Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
File:                     aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft (raw, json)
Hash identifier:          7+GPzw1Rlj8oBe08mZ4mNpN62peSql1WF/FI4XxNqz0=
Subject key identifier:   2A:BD:F8:CD:03:FC:E6:F6:FB:BA:74:33:1C:DE:66:C2:F1:9C:2A:CD
Authority key identifier: 69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66
Certificate issuer:       /CN=A9183010/serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
Certificate serial:       3493
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
Manifest number:          348B
Signing time:             Sat 14 Jun 2025 15:06:53 +0000
Manifest this update:     Sat 14 Jun 2025 15:06:52 +0000
Manifest next update:     Sat 21 Jun 2025 15:06:52 +0000
Files and hashes:         1: aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl (hash: hVk6fdLnZPj/hqZkOpwZLSnmNDOzlvdQHpUN+fAzZBc=)
                          2: 99144F3C03DB11F09FBAF32DC4F9AE02.roa (hash: 2QPhy8okP7a5b727IcPA6kh/C7CWYx/FM2MEQeDTjxM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl
                          rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:06:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13459 (0x3493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183010, serialNumber=6905418679F43CA888CB23BF2BCB2BE699C0C366
        Validity
            Not Before: Jun 14 15:06:52 2025 GMT
            Not After : Jun 21 15:06:52 2025 GMT
        Subject: CN=684d900c-d58d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5e:2c:e6:e2:70:66:11:0a:f1:60:a2:c9:23:
                    ff:c6:07:42:e5:dd:dd:2f:a0:90:b7:fb:cc:6f:90:
                    60:9d:94:4e:6b:44:ef:bc:42:59:0c:b2:81:0b:dc:
                    10:a5:28:cc:d9:e1:f9:1b:28:40:00:f4:5c:7f:96:
                    d6:b7:8d:27:07:c1:20:aa:79:fb:04:16:d7:dc:33:
                    a1:37:be:92:4f:56:9a:39:db:d9:c9:77:6f:a9:42:
                    60:3a:2b:37:ac:63:4a:62:b3:f8:11:23:62:69:e2:
                    c0:23:40:b6:20:b2:ef:4a:d3:4e:cc:f6:d2:72:02:
                    69:59:0b:17:5f:eb:d8:08:8a:c7:c7:ce:eb:09:8c:
                    05:a5:49:81:13:7a:50:e0:06:92:10:7c:b7:0f:76:
                    d9:8f:ce:cd:2c:b4:fb:0c:b0:63:fb:53:b4:e7:2f:
                    62:06:17:c6:2a:ab:bb:76:d9:6a:0a:10:8d:45:ff:
                    32:84:13:51:fd:ad:e7:06:31:14:76:a2:fe:65:84:
                    a2:a3:5a:41:dd:48:20:0e:20:d7:58:79:2b:ea:47:
                    ed:71:fc:4c:24:08:d6:0b:4d:fa:22:ac:cc:92:ba:
                    53:58:80:4d:09:b4:f4:8c:2e:27:1a:6f:f1:4f:88:
                    95:2f:6d:1e:5f:19:d1:c7:e4:0d:c7:52:0a:f4:d4:
                    c8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BD:F8:CD:03:FC:E6:F6:FB:BA:74:33:1C:DE:66:C2:F1:9C:2A:CD
