Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
File:                     g5Veubsl3DOnjslssIEXQZxkulw.mft (raw, json)
Hash identifier:          769fdPMNb7JoY+H34DJ6ZgGpDg9DxxyLfxKF4/VQNZw=
Subject key identifier:   4B:4A:99:EE:60:17:B9:3E:24:43:BE:00:70:F5:80:70:45:B3:14:AD
Authority key identifier: 83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C
Certificate issuer:       /CN=A9155810/serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
Manifest number:          42
Signing time:             Sun 27 Apr 2025 06:17:41 +0000
Manifest this update:     Sun 27 Apr 2025 06:17:40 +0000
Manifest next update:     Sun 04 May 2025 06:17:40 +0000
Files and hashes:         1: g5Veubsl3DOnjslssIEXQZxkulw.crl (hash: xXpCzpjKVgAa07fZ+Ff3InBKP6IlR50GsG6X2yK5m6A=)
                          2: A9D891D4C82B11EF8409A474C4F9AE02.roa (hash: 9VTnLi5T+YYltF+k17fA4MmiG8WRs/lt6DHBJeHF2Cc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl
                          rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155810, serialNumber=83955EB9BB25DC33A78EC96CB08117419C64BA5C
        Validity
            Not Before: Apr 27 06:17:40 2025 GMT
            Not After : May  4 06:17:40 2025 GMT
        Subject: CN=680dcc04-7738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4b:1e:13:9f:04:7d:56:7e:ba:ac:88:9b:41:
                    61:f0:8f:c5:4a:3a:5c:eb:fc:b0:dc:8d:3a:bd:98:
                    ba:06:97:32:ac:f8:3f:2d:17:26:9b:3a:9f:83:9d:
                    68:50:e7:b3:cb:3a:bc:80:cd:b6:7b:1b:09:a4:21:
                    57:00:33:71:7d:09:45:9c:5b:03:74:f9:3c:83:f7:
                    12:fb:fc:dc:c3:0e:26:66:8e:c6:4c:b8:34:98:4f:
                    bf:34:2c:30:38:84:21:b4:6b:d8:c0:9f:42:9c:8c:
                    85:b9:30:c7:77:2e:ab:c3:b2:60:da:73:7a:84:8b:
                    71:ff:66:bd:b1:e6:a9:8f:26:80:ed:8b:e2:52:57:
                    91:f8:c7:ea:dc:3a:be:d4:aa:19:be:a0:a0:68:45:
                    f8:e8:f5:e3:d4:a9:40:c4:a3:77:8e:7e:cd:69:10:
                    4f:3b:f4:0b:2a:14:03:e4:0b:46:30:15:33:a0:dc:
                    3d:83:f7:e5:c1:f7:b0:e7:39:ed:df:a2:d9:28:8f:
                    b6:3c:eb:45:45:6f:d3:9b:3c:10:e9:92:a1:77:12:
                    1c:fe:36:06:13:52:98:4b:6e:e4:ce:a3:67:4d:35:
                    0f:76:ec:91:3d:74:70:49:fe:3a:87:5b:5a:e5:b8:
                    d9:0e:21:86:db:a6:e0:17:8f:20:0c:39:0e:88:83:
                    5d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4A:99:EE:60:17:B9:3E:24:43:BE:00:70:F5:80:70:45:B3:14:AD
            X509v3 Authority Key Identifier:
