Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
File:                     xQRWVXeumfYZHJeDPdvdYk7CTpI.mft (raw, json)
Hash identifier:          wy3dG32aYk1YUmbcpxlkhBnpeAjStV5uTt4coS+uUBM=
Subject key identifier:   58:5E:19:4F:EE:A0:EE:FB:4D:FD:58:4D:EE:25:F0:7E:33:10:7F:BC
Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Certificate issuer:       /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Certificate serial:       074B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
Manifest number:          0724
Signing time:             Wed 18 Jun 2025 21:41:55 +0000
Manifest this update:     Wed 18 Jun 2025 21:41:54 +0000
Manifest next update:     Wed 25 Jun 2025 21:41:54 +0000
Files and hashes:         1: xQRWVXeumfYZHJeDPdvdYk7CTpI.crl (hash: KWnizi4xqk25Kd9YThmfQjM5dRN8AMWg1xaJnDRewWk=)
                          2: A2272F186E1D11EEB6A10A0CC4F9AE02.roa (hash: qHbtyOGNfvy85AlmzO8CEnT5fTz9AwvvFi0y6XbFwG0=)
                          3: B38547D6EDB611EEB49CEE2CC4F9AE02.roa (hash: SFXCFjWV3nIjHDr4Y0nX1h+ByORJe0z+8s0nBYc0bds=)
                          4: 8342D87641AC11ECACD65E18C4F9AE02.roa (hash: ZsYDlTfdZ4GWQgL9mV+7VPUB+1RhWLSObaxg0y98Kxs=)
                          5: 19D427BA6AFD11EEA4AF1A0FC4F9AE02.roa (hash: aIhdOoGq/5IV6Mhns4F3omRFw08MxMY0t1LOWZhYXz8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
                          rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 21:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1867 (0x74b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D128, serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
        Validity
            Not Before: Jun 18 21:41:54 2025 GMT
            Not After : Jun 25 21:41:54 2025 GMT
        Subject: CN=685332a2-f73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e5:14:7b:bc:95:0b:58:a7:15:a7:f9:0b:c5:
                    d9:b8:7e:e2:72:e9:0e:91:af:ac:27:4f:01:a9:6f:
                    35:2b:4b:70:93:c7:41:67:5b:a5:9d:7d:1d:9c:41:
                    de:00:9e:92:0c:15:17:b1:96:bf:39:1f:d7:8e:a5:
                    ec:d9:5f:71:48:9f:0d:3f:0a:55:56:5c:5e:24:12:
                    d0:0f:d6:f7:bc:84:63:ac:2d:cd:7f:a7:63:6a:83:
                    0f:f6:e2:de:57:0e:cd:b5:a7:71:c0:d2:52:84:39:
                    f1:9c:ee:59:22:1a:a2:6b:cf:65:6c:b7:8a:f8:9b:
                    21:27:94:1c:1c:f3:5e:33:08:e5:ed:8f:35:b3:76:
                    f3:d9:4d:31:b8:6b:e6:47:cc:ec:80:5a:c1:45:80:
                    8e:db:49:a6:93:89:e1:83:12:bd:47:a5:00:2e:29:
                    bf:0e:81:13:4e:d1:d2:3e:22:a1:33:23:43:f8:94:
                    c3:25:d2:29:32:99:34:da:f7:19:1a:ac:38:5c:9b:
                    63:a7:b6:4a:69:20:85:63:ae:6b:9b:35:16:6f:ad:
                    a7:f9:1e:d5:5e:cc:44:f6:de:fc:0e:9e:f7:08:ef:
                    ad:16:d8:9e:58:25:47:db:7f:4b:f3:23:0b:c3:34:
