Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
File:                     CcSauZoFYD1stgicc9N2kJhCHgA.mft (raw, json)
Hash identifier:          MBSGHBwm4XjO/MjzEKQ9YVlHe59oj2ItEoT4YxOTF/A=
Subject key identifier:   8D:E3:D8:12:67:3D:61:BA:2A:81:18:5B:65:E3:79:2E:80:5B:6B:1F
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Certificate issuer:       /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial:       012A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
Manifest number:          0121
Signing time:             Sun 15 Jun 2025 03:55:32 +0000
Manifest this update:     Sun 15 Jun 2025 03:55:31 +0000
Manifest next update:     Sun 22 Jun 2025 03:55:31 +0000
Files and hashes:         1: CcSauZoFYD1stgicc9N2kJhCHgA.crl (hash: rzlu9mdjTo3n79dCJnhGA0bYYtcPAYuUyERnD00Lfzw=)
                          2: 8415F4AA928511EE8AE43D75C4F9AE02.roa (hash: Fl6atygIAOnJfBaO72/s6xAJoCMVco87/j+JtQku3zQ=)
                          3: 7C76E4F6928611EE9B72027FC4F9AE02.roa (hash: Fm2GFDeckTvyapLgYWUd+q+9ZGt0Kt0IDFuGxReJTVw=)
                          4: 7BFABFDE928611EE9B72027FC4F9AE02.roa (hash: kWW5cRDXuhjkk+iiH/wUKjwNBV8vRl665o5zsQhUdP0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
                          rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D109, serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
        Validity
            Not Before: Jun 15 03:55:31 2025 GMT
            Not After : Jun 22 03:55:31 2025 GMT
        Subject: CN=684e4433-afa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:39:eb:d5:9d:4b:a1:e1:f7:ed:92:96:d3:e5:
                    17:ac:88:f6:c7:6f:3e:37:de:c8:c5:cc:3c:1f:5c:
                    33:07:d4:db:32:f6:7c:62:07:06:54:15:99:20:f1:
                    2b:f4:7e:6e:34:ae:d2:57:8e:c9:ea:df:b5:32:6e:
                    6e:f1:44:90:19:1b:80:b5:8c:b0:0d:83:5e:0b:26:
                    b2:74:28:14:ba:13:a1:da:4c:fd:f3:17:f5:ab:eb:
                    ac:ac:ed:cd:02:ac:09:54:d9:33:12:76:27:f6:a7:
                    f0:53:12:3c:76:b6:82:1c:d5:be:fd:fd:b5:77:5c:
                    89:d2:f7:ca:65:d3:7b:0b:60:cb:f8:71:ec:c5:5d:
                    73:d7:f3:da:df:c8:69:55:bc:9f:94:7f:c1:3f:ea:
                    ed:90:87:58:55:86:d9:8d:fc:6b:c5:7d:30:91:a5:
                    48:2b:7d:51:d0:69:d9:35:17:1f:8b:f7:e9:74:f8:
                    ea:99:9b:9d:97:69:f0:08:47:1e:62:c1:88:02:9d:
                    ed:79:5f:b1:4d:7a:fb:4d:25:8f:e1:b5:28:c9:ea:
                    8d:f7:de:fa:30:39:11:03:c6:78:a6:fd:1b:eb:37:
                    5e:45:b0:41:33:fb:fe:83:fb:e4:11:9c:8c:2c:2e:
                    9f:b3:cd:ac:f3:fe:6d:61:f5:18:61:75:16:4a:47:
