Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
File:                     Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft (raw, json)
Hash identifier:          789zi9fmnf7GTfwh3mO64MSaWuo8MM9rOZyEEicxm/4=
Subject key identifier:   6A:2C:F6:75:30:A4:85:EC:39:2B:2B:78:A7:B7:82:77:8F:EE:7F:50
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Certificate issuer:       /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial:       D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
Manifest number:          CB
Signing time:             Fri 25 Apr 2025 04:46:42 +0000
Manifest this update:     Fri 25 Apr 2025 04:46:42 +0000
Manifest next update:     Fri 02 May 2025 04:46:42 +0000
Files and hashes:         1: Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl (hash: TkGzVvGVFkyQvYj3t4jCl71N+dkv8WIkSwYVAqjNPSU=)
                          2: 111B4450EBC211EEB58D4343C4F9AE02.roa (hash: PfS7sj8JuzbZWvFSduxB9myZEDnDdag+xb2aWz/6R/s=)
                          3: 8C73DD2414F711F088D0424FC4F9AE02.roa (hash: N79cTf02LFfn72p1E/Pdk3bdjiKVq2hrPT4kWU8lFBY=)
                          4: 1090CE74EBC211EEB58D4343C4F9AE02.roa (hash: pnsMEvt+kVRF1R9JPvM+r1kNzZ+Ues8Fgk9/ddl8t/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
                          rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 04:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146514, serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
        Validity
            Not Before: Apr 25 04:46:42 2025 GMT
            Not After : May  2 04:46:42 2025 GMT
        Subject: CN=680b13b2-cac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:73:ae:49:11:42:86:ae:d5:d7:f5:da:12:14:
                    c6:3a:27:56:ad:e4:3b:f0:83:c0:b8:40:d3:ad:4e:
                    7e:08:7b:aa:06:51:16:e8:05:ec:2f:2e:96:26:a1:
                    f0:a1:a3:be:32:24:65:c1:93:3a:f2:70:d7:d3:ce:
                    fc:c0:fb:56:a2:c8:84:a0:7f:ed:26:32:f9:8e:51:
                    63:78:d8:f7:56:d5:9c:80:5a:b0:a4:b6:96:50:6b:
                    0c:3c:89:e3:54:a8:42:72:90:bc:8e:eb:4f:c1:c3:
                    0d:9b:36:5c:d3:2c:fe:15:43:69:d8:e0:da:82:09:
                    ec:cd:05:52:f7:d3:05:23:9e:e5:0a:17:1d:00:9e:
                    c1:9e:ed:32:bd:34:90:2d:ad:83:02:fe:57:1a:1b:
                    13:cc:55:02:4b:31:68:6a:eb:2f:42:24:14:f8:ad:
                    55:29:8d:de:fe:99:82:e3:6c:60:25:e2:13:82:1b:
                    c2:ea:99:a3:8b:f7:47:01:32:6f:eb:56:a9:15:b2:
                    65:c8:f5:7f:d6:24:a8:90:64:5b:7d:d5:c3:b1:7a:
                    b2:eb:44:a8:2d:9a:b0:55:74:97:71:32:9d:4a:b0:
                    d0:99:0a:b6:f5:fa:35:5f:d0:81:1d:24:40:ef:8b:
                    3b:a0:de:c3:d2:f4:1b:1b:8c:2f:3f:d9:86:2b:52:
