Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
File:                     8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft (raw, json)
Hash identifier:          i6Fq/p9FLsIFmFNJRZa57reTK15vmU6/7UfI4No50GE=
Subject key identifier:   4D:BC:C6:32:D7:BB:80:17:CC:18:AE:E5:18:68:7E:CF:A8:E6:26:02
Authority key identifier: F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3
Certificate issuer:       /CN=A915648D/serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
Manifest number:          018B
Signing time:             Sun 15 Jun 2025 02:46:52 +0000
Manifest this update:     Sun 15 Jun 2025 02:46:52 +0000
Manifest next update:     Sun 22 Jun 2025 02:46:51 +0000
Files and hashes:         1: 8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl (hash: xt9yV+kVYPYyvIt42/q73N6UyZ8Cr/gahBtplRXJlrs=)
                          2: C80572DEF70911ED9D4B561AC4F9AE02.roa (hash: f37dHVQCBKGAv6cZ++QH+hDhUU+kBGU4CSkotJ/zJb4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl
                          rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915648D, serialNumber=F17B5321A58D79E230531C5AA0F0B24E1D8121A3
        Validity
            Not Before: Jun 15 02:46:52 2025 GMT
            Not After : Jun 22 02:46:51 2025 GMT
        Subject: CN=684e341c-d14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:da:ca:a0:ef:87:c3:66:ad:f6:dd:ce:85:
                    12:57:ae:2e:92:ce:aa:88:22:8d:7d:2d:68:e6:e9:
                    fc:80:e3:46:b9:76:2a:f8:69:0e:48:a3:b1:22:4a:
                    76:3a:22:86:e6:ba:78:73:0b:08:b4:2c:aa:71:22:
                    11:e9:81:d3:87:cf:a5:92:b0:1c:cc:af:94:0f:e6:
                    7b:bd:98:86:09:4c:8a:5c:a1:5f:7d:fa:77:3b:ae:
                    b3:b0:01:ab:db:32:06:08:e5:01:06:fa:bf:88:a2:
                    4c:0e:04:bb:01:0f:78:c1:0c:cc:60:ba:23:f5:5b:
                    3c:41:a1:a2:ca:f5:3b:e2:50:d7:26:7d:11:09:40:
                    73:67:2a:4d:09:68:2a:af:76:10:60:11:21:7a:ec:
                    98:b2:72:3b:07:84:7f:f8:3e:1c:89:5f:49:ee:8b:
                    0e:75:32:be:dc:5d:02:21:56:c2:51:50:6c:24:29:
                    ae:a5:b1:3e:4a:8f:82:aa:cd:34:9e:2b:94:ce:75:
                    9a:86:40:b6:ae:1c:bb:d0:ff:f3:6a:29:d1:ba:b2:
                    1b:c3:df:85:8a:d7:eb:62:0c:18:de:67:f7:d7:b4:
                    3a:d7:99:f8:d7:c2:98:be:c2:ad:31:58:40:85:26:
                    aa:e3:b3:07:a0:9a:47:e6:01:07:a2:a3:c2:35:6a:
                    29:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BC:C6:32:D7:BB:80:17:CC:18:AE:E5:18:68:7E:CF:A8:E6:26:02
            X509v3 Authority Key Identifier:
