Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
File:                     YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft (raw, json)
Hash identifier:          xSYTZQSxQUh+RLYeHvgOsLb8lxXpR0Q29322tKyGWCs=
Subject key identifier:   BA:8C:F0:30:53:1A:9D:10:24:A8:D1:F7:F0:B8:C6:85:9A:38:A1:41
Authority key identifier: 60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4
Certificate issuer:       /CN=A91DF55D/serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
Certificate serial:       05AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
Manifest number:          05A0
Signing time:             Sat 14 Jun 2025 22:55:31 +0000
Manifest this update:     Sat 14 Jun 2025 22:55:31 +0000
Manifest next update:     Sat 21 Jun 2025 22:55:31 +0000
Files and hashes:         1: YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl (hash: pEFBh2RekQHH1sIEvSPF1XgiCBbLU9tCxc1Ubz0CbgU=)
                          2: 8504C794D12411EBAD06CD48C4F9AE02.roa (hash: zqhHb4EuNxIhj0MsDdGRZBLgZ5b4JdLttiLWNXtELcI=)
                          3: 84706C70D12411EBAD06CD48C4F9AE02.roa (hash: +VQvv+uWVXkQstiOmhvQpZ3+r0zEs8UArQ0Y/mZ6P60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 22:55:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1451 (0x5ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF55D, serialNumber=60DC375DAACC9781BB702E03882A325FEBBFE9B4
        Validity
            Not Before: Jun 14 22:55:31 2025 GMT
            Not After : Jun 21 22:55:31 2025 GMT
        Subject: CN=684dfde3-a467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bc:73:45:e3:de:80:a0:f9:35:a8:b9:c4:bd:
                    0d:d7:f8:6d:4c:db:95:35:fc:bf:d6:55:c5:03:5a:
                    3a:64:99:f1:6d:5d:53:ba:db:88:c7:ba:de:90:fc:
                    62:0b:c1:26:e3:1f:07:66:c9:77:a8:a9:80:76:5c:
                    46:aa:32:71:dc:ad:8b:16:61:5f:36:75:9c:2b:f6:
                    8b:04:fb:4b:63:69:e7:c6:58:e1:22:8f:1d:ee:18:
                    d7:f8:f5:29:8d:26:53:d0:5e:aa:27:d0:37:81:f1:
                    f3:2a:31:fa:b7:43:16:c5:81:5c:53:ed:08:47:ed:
                    93:07:61:e7:34:ba:f1:b5:b5:c9:17:b7:cc:04:f6:
                    2c:7e:31:82:9c:75:ec:49:81:e1:dc:e3:6f:95:19:
                    68:cc:bf:38:5a:8d:70:ed:c0:36:b4:55:86:de:ec:
                    61:6d:e4:89:e1:27:48:c2:ac:66:09:88:a2:1c:34:
                    7a:76:fa:44:bf:92:63:d1:b1:07:47:ce:8c:96:db:
                    a4:34:9c:80:3b:43:cb:3c:c2:0d:13:e3:de:f2:7f:
                    bb:00:b1:3f:e2:8d:23:8e:e0:72:aa:5b:45:36:bb:
                    35:60:83:ee:99:5f:77:4b:3f:20:ac:c1:47:f3:ed:
                    82:63:f0:98:a4:24:ac:9f:9e:b3:07:79:0f:60:58:
                    2a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8C:F0:30:53:1A:9D:10:24:A8:D1:F7:F0:B8:C6:85:9A:38:A1:41
            X509v3 Authority Key Identifier:
