Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
File:                     jFWTypaApeo4eDP9NEAjS56AINA.mft (raw, json)
Hash identifier:          i1UXdMD5QRANzdbYXcc485y9bN02l9FvfBlK1XLXFRI=
Subject key identifier:   F1:B1:4A:19:B5:89:88:67:3B:85:13:7D:56:E3:46:A4:AC:7C:8D:96
Authority key identifier: 8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0
Certificate issuer:       /CN=A91D78FD/serialNumber=8C5593CA9680A5EA387833FD3440234B9E8020D0
Certificate serial:       062B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
Manifest number:          061B
Signing time:             Thu 24 Apr 2025 22:36:40 +0000
Manifest this update:     Thu 24 Apr 2025 22:36:39 +0000
Manifest next update:     Thu 01 May 2025 22:36:39 +0000
Files and hashes:         1: jFWTypaApeo4eDP9NEAjS56AINA.crl (hash: e2ctV97G/T9tNNYIrWBTW27KpruWB+R2kNZMtO/WuIE=)
                          2: F603D584E99611EDB0837738C4F9AE02.roa (hash: 6nB/KmefxorxIHqA+6HljMV6NnIVdD7TanP2q7xzNf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.crl
                          rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579 (0x62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D78FD, serialNumber=8C5593CA9680A5EA387833FD3440234B9E8020D0
        Validity
            Not Before: Apr 24 22:36:39 2025 GMT
            Not After : May  1 22:36:39 2025 GMT
        Subject: CN=680abcf7-be27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:21:ce:d5:fc:e0:2f:e8:6c:c1:40:17:c4:
                    75:5b:c7:30:e7:8b:c7:ea:bd:06:f4:2d:19:3e:0b:
                    1c:04:ce:f9:17:be:44:9c:78:a8:ac:0b:60:8e:4a:
                    cf:88:37:d0:39:91:27:a3:f3:37:93:16:08:91:14:
                    c2:19:30:07:cb:b4:32:4c:01:56:4b:7a:76:94:0b:
                    6a:e6:43:46:40:18:52:90:82:b2:da:c3:d4:fe:84:
                    52:3e:ec:4a:fd:e5:fd:6b:9b:6f:d9:5e:08:24:0e:
                    b0:21:63:2b:c3:f2:d6:9e:2f:10:83:02:82:51:26:
                    78:fb:06:c2:17:62:94:0a:53:11:11:86:4b:bc:8c:
                    a8:92:36:73:c2:1e:c0:f0:01:ab:a8:f8:fc:18:6d:
                    ea:ea:6b:8f:3a:f7:e2:90:77:24:4b:55:38:0d:29:
                    b9:f0:b7:87:12:c5:ec:d9:bb:8a:ea:f2:18:3f:f7:
                    5e:ca:d9:38:dd:7f:79:9e:3f:ef:b4:af:28:ef:fe:
                    a4:fc:a2:c3:89:c6:5e:b8:ac:5c:2d:71:64:0e:ca:
                    1b:dc:bb:e8:ac:3a:d9:2b:f7:97:bf:13:12:3c:c2:
                    8d:2d:31:f2:80:c5:e1:80:74:ae:73:8b:ac:78:89:
                    4e:b1:d0:c6:72:57:20:20:7d:43:b0:38:5b:be:6c:
                    4d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B1:4A:19:B5:89:88:67:3B:85:13:7D:56:E3:46:A4:AC:7C:8D:96
            X509v3 Authority Key Identifier:
