Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
File:                     exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft (raw, json)
Hash identifier:          eKLqxRI3KebCE0tcvl4F/K4yEC8Wnrv8QGvzM6SMaUQ=
Subject key identifier:   D3:70:2B:A3:1B:33:3C:2D:C5:AF:03:AD:3B:39:DD:A9:9D:1B:60:3D
Authority key identifier: 7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C
Certificate issuer:       /CN=A912D937/serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
Manifest number:          01F7
Signing time:             Thu 19 Jun 2025 01:55:34 +0000
Manifest this update:     Thu 19 Jun 2025 01:55:33 +0000
Manifest next update:     Thu 26 Jun 2025 01:55:33 +0000
Files and hashes:         1: exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl (hash: Fa8cgwwFqo1m6aVhyrZ8eNohRlCSfJ3bbTlV0Xjb9Qw=)
                          2: D9A5C1BA4DFE11EDBF00BA6BC4F9AE02.roa (hash: RQB2RLULGV5D9o8SykaXsVa4IAX2Ix9OkCIOGbXqXJc=)
                          3: 35D174F2C7DF11EDAEC8CE40C4F9AE02.roa (hash: 1vie/BGCNQgncTtAE895UIuHGNyFzttxRArpojokubI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl
                          rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 01:55:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D937, serialNumber=7B1C6E2F442D2D0DDEFA49940280C2D70EF2B14C
        Validity
            Not Before: Jun 19 01:55:33 2025 GMT
            Not After : Jun 26 01:55:33 2025 GMT
        Subject: CN=68536e16-5131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:01:fe:b4:63:e4:21:a2:b9:f4:9e:4a:6c:49:
                    a0:19:ea:76:f1:25:f5:3d:5a:9a:2d:4c:83:13:37:
                    1d:e0:1c:bf:39:43:9c:a5:91:e4:a5:0b:54:de:11:
                    6a:7e:2e:bc:b5:b3:03:4d:69:ef:2b:a8:7a:51:e1:
                    8f:64:db:7b:84:08:f0:be:bf:a4:df:d0:81:e3:2f:
                    c8:05:b0:20:88:b0:91:b1:a7:0b:74:82:64:af:2e:
                    8d:67:d8:31:7b:ea:03:e4:d9:84:c1:21:a0:14:25:
                    59:a4:20:54:94:82:a7:2f:9a:8f:87:e6:16:e7:82:
                    8f:73:2b:02:7e:45:7b:39:46:61:0c:78:0d:95:62:
                    54:6a:07:93:8d:6f:39:1a:30:5b:36:ff:c7:e2:5c:
                    48:4d:d9:34:11:2f:1d:aa:0b:bf:16:6a:ed:12:13:
                    6a:90:f5:06:6f:3f:e2:63:85:b0:9d:fc:b9:f6:2c:
                    b3:ee:9a:ce:ac:bc:c2:fc:1c:60:0a:7e:b6:bf:ce:
                    dc:37:96:b1:11:43:92:85:1b:55:a2:a2:b7:72:13:
                    c6:88:1a:59:2f:49:da:41:f5:88:79:31:69:87:44:
                    c0:86:1c:ea:a8:83:41:c4:73:e6:28:8f:4e:90:8d:
                    8f:66:13:e1:08:ee:4c:30:09:e8:38:6b:08:21:13:
                    91:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:70:2B:A3:1B:33:3C:2D:C5:AF:03:AD:3B:39:DD:A9:9D:1B:60:3D
            X509v3 Authority Key Identifier:
