Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File:                     C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier:          Z2qvRK+6Peycl7L4pCqJp6JTlg5VIFwCc36iwkV61gA=
Subject key identifier:   D9:00:A1:5B:F0:DD:3F:DE:AE:63:F7:33:C1:79:BF:0D:74:55:18:5C
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer:       /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number:          2C
Signing time:             Sun 27 Apr 2025 06:32:54 +0000
Manifest this update:     Sun 27 Apr 2025 06:32:54 +0000
Manifest next update:     Sun 04 May 2025 06:32:54 +0000
Files and hashes:         1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: CPZsZncopSfLuOqVCrVdkiTGG6a88SEAKIvdRg70nWw=)
                          2: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: bP9/t2AlBY53g2t6Q5eQ3rldZs73eo2gwKpDvHbyV4Y=)
                          3: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DqTJbrCn4Uj3CYLjBwjQvRunEdKhXtsy8A7Y63yZ9r4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 06:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
        Validity
            Not Before: Apr 27 06:32:54 2025 GMT
            Not After : May  4 06:32:54 2025 GMT
        Subject: CN=680dcf96-0866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:27:5a:a9:b2:03:13:72:10:f2:3f:0c:6c:
                    69:1a:6d:82:cc:01:1e:cf:78:a4:03:8b:c1:97:6f:
                    cf:b7:2c:be:18:b6:88:50:f4:05:eb:cd:6c:6c:5b:
                    df:5c:11:87:70:63:0b:e7:04:77:61:e6:f0:3c:c8:
                    ca:2f:34:88:e7:1b:f0:e6:bc:7b:44:25:74:ea:9c:
                    43:07:ef:01:8f:f6:7f:6e:68:bb:24:cf:53:61:ab:
                    d5:fa:60:e6:61:be:d7:68:a7:57:2b:7f:cb:89:57:
                    3a:e3:f5:b1:af:e4:36:fc:10:49:dd:bd:f8:e4:93:
                    5f:6f:74:40:5e:65:91:91:5f:62:30:5e:3b:e6:f2:
                    89:06:93:ca:f6:a4:fc:51:4c:7c:25:b1:98:49:b1:
                    c7:7d:d3:7d:5d:42:60:e5:58:1a:1e:92:be:5e:75:
                    92:19:00:e6:81:ee:8e:28:15:74:7d:24:e4:dc:4d:
                    51:9b:38:77:f5:72:e3:2c:d1:e9:bc:02:ed:cb:d8:
                    a2:a3:3c:46:73:1f:02:ec:5c:6b:87:81:63:31:ac:
                    3d:1b:66:1b:3c:c2:88:16:92:29:86:88:c4:a1:56:
                    74:6c:4f:35:f0:1f:a2:e5:a5:1d:01:2b:3e:b8:d7:
                    3c:82:33:3f:fb:c6:58:43:dd:3e:92:8c:0c:0f:94:
                    33:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:00:A1:5B:F0:DD:3F:DE:AE:63:F7:33:C1:79:BF:0D:74:55:18:5C
            X509v3 Authority Key Identifier:
                keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c6:6d:d7:9f:94:e5:0c:da:04:f8:56:16:1b:95:4d:9a:8d:
         60:f8:90:9c:ab:66:cf:e4:a7:06:53:78:cb:4d:a0:47:38:e9:
         94:5d:d6:11:51:6c:95:70:75:18:22:ac:a3:bf:26:00:cd:32:
         6e:83:42:ea:74:0a:c9:74:74:74:8b:ea:f7:bd:7e:c1:6a:1c:
         a4:f7:72:ad:73:2e:06:52:73:af:02:1f:e1:ca:88:b1:19:e0:
         cc:fa:91:03:ca:f1:a0:b9:a2:ed:87:a6:c8:cc:f9:35:15:ff:
         bb:bb:76:63:f1:be:45:a8:1e:70:ea:f4:05:0b:c3:6c:b5:03:
         a8:88:d9:ce:2f:bf:17:e1:4c:7c:4a:2d:28:c2:84:c2:57:18:
         f7:c1:5a:d3:17:23:fb:38:f7:1c:7e:93:cb:db:ae:0e:ad:9d:
         e1:5d:b0:e8:9f:af:8b:af:d6:66:79:e0:ad:65:ea:c7:31:4f:
         7a:44:36:cf:10:a4:99:8a:5a:0a:f7:6e:ac:62:3a:0c:c8:11:
         70:4d:24:eb:e8:53:1c:8f:5f:76:2d:39:d7:5a:19:d8:e0:ff:
         7d:7e:c9:d9:47:6e:6e:11:59:f0:5e:51:1b:4b:c9:ff:cd:33:
         a0:7e:5c:f5:cf:b0:12:64:29:93:bf:c2:4c:73:a0:63:6a:b4:
         70:25:6c:0d
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
MDhGQTExMC8GA1UEBRMoMEI5MjM3RTNCMDg2QjU4QzNDRDlDRTZGRDQ5QUMyNjFG
N0Q1MjVBMzAeFw0yNTA0MjcwNjMyNTRaFw0yNTA1MDQwNjMyNTRaMBgxFjAUBgNV
BAMTDTY4MGRjZjk2LTA4NjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMSidaqbIDE3IQ8j8MbGkabYLMAR7PeKQDi8GXb8+3LL4YtohQ9AXrzWxsW99c
EYdwYwvnBHdh5vA8yMovNIjnG/DmvHtEJXTqnEMH7wGP9n9uaLskz1Nhq9X6YOZh
vtdop1crf8uJVzrj9bGv5Db8EEndvfjkk19vdEBeZZGRX2IwXjvm8okGk8r2pPxR
THwlsZhJscd9031dQmDlWBoekr5edZIZAOaB7o4oFXR9JOTcTVGbOHf1cuMs0em8
Au3L2KKjPEZzHwLsXGuHgWMxrD0bZhs8wogWkimGiMShVnRsTzXwH6LlpR0BKz64
1zyCMz/7xlhD3T6SjAwPlDOPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2QChW/Dd
P96uY/czwXm/DXRVGFwwHwYDVR0jBBgwFoAUC5I347CGtYw82c5v1JrCYffVJaMw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOEZBL0QzN0Y2MjVDRTcz
RDExRUY4QTA0NjIxN0M0RjlBRTAyL0M1STM0N0NHdFl3ODJjNXYxSnJDWWZmVkph
TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQzVJMzQ3Q0d0WXc4MmM1djFKckNZZmZWSmFNLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw
OEZBL0QzN0Y2MjVDRTczRDExRUY4QTA0NjIxN0M0RjlBRTAyL0M1STM0N0NHdFl3
ODJjNXYxSnJDWWZmVkphTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAGPGbdeflOUM2gT4VhYblU2ajWD4kJyrZs/kpwZTeMtNoEc46ZRd1hFR
bJVwdRgirKO/JgDNMm6DQup0Csl0dHSL6ve9fsFqHKT3cq1zLgZSc68CH+HKiLEZ
4Mz6kQPK8aC5ou2HpsjM+TUV/7u7dmPxvkWoHnDq9AULw2y1A6iI2c4vvxfhTHxK
LSjChMJXGPfBWtMXI/s49xx+k8vbrg6tneFdsOifr4uv1mZ54K1l6scxT3pENs8Q
pJmKWgr3bqxiOgzIEXBNJOvoUxyPX3YtOddaGdjg/31+ydlHbm4RWfBeURtLyf/N
M6B+XPXPsBJkKZO/wkxzoGNqtHAlbA0=
-----END CERTIFICATE-----
Generated at Mon Apr 28 03:24:31 2025 by rpki-client