                    5e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E3:D8:12:67:3D:61:BA:2A:81:18:5B:65:E3:79:2E:80:5B:6B:1F
            X509v3 Authority Key Identifier:
                keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ea:40:27:3f:93:b8:f6:2b:68:0d:98:dd:1b:ac:8d:a1:2a:
         31:de:db:c7:f1:58:db:cf:95:8d:6d:1b:27:99:52:63:b9:91:
         cc:b4:97:a7:9a:42:02:5b:5d:3a:fd:2c:8b:c7:4c:ba:23:34:
         a9:b0:3e:a9:33:cf:57:e4:8b:66:76:e4:cb:93:51:d4:ba:7a:
         50:08:ae:e4:a7:3c:16:4b:79:bc:21:66:52:60:a6:a6:45:25:
         8e:9f:60:5f:7e:6b:b2:d7:ea:ac:01:6a:56:b5:c9:c3:69:5d:
         05:b5:31:3f:6a:d0:c6:94:5a:d0:4b:3a:a4:14:29:d1:c4:39:
         a0:68:70:b1:98:91:e1:b5:d3:f8:60:f5:72:1b:c0:77:d5:60:
         62:d6:76:cc:6c:0b:b9:a9:2d:e7:41:99:2f:15:56:3c:42:04:
         37:6e:8b:d9:e3:8b:4c:e2:77:40:a2:35:fd:1e:80:d4:63:6f:
         76:ab:5e:46:0e:65:9d:20:81:a4:bc:ff:1a:0a:5f:a7:7d:f9:
         e3:ae:e7:81:54:d8:c2:fd:af:6d:68:a0:11:cb:4c:cf:b7:13:
         5b:b5:cf:34:b9:62:04:5b:a3:6e:95:29:97:8e:f0:e6:81:f8:
         5c:c1:35:b4:97:4d:e6:cd:b9:8f:b3:95:4b:e8:a2:40:0e:2e:
         ce:20:53:b6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQxMDkxMTAvBgNVBAUTKDA5QzQ5QUI5OUEwNTYwM0Q2Q0I2MDg5QzczRDM3Njkw
OTg0MjFFMDAwHhcNMjUwNjE1MDM1NTMxWhcNMjUwNjIyMDM1NTMxWjAYMRYwFAYD
VQQDEw02ODRlNDQzMy1hZmEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9Tnr1Z1LoeH37ZKW0+UXrIj2x28+N97Ixcw8H1wzB9TbMvZ8YgcGVBWZIPEr
9H5uNK7SV47J6t+1Mm5u8USQGRuAtYywDYNeCyaydCgUuhOh2kz98xf1q+usrO3N
AqwJVNkzEnYn9qfwUxI8draCHNW+/f21d1yJ0vfKZdN7C2DL+HHsxV1z1/Pa38hp
VbyflH/BP+rtkIdYVYbZjfxrxX0wkaVIK31R0GnZNRcfi/fpdPjqmZudl2nwCEce
YsGIAp3teV+xTXr7TSWP4bUoyeqN9976MDkRA8Z4pv0b6zdeRbBBM/v+g/vkEZyM
LC6fs82s8/5tYfUYYXUWSkde1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI3j2BJn
PWG6KoEYW2XjeS6AW2sfMB8GA1UdIwQYMBaAFAnEmrmaBWA9bLYInHPTdpCYQh4A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDEwOS8xNThEOEZDMDky
ODUxMUVFQThDNUQyNERDNEY5QUUwMi9DY1NhdVpvRllEMXN0Z2ljYzlOMmtKaENI
Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NjU2F1Wm9GWUQxc3RnaWNjOU4ya0poQ0hnQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDEwOS8xNThEOEZDMDkyODUxMUVFQThDNUQyNERDNEY5QUUwMi9DY1NhdVpvRllE
MXN0Z2ljYzlOMmtKaENIZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCs6kAnP5O49itoDZjdG6yNoSox3tvH8Vjbz5WNbRsnmVJjuZHMtJen
mkICW106/SyLx0y6IzSpsD6pM89X5ItmduTLk1HUunpQCK7kpzwWS3m8IWZSYKam
RSWOn2Bffmuy1+qsAWpWtcnDaV0FtTE/atDGlFrQSzqkFCnRxDmgaHCxmJHhtdP4
YPVyG8B31WBi1nbMbAu5qS3nQZkvFVY8QgQ3bovZ44tM4ndAojX9HoDUY292q15G
DmWdIIGkvP8aCl+nffnjrueBVNjC/a9taKARy0zPtxNbtc80uWIEW6NulSmXjvDm
gfhcwTW0l03mzbmPs5VL6KJADi7OIFO2
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:40:30 2025 by rpki-client