            X509v3 Authority Key Identifier:
                keyid:69:05:41:86:79:F4:3C:A8:88:CB:23:BF:2B:CB:2B:E6:99:C0:C3:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183010/5F1DDB121DA311E293B19E9808B02CD2/aQVBhnn0PKiIyyO_K8sr5pnAw2Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:40:e4:7f:f5:6d:21:20:47:d8:0f:d9:2f:15:e7:e3:88:87:
         74:e6:4b:6b:6a:ee:13:67:94:13:41:16:08:5a:8a:68:07:bf:
         96:77:07:4c:be:f7:82:8c:11:60:6e:d4:42:7b:e0:7e:3e:7b:
         1b:f0:c9:26:b9:b1:47:09:d3:19:41:54:1c:42:b5:67:d7:e5:
         2d:d7:b9:94:4a:f8:04:51:cb:d7:80:2b:e9:58:9b:64:a0:c1:
         d9:08:a5:98:ce:68:58:63:bf:69:2b:57:a7:64:13:d8:87:50:
         4c:52:a9:17:e9:94:7d:56:11:a1:2f:ec:53:f8:c5:f2:a4:a0:
         50:39:20:07:ab:82:d3:bf:22:65:a5:69:ea:f7:ae:d0:d0:71:
         29:e1:78:6d:25:ad:8d:bf:1d:42:f9:eb:e4:5e:91:df:ff:9e:
         e4:02:d3:d7:dd:f2:75:3b:66:da:0f:d3:80:58:77:20:75:b9:
         08:82:73:9a:7a:a9:d0:29:b9:e2:61:26:1f:2b:bb:7a:b2:b8:
         b3:7c:be:3e:86:b2:86:92:b2:fd:0f:4a:0b:0a:4a:b0:91:52:
         5d:bc:68:23:37:69:fc:88:05:6b:16:f6:e2:89:e6:44:25:5a:
         37:1e:bd:e0:15:16:25:fc:7e:ef:2f:32:13:a3:c3:77:5f:b5:
         af:4d:a2:a6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODMwMTAxMTAvBgNVBAUTKDY5MDU0MTg2NzlGNDNDQTg4OENCMjNCRjJCQ0IyQkU2
OTlDMEMzNjYwHhcNMjUwNjE0MTUwNjUyWhcNMjUwNjIxMTUwNjUyWjAYMRYwFAYD
VQQDEw02ODRkOTAwYy1kNThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAml4s5uJwZhEK8WCiySP/xgdC5d3dL6CQt/vMb5BgnZROa0TvvEJZDLKBC9wQ
pSjM2eH5GyhAAPRcf5bWt40nB8Egqnn7BBbX3DOhN76ST1aaOdvZyXdvqUJgOis3
rGNKYrP4ESNiaeLAI0C2ILLvStNOzPbScgJpWQsXX+vYCIrHx87rCYwFpUmBE3pQ
4AaSEHy3D3bZj87NLLT7DLBj+1O05y9iBhfGKqu7dtlqChCNRf8yhBNR/a3nBjEU
dqL+ZYSio1pB3UggDiDXWHkr6kftcfxMJAjWC036IqzMkrpTWIBNCbT0jC4nGm/x
T4iVL20eXxnRx+QNx1IK9NTIuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCq9+M0D
/Ob2+7p0MxzeZsLxnCrNMB8GA1UdIwQYMBaAFGkFQYZ59DyoiMsjvyvLK+aZwMNm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzAxMC81RjFEREIxMjFE
QTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBLaUl5eU9fSzhzcjVwbkF3
MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FRVkJobm4wUEtpSXl5T19LOHNyNXBuQXcyWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MzAxMC81RjFEREIxMjFEQTMxMUUyOTNCMTlFOTgwOEIwMkNEMi9hUVZCaG5uMFBL
aUl5eU9fSzhzcjVwbkF3MlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDXQOR/9W0hIEfYD9kvFefjiId05ktrau4TZ5QTQRYIWopoB7+WdwdM
vveCjBFgbtRCe+B+Pnsb8MkmubFHCdMZQVQcQrVn1+Ut17mUSvgEUcvXgCvpWJtk
oMHZCKWYzmhYY79pK1enZBPYh1BMUqkX6ZR9VhGhL+xT+MXypKBQOSAHq4LTvyJl
pWnq967Q0HEp4XhtJa2Nvx1C+evkXpHf/57kAtPX3fJ1O2baD9OAWHcgdbkIgnOa
eqnQKbniYSYfK7t6srizfL4+hrKGkrL9D0oLCkqwkVJdvGgjN2n8iAVrFvbiieZE
JVo3Hr3gFRYl/H7vLzITo8N3X7WvTaKm
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:46:42 2025 by rpki-client