Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
File:                     tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft (raw, json)
Hash identifier:          +/SFxBbtSn5EmNwT4W3ugMkAY9tn6IFvmvjpvqXDtac=
Subject key identifier:   C4:26:DF:A5:F0:FA:A8:3A:37:CB:E1:E2:B5:8E:E7:DA:78:8A:3C:56
Authority key identifier: B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A
Certificate issuer:       /CN=A916ED3C/serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
Certificate serial:       0526
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
Manifest number:          051C
Signing time:             Mon 16 Jun 2025 23:14:48 +0000
Manifest this update:     Mon 16 Jun 2025 23:14:48 +0000
Manifest next update:     Mon 23 Jun 2025 23:14:48 +0000
Files and hashes:         1: tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl (hash: LhjtZwml9bTYEzs/sb4+whaKvGydjDaz5A4y8mx+w3Y=)
                          2: 90AEB6B26C0411EF903ED20BC4F9AE02.roa (hash: X1M966/mtttlH1mBhSxIPJxCpOTRUbMMjveWzFUoyQk=)
                          3: FC48A6E45FA711EF81D7F60DC4F9AE02.roa (hash: La5FvOPI2E2R6GVCVJ+J2lxP1YUFPxCtd2lubZQviSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl
                          rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 23:14:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1318 (0x526)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ED3C, serialNumber=B5F87AC892C5E7E924EA1850ADCE4FF01D0DBA2A
        Validity
            Not Before: Jun 16 23:14:48 2025 GMT
            Not After : Jun 23 23:14:48 2025 GMT
        Subject: CN=6850a568-4ff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7a:5f:7a:79:e8:86:b3:e6:93:19:07:8d:eb:
                    2b:44:63:1d:f0:ac:32:af:4e:83:df:f6:82:2e:03:
                    ad:05:3d:3e:43:40:cb:59:d1:1b:21:69:0b:30:24:
                    9e:bf:3b:92:50:25:3c:b6:03:27:25:4b:94:e4:70:
                    4d:57:80:6c:47:d5:dd:59:f1:2c:dc:98:ab:f3:5a:
                    10:80:d2:54:e5:54:48:90:18:24:d5:cc:20:d3:1b:
                    b4:83:4e:6e:2d:05:8f:e0:f3:96:08:dd:fa:16:9a:
                    45:66:43:51:52:1b:6b:12:4d:36:e1:08:48:73:67:
                    b9:51:3d:85:b1:2d:67:cf:8b:a1:bc:d6:ae:f7:dd:
                    b7:08:87:6c:42:54:07:b4:61:9b:f4:3f:54:ca:7c:
                    1b:65:4c:f5:64:bb:db:ea:60:ab:b0:aa:8f:2c:ea:
                    50:cd:b0:58:0c:f4:a3:9a:c0:f9:74:d7:41:cd:7c:
                    61:a5:d0:5d:8f:bd:75:b5:af:59:4a:61:57:58:af:
                    f5:e4:ee:ce:e5:a9:b3:46:7d:22:26:30:96:d1:be:
                    39:a5:f3:7c:5f:6a:94:4e:61:30:00:86:fc:0b:26:
                    fc:5b:25:cb:40:a5:16:0d:1d:e6:65:96:4e:65:5b:
                    12:3e:e7:7d:39:80:0c:af:61:75:2e:65:b3:47:ea:
                    a2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:26:DF:A5:F0:FA:A8:3A:37:CB:E1:E2:B5:8E:E7:DA:78:8A:3C:56
