Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
File:                     cHDFVlzC_kVsMWBAi25_toDAjBk.mft (raw, json)
Hash identifier:          3hnE1f+Ij5l/Id44IfFXml+/uJnVprhTDiafam5ZJ2s=
Subject key identifier:   ED:49:72:D1:13:FA:34:B5:FA:43:AA:DA:C4:19:4D:73:68:F4:FD:CD
Authority key identifier: 70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19
Certificate issuer:       /CN=A915B77C/serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
Certificate serial:       0A46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
Manifest number:          0A38
Signing time:             Thu 24 Apr 2025 19:39:50 +0000
Manifest this update:     Thu 24 Apr 2025 19:39:50 +0000
Manifest next update:     Thu 01 May 2025 19:39:50 +0000
Files and hashes:         1: cHDFVlzC_kVsMWBAi25_toDAjBk.crl (hash: ytSkwRwcXPr6bq7rFXtRVS989n3D7SGN+4JH+m1mG1U=)
                          2: 96ACE9CE8E8F11EE8915FE78C4F9AE02.roa (hash: n7QYB4PprN8wvve4EgxwwoZXCNSALgZd5+0ffViTkK8=)
                          3: 6EA165728E8F11EEA8A9EE68C4F9AE02.roa (hash: 1K81wmlQPoGdZP/JjsQxYakrjnCNuKpYHSBFoJQ/JT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl
                          rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 19:39:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2630 (0xa46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B77C, serialNumber=7070C5565CC2FE456C3160408B6E7FB680C08C19
        Validity
            Not Before: Apr 24 19:39:50 2025 GMT
            Not After : May  1 19:39:50 2025 GMT
        Subject: CN=680a9386-bd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3d:02:5b:f7:29:ed:40:bb:a1:31:55:5f:ea:
                    5d:ec:1a:e4:f2:f4:56:f4:1b:6a:f5:b9:94:cb:17:
                    f0:dc:67:f2:37:77:e5:f1:db:5a:90:98:db:6e:a9:
                    c8:66:37:17:43:7a:75:4e:ea:41:b5:11:7b:5d:dd:
                    a6:b2:a3:0c:20:9d:10:2a:ed:e9:90:90:57:5d:0d:
                    db:7f:aa:a5:80:20:f6:f6:b4:d8:ac:15:4a:e6:dd:
                    92:23:0b:72:b6:97:83:9f:18:82:58:64:a8:6c:b7:
                    fc:7d:bf:3f:61:2e:bf:01:56:4e:0d:c6:80:a6:0a:
                    a7:09:8d:9e:1f:32:d1:0f:ff:c6:75:26:d0:9b:75:
                    f3:12:e9:34:16:42:13:4b:b4:e5:4a:35:ff:58:3c:
                    0b:e1:ed:98:79:40:09:4d:ec:9e:66:47:f6:a3:47:
                    ae:c6:f1:32:e6:8f:e7:9f:47:db:52:0d:81:11:80:
                    ea:55:07:7d:5b:d4:69:58:17:91:9e:3b:ca:dd:16:
                    25:c9:3d:44:72:7f:e6:0f:57:1c:ef:be:20:0f:41:
                    1d:d4:0c:2c:ed:79:ce:79:a4:60:9f:b9:1e:88:58:
                    87:6b:c5:3b:6b:19:23:22:4b:3a:a0:6b:0c:ab:89:
                    b9:9b:56:53:62:7b:4e:fc:66:9c:4c:c3:a0:27:de:
                    7d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:49:72:D1:13:FA:34:B5:FA:43:AA:DA:C4:19:4D:73:68:F4:FD:CD
