Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft
File:                     nyv9fYAM-hPpBIrhALSFFDASb9M.mft (raw, json)
Hash identifier:          p+m20Wc3e1jYdPS0cDzwUBv0NV2QmJgTlKEFxsPxlA4=
Subject key identifier:   0D:E0:01:A9:61:53:43:38:65:7B:CA:F4:B3:59:A7:9D:41:B4:F7:8F
Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3
Certificate issuer:       /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
Certificate serial:       0525
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft
Manifest number:          051F
Signing time:             Thu 12 Jun 2025 23:11:19 +0000
Manifest this update:     Thu 12 Jun 2025 23:11:18 +0000
Manifest next update:     Thu 19 Jun 2025 23:11:18 +0000
Files and hashes:         1: nyv9fYAM-hPpBIrhALSFFDASb9M.crl (hash: 1kJlGHUutoQP/wt6IQna2etdK+GqPI2unuH5ErgnbF4=)
                          2: 06D647D4057811EC8BCE3783C4F9AE02.roa (hash: grJhcWmzDCOgdxUnDbK2ZLr2jRQYlivgBq7XqkPgbbI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl
                          rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317 (0x525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EFAB, serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
        Validity
            Not Before: Jun 12 23:11:18 2025 GMT
            Not After : Jun 19 23:11:18 2025 GMT
        Subject: CN=684b5e97-e566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2f:29:89:ce:0f:53:e4:fe:f7:0b:b5:54:10:
                    83:09:24:05:de:09:8a:2c:12:0b:1c:b3:62:e1:53:
                    0b:90:de:98:8e:4e:e6:dd:cb:a5:a5:54:da:1a:28:
                    74:74:61:1e:7d:f3:ab:9b:69:06:a7:09:85:66:54:
                    b4:45:06:71:b8:78:3d:f5:ee:91:b6:2a:e1:b0:5b:
                    cb:e6:1d:78:ce:4e:5c:b0:84:2c:b8:b2:cc:8d:0e:
                    54:8d:d1:d0:d0:6c:a1:66:6a:6d:83:a5:c7:da:c5:
                    77:b0:d9:16:0f:91:8b:c9:91:51:05:ab:7b:c4:06:
                    d8:20:4d:c5:c1:2e:5b:8f:62:22:04:46:8b:51:3c:
                    db:5c:61:43:96:4a:f7:e9:94:69:4d:ef:96:9a:b6:
                    96:ea:4d:11:d9:e8:6c:aa:f7:17:09:17:00:52:0b:
                    51:fe:41:be:2b:a3:9b:8e:28:9b:97:de:c1:a7:ce:
                    90:a2:3a:c4:07:6e:7d:c1:3a:39:33:85:ee:13:df:
                    27:bc:3a:1b:1e:5d:42:57:38:fc:6c:0b:4e:28:d6:
                    05:75:1f:f5:d0:e1:a0:bb:75:d0:86:8e:a3:41:d4:
                    2d:d1:f3:fd:f6:65:61:f6:11:49:db:03:e8:0e:c1:
                    2b:f7:10:14:59:20:e0:47:6f:25:e0:7b:8d:a7:2f:
                    a4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:E0:01:A9:61:53:43:38:65:7B:CA:F4:B3:59:A7:9D:41:B4:F7:8F
