Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
File:                     arkK-23kPfPHzYpPWYfz5Essx_Q.mft (raw, json)
Hash identifier:          23c3Ccc6j1ZPFDW+38LVxRbjTCunM2PEj/0dfwsoRNA=
Subject key identifier:   97:E3:58:36:E3:E0:2B:EC:7C:6B:79:C0:6C:86:64:34:16:98:7D:F0
Authority key identifier: 6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4
Certificate issuer:       /CN=A91DB576/serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
Certificate serial:       0259
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
Manifest number:          024F
Signing time:             Fri 25 Apr 2025 01:37:42 +0000
Manifest this update:     Fri 25 Apr 2025 01:37:41 +0000
Manifest next update:     Fri 02 May 2025 01:37:41 +0000
Files and hashes:         1: arkK-23kPfPHzYpPWYfz5Essx_Q.crl (hash: eLT8EjKgY3gIVM+uRMAIoZ8QZ+Z4eo3OK4p6etlI99Q=)
                          2: 74AF65D6183E11ED901AFA76C4F9AE02.roa (hash: +BIhJACypx0zsQrHiIyMv3oMQE4s/a1ioj17WGV+pqo=)
                          3: 740FDAD4183E11ED901AFA76C4F9AE02.roa (hash: eu8Up8zVgwguJ1wXxmQLX74QNPOYJWkhm0tUEDQ741M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 601 (0x259)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB576, serialNumber=6AB90AFB6DE43DF3C7CD8A4F5987F3E44B2CC7F4
        Validity
            Not Before: Apr 25 01:37:41 2025 GMT
            Not After : May  2 01:37:41 2025 GMT
        Subject: CN=680ae765-7931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:11:3f:88:b2:1c:2c:3c:8a:e4:00:2c:6b:70:
                    d5:ea:d0:de:b7:cb:61:6a:2b:f1:23:34:e6:7d:b2:
                    c8:0d:66:6f:6f:c6:34:84:ad:f6:87:16:b6:e4:e1:
                    4f:ab:9c:f4:47:99:be:a7:fb:ae:15:51:d6:35:11:
                    47:96:38:19:a2:4d:8f:99:72:b1:66:5c:57:10:48:
                    82:0a:af:e6:66:95:bb:9d:b4:00:a8:f8:57:32:18:
                    41:ff:1b:fc:59:20:4d:05:fb:c2:5a:05:58:d7:2e:
                    77:58:f3:15:1f:60:b3:29:58:98:ec:3c:bf:cc:94:
                    02:a8:10:10:34:83:f5:8c:42:7b:d3:2f:be:48:3b:
                    5d:4d:fe:6b:ef:c2:c5:d5:bf:b1:c7:5f:0a:ea:cc:
                    43:5a:25:64:ec:a2:5e:91:13:23:e8:d8:8d:91:b1:
                    fc:af:fa:84:31:5c:9b:97:2d:7a:c2:16:24:23:26:
                    a6:82:c8:1e:36:a7:3e:bf:8f:54:f0:e2:8d:fd:1f:
                    54:ae:b7:7e:68:3f:24:48:ae:52:26:ac:36:d9:4d:
                    dc:83:3b:17:ce:6e:96:64:54:ee:f3:57:03:7d:4c:
                    f4:1e:38:9f:9f:98:68:d3:3b:56:b7:53:12:63:4c:
                    32:bc:30:ea:a7:8b:ae:a6:aa:cf:d0:68:7b:54:8c:
                    a6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E3:58:36:E3:E0:2B:EC:7C:6B:79:C0:6C:86:64:34:16:98:7D:F0
            X509v3 Authority Key Identifier:
