Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
File:                     X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft (raw, json)
Hash identifier:          b7YCLoSrDanA09VQIbw1IStTT8nXMEgZQTyiyYn9eAo=
Subject key identifier:   56:30:57:6B:9F:40:F3:C4:1F:F0:5B:BF:E1:1D:75:02:C1:66:E8:9E
Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
Certificate issuer:       /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Certificate serial:       01F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
Manifest number:          01F0
Signing time:             Fri 13 Jun 2025 01:36:59 +0000
Manifest this update:     Fri 13 Jun 2025 01:36:58 +0000
Manifest next update:     Fri 20 Jun 2025 01:36:58 +0000
Files and hashes:         1: X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl (hash: q/JHSw55/IFs6CrztKn0m6aRngEiB+qG8OROtTJMCkE=)
                          2: 5637146C507611EDB59D9E2EC4F9AE02.roa (hash: EH2CgKpJsudgq4d5ghs/SJTUKeHCisdiJwkRQRkot80=)
                          3: D1FCB742514711ED92E3885EC4F9AE02.roa (hash: Js88dwnU0hyC4RLKD1NQ44jyQxJzu0X07dqPCT3Ukh0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
                          rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 01:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 502 (0x1f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156255, serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
        Validity
            Not Before: Jun 13 01:36:58 2025 GMT
            Not After : Jun 20 01:36:58 2025 GMT
        Subject: CN=684b80bb-3e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ee:c0:44:18:4e:b1:21:7a:e5:0e:ab:5a:59:
                    04:d0:00:44:91:f9:be:ad:c9:7f:be:de:d6:43:fb:
                    3d:7b:08:43:0a:eb:a9:75:ec:8c:ab:78:f7:df:c9:
                    5e:ef:3c:b8:0b:80:c5:01:0e:a9:fb:69:11:b3:d3:
                    91:e9:77:20:69:ff:1c:19:ad:41:76:1e:33:54:91:
                    17:59:96:92:84:e6:7a:ef:6c:d8:ce:41:30:f5:19:
                    68:66:aa:d0:4c:e4:47:d9:7c:1d:69:16:81:1d:59:
                    c1:49:66:d4:ab:fe:0c:b7:ba:93:4f:9b:68:41:21:
                    e3:dd:dd:09:bf:0b:df:70:04:83:43:4d:20:8b:99:
                    a2:29:01:bb:3c:4d:5a:66:c3:8b:83:51:4a:0c:6d:
                    44:41:9e:76:e0:6f:a2:01:a6:ac:03:c9:4a:8c:dc:
                    d7:a6:68:84:26:d1:2a:76:13:33:00:3e:0a:99:c2:
                    6b:81:64:19:30:5f:3a:36:f9:74:09:f2:e2:bc:03:
                    93:06:07:9f:9c:11:d7:9a:0a:4a:44:dd:c1:c8:5b:
                    f2:41:ac:25:6f:3e:e7:a9:b4:06:db:d7:ab:80:63:
                    1b:66:25:ee:8a:9b:e0:3c:1d:3c:b1:f3:e4:ef:52:
                    a1:4f:76:1d:ac:df:42:34:ba:b1:76:79:e7:a0:3c:
