Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
File:                     SYklN9iywDJbe-CB_ZKGx5vqaoU.mft (raw, json)
Hash identifier:          9ZUawPaNdN7tpkZB/at7Vi3wc22d4HJrN8baF1CP54c=
Subject key identifier:   F5:46:36:38:90:91:D2:20:8E:5F:71:81:D1:F7:30:D3:77:CA:B8:F2
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       31D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
Manifest number:          30E2
Signing time:             Fri 25 Apr 2025 13:42:11 +0000
Manifest this update:     Fri 25 Apr 2025 13:42:11 +0000
Manifest next update:     Fri 02 May 2025 13:42:11 +0000
Files and hashes:         1: SYklN9iywDJbe-CB_ZKGx5vqaoU.crl (hash: c0IKolcfuSmUxHiachpFpXXVhXXrYp6iaVGXSCXVH/M=)
                          2: 4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (hash: qfmqTirp8Zad7k+qaey18cYG4f26i7cc95OJ7RN7ki0=)
                          3: 9C58363E8F2811ECA311FF19C4F9AE02.roa (hash: N5j7WOPf8R/W04K/g7J6exFJHjLoUKmGax2m8ylN8D4=)
                          4: B4D9927A014E11EB9E13483FC4F9AE02.roa (hash: QBgYyEawhn1JXFywm9CFNs+9U5jAgMIpTHNoQrJwCB0=)
                          5: B059C44831AB11ECAB908E42C4F9AE02.roa (hash: jpqfykEtXXmj6Mk5ax89hq50WV+obiHvLv4IGmQnups=)
                          6: 9CE444808F2811ECA311FF19C4F9AE02.roa (hash: s74RqywlkpPNZd/k54OkOPZY0zBYS0LcSwqRFyhZCaQ=)
                          7: 3E745A08803611ECB2187650C4F9AE02.roa (hash: cUFz8UfvDLExFmEMk60M+pc6mMkgOxhkE3VX2EzmxPo=)
                          8: FBD80F88F92111EAABA5882BC4F9AE02.roa (hash: egxIsRPVPwb7u+XM60U1FKVzWzmGVCY2CjPdVmSsIoo=)
                          9: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (hash: IzTsla0zxZKnGyuuEHhfVJkqXYrhwIme1eXrBSLQ8hE=)
                          10: 0E95C2D8F14211EAA4333775C4F9AE02.roa (hash: v7dpF7DEHY5W9PehrFLFcsUWT8Jk0m5IH4U++CpJtnc=)
                          11: BE430FFA699011EE96387F19C4F9AE02.roa (hash: xQ1dIyyEBpGErrvo04MIQpHGcqYJjtLBlN+w8G4Dch8=)
                          12: D26B4EE8070A11EB90C85C2BC4F9AE02.roa (hash: T2It2LjErftea3TIF7gsdKaDme/4oTA0DOzxS3/YKlg=)
                          13: 6A721236977E11EBB7908378C4F9AE02.roa (hash: 4iGJOzeOe32jX6RwP3qwklB/DkGUI9G1IaXHJLvho9Q=)
                          14: 3F6A8A20953911EF9AAE0D26C4F9AE02.roa (hash: ptr+6IoKfbuMLa2Wb6o/y2TkLt4X6htHzWyXaFYZeYE=)
                          15: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (hash: H0AaPyuEvO3VdNV9Lebtrz3gKClkKQyMQL7FYI1zL1o=)
                          16: D4002378F15211EAA1BAB944C4F9AE02.roa (hash: liXETAeyiiRJUr4HKvyxOrH1rZms2Fhza+VaF2FQeog=)
                          17: F311F68E01C311EB898F2D52C4F9AE02.roa (hash: VaB6pOWiJQ57BWYYsujqoAwA2X29FFnQlwvyPnBs8I8=)
                          18: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (hash: n6J3lFAaIJdatXxciP20VhkBJmk/cgEYdscJZnx5wj8=)
