Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
File:                     YV7YTETmV_cJXgISr-oFLFQqDZE.mft (raw, json)
Hash identifier:          FvV7Shoy2baL2VAP+LUFALJrK4V1B1uwzt6A0DSUOzA=
Subject key identifier:   16:C8:72:32:65:4B:6E:91:1B:10:36:B1:97:C7:79:01:69:DF:E6:07
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       199E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
Manifest number:          1911
Signing time:             Thu 24 Apr 2025 16:30:17 +0000
Manifest this update:     Thu 24 Apr 2025 16:30:17 +0000
Manifest next update:     Thu 01 May 2025 16:30:17 +0000
Files and hashes:         1: YV7YTETmV_cJXgISr-oFLFQqDZE.crl (hash: FWCxBsPdDulDiymMACgrCwBEdQwE/3dRTbSKFm2hfrg=)
                          2: 897785E099AA11EE9E218060C4F9AE02.roa (hash: Hbvrl5qt3755vAHPJTM1ht4CNvz+/1G82ZsixjxL3vU=)
                          3: 1071470CF41311EA9FD4EE0FC4F9AE02.roa (hash: nBufo1kIX8wiHW05HK56kjkzuY8kLzWX8hul7hd+tSI=)
                          4: DE542790058711F0928FB866C4F9AE02.roa (hash: oZxBVSj1Mv8VRpXOWfSpeRcfrv00LslYo58qNkYud80=)
                          5: 64F859DA812611EDA597255EC4F9AE02.roa (hash: rBeoIA3irlO1Deytx/F8atxZ8cpZ0/tW3IVa0ZmI0Ng=)
                          6: DEB0EB98F74011EE9C9F952CC4F9AE02.roa (hash: k+AAWBwdOcaG1er130l80X1HT3IwfL4MKpto67md1U4=)
                          7: A41A01F2812311ED9367FC43C4F9AE02.roa (hash: Ujge7k/lW8pB/Dx6DwlTSva6Rx5jbEwksa1MWF/rwvA=)
                          8: EC0E245CF74211EEA182A952C4F9AE02.roa (hash: 8BZnHd6aGsdJmphgS32PS3wAYQMMb45rh9EbaJkomOw=)
                          9: DF4A9778E56111EBB6ADAC1FC4F9AE02.roa (hash: m235rMsu+BzhfmXOYnBQggbCKWWyvZ/zw0hFkBbbwgI=)
                          10: 1B97493E7FFF11EF85F9E340C4F9AE02.roa (hash: AMtq6/+OGfNb8zZYL0wKHdGiK4TvIJSI20dtRQ6bo7c=)
                          11: FBC5FF822EE711EF96610B4EC4F9AE02.roa (hash: RTrVR5wL9yOQXY6b1OrprvdMWmvSxZvI7qM3sOKAsPc=)
                          12: CF2F506C8A0F11EA9DFF7F19C4F9AE02.roa (hash: U1zVQ5bqYpLe5FAQ5Vpdv4iV73y5ug6j2NtqdB0U6DA=)
                          13: DE11F1B4F74011EE9C9F952CC4F9AE02.roa (hash: iwLGgkob40yON+N3mwyjlp9Fh6761bLtwjZcibQClEM=)
                          14: 4524F69EF73211EE8BA96C65C4F9AE02.roa (hash: b/6uKuOBQOCAf1O3SZSHMcVD1+K7GM0OQRNX6RqtTnM=)
                          15: 596C54DCE83F11EE81772A87C4F9AE02.roa (hash: gkJptkaETgFISWJvcQGnHB0jn74oacHoYRhEpbDvdJY=)
                          16: AD1655A2DFEF11EB8486545FC4F9AE02.roa (hash: E1uTNeLdjmVHLcuJqLs/moW5iBQyqjH1xn1TM16vxig=)
