
         8b:60:e3:a0:15:b2:74:44:88:05:e6:7a:84:89:3e:c1:02:a3:
         f7:dc:1a:03:a8:58:72:f9:ce:c4:56:a0:a6:7d:65:51:10:85:
         a6:f6:de:f9:bf:80:6c:fb:3c:61:df:ea:c2:14:0e:c8:3b:e4:
         3d:6e:51:83:ca:6a:4c:92:63:33:8b:47:3c:ff:3f:15:b1:72:
         e3:0e:33:3e:92:03:ef:ba:a6:54:12:05:7d:26:4a:99:5c:c0:
         71:59:97:6f:19:e8:9a:96:8f:50:0d:26:bc:41:9b:b5:33:19:
         e6:df:27:2e:79:c6:65:4b:7a:5b:c3:dc:7d:45:e5:70:81:6d:
         31:7e:8e:07:ff:8f:9f:dd:70:b9:b9:d9:2c:68:63:6d:51:bb:
         af:ad:6a:33:3f:60:85:3a:0e:25:6d:de:00:fe:d2:9c:d7:73:
         a3:8e:31:c2:79:c5:d6:57:dd:d0:2a:1d:79:3f:95:71:32:6d:
         16:d4:87:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzcwNUUxMTAvBgNVBAUTKDgzQUNCNTBGOTZGNjQ0M0Y0QjgzRDM5MUY4NTdCRTdD
QjU3RTM0QzEwHhcNMjUwNjE3MDEwMDEzWhcNMjUwNjI0MDEwMDEzWjAYMRYwFAYD
VQQDEw02ODUwYmUxZC03MTk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwPNJv48gF9yBfsYB2i12zS76uXLb4SV+g+nIo+lVhkOiYIuM4Fagw3Ihsw8J
fUgIKte3t91YImfuHb8y1EC4Rh4F40hmh796RW/+1DnLTOi2wTtIM7NZI0+FFJ4m
Gf5o4gc29YbNF6KwC6UPHVb93XFP/zUUt2VhmEixObXfiVlNkMfb2uP9oCjWoqMe
jXJ+pzQXH3j4DP7QAGbWmsLo9lYvxcgsGOYVg3I8/96WMbJ4FuWq/YTw5+dObwNi
8bZGpiUxkJha7k9dizKBwLp+iC3WNq8s4lLPtitmqEPQPtDngKjRRaTPzxfEAyGk
NvROUWvv0OV1itSrZR0P2weuowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhI5ApW
jiIaJ9GSSzpMtQ/iBRLhMB8GA1UdIwQYMBaAFIOstQ+W9kQ/S4PTkfhXvny1fjTB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzA1RS8zNERENEVFNkY2
MjQxMUVDOTcyMzQ4MTRDNEY5QUUwMi9nNnkxRDViMlJEOUxnOU9SLUZlLWZMVi1O
TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2c2eTFENWIyUkQ5TGc5T1ItRmUtZkxWLU5NRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzA1RS8zNERENEVFNkY2MjQxMUVDOTcyMzQ4MTRDNEY5QUUwMi9nNnkxRDViMlJE
OUxnOU9SLUZlLWZMVi1OTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCyqirhzZhqFzKzPri/64uDGwPQr2Cob4f/uMOSq+56iY4Umf/OYKg/
Jy/wACnbqzHII8vMC8Ty8i8OHukKYJNtAdk/yHJQWg2LYOOgFbJ0RIgF5nqEiT7B
AqP33BoDqFhy+c7EVqCmfWVREIWm9t75v4Bs+zxh3+rCFA7IO+Q9blGDympMkmMz
i0c8/z8VsXLjDjM+kgPvuqZUEgV9JkqZXMBxWZdvGeialo9QDSa8QZu1Mxnm3ycu
ecZlS3pbw9x9ReVwgW0xfo4H/4+f3XC5udksaGNtUbuvrWozP2CFOg4lbd4A/tKc
13OjjjHCecXWV93QKh15P5VxMm0W1Ic5
-----END CERTIFICATE-----
Generated at Wed Jun 18 03:01:04 2025 by rpki-client