                keyid:6A:B9:0A:FB:6D:E4:3D:F3:C7:CD:8A:4F:59:87:F3:E4:4B:2C:C7:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/arkK-23kPfPHzYpPWYfz5Essx_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB576/50A06AD0183B11EDBC13A573C4F9AE02/arkK-23kPfPHzYpPWYfz5Essx_Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:a6:ff:67:76:3c:f4:60:62:cb:07:ee:0d:fa:95:e2:2b:f7:
         2f:31:35:4e:07:83:09:77:e9:ef:a5:9a:d1:83:83:94:36:f6:
         59:df:c8:36:50:1c:2b:b0:ea:8e:68:dd:e6:5e:f1:0e:d3:9c:
         e7:6b:24:93:ea:29:5b:90:4d:d8:cb:e0:6d:11:39:5d:2c:6c:
         28:42:5f:36:d8:aa:d4:2d:a7:63:0f:dc:5b:93:2f:e7:aa:f3:
         ff:a1:3e:0d:62:d2:19:39:41:94:fe:71:a7:e3:35:44:4e:96:
         0d:b7:ef:a9:7c:9b:0d:c1:62:de:12:1b:c0:aa:5f:54:53:49:
         9b:c8:a7:09:f9:5d:9a:c6:7d:fb:da:52:c4:ad:6b:15:00:c8:
         66:37:15:87:9b:14:5a:23:17:97:37:ef:46:17:0e:b5:4f:d2:
         d8:a4:ca:89:cd:4c:20:e9:84:07:67:13:64:33:29:1d:6c:40:
         ab:c1:48:34:2b:33:81:90:95:b8:78:16:c1:52:ac:33:6d:be:
         86:eb:03:c2:ee:74:e3:2d:11:5b:c2:3d:5f:2e:d3:78:16:4b:
         b0:32:98:0f:c1:34:5b:17:8a:6c:f9:8d:bc:03:94:cc:10:a5:
         d9:a2:a0:bd:40:6a:82:e4:4d:be:c1:8a:37:45:52:e4:c2:9a:
         14:89:a5:66
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REI1NzYxMTAvBgNVBAUTKDZBQjkwQUZCNkRFNDNERjNDN0NEOEE0RjU5ODdGM0U0
NEIyQ0M3RjQwHhcNMjUwNDI1MDEzNzQxWhcNMjUwNTAyMDEzNzQxWjAYMRYwFAYD
VQQDEw02ODBhZTc2NS03OTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyBE/iLIcLDyK5AAsa3DV6tDet8thaivxIzTmfbLIDWZvb8Y0hK32hxa25OFP
q5z0R5m+p/uuFVHWNRFHljgZok2PmXKxZlxXEEiCCq/mZpW7nbQAqPhXMhhB/xv8
WSBNBfvCWgVY1y53WPMVH2CzKViY7Dy/zJQCqBAQNIP1jEJ70y++SDtdTf5r78LF
1b+xx18K6sxDWiVk7KJekRMj6NiNkbH8r/qEMVybly16whYkIyamgsgeNqc+v49U
8OKN/R9Urrd+aD8kSK5SJqw22U3cgzsXzm6WZFTu81cDfUz0Hjifn5ho0ztWt1MS
Y0wyvDDqp4uupqrP0Gh7VIymrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfjWDbj
4CvsfGt5wGyGZDQWmH3wMB8GA1UdIwQYMBaAFGq5Cvtt5D3zx82KT1mH8+RLLMf0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjU3Ni81MEEwNkFEMDE4
M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1BmUEh6WXBQV1lmejVFc3N4
X1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Fya0stMjNrUGZQSHpZcFBXWWZ6NUVzc3hfUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QjU3Ni81MEEwNkFEMDE4M0IxMUVEQkMxM0E1NzNDNEY5QUUwMi9hcmtLLTIza1Bm
UEh6WXBQV1lmejVFc3N4X1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+pv9ndjz0YGLLB+4N+pXiK/cvMTVOB4MJd+nvpZrRg4OUNvZZ38g2
UBwrsOqOaN3mXvEO05znayST6ilbkE3Yy+BtETldLGwoQl822KrULadjD9xbky/n
qvP/oT4NYtIZOUGU/nGn4zVETpYNt++pfJsNwWLeEhvAql9UU0mbyKcJ+V2axn37
2lLErWsVAMhmNxWHmxRaIxeXN+9GFw61T9LYpMqJzUwg6YQHZxNkMykdbECrwUg0
KzOBkJW4eBbBUqwzbb6G6wPC7nTjLRFbwj1fLtN4FkuwMpgPwTRbF4ps+Y28A5TM
EKXZoqC9QGqC5E2+wYo3RVLkwpoUiaVm
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:13:06 2025 by rpki-client