                          17: BCA3B016F72811EE8C4CBB51C4F9AE02.roa (hash: vD8uFo9ZdrCHkm7kGVREsqduAN/X3LQWjfNNIMx3BBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 16:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6558 (0x199e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: Apr 24 16:30:17 2025 GMT
            Not After : May  1 16:30:17 2025 GMT
        Subject: CN=680a6719-6369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:55:a7:42:14:0d:20:89:84:37:72:1a:07:
                    17:a1:ce:e7:c2:9c:84:15:49:60:76:39:b4:af:5e:
                    cd:29:26:2a:25:4b:89:a6:9f:df:f8:42:25:27:e1:
                    a6:66:53:fa:ed:e6:14:0b:9c:b2:df:3e:82:82:64:
                    94:d4:2f:7c:95:c5:38:dc:a2:22:ae:be:86:be:1d:
                    5f:f4:4b:8f:e7:48:0a:14:29:5b:c2:d3:24:45:44:
                    2a:71:7f:d2:8b:f2:df:94:70:d7:c8:e5:0f:1e:6f:
                    7d:08:2e:26:58:ad:e9:68:00:47:63:a8:a5:e9:fc:
                    e1:fe:53:ec:f8:67:f6:db:a4:3f:ff:77:72:04:88:
                    b4:18:f3:c4:39:9a:49:db:ff:96:ef:eb:b5:81:02:
                    08:28:1f:01:e2:37:6f:c5:a3:36:97:b7:c4:97:22:
                    66:b8:0a:f8:12:70:5c:37:5c:1c:18:8e:41:d0:73:
                    b4:0a:b0:7c:bd:c6:44:ec:8f:5e:1f:7a:be:6c:5e:
                    d7:ed:5b:9d:52:6a:f0:c5:b3:f4:de:b1:53:b2:d5:
                    dd:28:64:b1:04:9e:5a:ae:86:b5:d8:f6:a1:d6:90:
                    7c:61:39:0f:ea:14:d2:0c:b3:a5:27:81:ae:6c:ee:
                    62:a2:55:3e:9e:84:d0:e6:0a:e8:1a:c6:ba:16:e0:
                    28:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C8:72:32:65:4B:6E:91:1B:10:36:B1:97:C7:79:01:69:DF:E6:07
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:8a:c6:f2:2e:5c:10:af:20:cf:41:f5:49:86:ae:46:d4:85:
         59:29:03:3a:d8:ca:b2:ed:b2:94:dd:73:b3:2b:5a:73:6e:fb:
         11:b0:ea:3c:fc:55:e0:d6:da:e2:3c:68:6d:9c:90:a6:cd:86:
         5e:28:f3:d0:3a:9c:3b:f0:15:af:af:5e:a1:4b:6a:7d:09:6a:
         75:36:f2:4e:a1:16:2d:ed:31:de:36:86:16:db:fe:c1:16:88:
         66:7b:bd:e9:b4:3d:30:02:09:89:be:2d:d2:6d:52:6b:8a:66:
         8f:8a:00:14:c2:26:1e:1b:49:3f:1c:9b:55:35:28:d4:24:db:
         49:e0:f8:61:31:d2:f4:f3:57:ac:61:ee:ab:80:87:6f:08:58:
         ec:34:8f:f0:bf:62:74:19:2a:a9:b5:ce:9f:5e:1f:35:37:fe:
         d7:98:33:37:af:72:91:86:f3:ee:c1:b2:1c:8b:20:a2:89:e7:
         42:74:e7:a8:08:3b:18:e6:d6:8f:39:a0:14:a3:36:05:86:3f:
         f9:a9:b7:6d:2c:d6:d3:ad:50:fd:1b:9e:6d:2f:7d:40:d5:fb:
         2b:20:22:f2:4d:8f:fc:b2:bf:17:97:3a:d3:43:45:84:76:0a:
         e1:53:1d:dc:f5:d1:4f:0e:f8:74:aa:66:ad:ae:61:dd:91:be:
         f6:3d:0f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:03:18 2025 by rpki-client