Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
File:                     P80_M6jgglw55KhM1pOVpvKwYUg.mft (raw, json)
Hash identifier:          8sQPoVhhnGBF8zr6uqlbSxjzbayM+mAtIDo8C+mq6hI=
Subject key identifier:   E5:51:57:E4:A9:B5:44:99:52:94:94:04:54:C6:57:1E:A4:A1:64:76
Authority key identifier: 3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48
Certificate issuer:       /CN=A91D4120/serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148
Certificate serial:       01B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
Manifest number:          01AD
Signing time:             Fri 25 Apr 2025 02:22:41 +0000
Manifest this update:     Fri 25 Apr 2025 02:22:40 +0000
Manifest next update:     Fri 02 May 2025 02:22:40 +0000
Files and hashes:         1: P80_M6jgglw55KhM1pOVpvKwYUg.crl (hash: ZDBtpTrancbXB2DQzX6f/kaToIOpKrVD48g1dANzX9Y=)
                          2: F67C04568FE011EDA9919C57C4F9AE02.roa (hash: LmlR9YlBwg7cT9J6J0IKLnKoAUaVj8qqBXEJpjhDI58=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl
                          rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4120, serialNumber=3FCD3F33A8E0825C39E4A84CD69395A6F2B06148
        Validity
            Not Before: Apr 25 02:22:40 2025 GMT
            Not After : May  2 02:22:40 2025 GMT
        Subject: CN=680af1f1-c175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f2:11:79:c1:cd:8e:2d:8d:bc:6c:28:d1:02:
                    f8:3d:a1:3c:1a:bc:1a:c8:a6:1c:41:4d:7c:f0:00:
                    20:be:64:03:89:b8:94:2a:d2:d2:f6:14:ae:17:92:
                    8e:92:02:1a:30:ec:b1:ac:d8:fc:a8:6e:45:84:86:
                    90:6f:63:04:92:bd:53:9f:58:98:c8:e8:07:0b:b4:
                    e5:c0:59:e7:00:ba:1b:8d:97:b5:c3:66:d5:e4:6a:
                    3b:55:8a:b0:75:01:e2:56:28:ed:68:18:a7:e6:7e:
                    a5:1d:23:2a:82:cc:50:43:34:cf:60:ab:73:55:79:
                    7e:ad:ab:79:cd:8b:4c:be:2e:26:9a:78:c3:f8:eb:
                    b2:25:a9:ac:e5:c4:68:8c:95:21:cb:9f:b7:d9:bf:
                    ea:3f:60:be:43:d7:9b:92:05:26:59:0b:6e:90:cd:
                    48:97:fb:91:c1:c1:47:95:ae:b2:36:62:6f:25:49:
                    0a:05:c2:a7:2d:66:da:b7:fd:0f:b5:b7:bc:34:6b:
                    e5:b8:fa:23:0c:33:41:14:b8:df:12:bf:c7:c6:60:
                    72:c7:d1:1a:41:17:9b:6a:67:8b:4e:6a:94:1e:b3:
                    c6:19:e8:d1:49:fb:91:93:8f:23:79:ce:5d:b9:b2:
                    c4:39:2b:01:0b:06:af:be:50:d4:48:f2:0f:56:15:
                    13:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:51:57:E4:A9:B5:44:99:52:94:94:04:54:C6:57:1E:A4:A1:64:76
            X509v3 Authority Key Identifier:
