Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
File:                     0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft (raw, json)
Hash identifier:          X7wMoC/o4CYnMe4b3iyScn5mP2Rc0sNbuCBcnfP1WAA=
Subject key identifier:   FC:C7:42:D1:B0:DF:D0:F9:81:18:42:EE:5E:F2:14:36:D0:43:0D:0D
Authority key identifier: D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED
Certificate issuer:       /CN=A91DC24F/serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
Certificate serial:       0147
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
Manifest number:          013F
Signing time:             Fri 13 Jun 2025 03:22:28 +0000
Manifest this update:     Fri 13 Jun 2025 03:22:28 +0000
Manifest next update:     Fri 20 Jun 2025 03:22:28 +0000
Files and hashes:         1: 0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl (hash: nH/YNLYpC/tHthj7OpkodhiENXl0fy/oZCl+OrMtA9c=)
                          2: E4A5F20468D011EE8509F75CC4F9AE02.roa (hash: JQKbNYMf/zVARnkpO4HdrpLHL11BuAmo0S1Bwvh58kQ=)
                          3: E50B556868D011EE8509F75CC4F9AE02.roa (hash: 15Ef3WoCrFkSaZWsvVqBxZqSnhk/RC+N8roeKpk66Po=)
                          4: E42B360468D011EE8509F75CC4F9AE02.roa (hash: 3NF/WOhgj9HD4AOf9A4AyqHhiWaUzMkr0bQxzyCSlus=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl
                          rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 03:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC24F, serialNumber=D26E22306218DA96C302FBEAAC9437275B1EC6ED
        Validity
            Not Before: Jun 13 03:22:28 2025 GMT
            Not After : Jun 20 03:22:28 2025 GMT
        Subject: CN=684b9974-a110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:e8:ef:bf:32:97:45:b7:2f:ba:4a:49:06:
                    00:a3:3f:60:3a:bd:f7:7f:f7:c8:e1:03:d7:df:94:
                    9c:81:e1:7e:3a:57:61:d2:cc:a3:c7:62:36:10:94:
                    07:eb:57:ff:16:c1:ce:57:20:a7:c8:ff:79:2f:b3:
                    95:ae:9e:2b:34:07:b5:d2:87:7e:88:5b:8c:02:45:
                    5f:73:de:a0:cd:7b:17:af:4a:9e:a0:58:a4:ab:f6:
                    80:e0:e9:a9:9e:0b:0b:0b:d9:f8:70:d8:fb:d1:40:
                    03:b8:29:c1:f3:44:1c:03:57:a7:e5:23:72:b2:63:
                    14:2a:a5:c1:6d:81:b8:72:35:31:fb:a4:36:ac:37:
                    d7:c2:e1:3e:40:5d:c1:6e:29:53:3c:42:cb:4f:f6:
                    0b:86:9f:6d:ca:96:2b:db:bc:6a:55:0f:6a:a4:cc:
                    71:0c:ec:21:a8:11:cf:3b:75:00:f3:dd:56:b0:a6:
                    5b:29:59:95:19:31:95:57:8f:47:7f:6c:59:77:56:
                    7a:14:48:9a:fe:46:c2:2a:23:fe:ea:cb:97:85:a8:
                    c7:d7:09:63:c1:70:ca:26:1c:7e:f8:f9:53:ac:d6:
                    80:b0:b4:61:a5:c8:2d:ed:db:d4:80:f1:82:ee:b5:
                    0f:94:26:a3:dd:f7:03:24:c2:49:6d:42:da:12:9c:
                    b1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C7:42:D1:B0:DF:D0:F9:81:18:42:EE:5E:F2:14:36:D0:43:0D:0D