                    9b:1f:ec:af:d5:af:a2:60:7f:ee:63:8d:f3:72:46:
                    ef:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:5E:19:4F:EE:A0:EE:FB:4D:FD:58:4D:EE:25:F0:7E:33:10:7F:BC
            X509v3 Authority Key Identifier:
                keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b7:83:49:09:da:45:5a:22:ac:d7:ce:d3:53:aa:95:c7:b3:
         c9:84:e4:92:0c:4e:56:71:7c:de:2e:d4:8a:70:89:ae:74:e0:
         ac:85:2b:f7:02:b4:69:a8:68:ff:71:5a:e1:8f:e3:c1:0a:53:
         49:42:a2:4a:00:9e:64:7f:af:16:32:bb:ec:cc:f3:b6:3f:50:
         0f:e1:89:6f:82:d8:e9:e6:e7:9a:12:2d:e8:61:8b:0c:23:3a:
         b5:de:61:76:b2:1e:41:c1:57:b5:19:a3:b6:65:05:16:30:5e:
         63:9c:d1:34:fe:d8:5c:d8:a7:02:bb:65:4a:f9:b7:f5:7f:96:
         e6:a9:57:77:a2:8f:75:e3:54:af:07:59:f6:13:46:a1:80:94:
         ea:84:dd:c4:7a:db:1c:79:5e:14:55:79:c6:56:9c:a1:1e:58:
         e9:56:80:f1:e4:d0:bb:cd:18:6a:3d:9f:6b:37:f6:46:00:bc:
         9c:42:cb:3b:b5:bd:78:0e:18:ac:45:fd:78:2d:3d:bb:dc:28:
         29:0b:6d:3a:9e:53:b4:e5:e8:57:61:fa:13:ef:92:bf:0e:22:
         6c:1f:27:31:40:be:fa:9b:20:f8:03:75:a3:3c:4d:22:2e:c4:
         40:70:28:ca:2e:1d:a7:2d:2e:d6:d9:f7:75:06:92:a6:30:0a:
         37:29:17:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQxMjgxMTAvBgNVBAUTKEM1MDQ1NjU1NzdBRTk5RjYxOTFDOTc4MzNEREJERDYy
NEVDMjRFOTIwHhcNMjUwNjE4MjE0MTU0WhcNMjUwNjI1MjE0MTU0WjAYMRYwFAYD
VQQDEw02ODUzMzJhMi1mNzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvOUUe7yVC1inFaf5C8XZuH7icukOka+sJ08BqW81K0twk8dBZ1ulnX0dnEHe
AJ6SDBUXsZa/OR/XjqXs2V9xSJ8NPwpVVlxeJBLQD9b3vIRjrC3Nf6djaoMP9uLe
Vw7NtadxwNJShDnxnO5ZIhqia89lbLeK+JshJ5QcHPNeMwjl7Y81s3bz2U0xuGvm
R8zsgFrBRYCO20mmk4nhgxK9R6UALim/DoETTtHSPiKhMyND+JTDJdIpMpk02vcZ
Gqw4XJtjp7ZKaSCFY65rmzUWb62n+R7VXsxE9t78Dp73CO+tFtieWCVH239L8yML
wzSbH+yv1a+iYH/uY43zckbvFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFheGU/u
oO77Tf1YTe4l8H4zEH+8MB8GA1UdIwQYMBaAFMUEVlV3rpn2GRyXgz3b3WJOwk6S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDEyOC85MERFOUM2NjNF
QTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1mWVpISmVEUGR2ZFlrN0NU
cEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hRUldWWGV1bWZZWkhKZURQZHZkWWs3Q1RwSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDEyOC85MERFOUM2NjNFQTMxMUVCOEFDQjkwMTNDNEY5QUUwMi94UVJXVlhldW1m
WVpISmVEUGR2ZFlrN0NUcEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA/t4NJCdpFWiKs187TU6qVx7PJhOSSDE5WcXzeLtSKcImudOCshSv3
ArRpqGj/cVrhj+PBClNJQqJKAJ5kf68WMrvszPO2P1AP4Ylvgtjp5ueaEi3oYYsM
Izq13mF2sh5BwVe1GaO2ZQUWMF5jnNE0/thc2KcCu2VK+bf1f5bmqVd3oo9141Sv
B1n2E0ahgJTqhN3EetsceV4UVXnGVpyhHljpVoDx5NC7zRhqPZ9rN/ZGALycQss7
tb14DhisRf14LT273CgpC206nlO05ehXYfoT75K/DiJsHycxQL76myD4A3WjPE0i
LsRAcCjKLh2nLS7W2fd1BpKmMAo3KRfg
-----END CERTIFICATE-----
Generated at Thu Jun 19 13:19:45 2025 by rpki-client