                    c7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:30:57:6B:9F:40:F3:C4:1F:F0:5B:BF:E1:1D:75:02:C1:66:E8:9E
            X509v3 Authority Key Identifier:
                keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:46:d0:7b:a7:ab:6b:0e:16:14:d6:96:a1:d8:06:95:dd:c9:
         a2:8c:42:ec:e8:4b:4d:2e:aa:87:5c:b9:fd:b0:75:a6:17:92:
         7b:7c:64:24:03:f5:a7:6d:8d:69:77:41:e1:de:9c:f5:d4:97:
         94:f3:32:3c:e3:51:8b:a7:99:7f:97:e5:b7:5b:9f:4d:c7:49:
         66:a6:e4:d3:d8:e4:b5:72:c4:6e:2c:a8:46:2d:af:71:f9:c4:
         8b:68:03:45:e6:52:ec:df:ad:43:52:3e:4b:f3:b9:5e:f2:0e:
         2b:42:cc:69:c2:c2:9e:01:31:bf:44:0e:a6:51:6f:ed:6d:ac:
         ef:70:a4:9a:75:a5:44:20:39:9f:c7:3d:7f:10:a9:52:13:4d:
         e8:6a:b9:25:c5:f2:79:48:71:04:44:aa:e4:24:fe:38:09:d8:
         9f:84:e0:3d:fb:1e:96:73:20:eb:45:c6:2b:f9:0d:51:e8:d1:
         15:cf:f9:c1:2e:62:c0:b7:e2:07:ff:eb:a2:86:eb:44:2d:c6:
         45:d8:12:9a:92:d8:5a:7e:ec:d4:58:a6:74:be:a2:00:05:08:
         3f:22:18:ce:60:68:0e:73:79:c1:5e:71:2e:8f:ea:89:b3:29:
         f3:1e:2c:36:a5:b7:3a:c2:1d:5d:b9:a3:6d:46:50:03:ef:ce:
         32:99:96:7a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTYyNTUxMTAvBgNVBAUTKDVGNkM4RkEzQTY1ODc0MDIzMUIyQzRCMTM0ODFCRTEx
NTAwQURDNzYwHhcNMjUwNjEzMDEzNjU4WhcNMjUwNjIwMDEzNjU4WjAYMRYwFAYD
VQQDEw02ODRiODBiYi0zZTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArO7ARBhOsSF65Q6rWlkE0ABEkfm+rcl/vt7WQ/s9ewhDCuupdeyMq3j338le
7zy4C4DFAQ6p+2kRs9OR6Xcgaf8cGa1Bdh4zVJEXWZaShOZ672zYzkEw9RloZqrQ
TORH2XwdaRaBHVnBSWbUq/4Mt7qTT5toQSHj3d0JvwvfcASDQ00gi5miKQG7PE1a
ZsOLg1FKDG1EQZ524G+iAaasA8lKjNzXpmiEJtEqdhMzAD4KmcJrgWQZMF86Nvl0
CfLivAOTBgefnBHXmgpKRN3ByFvyQawlbz7nqbQG29ergGMbZiXuipvgPB08sfPk
71KhT3YdrN9CNLqxdnnnoDzHdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFYwV2uf
QPPEH/Bbv+EddQLBZuieMB8GA1UdIwQYMBaAFF9sj6OmWHQCMbLEsTSBvhFQCtx2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjI1NS85MTYyMDg0QzUw
NzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRBSXhzc1N4TklHLUVWQUsz
SFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gyeVBvNlpZZEFJeHNzU3hOSUctRVZBSzNIWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjI1NS85MTYyMDg0QzUwNzMxMUVEOUI4QzE0MkRDNEY5QUUwMi9YMnlQbzZaWWRB
SXhzc1N4TklHLUVWQUszSFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCXRtB7p6trDhYU1pah2AaV3cmijELs6EtNLqqHXLn9sHWmF5J7fGQk
A/WnbY1pd0Hh3pz11JeU8zI841GLp5l/l+W3W59Nx0lmpuTT2OS1csRuLKhGLa9x
+cSLaANF5lLs361DUj5L87le8g4rQsxpwsKeATG/RA6mUW/tbazvcKSadaVEIDmf
xz1/EKlSE03oarklxfJ5SHEERKrkJP44CdifhOA9+x6WcyDrRcYr+Q1R6NEVz/nB
LmLAt+IH/+uihutELcZF2BKakthafuzUWKZ0vqIABQg/IhjOYGgOc3nBXnEuj+qJ
synzHiw2pbc6wh1duaNtRlAD784ymZZ6
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:34:43 2025 by rpki-client