                          19: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (hash: uw4pwsuMVlOdst39HyvHTeiUfKLIfoUwRmRV8OdgqkI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 13:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12752 (0x31d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Apr 25 13:42:11 2025 GMT
            Not After : May  2 13:42:11 2025 GMT
        Subject: CN=680b9133-392c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:93:5c:06:b3:8c:0a:3b:33:1f:c6:b0:44:
                    26:c2:c9:72:6e:ff:4b:f3:cf:67:15:2f:b9:47:44:
                    38:1c:83:5e:34:90:08:0e:ec:83:06:ba:36:74:86:
                    cc:06:35:38:88:54:5f:c2:38:8e:7e:8e:19:03:8c:
                    7b:4c:e1:d3:22:c4:bb:7a:68:2b:8b:7e:4a:b6:b8:
                    71:c0:8e:45:44:cc:9e:20:da:26:09:b2:05:31:b9:
                    40:7a:9a:f8:f8:a1:ad:01:84:bc:8c:2f:61:ed:71:
                    9b:0d:f7:8f:a3:21:67:6d:ad:43:96:35:62:ac:b2:
                    bd:06:26:94:a7:40:98:7b:55:d6:64:17:1f:7a:fd:
                    7f:f2:cb:a0:a2:71:49:41:58:7f:a9:99:9a:1a:7e:
                    e3:90:22:b8:89:b6:7e:9c:36:8d:be:c1:53:72:2e:
                    87:dc:e6:69:d1:84:73:9f:14:af:22:ec:0e:07:b2:
                    74:91:64:b2:6a:79:b8:e7:a0:55:ce:0e:72:e8:6b:
                    7e:1d:6d:4e:35:69:fe:1a:fb:19:e3:7a:2d:40:74:
                    73:87:32:9a:4e:75:af:8b:d7:05:c8:72:bc:9b:65:
                    c5:0d:3a:12:4d:66:16:01:82:e5:f9:09:fe:37:8f:
                    09:bf:d4:2c:ba:09:46:2e:2d:25:8d:71:e6:be:9b:
                    fa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:46:36:38:90:91:D2:20:8E:5F:71:81:D1:F7:30:D3:77:CA:B8:F2
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f2:24:2f:84:27:51:88:d5:e6:e1:c0:51:0e:29:86:ef:78:
         84:a2:76:b8:f7:2b:70:df:c2:25:59:58:71:7e:14:07:47:5c:
         0b:60:60:22:54:29:39:b9:8f:50:10:b3:db:fe:2a:d2:6a:ac:
         bd:bb:6c:07:57:aa:c2:97:81:15:fe:60:d2:5a:e7:7a:20:9e:
         4f:01:63:a3:be:f3:21:c2:8c:ab:52:78:ee:4d:f5:7f:52:09:
         34:60:7f:28:75:1f:48:a7:4d:08:04:e5:a6:93:cc:dc:d1:ca:
         62:d6:52:09:c8:d0:6c:2f:e5:33:bc:d4:36:8f:40:6f:a5:96:
         65:62:26:35:cd:6e:43:cd:97:c9:97:95:d8:d1:91:20:48:61:
         f4:75:9c:1a:6b:3f:b2:fc:e7:49:b4:c6:82:1d:1f:8f:54:dc:
         69:ef:78:80:04:9e:da:63:2a:5e:1d:bf:ee:d4:f9:7a:0d:a1:
         89:6e:cf:c4:13:1a:e2:6b:eb:62:37:ff:04:18:0d:63:6e:20:
         ae:e8:d6:c4:f8:b8:1e:78:9f:65:0c:15:77:68:e1:6e:40:7d:
         3d:94:3e:27:08:29:4e:bf:d7:db:67:ea:37:ad:22:20:9d:56:
         6e:69:30:f7:82:3b:78:06:44:a7:b0:1d:d9:02:69:9a:be:60:
         ce:d4:bd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:39:49 2025 by rpki-client