                keyid:8C:55:93:CA:96:80:A5:EA:38:78:33:FD:34:40:23:4B:9E:80:20:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFWTypaApeo4eDP9NEAjS56AINA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D78FD/C80F6F909B6D11EB82FA033EC4F9AE02/jFWTypaApeo4eDP9NEAjS56AINA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:bb:d2:87:b0:a0:c8:5e:94:76:08:9d:8f:72:fe:ed:cf:f6:
         e1:72:94:d0:f7:09:32:35:35:a8:0c:20:55:54:54:cb:76:30:
         88:60:8a:a5:57:74:bf:38:fb:54:57:fe:77:80:99:54:ec:4f:
         46:ea:6c:f6:2d:34:64:c6:e4:32:9e:8c:38:2c:4f:e2:8d:ff:
         5d:72:15:24:68:0d:7a:b8:86:e2:e9:9d:b4:2f:60:63:4a:a3:
         6f:ef:a2:04:2d:07:33:d4:99:9a:a9:6c:32:73:27:b7:27:bc:
         f3:3e:dd:d0:e7:24:40:7e:4c:00:2b:49:b2:f0:f2:94:f8:c2:
         13:ce:24:3d:ed:cf:5c:84:c3:e3:ba:bd:bc:42:69:2c:5e:9f:
         f6:7d:74:48:59:9d:5c:5e:3e:55:11:bc:68:3f:be:90:5e:c1:
         c9:0c:8f:57:0c:05:02:66:43:d5:f6:78:23:37:af:ef:01:a2:
         37:da:2d:6f:17:15:cf:f2:42:25:08:79:ae:80:85:d1:e8:4d:
         ac:aa:58:6b:f2:54:58:13:40:35:20:2f:67:e4:15:3b:95:b3:
         3f:02:53:61:1f:5e:04:3e:58:ed:b9:8e:fc:c8:01:5a:62:75:
         e7:12:b2:0f:d8:b8:d4:35:b0:b8:ab:b8:09:bd:d9:93:c4:08:
         1c:66:a5:ab
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBiswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDc4RkQxMTAvBgNVBAUTKDhDNTU5M0NBOTY4MEE1RUEzODc4MzNGRDM0NDAyMzRC
OUU4MDIwRDAwHhcNMjUwNDI0MjIzNjM5WhcNMjUwNTAxMjIzNjM5WjAYMRYwFAYD
VQQDEw02ODBhYmNmNy1iZTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoF8hztX84C/obMFAF8R1W8cw54vH6r0G9C0ZPgscBM75F75EnHiorAtgjkrP
iDfQOZEno/M3kxYIkRTCGTAHy7QyTAFWS3p2lAtq5kNGQBhSkIKy2sPU/oRSPuxK
/eX9a5tv2V4IJA6wIWMrw/LWni8QgwKCUSZ4+wbCF2KUClMREYZLvIyokjZzwh7A
8AGrqPj8GG3q6muPOvfikHckS1U4DSm58LeHEsXs2buK6vIYP/deytk43X95nj/v
tK8o7/6k/KLDicZeuKxcLXFkDsob3LvorDrZK/eXvxMSPMKNLTHygMXhgHSuc4us
eIlOsdDGclcgIH1DsDhbvmxNUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPGxShm1
iYhnO4UTfVbjRqSsfI2WMB8GA1UdIwQYMBaAFIxVk8qWgKXqOHgz/TRAI0uegCDQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzhGRC9DODBGNkY5MDlC
NkQxMUVCODJGQTAzM0VDNEY5QUUwMi9qRldUeXBhQXBlbzRlRFA5TkVBalM1NkFJ
TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pGV1R5cGFBcGVvNGVEUDlORUFqUzU2QUlOQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NzhGRC9DODBGNkY5MDlCNkQxMUVCODJGQTAzM0VDNEY5QUUwMi9qRldUeXBhQXBl
bzRlRFA5TkVBalM1NkFJTkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDQu9KHsKDIXpR2CJ2Pcv7tz/bhcpTQ9wkyNTWoDCBVVFTLdjCIYIql
V3S/OPtUV/53gJlU7E9G6mz2LTRkxuQynow4LE/ijf9dchUkaA16uIbi6Z20L2Bj
SqNv76IELQcz1JmaqWwycye3J7zzPt3Q5yRAfkwAK0my8PKU+MITziQ97c9chMPj
ur28QmksXp/2fXRIWZ1cXj5VEbxoP76QXsHJDI9XDAUCZkPV9ngjN6/vAaI32i1v
FxXP8kIlCHmugIXR6E2sqlhr8lRYE0A1IC9n5BU7lbM/AlNhH14EPljtuY78yAFa
YnXnErIP2LjUNbC4q7gJvdmTxAgcZqWr
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:18:31 2025 by rpki-client