                keyid:83:95:5E:B9:BB:25:DC:33:A7:8E:C9:6C:B0:81:17:41:9C:64:BA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g5Veubsl3DOnjslssIEXQZxkulw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155810/739788E2C70811EFA89B0C5FC4F9AE02/g5Veubsl3DOnjslssIEXQZxkulw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:59:e3:e1:59:7a:54:19:f5:c1:28:bb:c9:c2:bf:0e:4d:de:
         3f:17:c8:c5:73:ea:f9:32:71:90:32:bf:cd:57:cc:3e:56:2b:
         96:5d:94:89:a3:11:fb:af:cd:35:09:a6:40:a5:0f:3a:18:14:
         f9:1f:8a:75:43:c2:5d:14:1e:60:b5:fa:1c:95:19:b5:80:e2:
         6a:27:0a:ba:45:99:ec:3c:c8:f2:d0:b4:47:68:8a:9b:1b:fb:
         27:91:ce:ff:40:f0:dc:2b:ca:b0:6b:dd:93:1f:03:af:72:37:
         9b:8d:43:9d:f6:d1:d1:7c:8d:44:3f:52:01:c9:c7:cb:e6:d5:
         47:e3:e7:50:a1:09:f8:14:05:6d:8e:9b:ef:2a:1e:6e:7f:91:
         cd:f7:ba:bf:b5:7c:e5:c9:6f:39:40:dd:a3:22:bc:d8:4f:64:
         02:69:07:5c:58:13:ab:1e:61:9a:54:22:ce:46:8d:47:7e:88:
         c9:2a:58:c5:bc:38:33:46:7e:f2:1e:84:64:67:57:3c:a5:f1:
         0d:25:51:d4:89:a8:40:1c:94:f2:73:00:2d:16:f0:e6:53:20:
         06:b0:e7:a0:eb:16:0e:7c:b7:b0:b0:79:45:d7:e8:e3:76:8d:
         11:1e:81:45:d0:40:0c:18:68:e2:af:2b:e3:41:6a:2b:02:d8:
         7f:65:15:f1
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBRDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NTgxMDExMC8GA1UEBRMoODM5NTVFQjlCQjI1REMzM0E3OEVDOTZDQjA4MTE3NDE5
QzY0QkE1QzAeFw0yNTA0MjcwNjE3NDBaFw0yNTA1MDQwNjE3NDBaMBgxFjAUBgNV
BAMTDTY4MGRjYzA0LTc3MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC7Sx4TnwR9Vn66rIibQWHwj8VKOlzr/LDcjTq9mLoGlzKs+D8tFyabOp+DnWhQ
57PLOryAzbZ7GwmkIVcAM3F9CUWcWwN0+TyD9xL7/NzDDiZmjsZMuDSYT780LDA4
hCG0a9jAn0KcjIW5MMd3LqvDsmDac3qEi3H/Zr2x5qmPJoDti+JSV5H4x+rcOr7U
qhm+oKBoRfjo9ePUqUDEo3eOfs1pEE879AsqFAPkC0YwFTOg3D2D9+XB97DnOe3f
otkoj7Y860VFb9ObPBDpkqF3Ehz+NgYTUphLbuTOo2dNNQ927JE9dHBJ/jqHW1rl
uNkOIYbbpuAXjyAMOQ6Ig10xAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUS0qZ7mAX
uT4kQ74AcPWAcEWzFK0wHwYDVR0jBBgwFoAUg5Veubsl3DOnjslssIEXQZxkulww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1ODEwLzczOTc4OEUyQzcw
ODExRUZBODlCMEM1RkM0RjlBRTAyL2c1VmV1YnNsM0RPbmpzbHNzSUVYUVp4a3Vs
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvZzVWZXVic2wzRE9uanNsc3NJRVhRWnhrdWx3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1
ODEwLzczOTc4OEUyQzcwODExRUZBODlCMEM1RkM0RjlBRTAyL2c1VmV1YnNsM0RP
bmpzbHNzSUVYUVp4a3Vsdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAFpZ4+FZelQZ9cEou8nCvw5N3j8XyMVz6vkycZAyv81XzD5WK5ZdlImj
EfuvzTUJpkClDzoYFPkfinVDwl0UHmC1+hyVGbWA4monCrpFmew8yPLQtEdoipsb
+yeRzv9A8NwryrBr3ZMfA69yN5uNQ5320dF8jUQ/UgHJx8vm1Ufj51ChCfgUBW2O
m+8qHm5/kc33ur+1fOXJbzlA3aMivNhPZAJpB1xYE6seYZpUIs5GjUd+iMkqWMW8
ODNGfvIehGRnVzyl8Q0lUdSJqEAclPJzAC0W8OZTIAaw56DrFg58t7CweUXX6ON2
jREegUXQQAwYaOKvK+NBaisC2H9lFfE=
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:47 2025 by rpki-client on console.sobornost.net