Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
File:                     4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json)
Hash identifier:          Bm3oHxZ1v2lrEdWo0RO1flMP1yeA/zJAll9HdC/H4JE=
Subject key identifier:   F2:A8:57:E0:D0:8C:B5:B6:EA:96:86:12:B5:E0:5F:41:59:66:F1:7A
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Certificate issuer:       /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial:       0273
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
Manifest number:          0269
Signing time:             Fri 13 Jun 2025 01:16:18 +0000
Manifest this update:     Fri 13 Jun 2025 01:16:17 +0000
Manifest next update:     Fri 20 Jun 2025 01:16:17 +0000
Files and hashes:         1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: pjYAgGmLM9tddVlA0ueFGTIRqpHw2KKVVhGv6dXXXWw=)
                          2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: axhlzcql8Um5s2iVqGj/BuPhDZVy8siOPCHeHdpqbOU=)
                          3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: ldX/DKDOg9xZhESj3T5OZ1Y87w44jU1f3a2RytTmEgo=)
                          4: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: RgIHOi6o2CyuImHKbYCkxFcAJ9v5chcNqvLkjQHCgqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
                          rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 01:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
        Validity
            Not Before: Jun 13 01:16:17 2025 GMT
            Not After : Jun 20 01:16:17 2025 GMT
        Subject: CN=684b7be2-3246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:38:c9:a4:74:0e:14:6b:50:71:f3:85:25:69:
                    00:51:6c:9d:b8:5b:db:c9:7d:d9:a7:33:94:21:41:
                    cb:c5:60:4b:be:a8:ba:a7:71:fa:e0:1c:c7:30:12:
                    27:30:a5:26:32:8a:0a:ac:cf:d4:b2:b5:f1:8e:7e:
                    74:e2:30:35:1d:91:be:7b:76:44:b1:dd:ea:20:39:
                    cc:49:c3:3e:fc:cb:24:d8:44:63:f2:5a:c4:f5:4b:
                    a2:a0:52:77:97:0c:49:ed:ac:ef:7b:f3:b0:82:f5:
                    c3:d9:00:c7:1f:00:dd:e6:21:d4:d4:cd:9d:8f:5a:
                    26:e0:67:68:b7:62:cc:ff:b4:23:05:a2:57:57:8f:
                    9e:a7:03:77:b1:88:51:20:03:b2:73:8a:b1:00:a7:
                    82:ff:05:6c:09:2c:05:00:5f:e2:a0:ca:e7:83:1c:
                    c1:06:37:9c:8d:28:19:f2:a2:fb:8f:9c:b9:c7:9f:
                    ed:2e:cb:73:8b:99:5b:2a:81:37:d2:59:d6:ff:8e:
                    97:a8:8f:4f:7f:4c:45:84:93:c7:bf:30:0d:07:45:
                    b4:fd:c0:05:5e:2c:15:31:f3:95:de:ad:52:ec:c4:
                    ad:8e:1b:d3:88:32:5b:e6:80:b5:d4:97:c3:d5:35:
                    08:c2:0b:44:d9:36:b1:ef:81:a2:d3:ab:95:97:49:
                    b4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A8:57:E0:D0:8C:B5:B6:EA:96:86:12:B5:E0:5F:41:59:66:F1:7A
            X509v3 Authority Key Identifier:
                keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:8c:aa:02:8b:59:5e:ac:6f:b0:9c:ee:0e:c1:55:ef:d1:c1:
         6c:04:c8:65:1d:2a:06:4e:15:60:f4:16:1d:6f:a2:bb:07:81:
         1f:a4:cb:50:82:9b:e9:69:70:13:3b:ca:5a:91:d3:74:7b:23:
         bd:44:98:42:8d:3a:ef:bc:b3:55:3f:12:64:c8:22:30:2a:8c:
         32:6f:6f:d3:5d:b8:7c:5b:2e:72:4b:76:53:0f:d8:10:7f:16:
         57:b0:0e:04:a0:2c:aa:1d:ee:cf:25:19:06:25:d2:db:20:44:
         28:23:47:2a:11:64:28:43:7d:f1:dd:c7:54:34:66:e6:10:17:
         ab:67:76:d1:5a:b8:b4:14:cd:af:45:cf:00:52:df:e1:1a:0a:
         c7:d1:1d:86:72:e0:a3:49:28:68:ce:6d:b2:24:16:ba:04:fc:
         54:a5:8b:90:c9:7b:93:0d:b3:da:01:cb:bb:88:b3:aa:2a:78:
         d3:56:e7:76:8f:87:a0:45:da:d3:c3:65:d4:2d:97:e2:a7:30:
         c6:d7:e0:2b:b2:20:eb:1c:c3:c8:f1:b3:1f:c7:07:90:2b:5d:
         8b:0f:e2:b7:96:81:fc:0f:4d:38:46:95:98:f1:0d:bf:4d:42:
         a8:29:0b:bc:33:7b:f4:b1:e3:c4:fd:9d:60:3c:12:6d:54:d9:
         3d:75:c5:03
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz
Rjg2MDI5QTIwHhcNMjUwNjEzMDExNjE3WhcNMjUwNjIwMDExNjE3WjAYMRYwFAYD
VQQDEw02ODRiN2JlMi0zMjQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8TjJpHQOFGtQcfOFJWkAUWyduFvbyX3ZpzOUIUHLxWBLvqi6p3H64BzHMBIn
MKUmMooKrM/UsrXxjn504jA1HZG+e3ZEsd3qIDnMScM+/Msk2ERj8lrE9UuioFJ3
lwxJ7azve/OwgvXD2QDHHwDd5iHU1M2dj1om4Gdot2LM/7QjBaJXV4+epwN3sYhR
IAOyc4qxAKeC/wVsCSwFAF/ioMrngxzBBjecjSgZ8qL7j5y5x5/tLstzi5lbKoE3
0lnW/46XqI9Pf0xFhJPHvzANB0W0/cAFXiwVMfOV3q1S7MStjhvTiDJb5oC11JfD
1TUIwgtE2Tax74Gi06uVl0m0QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPKoV+DQ
jLW26paGErXgX0FZZvF6MB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2
QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL
YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Njc0MC8zNTI4QjBDQzE2QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9H
ZE1hVW5zTzRvTGNfaGdLYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYjKoCi1lerG+wnO4OwVXv0cFsBMhlHSoGThVg9BYdb6K7B4EfpMtQ
gpvpaXATO8pakdN0eyO9RJhCjTrvvLNVPxJkyCIwKowyb2/TXbh8Wy5yS3ZTD9gQ
fxZXsA4EoCyqHe7PJRkGJdLbIEQoI0cqEWQoQ33x3cdUNGbmEBerZ3bRWri0FM2v
Rc8AUt/hGgrH0R2GcuCjSShozm2yJBa6BPxUpYuQyXuTDbPaAcu7iLOqKnjTVud2
j4egRdrTw2XULZfipzDG1+ArsiDrHMPI8bMfxweQK12LD+K3loH8D004RpWY8Q2/
TUKoKQu8M3v0sePE/Z1gPBJtVNk9dcUD
-----END CERTIFICATE-----
Generated at Sat Jun 14 18:02:35 2025 by rpki-client