                keyid:3F:CD:3F:33:A8:E0:82:5C:39:E4:A8:4C:D6:93:95:A6:F2:B0:61:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P80_M6jgglw55KhM1pOVpvKwYUg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4120/76A5884E8FDE11EDA7351957C4F9AE02/P80_M6jgglw55KhM1pOVpvKwYUg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:50:cc:94:83:52:5e:61:b4:09:cc:fd:a3:b5:cc:f1:aa:d0:
         69:37:3a:83:42:2c:cc:03:80:fc:c4:35:a1:cb:20:44:2a:1e:
         ad:96:92:77:34:c7:2a:c0:e3:a0:68:de:60:3f:11:74:43:47:
         ad:b9:08:42:a9:c4:fb:c2:a8:ae:07:04:f1:b1:70:8f:09:45:
         08:52:90:70:53:71:ac:0f:e2:43:67:f2:b6:b7:19:e2:b5:11:
         1a:99:36:6c:7b:7a:55:aa:f5:b3:59:4f:74:37:43:2f:af:17:
         03:2b:f4:bd:4c:bb:92:61:92:8b:b9:fe:13:b8:2b:ec:bf:67:
         2f:59:7c:28:db:e7:b8:18:05:fd:61:ab:59:a1:a5:76:f2:c4:
         7b:61:fa:e5:a6:1a:9a:9b:5c:51:cb:04:59:82:79:0e:55:de:
         c5:aa:8e:ea:f6:fe:5e:2a:20:85:1d:51:18:a2:37:6e:9a:75:
         13:19:ff:9f:80:24:00:eb:0f:a2:5d:a7:4c:d4:83:39:a0:aa:
         52:60:dd:b8:80:1e:8e:73:7e:7d:30:40:c7:75:42:87:c1:74:
         59:85:35:85:97:80:75:5b:39:b5:bc:9d:76:ad:67:75:50:0d:
         d4:ad:a6:68:ca:e6:92:44:f4:e7:2d:46:0f:9d:c4:e0:df:a6:
         55:6c:e0:2e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAbAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQxMjAxMTAvBgNVBAUTKDNGQ0QzRjMzQThFMDgyNUMzOUU0QTg0Q0Q2OTM5NUE2
RjJCMDYxNDgwHhcNMjUwNDI1MDIyMjQwWhcNMjUwNTAyMDIyMjQwWjAYMRYwFAYD
VQQDEw02ODBhZjFmMS1jMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtfIRecHNji2NvGwo0QL4PaE8GrwayKYcQU188AAgvmQDibiUKtLS9hSuF5KO
kgIaMOyxrNj8qG5FhIaQb2MEkr1Tn1iYyOgHC7TlwFnnALobjZe1w2bV5Go7VYqw
dQHiVijtaBin5n6lHSMqgsxQQzTPYKtzVXl+rat5zYtMvi4mmnjD+OuyJams5cRo
jJUhy5+32b/qP2C+Q9ebkgUmWQtukM1Il/uRwcFHla6yNmJvJUkKBcKnLWbat/0P
tbe8NGvluPojDDNBFLjfEr/HxmByx9EaQRebameLTmqUHrPGGejRSfuRk48jec5d
ubLEOSsBCwavvlDUSPIPVhUTUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOVRV+Sp
tUSZUpSUBFTGVx6koWR2MB8GA1UdIwQYMBaAFD/NPzOo4IJcOeSoTNaTlabysGFI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDEyMC83NkE1ODg0RThG
REUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2dsdzU1S2hNMXBPVnB2S3dZ
VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1A4MF9NNmpnZ2x3NTVLaE0xcE9WcHZLd1lVZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDEyMC83NkE1ODg0RThGREUxMUVEQTczNTE5NTdDNEY5QUUwMi9QODBfTTZqZ2ds
dzU1S2hNMXBPVnB2S3dZVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB9UMyUg1JeYbQJzP2jtczxqtBpNzqDQizMA4D8xDWhyyBEKh6tlpJ3
NMcqwOOgaN5gPxF0Q0etuQhCqcT7wqiuBwTxsXCPCUUIUpBwU3GsD+JDZ/K2txni
tREamTZse3pVqvWzWU90N0MvrxcDK/S9TLuSYZKLuf4TuCvsv2cvWXwo2+e4GAX9
YatZoaV28sR7Yfrlphqam1xRywRZgnkOVd7Fqo7q9v5eKiCFHVEYojdumnUTGf+f
gCQA6w+iXadM1IM5oKpSYN24gB6Oc359MEDHdUKHwXRZhTWFl4B1Wzm1vJ12rWd1
UA3UraZoyuaSRPTnLUYPncTg36ZVbOAu
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:36:59 2025 by rpki-client