            X509v3 Authority Key Identifier:
                keyid:D2:6E:22:30:62:18:DA:96:C3:02:FB:EA:AC:94:37:27:5B:1E:C6:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0m4iMGIY2pbDAvvqrJQ3J1sexu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC24F/3C130576671011EE9EC9A127C4F9AE02/0m4iMGIY2pbDAvvqrJQ3J1sexu0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:10:8a:56:93:18:d5:8f:32:e5:96:e9:d2:db:b8:dd:ea:68:
         4c:ff:a0:d1:04:ef:d6:a9:c4:95:43:46:17:e8:95:cc:85:1e:
         81:04:b4:49:ee:cd:98:34:1e:4d:dc:a8:37:80:80:60:9f:b3:
         3f:78:06:45:c5:81:17:d8:ab:a3:aa:69:83:b5:ec:3e:70:41:
         bb:e7:0d:3c:02:37:cb:2b:8b:32:0f:dc:4b:f4:ed:43:12:0c:
         5b:51:69:b8:e4:04:a7:34:b4:5e:e1:32:43:1b:65:d1:53:fb:
         7b:f0:9d:e0:7b:e4:c9:2a:8a:fd:ee:3b:21:b5:47:19:7c:ed:
         f7:40:aa:17:40:fc:73:31:70:21:7e:c7:6a:cc:93:c9:0d:12:
         20:65:2a:0b:f2:5f:60:29:c1:05:c1:37:89:8b:c3:e1:bb:7a:
         5a:79:e6:1a:cc:0e:71:d3:2b:1b:4c:b3:7f:71:22:ed:9a:a5:
         7f:db:8a:00:c8:80:72:54:ed:b4:1b:25:d1:b3:57:15:9f:44:
         e1:77:78:2e:f3:72:4b:77:11:e9:82:8d:ce:ad:6c:ca:c7:c4:
         76:fe:02:82:6f:59:43:24:df:0d:57:6a:a3:d2:3f:b9:b7:df:
         a7:fd:bb:0f:31:85:1e:79:54:70:e2:e6:4f:13:6e:05:6c:03:
         5b:57:88:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REMyNEYxMTAvBgNVBAUTKEQyNkUyMjMwNjIxOERBOTZDMzAyRkJFQUFDOTQzNzI3
NUIxRUM2RUQwHhcNMjUwNjEzMDMyMjI4WhcNMjUwNjIwMDMyMjI4WjAYMRYwFAYD
VQQDEw02ODRiOTk3NC1hMTEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAukvo778yl0W3L7pKSQYAoz9gOr33f/fI4QPX35ScgeF+Oldh0syjx2I2EJQH
61f/FsHOVyCnyP95L7OVrp4rNAe10od+iFuMAkVfc96gzXsXr0qeoFikq/aA4Omp
ngsLC9n4cNj70UADuCnB80QcA1en5SNysmMUKqXBbYG4cjUx+6Q2rDfXwuE+QF3B
bilTPELLT/YLhp9typYr27xqVQ9qpMxxDOwhqBHPO3UA891WsKZbKVmVGTGVV49H
f2xZd1Z6FEia/kbCKiP+6suXhajH1wljwXDKJhx++PlTrNaAsLRhpcgt7dvUgPGC
7rUPlCaj3fcDJMJJbULaEpyxVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzHQtGw
39D5gRhC7l7yFDbQQw0NMB8GA1UdIwQYMBaAFNJuIjBiGNqWwwL76qyUNydbHsbt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzI0Ri8zQzEzMDU3NjY3
MTAxMUVFOUVDOUExMjdDNEY5QUUwMi8wbTRpTUdJWTJwYkRBdnZxckpRM0oxc2V4
dTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBtNGlNR0lZMnBiREF2dnFySlEzSjFzZXh1MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
QzI0Ri8zQzEzMDU3NjY3MTAxMUVFOUVDOUExMjdDNEY5QUUwMi8wbTRpTUdJWTJw
YkRBdnZxckpRM0oxc2V4dTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCyEIpWkxjVjzLllunS27jd6mhM/6DRBO/WqcSVQ0YX6JXMhR6BBLRJ
7s2YNB5N3Kg3gIBgn7M/eAZFxYEX2KujqmmDtew+cEG75w08AjfLK4syD9xL9O1D
EgxbUWm45ASnNLRe4TJDG2XRU/t78J3ge+TJKor97jshtUcZfO33QKoXQPxzMXAh
fsdqzJPJDRIgZSoL8l9gKcEFwTeJi8Phu3paeeYazA5x0ysbTLN/cSLtmqV/24oA
yIByVO20GyXRs1cVn0Thd3gu83JLdxHpgo3OrWzKx8R2/gKCb1lDJN8NV2qj0j+5
t9+n/bsPMYUeeVRw4uZPE24FbANbV4ix
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:33:57 2025 by rpki-client