                keyid:60:DC:37:5D:AA:CC:97:81:BB:70:2E:03:88:2A:32:5F:EB:BF:E9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YNw3XarMl4G7cC4DiCoyX-u_6bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF55D/E7A77BEED11F11EB9E5B1A82C4F9AE02/YNw3XarMl4G7cC4DiCoyX-u_6bQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9f:bb:91:ca:3f:46:0f:a3:32:cc:fd:1e:21:9b:f2:50:d7:
         57:79:24:77:88:41:30:d9:d3:50:ba:b8:76:d8:4f:e4:05:0a:
         65:51:98:d1:c1:02:f2:20:0f:69:9f:1f:9c:c3:4d:c9:df:24:
         59:0b:81:7b:7a:74:55:82:29:82:0d:42:9f:3f:45:2c:0c:a7:
         33:f4:78:f7:cc:a0:15:98:11:87:40:06:91:5e:e3:26:68:8d:
         3b:e7:ee:e5:2a:a0:35:71:98:a9:b1:c8:15:23:4b:e6:82:40:
         91:0d:3f:17:fc:90:1a:c2:cc:32:c2:47:c3:3b:32:2c:b6:24:
         e5:c1:b0:28:9f:0a:b7:e8:6c:d7:f2:38:c4:0b:e5:bb:ce:eb:
         dc:08:4a:95:0f:83:b1:ab:c0:3a:5b:5b:98:22:83:7d:77:15:
         c9:f4:ce:e8:08:d7:00:b0:3b:68:e6:12:3b:af:82:b0:2c:cf:
         69:2f:2d:87:da:19:b8:cb:39:a7:cc:a7:e4:6a:a3:ad:60:82:
         85:52:35:4f:f8:86:b6:4d:98:f1:cb:96:c1:f5:0b:01:72:f0:
         54:1d:01:37:c5:b9:39:63:4c:c3:d6:9f:3c:31:83:40:07:ad:
         df:40:59:47:af:aa:c9:33:9d:51:96:3c:75:86:6a:a4:96:1c:
         2e:c6:00:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBaswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REY1NUQxMTAvBgNVBAUTKDYwREMzNzVEQUFDQzk3ODFCQjcwMkUwMzg4MkEzMjVG
RUJCRkU5QjQwHhcNMjUwNjE0MjI1NTMxWhcNMjUwNjIxMjI1NTMxWjAYMRYwFAYD
VQQDEw02ODRkZmRlMy1hNDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2bxzRePegKD5Nai5xL0N1/htTNuVNfy/1lXFA1o6ZJnxbV1TutuIx7rekPxi
C8Em4x8HZsl3qKmAdlxGqjJx3K2LFmFfNnWcK/aLBPtLY2nnxljhIo8d7hjX+PUp
jSZT0F6qJ9A3gfHzKjH6t0MWxYFcU+0IR+2TB2HnNLrxtbXJF7fMBPYsfjGCnHXs
SYHh3ONvlRlozL84Wo1w7cA2tFWG3uxhbeSJ4SdIwqxmCYiiHDR6dvpEv5Jj0bEH
R86MltukNJyAO0PLPMINE+Pe8n+7ALE/4o0jjuByqltFNrs1YIPumV93Sz8grMFH
8+2CY/CYpCSsn56zB3kPYFgqawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqM8DBT
Gp0QJKjR9/C4xoWaOKFBMB8GA1UdIwQYMBaAFGDcN12qzJeBu3AuA4gqMl/rv+m0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjU1RC9FN0E3N0JFRUQx
MUYxMUVCOUU1QjFBODJDNEY5QUUwMi9ZTnczWGFyTWw0RzdjQzREaUNveVgtdV82
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lOdzNYYXJNbDRHN2NDNERpQ295WC11XzZiUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RjU1RC9FN0E3N0JFRUQxMUYxMUVCOUU1QjFBODJDNEY5QUUwMi9ZTnczWGFyTWw0
RzdjQzREaUNveVgtdV82YlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBun7uRyj9GD6MyzP0eIZvyUNdXeSR3iEEw2dNQurh22E/kBQplUZjR
wQLyIA9pnx+cw03J3yRZC4F7enRVgimCDUKfP0UsDKcz9Hj3zKAVmBGHQAaRXuMm
aI075+7lKqA1cZipscgVI0vmgkCRDT8X/JAawswywkfDOzIstiTlwbAonwq36GzX
8jjEC+W7zuvcCEqVD4Oxq8A6W1uYIoN9dxXJ9M7oCNcAsDto5hI7r4KwLM9pLy2H
2hm4yzmnzKfkaqOtYIKFUjVP+Ia2TZjxy5bB9QsBcvBUHQE3xbk5Y0zD1p88MYNA
B63fQFlHr6rJM51Rljx1hmqklhwuxgBZ
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:52:58 2025 by rpki-client