                keyid:F1:7B:53:21:A5:8D:79:E2:30:53:1C:5A:A0:F0:B2:4E:1D:81:21:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XtTIaWNeeIwUxxaoPCyTh2BIaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915648D/C3EEE2A8EFE211EDA3C6C147C4F9AE02/8XtTIaWNeeIwUxxaoPCyTh2BIaM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:75:99:30:bd:2b:f4:c1:ac:c6:5f:b7:17:a4:3d:df:f6:a2:
         a3:be:06:2c:4f:79:d3:e9:9b:a0:0d:d3:e7:05:03:67:d1:49:
         c2:29:9f:9d:f3:85:92:ac:a3:54:f7:1f:06:8f:e3:7c:5f:1f:
         ca:f8:af:d2:d5:6a:53:18:25:40:66:6f:cd:9e:e0:b8:fe:db:
         7e:24:3c:20:d0:97:58:62:48:30:7d:2a:27:1b:39:3c:ca:2c:
         bb:45:6d:f4:82:51:54:a9:b5:f8:2c:42:a1:97:a4:44:55:13:
         ef:f2:7c:8b:96:12:06:df:63:e6:6b:b7:c8:5a:ad:ba:22:e0:
         fc:c7:2f:58:3a:b5:3b:98:c8:fb:8d:6c:84:e0:cf:0d:a1:ba:
         24:f2:a7:3d:05:ed:ce:ea:a9:6a:05:a4:98:e2:4c:13:dc:9d:
         dc:c7:ad:a4:96:57:30:d8:88:c2:bc:12:d8:f9:5c:05:25:3b:
         6c:2c:3b:b5:0f:0c:f5:9b:42:01:42:68:ae:c2:00:39:ad:53:
         0f:1b:71:2f:90:e2:d4:69:8b:aa:72:2e:d6:4a:dc:31:b1:fb:
         81:5f:1e:db:c0:3f:f7:e1:83:f4:2a:4a:3f:76:b6:6b:5c:9d:
         3e:54:05:bc:c9:4e:ad:73:b3:13:46:e9:cc:e9:0e:04:ab:50:
         b2:7a:aa:92
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY0OEQxMTAvBgNVBAUTKEYxN0I1MzIxQTU4RDc5RTIzMDUzMUM1QUEwRjBCMjRF
MUQ4MTIxQTMwHhcNMjUwNjE1MDI0NjUyWhcNMjUwNjIyMDI0NjUxWjAYMRYwFAYD
VQQDEw02ODRlMzQxYy1kMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvYLayqDvh8NmrfbdzoUSV64uks6qiCKNfS1o5un8gONGuXYq+GkOSKOxIkp2
OiKG5rp4cwsItCyqcSIR6YHTh8+lkrAczK+UD+Z7vZiGCUyKXKFfffp3O66zsAGr
2zIGCOUBBvq/iKJMDgS7AQ94wQzMYLoj9Vs8QaGiyvU74lDXJn0RCUBzZypNCWgq
r3YQYBEheuyYsnI7B4R/+D4ciV9J7osOdTK+3F0CIVbCUVBsJCmupbE+So+Cqs00
niuUznWahkC2rhy70P/zainRurIbw9+FitfrYgwY3mf317Q615n418KYvsKtMVhA
hSaq47MHoJpH5gEHoqPCNWopjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE28xjLX
u4AXzBiu5Rhofs+o5iYCMB8GA1UdIwQYMBaAFPF7UyGljXniMFMcWqDwsk4dgSGj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjQ4RC9DM0VFRTJBOEVG
RTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVlSXdVeHhhb1BDeVRoMkJJ
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhYdFRJYVdOZWVJd1V4eGFvUEN5VGgyQklhTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NjQ4RC9DM0VFRTJBOEVGRTIxMUVEQTNDNkMxNDdDNEY5QUUwMi84WHRUSWFXTmVl
SXdVeHhhb1BDeVRoMkJJYU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC/dZkwvSv0wazGX7cXpD3f9qKjvgYsT3nT6ZugDdPnBQNn0UnCKZ+d
84WSrKNU9x8Gj+N8Xx/K+K/S1WpTGCVAZm/NnuC4/tt+JDwg0JdYYkgwfSonGzk8
yiy7RW30glFUqbX4LEKhl6REVRPv8nyLlhIG32Pma7fIWq26IuD8xy9YOrU7mMj7
jWyE4M8Nobok8qc9Be3O6qlqBaSY4kwT3J3cx62kllcw2IjCvBLY+VwFJTtsLDu1
Dwz1m0IBQmiuwgA5rVMPG3EvkOLUaYuqci7WStwxsfuBXx7bwD/34YP0Kko/drZr
XJ0+VAW8yU6tc7MTRunM6Q4Eq1CyeqqS
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:32:01 2025 by rpki-client