Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
File:                     SLHo4_K8VCn4xnmVXWTSJJRF42U.mft (raw, json)
Hash identifier:          Y5j44Me7FYQS11JMDzDSaeXo7H2eat4OJWuke1Tfs6M=
Subject key identifier:   5B:87:C7:A9:DF:8C:7D:44:E2:5F:32:54:62:B2:AC:0E:3E:04:8A:EC
Authority key identifier: 48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65
Certificate issuer:       /CN=A9140C62/serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
Certificate serial:       0199
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
Manifest number:          018B
Signing time:             Fri 25 Apr 2025 02:48:19 +0000
Manifest this update:     Fri 25 Apr 2025 02:48:18 +0000
Manifest next update:     Fri 02 May 2025 02:48:18 +0000
Files and hashes:         1: SLHo4_K8VCn4xnmVXWTSJJRF42U.crl (hash: Hzv7s+ABmR8qWQSdUVTmGEnp6mLrWrM1jXnYPLrbCRY=)
                          2: 0A624110067411EEA4A63A62C4F9AE02.roa (hash: u9dNvDFAFnBaqoITKf4wttZqgTjkqepYYTTq0cWfxsA=)
                          3: 51B6AD3E03B211F0BDAF273BC4F9AE02.roa (hash: WmaI+JpQZGr+NV6hRWYVZkaBwEeLTPaT1/dSkWkVAdQ=)
                          4: 4C66C2B497F711EF8863DA4BC4F9AE02.roa (hash: uNIvVvjHdxYNXn+vLEcJTPhrZ9Sg+JCJeEhpJ1jJjbQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl
                          rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140C62, serialNumber=48B1E8E3F2BC5429F8C679955D64D2249445E365
        Validity
            Not Before: Apr 25 02:48:18 2025 GMT
            Not After : May  2 02:48:18 2025 GMT
        Subject: CN=680af7f3-80a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:4a:d0:a4:df:32:37:f6:2e:0b:a4:ad:18:
                    a4:ad:57:83:d0:50:8e:6e:d3:f0:a3:7c:aa:ba:8f:
                    e3:d4:d7:98:55:c4:20:91:3f:b7:73:9f:5d:18:2b:
                    c8:84:75:a6:af:a7:87:1f:ab:3c:2b:c4:e4:2c:6c:
                    84:e8:d3:b7:37:11:bd:c4:b2:0d:f0:3b:33:20:b0:
                    ca:c6:a5:d9:0b:4c:26:99:59:fb:1f:3a:d9:8f:a0:
                    ab:4d:df:57:63:af:4a:94:c2:1c:44:e2:6f:71:8d:
                    cd:f3:dc:0e:d1:c7:77:f7:17:0c:d7:78:dd:bd:5b:
                    ec:9b:76:48:31:31:ad:a0:4a:bc:ee:28:43:d1:1f:
                    7d:d0:24:a5:38:8f:dd:b3:36:0e:00:3e:c7:33:51:
                    9f:ef:d5:84:14:d6:94:53:f3:f8:83:16:df:2f:26:
                    f5:33:d3:2d:d8:11:0a:f2:91:25:f3:fa:eb:0c:2c:
                    86:2c:9c:14:6f:6b:4b:69:fa:fb:bf:d8:92:5a:28:
                    46:fd:5c:84:09:6d:1d:d5:bd:8a:1e:2e:35:4d:7f:
                    f1:b1:11:b7:47:28:7a:c1:18:01:e4:80:46:42:7a:
                    56:6e:44:3a:2f:31:dc:1a:3f:1f:df:d3:fb:68:4f:
                    37:b6:9b:99:0f:9b:89:82:98:a0:71:88:c4:bc:a0:
                    6f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:87:C7:A9:DF:8C:7D:44:E2:5F:32:54:62:B2:AC:0E:3E:04:8A:EC
