Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
File:                     KM0J5lDCaex9K8n-99VmwQEtIEw.mft (raw, json)
Hash identifier:          4LAUay27KdnPanNzdAznvSfoVglGNIL4kOqayVVWyvA=
Subject key identifier:   0C:E3:F7:28:87:92:5E:B1:9E:76:6D:D7:88:E1:9E:21:6C:08:C5:84
Authority key identifier: 28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C
Certificate issuer:       /CN=A916AC73/serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
Manifest number:          1E
Signing time:             Fri 13 Jun 2025 06:51:25 +0000
Manifest this update:     Fri 13 Jun 2025 06:51:25 +0000
Manifest next update:     Fri 20 Jun 2025 06:51:25 +0000
Files and hashes:         1: KM0J5lDCaex9K8n-99VmwQEtIEw.crl (hash: DPJit8SGJ18K5vjJC76FyFf/mh7WzKbON1SQ9fvKfl4=)
                          2: FAA72960259911F0953E0023C4F9AE02.roa (hash: e7nzxpCTQBDCIg5PEDtZeqSUVMOKuiFn7Ttj5SwjEWA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl
                          rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 06:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916AC73, serialNumber=28CD09E650C269EC7D2BC9FEF7D566C1012D204C
        Validity
            Not Before: Jun 13 06:51:25 2025 GMT
            Not After : Jun 20 06:51:25 2025 GMT
        Subject: CN=684bca6d-3639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:df:06:af:9e:30:92:52:4b:d0:e2:ce:a7:62:
                    ab:ed:7c:e2:3c:7f:c5:b9:6e:d0:6f:8e:18:76:74:
                    9e:d4:bd:b3:5a:ed:71:da:9d:86:c8:28:74:64:cb:
                    42:77:ec:c4:1f:0e:54:c3:f6:69:9a:af:62:b4:eb:
                    c6:24:cc:89:e2:6b:ff:ac:2b:71:42:59:86:b0:79:
                    29:4d:4a:3f:35:15:aa:9b:d5:6c:8c:b2:32:b1:5e:
                    2f:9a:66:1d:b9:66:31:9f:a6:dd:9a:3d:8d:4f:28:
                    b1:f2:66:66:a2:82:df:62:e8:04:d8:51:ed:3b:c3:
                    b5:0f:78:39:ec:78:ca:3b:96:c9:0f:38:db:8c:01:
                    71:9c:4a:5d:88:6c:f7:57:39:1f:70:8c:1f:c1:6b:
                    9e:a6:6c:73:46:56:2a:bf:ea:30:0d:4c:03:66:d6:
                    ac:89:94:92:d0:18:37:96:f6:f8:76:58:28:56:96:
                    27:b0:bc:bc:5e:2e:99:05:9f:73:87:2f:1d:e6:80:
                    c3:5e:62:2a:07:27:c0:a1:fb:95:f8:61:db:67:64:
                    65:c0:46:f7:95:dc:0c:fe:fb:77:0f:11:e2:34:78:
                    b8:e7:1a:38:b3:b2:44:50:38:6e:3b:98:49:dc:a2:
                    88:d4:fb:d2:13:a3:80:1c:58:7a:50:0a:4b:86:e4:
                    e9:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E3:F7:28:87:92:5E:B1:9E:76:6D:D7:88:E1:9E:21:6C:08:C5:84
            X509v3 Authority Key Identifier:
