Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
File:                     fWXr4UwwRuc-OYaVcwKibggfGvg.mft (raw, json)
Hash identifier:          9n4oGSuA2CcfmuH2YJqFkhD6VCRmeYFVXLE9RKPkWzQ=
Subject key identifier:   BA:7B:66:1E:68:EA:1B:78:59:D1:09:14:51:5A:05:5D:84:FC:B3:5B
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Certificate issuer:       /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial:       27F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
Manifest number:          265B
Signing time:             Thu 24 Apr 2025 15:46:18 +0000
Manifest this update:     Thu 24 Apr 2025 15:46:18 +0000
Manifest next update:     Thu 01 May 2025 15:46:18 +0000
Files and hashes:         1: fWXr4UwwRuc-OYaVcwKibggfGvg.crl (hash: fMIFuw2cfwdxgfdZAmgiyxJNb3KtQ0DkCGocfYKSpc8=)
                          2: 089CB7F8E41C11E9AD4A8D16C4F9AE02.roa (hash: 29tTWrcXNIXarXuZvNVQ2lWN0oiWxIDYX0nWpSBxxvA=)
                          3: 4F8D63203EBF11EBA940A946C4F9AE02.roa (hash: UOlGjt1EBTM4dZ+zMnQ0s2ZFd7ZRaVoov4/4QI6ZZMw=)
                          4: E4E0C13C5EBF11EAB066F050C4F9AE02.roa (hash: bieKTo0wXKRNmPrQ3uCx3cCv+zy2+axSWTwdJZo+d9g=)
                          5: E5AA11C2974A11EFAE16EC38C4F9AE02.roa (hash: 67cynDrHjcrNqy/qzpnHKK3xdYQ/vQM5T0XMdvRvbBg=)
                          6: EC5BF06C8A3411EFBF173E5BC4F9AE02.roa (hash: i+JBJIzZJZAPpJglPpaCoZ4ou09zbYt49Tml7mgvv98=)
                          7: 2022CF028A2511EF8F560567C4F9AE02.roa (hash: T0J2x0CLnqVBm86mCmigMCvBdIWLovO2GuWibQBPkbU=)
                          8: E44FF288EE9811EF88F8B953C4F9AE02.roa (hash: uvjqzFfvCaF1lMuz8olgl++M16XP0jWHHM+hJ/1+RAk=)
                          9: 3F2B28B4D94411E98E28CD85C4F9AE02.roa (hash: UEXW7VTSccyYirRwQQmBzMgPHPSp1DErb08XvAAJztE=)
                          10: 7196A634B0F311E5AB30F151C4F9AE02.roa (hash: Kbpia/qupnA06FurrFYKFEEf+UuqsP/Ed+y/KIGt6qY=)
                          11: 68356576B0F311E5AB30F151C4F9AE02.roa (hash: /WRBpD0V7/kqLnLcmvhw5evAsBewQiteejiqIEiIgmw=)
                          12: 3D7A10E8D94411E98E28CD85C4F9AE02.roa (hash: x4jM5fVgOmC4FS689RT9WM4PR/RwO+npBSeWjRd1A54=)
                          13: 73464EBCB0F311E5AB30F151C4F9AE02.roa (hash: p5g9Ypyi2kqJbL5K7LCTKeKKp7kRMNXxYaUoESOeyKs=)
                          14: BDA4E3289A8311EF8E25CE76C4F9AE02.roa (hash: TH+vqrwCQ9KoOaVfcWJ+4vlDb0DuxgpdOkK2xIv0ob8=)
                          15: 3E054AE6D94411E98E28CD85C4F9AE02.roa (hash: O46yRWtaBt7gT5jw3rWvmde7FWI34FL8+oUWRCBV8ck=)
                          16: 40397ED6D94411E98E28CD85C4F9AE02.roa (hash: jEXHU40Vv1jkLWNwJgGy8tOTwQKDLakMV2TXsNim/vI=)
                          17: 3C670256D94411E98E28CD85C4F9AE02.roa (hash: TWvt97QJNblBs1b65wdl3fIK9/JihUPSIHDyYTz6ibM=)
                          18: 69CB6C488A3111EF85E56411C4F9AE02.roa (hash: RrQUwCJzT2EZ+f5R+zSU4Z2FKFB6tYF+gr6XKMCqEE8=)