                keyid:7B:1C:6E:2F:44:2D:2D:0D:DE:FA:49:94:02:80:C2:D7:0E:F2:B1:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exxuL0QtLQ3e-kmUAoDC1w7ysUw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D937/BF2DAB6A4DFC11ED94BD666BC4F9AE02/exxuL0QtLQ3e-kmUAoDC1w7ysUw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c5:e6:73:bc:f2:53:43:02:c4:ad:10:c8:c3:0f:8e:e9:2f:
         ef:4c:c4:b2:ac:50:7c:d4:c7:d3:61:f2:dc:01:95:37:73:98:
         c8:12:c7:ea:16:bb:2a:07:fe:7e:4b:4b:f0:e9:50:db:7c:04:
         08:b3:79:96:cc:93:01:e5:4b:61:60:34:57:65:74:f0:7f:45:
         71:a7:0c:9d:fb:6d:5e:d3:2a:c1:ab:41:ae:79:27:06:7b:eb:
         aa:a4:25:ab:15:c2:db:3e:8a:7d:65:ff:3a:31:18:79:de:11:
         c1:56:72:c6:fe:03:d9:2d:1a:02:22:ef:61:dd:19:ae:b9:c0:
         75:6c:f7:ff:09:bd:17:9b:0c:0f:28:9c:1d:63:57:c3:84:ce:
         a0:34:02:4f:29:ae:1e:25:6a:29:5c:ab:c5:f0:a4:34:eb:77:
         47:78:eb:15:5f:91:11:50:92:fa:30:45:fd:61:c1:39:4f:d3:
         59:a4:05:a3:ce:ac:ee:ed:23:17:7c:e7:93:26:ba:8d:0f:1d:
         dd:87:41:0a:23:13:fe:13:93:ad:92:01:7f:67:5b:bd:ca:09:
         78:82:29:69:f1:a3:f4:d1:0b:8b:9b:70:dc:d4:55:68:a0:d9:
         1c:d9:b5:ab:a1:d9:db:17:cd:22:c1:f4:b8:68:d3:0a:a1:8d:
         c5:d8:d7:a7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkQ5MzcxMTAvBgNVBAUTKDdCMUM2RTJGNDQyRDJEMERERUZBNDk5NDAyODBDMkQ3
MEVGMkIxNEMwHhcNMjUwNjE5MDE1NTMzWhcNMjUwNjI2MDE1NTMzWjAYMRYwFAYD
VQQDEw02ODUzNmUxNi01MTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsAH+tGPkIaK59J5KbEmgGep28SX1PVqaLUyDEzcd4By/OUOcpZHkpQtU3hFq
fi68tbMDTWnvK6h6UeGPZNt7hAjwvr+k39CB4y/IBbAgiLCRsacLdIJkry6NZ9gx
e+oD5NmEwSGgFCVZpCBUlIKnL5qPh+YW54KPcysCfkV7OUZhDHgNlWJUageTjW85
GjBbNv/H4lxITdk0ES8dqgu/FmrtEhNqkPUGbz/iY4Wwnfy59iyz7prOrLzC/Bxg
Cn62v87cN5axEUOShRtVoqK3chPGiBpZL0naQfWIeTFph0TAhhzqqINBxHPmKI9O
kI2PZhPhCO5MMAnoOGsIIRORIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNwK6Mb
Mzwtxa8DrTs53amdG2A9MB8GA1UdIwQYMBaAFHscbi9ELS0N3vpJlAKAwtcO8rFM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDkzNy9CRjJEQUI2QTRE
RkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExRM2Uta21VQW9EQzF3N3lz
VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V4eHVMMFF0TFEzZS1rbVVBb0RDMXc3eXNVdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RDkzNy9CRjJEQUI2QTRERkMxMUVEOTRCRDY2NkJDNEY5QUUwMi9leHh1TDBRdExR
M2Uta21VQW9EQzF3N3lzVXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC6xeZzvPJTQwLErRDIww+O6S/vTMSyrFB81MfTYfLcAZU3c5jIEsfq
FrsqB/5+S0vw6VDbfAQIs3mWzJMB5UthYDRXZXTwf0Vxpwyd+21e0yrBq0GueScG
e+uqpCWrFcLbPop9Zf86MRh53hHBVnLG/gPZLRoCIu9h3RmuucB1bPf/Cb0XmwwP
KJwdY1fDhM6gNAJPKa4eJWopXKvF8KQ063dHeOsVX5ERUJL6MEX9YcE5T9NZpAWj
zqzu7SMXfOeTJrqNDx3dh0EKIxP+E5OtkgF/Z1u9ygl4gilp8aP00QuLm3Dc1FVo
oNkc2bWrodnbF80iwfS4aNMKoY3F2Nen
-----END CERTIFICATE-----
Generated at Thu Jun 19 17:46:55 2025 by rpki-client