                keyid:28:CD:09:E6:50:C2:69:EC:7D:2B:C9:FE:F7:D5:66:C1:01:2D:20:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KM0J5lDCaex9K8n-99VmwQEtIEw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916AC73/77512DC2251711F0B07F861DC4F9AE02/KM0J5lDCaex9K8n-99VmwQEtIEw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:79:5c:b7:93:2e:ab:76:5f:2f:2f:bf:94:53:d4:85:32:4a:
         c4:58:3f:a4:e2:25:ad:80:4b:c1:d9:a8:58:d9:98:f1:f9:a2:
         46:4b:15:2a:a3:bd:9f:3a:0a:51:55:cb:3e:00:5f:64:f2:39:
         67:29:0e:aa:0c:0e:c1:56:8a:e6:d0:77:16:84:ce:d0:c9:a6:
         f8:80:1b:aa:1f:07:36:9d:d0:83:a7:10:3c:ae:de:97:0a:63:
         fb:f2:3d:49:10:ea:a1:52:09:41:5a:58:cc:4a:28:b0:70:70:
         b3:fe:21:1e:a5:ff:c8:f2:6a:b4:ce:f5:44:61:ed:0d:7b:bb:
         a4:f4:dc:00:87:37:ab:7c:8e:9f:1c:1b:dd:1c:3d:1f:d0:a1:
         ec:31:0b:71:28:1c:71:0d:00:00:b4:90:6f:e4:b7:85:5c:76:
         a0:82:b8:39:9a:0b:cf:27:80:45:77:63:7b:38:82:28:74:d0:
         f3:64:34:6c:06:45:e4:71:0e:b7:9e:85:bb:3b:a8:af:6a:52:
         41:4e:3e:ad:3b:d2:f6:0f:b4:67:86:70:79:1d:49:8b:67:9a:
         39:77:e1:9b:b7:56:40:c4:38:3b:69:db:df:20:a4:48:27:c5:
         aa:d3:75:93:6a:a1:65:65:dd:f8:16:c3:0e:b6:09:af:fc:bc:
         85:0d:8e:2b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
QUM3MzExMC8GA1UEBRMoMjhDRDA5RTY1MEMyNjlFQzdEMkJDOUZFRjdENTY2QzEw
MTJEMjA0QzAeFw0yNTA2MTMwNjUxMjVaFw0yNTA2MjAwNjUxMjVaMBgxFjAUBgNV
BAMTDTY4NGJjYTZkLTM2MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDZ3wavnjCSUkvQ4s6nYqvtfOI8f8W5btBvjhh2dJ7UvbNa7XHanYbIKHRky0J3
7MQfDlTD9mmar2K068YkzInia/+sK3FCWYaweSlNSj81Faqb1WyMsjKxXi+aZh25
ZjGfpt2aPY1PKLHyZmaigt9i6ATYUe07w7UPeDnseMo7lskPONuMAXGcSl2IbPdX
OR9wjB/Ba56mbHNGViq/6jANTANm1qyJlJLQGDeW9vh2WChWliewvLxeLpkFn3OH
Lx3mgMNeYioHJ8Ch+5X4YdtnZGXARveV3Az++3cPEeI0eLjnGjizskRQOG47mEnc
oojU+9ITo4AcWHpQCkuG5OnVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDOP3KIeS
XrGedm3XiOGeIWwIxYQwHwYDVR0jBBgwFoAUKM0J5lDCaex9K8n+99VmwQEtIEww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBQzczLzc3NTEyREMyMjUx
NzExRjBCMDdGODYxREM0RjlBRTAyL0tNMEo1bERDYWV4OUs4bi05OVZtd1FFdElF
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvS00wSjVsRENhZXg5SzhuLTk5Vm13UUV0SUV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB
QzczLzc3NTEyREMyMjUxNzExRjBCMDdGODYxREM0RjlBRTAyL0tNMEo1bERDYWV4
OUs4bi05OVZtd1FFdElFdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBACV5XLeTLqt2Xy8vv5RT1IUySsRYP6TiJa2AS8HZqFjZmPH5okZLFSqj
vZ86ClFVyz4AX2TyOWcpDqoMDsFWiubQdxaEztDJpviAG6ofBzad0IOnEDyu3pcK
Y/vyPUkQ6qFSCUFaWMxKKLBwcLP+IR6l/8jyarTO9URh7Q17u6T03ACHN6t8jp8c
G90cPR/QoewxC3EoHHENAAC0kG/kt4VcdqCCuDmaC88ngEV3Y3s4gih00PNkNGwG
ReRxDreehbs7qK9qUkFOPq070vYPtGeGcHkdSYtnmjl34Zu3VkDEODtp298gpEgn
xarTdZNqoWVl3fgWww62Ca/8vIUNjis=
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:36:39 2025 by rpki-client