                          19: 40E8489ED94411E98E28CD85C4F9AE02.roa (hash: j23duFjEJU2EfKkc6elfR4f7ejjBfoNJUJB2A0cAoRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
                          rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10224 (0x27f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
        Validity
            Not Before: Apr 24 15:46:18 2025 GMT
            Not After : May  1 15:46:18 2025 GMT
        Subject: CN=680a5cca-0359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:b1:56:00:00:9d:95:8b:83:07:a4:22:71:
                    1d:f8:93:02:96:f6:4b:71:e4:2b:19:b2:f3:de:67:
                    b0:a2:15:96:72:2a:fd:36:17:02:bc:7b:64:28:c8:
                    e1:c2:ca:40:e0:f7:8b:1b:74:c0:ec:67:69:1a:cd:
                    67:e9:eb:77:61:7e:b4:a6:03:32:4a:71:d2:c0:e1:
                    ef:63:89:5f:cb:f1:66:ab:cb:85:27:d3:29:5e:e3:
                    c3:01:99:65:2a:b9:42:df:d4:4a:00:ec:27:80:33:
                    87:2a:df:3d:de:d9:c4:f3:ad:d0:69:ff:3f:8a:12:
                    99:4a:60:c7:8a:64:b9:e1:c4:81:2c:98:6d:a7:fa:
                    a2:68:b2:58:69:0f:76:87:3e:35:f7:29:27:84:6f:
                    45:a0:a3:56:f0:7f:fa:8d:76:7f:78:89:0c:37:1e:
                    c2:5c:08:8e:ee:77:50:96:46:78:06:4b:eb:d5:f4:
                    d4:f6:9f:a7:b0:cc:ee:77:7e:c8:4f:0c:6c:f2:3f:
                    ac:bc:82:d3:2c:27:f7:a5:46:e6:a1:e3:11:46:d3:
                    90:f9:80:72:1c:90:87:9c:35:a6:83:1d:5d:a4:11:
                    cc:d3:42:dd:b2:1e:6e:ae:2a:00:b2:8f:e8:16:b9:
                    1e:f8:4c:4c:d4:70:52:09:fa:12:eb:00:72:5e:bd:
                    36:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7B:66:1E:68:EA:1B:78:59:D1:09:14:51:5A:05:5D:84:FC:B3:5B
            X509v3 Authority Key Identifier:
                keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:15:25:59:dc:d3:93:48:04:ea:2b:ea:97:46:2b:51:d0:af:
         d2:32:3e:73:21:20:76:36:c1:49:b4:e6:a8:6f:5f:07:4e:cd:
         45:85:c5:2a:a3:df:e9:e8:3f:c7:37:dc:4e:ad:c4:bd:d1:49:
         78:a6:eb:fb:b9:42:34:f7:c5:54:9b:ec:25:54:51:7d:97:6b:
         b6:9f:e1:ec:a2:72:34:52:32:68:e5:f5:31:31:66:99:f0:e8:
         6b:8d:ec:2d:2d:19:a3:85:63:7d:3f:70:6a:a4:13:b8:ee:c5:
         da:de:bf:f2:c2:03:92:50:aa:43:83:1c:08:86:80:72:cb:1d:
         64:c9:5c:fe:01:e0:3a:b5:bd:b0:05:e7:9a:78:e5:47:d2:b9:
         48:0c:d0:7c:d7:3e:2d:ea:fe:b5:0c:bb:85:7f:df:5f:a4:a2:
         6b:f5:d2:ff:33:6b:f3:ee:c1:31:35:8a:12:ab:3b:d0:1f:c6:
         8a:6e:a3:e0:86:6d:5a:bc:59:7a:af:1a:87:3f:b4:d9:a8:bb:
         2a:fb:69:19:3c:d3:8a:4b:5e:8a:64:f5:15:45:f9:53:70:25:
         0c:74:57:98:74:85:23:3b:67:2c:be:0a:58:7c:a7:67:83:50:
         5e:a1:55:8f:5a:57:23:96:d6:b0:c0:9e:de:e1:fa:68:42:61:
         e9:a2:46:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:23:34 2025 by rpki-client