                    9d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2C:F6:75:30:A4:85:EC:39:2B:2B:78:A7:B7:82:77:8F:EE:7F:50
            X509v3 Authority Key Identifier:
                keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9f:94:93:21:42:92:6a:83:21:5b:7c:6e:2f:22:38:44:51:
         d7:50:f7:3c:ad:04:23:2d:78:d1:ce:f7:b2:7e:09:25:14:68:
         ca:c4:fd:97:2d:d2:3b:bb:5a:39:1c:a3:b3:8a:17:4d:97:1b:
         5f:10:b9:9d:fd:d0:9e:14:e3:cc:3a:49:30:ed:7a:dd:06:5b:
         86:3a:92:c0:65:26:7b:0a:fb:f7:76:8a:5f:a9:58:7c:2e:05:
         c1:81:9e:23:d8:c3:80:65:19:8f:86:bc:de:7a:55:92:ae:62:
         9a:b6:4a:7d:ec:65:12:11:4d:0a:a4:63:34:e3:1d:69:8f:dc:
         bb:10:f1:14:7d:de:36:0f:9d:d4:ce:1e:12:af:49:b5:cf:2f:
         37:7e:bf:28:67:3c:f7:4d:95:27:1e:a7:54:11:15:de:91:b1:
         9c:13:7e:6b:d8:51:41:e6:91:c2:01:fa:b1:b1:a4:29:f0:cb:
         93:43:96:59:1a:1c:4f:73:f0:2f:e1:0c:36:ac:97:15:98:3d:
         f1:58:76:46:3b:f6:f2:71:22:b4:7c:8e:87:3c:46:fe:9a:6b:
         14:8f:53:45:ca:e9:07:f0:4a:f9:80:4b:a7:23:cd:aa:03:f3:
         3a:8d:8b:8f:86:dd:8a:34:8d:47:5e:d5:1f:ad:b9:e5:eb:ae:
         c8:cd:f3:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICANAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDY1MTQxMTAvBgNVBAUTKDRBNEQ3RjU4RUZCRDQ4Qjg2MzZEQjZBMEJGN0MyREU1
MEYwNDM2MjEwHhcNMjUwNDI1MDQ0NjQyWhcNMjUwNTAyMDQ0NjQyWjAYMRYwFAYD
VQQDEw02ODBiMTNiMi1jYWMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0XOuSRFChq7V1/XaEhTGOidWreQ78IPAuEDTrU5+CHuqBlEW6AXsLy6WJqHw
oaO+MiRlwZM68nDX0878wPtWosiEoH/tJjL5jlFjeNj3VtWcgFqwpLaWUGsMPInj
VKhCcpC8jutPwcMNmzZc0yz+FUNp2ODaggnszQVS99MFI57lChcdAJ7Bnu0yvTSQ
La2DAv5XGhsTzFUCSzFoausvQiQU+K1VKY3e/pmC42xgJeITghvC6pmji/dHATJv
61apFbJlyPV/1iSokGRbfdXDsXqy60SoLZqwVXSXcTKdSrDQmQq29fo1X9CBHSRA
74s7oN7D0vQbG4wvP9mGK1KdWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGos9nUw
pIXsOSsreKe3gneP7n9QMB8GA1UdIwQYMBaAFEpNf1jvvUi4Y222oL98LeUPBDYh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjUxNC9CNzczQTE2NEVC
QzAxMUVFOUJCM0Y0M0ZDNEY5QUUwMi9TazFfV08tOVNMaGpiYmFndjN3dDVROEVO
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NrMV9XTy05U0xoamJiYWd2M3d0NVE4RU5pRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjUxNC9CNzczQTE2NEVCQzAxMUVFOUJCM0Y0M0ZDNEY5QUUwMi9TazFfV08tOVNM
aGpiYmFndjN3dDVROEVOaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCCn5STIUKSaoMhW3xuLyI4RFHXUPc8rQQjLXjRzveyfgklFGjKxP2X
LdI7u1o5HKOzihdNlxtfELmd/dCeFOPMOkkw7XrdBluGOpLAZSZ7Cvv3dopfqVh8
LgXBgZ4j2MOAZRmPhrzeelWSrmKatkp97GUSEU0KpGM04x1pj9y7EPEUfd42D53U
zh4Sr0m1zy83fr8oZzz3TZUnHqdUERXekbGcE35r2FFB5pHCAfqxsaQp8MuTQ5ZZ
GhxPc/Av4Qw2rJcVmD3xWHZGO/bycSK0fI6HPEb+mmsUj1NFyukH8Er5gEunI82q
A/M6jYuPht2KNI1HXtUfrbnl667IzfNV
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:08:04 2025 by rpki-client