            X509v3 Authority Key Identifier:
                keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:d9:57:26:74:5d:c3:08:24:a0:10:52:f0:ce:f4:f5:d0:86:
         47:f6:a8:33:b5:e6:1c:85:aa:02:e9:e0:8d:36:19:08:06:83:
         0a:0f:cb:3d:fa:b2:76:fd:d3:ad:d1:de:30:d9:f0:5a:2a:93:
         22:20:7b:13:df:82:b7:bb:7c:5c:55:e8:ed:55:3e:75:d4:71:
         52:17:fb:3a:68:c7:b6:17:95:f5:9a:d6:fc:76:22:78:11:ee:
         ca:38:0d:0f:81:fb:3d:e7:cf:71:08:1f:13:86:fc:da:d3:fc:
         53:c9:93:c0:fc:43:2c:07:00:47:8c:83:d7:27:df:2b:04:8a:
         de:76:93:2c:ed:28:2d:9a:91:f6:d0:5b:9d:25:65:4d:4c:74:
         2f:a2:b0:eb:04:c6:60:ed:4f:db:1e:84:a1:31:60:0f:15:80:
         16:9a:c4:80:43:b5:d9:2e:e1:c4:70:8d:cf:f7:26:00:67:5a:
         c1:aa:fe:38:08:b7:f4:bd:01:63:7b:65:96:90:62:8c:8f:21:
         b0:df:19:80:4f:6b:a8:30:57:ab:48:19:de:7e:b1:9c:8e:a2:
         c1:e2:09:ae:68:97:e3:d5:df:de:1c:7d:c0:af:39:de:5e:6a:
         64:6c:2e:e9:78:21:82:42:09:63:48:42:c6:ca:05:d3:a7:a2:
         a9:7c:26:af
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0VGQUIxMTAvBgNVBAUTKDlGMkJGRDdEODAwQ0ZBMTNFOTA0OEFFMTAwQjQ4NTE0
MzAxMjZGRDMwHhcNMjUwNjEyMjMxMTE4WhcNMjUwNjE5MjMxMTE4WjAYMRYwFAYD
VQQDEw02ODRiNWU5Ny1lNTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoi8pic4PU+T+9wu1VBCDCSQF3gmKLBILHLNi4VMLkN6Yjk7m3culpVTaGih0
dGEeffOrm2kGpwmFZlS0RQZxuHg99e6RtirhsFvL5h14zk5csIQsuLLMjQ5UjdHQ
0GyhZmptg6XH2sV3sNkWD5GLyZFRBat7xAbYIE3FwS5bj2IiBEaLUTzbXGFDlkr3
6ZRpTe+WmraW6k0R2ehsqvcXCRcAUgtR/kG+K6Objiibl97Bp86QojrEB259wTo5
M4XuE98nvDobHl1CVzj8bAtOKNYFdR/10OGgu3XQho6jQdQt0fP99mVh9hFJ2wPo
DsEr9xAUWSDgR28l4HuNpy+keQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA3gAalh
U0M4ZXvK9LNZp51BtPePMB8GA1UdIwQYMBaAFJ8r/X2ADPoT6QSK4QC0hRQwEm/T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRUZBQi9FODJEMDZGRTA1
NzQxMUVDQTI0MkM1N0ZDNEY5QUUwMi9ueXY5ZllBTS1oUHBCSXJoQUxTRkZEQVNi
OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL255djlmWUFNLWhQcEJJcmhBTFNGRkRBU2I5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RUZBQi9FODJEMDZGRTA1NzQxMUVDQTI0MkM1N0ZDNEY5QUUwMi9ueXY5ZllBTS1o
UHBCSXJoQUxTRkZEQVNiOU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAi2VcmdF3DCCSgEFLwzvT10IZH9qgzteYchaoC6eCNNhkIBoMKD8s9
+rJ2/dOt0d4w2fBaKpMiIHsT34K3u3xcVejtVT511HFSF/s6aMe2F5X1mtb8diJ4
Ee7KOA0Pgfs9589xCB8Thvza0/xTyZPA/EMsBwBHjIPXJ98rBIredpMs7SgtmpH2
0FudJWVNTHQvorDrBMZg7U/bHoShMWAPFYAWmsSAQ7XZLuHEcI3P9yYAZ1rBqv44
CLf0vQFje2WWkGKMjyGw3xmAT2uoMFerSBnefrGcjqLB4gmuaJfj1d/eHH3Arzne
XmpkbC7peCGCQgljSELGygXTp6KpfCav
-----END CERTIFICATE-----
Generated at Sat Jun 14 17:45:09 2025 by rpki-client