Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
File:                     4jfSzTuh8bknVF8kSZKHKtCvwwU.mft (raw, json)
Hash identifier:          MULhHL1zqhYfnDrg4FFihMacMDw7S2kWFmEbZVuB1Gg=
Subject key identifier:   84:52:C8:75:6C:6F:B3:97:86:14:09:3C:3D:0E:64:AD:24:77:1D:79
Authority key identifier: E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05
Certificate issuer:       /CN=A912512F/serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
Certificate serial:       08F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
Manifest number:          08DA
Signing time:             Thu 12 Jun 2025 20:13:27 +0000
Manifest this update:     Thu 12 Jun 2025 20:13:26 +0000
Manifest next update:     Thu 19 Jun 2025 20:13:26 +0000
Files and hashes:         1: 4jfSzTuh8bknVF8kSZKHKtCvwwU.crl (hash: 6akFGmk2e6Kns43YW9fkcObbFkhyuSpVZIQak6zbZ8o=)
                          2: 4C5CCE6EB46A11EAB5A01176C4F9AE02.roa (hash: YmROt2RnH3UdNIAXBylk68JRdbwoGmgzkhxTYT8yZZA=)
                          3: 9FCAD654781E11EB808A544BC4F9AE02.roa (hash: jI9GJ3mUj7/g+UDfOOrVVqKbgOohmwcRp94iSUpENxA=)
                          4: 4B3A4250B46A11EAB5A01176C4F9AE02.roa (hash: 65R5M+eBFk+Sri4/ilXTe6yj4G3UYq+q394nSZKR7qQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl
                          rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 20:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291 (0x8f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912512F, serialNumber=E237D2CD3BA1F1B927545F244992872AD0AFC305
        Validity
            Not Before: Jun 12 20:13:26 2025 GMT
            Not After : Jun 19 20:13:26 2025 GMT
        Subject: CN=684b34e7-5618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:dd:98:61:b5:a3:71:7f:7a:9a:45:70:9e:
                    ec:19:b5:ea:15:29:ac:7c:9b:aa:d7:62:2f:a0:e0:
                    b0:ae:96:b0:68:9f:fd:62:48:3b:bb:a8:40:0b:7a:
                    2c:88:e0:0e:81:c4:12:47:d8:fd:fc:0b:17:d7:ad:
                    76:82:ce:63:cf:e2:17:5e:81:2b:cf:9c:ad:86:0d:
                    33:cf:ff:05:17:b1:a4:d6:31:d6:ce:d0:13:ad:52:
                    8c:c3:25:1b:bb:d6:77:47:b3:d6:35:0a:bc:63:39:
                    80:d2:9d:9a:3a:94:9e:53:d7:74:48:7c:e4:65:50:
                    5c:1a:3c:46:38:a0:c0:4f:b7:e8:ca:a0:2f:70:c5:
                    6e:aa:a9:ee:9a:c1:84:b0:81:d5:72:dc:95:b9:d4:
                    a9:5d:0c:70:b0:ef:a6:7b:da:d3:03:48:4a:c0:b0:
                    cb:0f:52:2d:1e:a2:bf:18:f1:46:f8:64:5e:d1:6f:
                    72:37:c8:2d:82:e8:63:28:c3:be:b0:63:c6:63:64:
                    c7:a4:3a:68:e4:ce:3e:f1:48:8c:97:88:fb:ef:9f:
                    7f:8b:98:57:d6:bb:47:7f:53:15:06:85:40:ff:75:
                    e6:35:8b:cb:d6:4b:4c:ae:c8:5c:55:a3:20:64:69:
                    6c:d2:be:ab:aa:5e:7f:83:0d:16:f9:ae:81:2d:79:
                    58:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:52:C8:75:6C:6F:B3:97:86:14:09:3C:3D:0E:64:AD:24:77:1D:79