            X509v3 Authority Key Identifier:
                keyid:70:70:C5:56:5C:C2:FE:45:6C:31:60:40:8B:6E:7F:B6:80:C0:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cHDFVlzC_kVsMWBAi25_toDAjBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B77C/2814F77A69B511EABA601752C4F9AE02/cHDFVlzC_kVsMWBAi25_toDAjBk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:5a:48:aa:34:3f:87:7f:99:44:6b:8f:83:db:6f:a3:16:d2:
         67:fe:1f:c3:0b:2e:9d:2c:bf:e5:2c:9c:ec:cb:d7:be:a9:63:
         db:db:00:c6:e7:e7:41:fd:3d:bb:37:de:6c:08:bb:31:4e:0c:
         c6:4a:f2:22:a0:b5:53:25:7d:9d:59:05:e4:71:47:f1:c1:2b:
         5d:d0:0b:34:fc:44:5b:d3:dd:8e:17:0a:8e:a8:bb:56:96:23:
         af:61:7c:06:89:5b:60:eb:4f:4a:29:0b:22:5e:de:38:18:47:
         ce:5a:de:c9:52:31:ea:3e:6d:01:93:e4:e5:4f:46:2a:71:bf:
         bd:11:a4:ce:df:bb:dd:f7:3e:5a:5b:47:84:de:48:76:44:be:
         8c:9f:20:02:86:b7:87:a6:64:42:86:fc:7e:83:f1:62:9c:0c:
         39:66:f6:36:6a:a0:04:1d:bc:ec:7e:a4:88:cf:d0:a3:2c:2c:
         34:3f:85:96:74:90:b5:31:e9:fd:cb:84:92:04:93:d9:0f:87:
         22:08:a5:65:0e:97:ee:b4:66:72:5f:bb:12:d5:80:5d:7c:d5:
         0c:79:01:ab:75:8a:91:13:34:cd:9f:68:db:a3:58:b3:ed:dd:
         9f:0f:09:02:e3:a0:90:85:22:79:e1:07:0b:7c:ab:1b:ec:ab:
         fd:3c:eb:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUI3N0MxMTAvBgNVBAUTKDcwNzBDNTU2NUNDMkZFNDU2QzMxNjA0MDhCNkU3RkI2
ODBDMDhDMTkwHhcNMjUwNDI0MTkzOTUwWhcNMjUwNTAxMTkzOTUwWjAYMRYwFAYD
VQQDEw02ODBhOTM4Ni1iZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuD0CW/cp7UC7oTFVX+pd7Brk8vRW9Btq9bmUyxfw3GfyN3fl8dtakJjbbqnI
ZjcXQ3p1TupBtRF7Xd2msqMMIJ0QKu3pkJBXXQ3bf6qlgCD29rTYrBVK5t2SIwty
tpeDnxiCWGSobLf8fb8/YS6/AVZODcaApgqnCY2eHzLRD//GdSbQm3XzEuk0FkIT
S7TlSjX/WDwL4e2YeUAJTeyeZkf2o0euxvEy5o/nn0fbUg2BEYDqVQd9W9RpWBeR
njvK3RYlyT1Ecn/mD1cc774gD0Ed1Aws7XnOeaRgn7keiFiHa8U7axkjIks6oGsM
q4m5m1ZTYntO/GacTMOgJ959cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1JctET
+jS1+kOq2sQZTXNo9P3NMB8GA1UdIwQYMBaAFHBwxVZcwv5FbDFgQItuf7aAwIwZ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qjc3Qy8yODE0Rjc3QTY5
QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19rVnNNV0JBaTI1X3RvREFq
QmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NIREZWbHpDX2tWc01XQkFpMjVfdG9EQWpCay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Qjc3Qy8yODE0Rjc3QTY5QjUxMUVBQkE2MDE3NTJDNEY5QUUwMi9jSERGVmx6Q19r
VnNNV0JBaTI1X3RvREFqQmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAPWkiqND+Hf5lEa4+D22+jFtJn/h/DCy6dLL/lLJzsy9e+qWPb2wDG
5+dB/T27N95sCLsxTgzGSvIioLVTJX2dWQXkcUfxwStd0As0/ERb092OFwqOqLtW
liOvYXwGiVtg609KKQsiXt44GEfOWt7JUjHqPm0Bk+TlT0Yqcb+9EaTO37vd9z5a
W0eE3kh2RL6MnyAChreHpmRChvx+g/FinAw5ZvY2aqAEHbzsfqSIz9CjLCw0P4WW
dJC1Men9y4SSBJPZD4ciCKVlDpfutGZyX7sS1YBdfNUMeQGrdYqREzTNn2jbo1iz
7d2fDwkC46CQhSJ54QcLfKsb7Kv9POuq
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:42:15 2025 by rpki-client