            X509v3 Authority Key Identifier:
                keyid:B5:F8:7A:C8:92:C5:E7:E9:24:EA:18:50:AD:CE:4F:F0:1D:0D:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tfh6yJLF5-kk6hhQrc5P8B0Nuio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ED3C/306EE2600A7111EC9A163C1FC4F9AE02/tfh6yJLF5-kk6hhQrc5P8B0Nuio.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:03:81:d4:b7:bb:4e:ac:54:b0:ac:66:5c:90:2f:f4:00:8b:
         e7:25:85:9f:d1:59:8a:9a:ec:28:1c:ac:82:b1:b3:0e:6a:b3:
         f3:23:b7:fc:33:d0:a0:d0:20:a6:4c:90:42:d7:42:d5:3d:54:
         e5:22:91:3f:2e:30:0e:dd:fe:59:dd:a3:ef:e8:88:c6:ee:6b:
         68:7d:bf:e0:23:4f:ce:cd:62:b8:ec:3d:02:f3:76:d8:e8:05:
         9d:17:5a:24:b4:e1:a7:bf:35:df:1b:e9:8f:ac:22:2b:4f:7d:
         c7:58:8a:02:74:11:29:07:98:d7:fd:4c:07:ba:ad:8a:68:ba:
         48:de:e5:1d:a0:49:ce:53:f8:39:3f:67:44:b5:d7:6e:e8:6f:
         c3:f4:38:e1:1d:31:63:09:a2:6a:a5:bd:f9:9e:a9:92:f3:db:
         68:e9:e9:84:4e:32:58:94:4c:37:ab:b5:15:90:14:51:1c:6e:
         6e:e1:fe:26:22:3c:ab:8c:cf:28:54:5a:a7:f6:c0:52:b1:c8:
         77:cc:b5:25:cd:63:02:e4:cb:f5:2d:84:ec:01:ec:f3:dc:41:
         8f:fc:19:09:4c:fa:7e:e8:dd:f2:e8:fb:31:c7:2b:a5:c9:fb:
         5d:1a:2c:4a:ea:92:6e:9c:54:15:bd:c0:76:cf:5d:6a:0b:8d:
         95:4e:24:c0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBSYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVEM0MxMTAvBgNVBAUTKEI1Rjg3QUM4OTJDNUU3RTkyNEVBMTg1MEFEQ0U0RkYw
MUQwREJBMkEwHhcNMjUwNjE2MjMxNDQ4WhcNMjUwNjIzMjMxNDQ4WjAYMRYwFAYD
VQQDEw02ODUwYTU2OC00ZmYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsXpfennohrPmkxkHjesrRGMd8Kwyr06D3/aCLgOtBT0+Q0DLWdEbIWkLMCSe
vzuSUCU8tgMnJUuU5HBNV4BsR9XdWfEs3Jir81oQgNJU5VRIkBgk1cwg0xu0g05u
LQWP4POWCN36FppFZkNRUhtrEk024QhIc2e5UT2FsS1nz4uhvNau9923CIdsQlQH
tGGb9D9UynwbZUz1ZLvb6mCrsKqPLOpQzbBYDPSjmsD5dNdBzXxhpdBdj711ta9Z
SmFXWK/15O7O5amzRn0iJjCW0b45pfN8X2qUTmEwAIb8Cyb8WyXLQKUWDR3mZZZO
ZVsSPud9OYAMr2F1LmWzR+qi2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMQm36Xw
+qg6N8vh4rWO59p4ijxWMB8GA1UdIwQYMBaAFLX4esiSxefpJOoYUK3OT/AdDboq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUQzQy8zMDZFRTI2MDBB
NzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUta2s2aGhRcmM1UDhCME51
aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3RmaDZ5SkxGNS1razZoaFFyYzVQOEIwTnVpby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUQzQy8zMDZFRTI2MDBBNzExMUVDOUExNjNDMUZDNEY5QUUwMi90Zmg2eUpMRjUt
a2s2aGhRcmM1UDhCME51aW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAwA4HUt7tOrFSwrGZckC/0AIvnJYWf0VmKmuwoHKyCsbMOarPzI7f8
M9Cg0CCmTJBC10LVPVTlIpE/LjAO3f5Z3aPv6IjG7mtofb/gI0/OzWK47D0C83bY
6AWdF1oktOGnvzXfG+mPrCIrT33HWIoCdBEpB5jX/UwHuq2KaLpI3uUdoEnOU/g5
P2dEtddu6G/D9DjhHTFjCaJqpb35nqmS89to6emETjJYlEw3q7UVkBRRHG5u4f4m
IjyrjM8oVFqn9sBSsch3zLUlzWMC5Mv1LYTsAezz3EGP/BkJTPp+6N3y6Psxxyul
yftdGixK6pJunFQVvcB2z11qC42VTiTA
-----END CERTIFICATE-----
Generated at Tue Jun 17 20:32:14 2025 by rpki-client