            X509v3 Authority Key Identifier:
                keyid:E2:37:D2:CD:3B:A1:F1:B9:27:54:5F:24:49:92:87:2A:D0:AF:C3:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4jfSzTuh8bknVF8kSZKHKtCvwwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912512F/4B8BFFECB46911EAABA71C75C4F9AE02/4jfSzTuh8bknVF8kSZKHKtCvwwU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5d:23:09:2d:b6:9f:e5:3a:b4:b4:04:a7:cf:e7:d6:5d:37:
         3c:66:8b:89:f9:a6:21:53:d5:4c:5e:c2:ef:a5:1f:1a:5d:fa:
         4e:4d:a8:53:44:a0:27:63:a2:fd:ac:32:bb:99:4a:70:2f:9e:
         80:51:cf:0d:48:8a:5a:ba:38:e2:f7:ef:6a:98:c2:12:0d:a9:
         75:be:5a:d0:19:2e:0b:7f:87:69:19:3a:5f:c9:56:c9:05:f2:
         00:46:0c:79:dd:1e:75:22:71:ef:aa:f5:fd:33:ca:d9:ff:2e:
         13:01:46:c0:83:37:b7:b0:ec:98:9e:2c:f6:21:26:12:28:6a:
         71:fa:57:bd:f9:a6:a5:bb:c9:3f:3b:16:75:86:62:53:3e:c2:
         e8:ec:d4:6b:73:45:ac:03:ea:3d:d4:18:a1:79:b1:d8:c5:f7:
         ac:66:f1:e4:89:4f:96:10:c6:95:8e:1d:71:fe:4e:05:82:e1:
         a9:b6:c4:af:24:be:36:7a:46:03:f5:72:c9:8d:41:6b:d6:c3:
         22:a4:7e:32:17:bd:65:3b:07:38:48:78:10:4a:33:00:bd:9a:
         cc:d2:f5:d8:12:a1:34:a9:32:5e:dd:36:84:b7:d0:67:a5:b9:
         53:9d:4f:2c:21:da:0a:68:87:62:d3:ad:b0:3e:4a:34:dd:2b:
         3b:54:94:ff
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjUxMkYxMTAvBgNVBAUTKEUyMzdEMkNEM0JBMUYxQjkyNzU0NUYyNDQ5OTI4NzJB
RDBBRkMzMDUwHhcNMjUwNjEyMjAxMzI2WhcNMjUwNjE5MjAxMzI2WjAYMRYwFAYD
VQQDEw02ODRiMzRlNy01NjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzEDdmGG1o3F/eppFcJ7sGbXqFSmsfJuq12IvoOCwrpawaJ/9Ykg7u6hAC3os
iOAOgcQSR9j9/AsX1612gs5jz+IXXoErz5ythg0zz/8FF7Gk1jHWztATrVKMwyUb
u9Z3R7PWNQq8YzmA0p2aOpSeU9d0SHzkZVBcGjxGOKDAT7foyqAvcMVuqqnumsGE
sIHVctyVudSpXQxwsO+me9rTA0hKwLDLD1ItHqK/GPFG+GRe0W9yN8gtguhjKMO+
sGPGY2THpDpo5M4+8UiMl4j7759/i5hX1rtHf1MVBoVA/3XmNYvL1ktMrshcVaMg
ZGls0r6rql5/gw0W+a6BLXlY3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIRSyHVs
b7OXhhQJPD0OZK0kdx15MB8GA1UdIwQYMBaAFOI30s07ofG5J1RfJEmShyrQr8MF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTEyRi80QjhCRkZFQ0I0
NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhia25WRjhrU1pLSEt0Q3Z3
d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRqZlN6VHVoOGJrblZGOGtTWktIS3RDdnd3VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NTEyRi80QjhCRkZFQ0I0NjkxMUVBQUJBNzFDNzVDNEY5QUUwMi80amZTelR1aDhi
a25WRjhrU1pLSEt0Q3Z3d1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+XSMJLbaf5Tq0tASnz+fWXTc8ZouJ+aYhU9VMXsLvpR8aXfpOTahT
RKAnY6L9rDK7mUpwL56AUc8NSIpaujji9+9qmMISDal1vlrQGS4Lf4dpGTpfyVbJ
BfIARgx53R51InHvqvX9M8rZ/y4TAUbAgze3sOyYniz2ISYSKGpx+le9+aalu8k/
OxZ1hmJTPsLo7NRrc0WsA+o91BihebHYxfesZvHkiU+WEMaVjh1x/k4FguGptsSv
JL42ekYD9XLJjUFr1sMipH4yF71lOwc4SHgQSjMAvZrM0vXYEqE0qTJe3TaEt9Bn
pblTnU8sIdoKaIdi062wPko03Ss7VJT/
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:34:38 2025 by rpki-client