            X509v3 Authority Key Identifier:
                keyid:48:B1:E8:E3:F2:BC:54:29:F8:C6:79:95:5D:64:D2:24:94:45:E3:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLHo4_K8VCn4xnmVXWTSJJRF42U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140C62/6482C370D42B11ED847A1938C4F9AE02/SLHo4_K8VCn4xnmVXWTSJJRF42U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c5:f6:53:86:f6:8b:6a:fa:fd:ce:02:d1:db:aa:e7:7d:d5:
         e7:65:1f:61:dd:74:d3:85:43:b1:fa:5a:91:f0:15:67:0d:62:
         74:95:99:b6:c3:31:21:4c:d6:fd:c9:13:4d:9f:64:ba:6c:3e:
         6a:47:88:87:67:76:c5:6b:35:86:77:dd:62:03:86:fb:ad:9c:
         b8:fb:dd:6e:69:37:50:29:59:d2:d5:81:0f:2c:fc:36:fd:31:
         d3:6d:8d:cb:d9:a5:b9:91:c1:ff:ef:4f:96:ab:2b:25:bc:b3:
         ff:e5:65:9c:e8:35:32:d7:b4:7d:d4:5d:02:64:45:a2:17:62:
         b3:c8:79:5c:d3:d2:f7:98:d2:f9:85:8c:4f:74:43:c5:bc:e8:
         9d:4a:cc:5f:bc:79:55:be:9b:63:5a:de:f1:c1:e8:13:e0:8b:
         8d:e1:a3:ca:52:00:98:45:f4:f0:01:54:f5:48:2c:bd:61:95:
         8b:bb:85:7d:77:f7:5f:90:9e:d0:41:d9:3a:ce:95:88:83:32:
         c7:7d:a8:aa:fe:33:b0:8d:89:f3:7e:dd:59:eb:5d:8f:f2:b8:
         d1:20:2a:57:34:0a:27:f0:d4:ec:f6:95:d8:3f:72:6b:c2:b4:
         1f:bc:de:c3:07:37:4a:24:8a:37:eb:04:04:f5:42:74:9a:9b:
         91:82:f0:8d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDBDNjIxMTAvBgNVBAUTKDQ4QjFFOEUzRjJCQzU0MjlGOEM2Nzk5NTVENjREMjI0
OTQ0NUUzNjUwHhcNMjUwNDI1MDI0ODE4WhcNMjUwNTAyMDI0ODE4WjAYMRYwFAYD
VQQDEw02ODBhZjdmMy04MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA21tK0KTfMjf2LgukrRikrVeD0FCObtPwo3yquo/j1NeYVcQgkT+3c59dGCvI
hHWmr6eHH6s8K8TkLGyE6NO3NxG9xLIN8DszILDKxqXZC0wmmVn7HzrZj6CrTd9X
Y69KlMIcROJvcY3N89wO0cd39xcM13jdvVvsm3ZIMTGtoEq87ihD0R990CSlOI/d
szYOAD7HM1Gf79WEFNaUU/P4gxbfLyb1M9Mt2BEK8pEl8/rrDCyGLJwUb2tLafr7
v9iSWihG/VyECW0d1b2KHi41TX/xsRG3Ryh6wRgB5IBGQnpWbkQ6LzHcGj8f39P7
aE83tpuZD5uJgpigcYjEvKBvUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFuHx6nf
jH1E4l8yVGKyrA4+BIrsMB8GA1UdIwQYMBaAFEix6OPyvFQp+MZ5lV1k0iSUReNl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEM2Mi82NDgyQzM3MEQ0
MkIxMUVEODQ3QTE5MzhDNEY5QUUwMi9TTEhvNF9LOFZDbjR4bm1WWFdUU0pKUkY0
MlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NMSG80X0s4VkNuNHhubVZYV1RTSkpSRjQyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MEM2Mi82NDgyQzM3MEQ0MkIxMUVEODQ3QTE5MzhDNEY5QUUwMi9TTEhvNF9LOFZD
bjR4bm1WWFdUU0pKUkY0MlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBdxfZThvaLavr9zgLR26rnfdXnZR9h3XTThUOx+lqR8BVnDWJ0lZm2
wzEhTNb9yRNNn2S6bD5qR4iHZ3bFazWGd91iA4b7rZy4+91uaTdQKVnS1YEPLPw2
/THTbY3L2aW5kcH/70+WqyslvLP/5WWc6DUy17R91F0CZEWiF2KzyHlc09L3mNL5
hYxPdEPFvOidSsxfvHlVvptjWt7xwegT4IuN4aPKUgCYRfTwAVT1SCy9YZWLu4V9
d/dfkJ7QQdk6zpWIgzLHfaiq/jOwjYnzft1Z612P8rjRICpXNAon8NTs9pXYP3Jr
wrQfvN7DBzdKJIo36wQE9UJ0mpuRgvCN
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:53:25 2025 by rpki-client