Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
File:                     MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft (raw, json)
Hash identifier:          R/CqSLpYC3GVx99mvyaofswrYQ6PbZ+tREa6eTLiOOo=
Subject key identifier:   A0:62:B4:E1:F8:DC:5C:A9:10:BA:CF:EA:2D:78:42:F2:5E:F3:76:50
Authority key identifier: 31:E7:B1:0F:71:8B:11:89:A0:31:9D:64:47:E1:3F:6C:46:40:7A:A5
Certificate issuer:       /CN=A918337F/serialNumber=31E7B10F718B1189A0319D6447E13F6C46407AA5
Certificate serial:       26E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MeexD3GLEYmgMZ1kR-E_bEZAeqU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
Manifest number:          26C6
Signing time:             Sat 14 Jun 2025 15:38:49 +0000
Manifest this update:     Sat 14 Jun 2025 15:38:49 +0000
Manifest next update:     Sat 21 Jun 2025 15:38:49 +0000
Files and hashes:         1: MeexD3GLEYmgMZ1kR-E_bEZAeqU.crl (hash: tG5Tl/3TPETOMk07MIpxT11EOcfRvLTmE34TShdxEmk=)
                          2: EC9B786E9D8811EB80D73886C4F9AE02.roa (hash: hxoilEsxdOaPHf72rZ87qnsjQ85Xv92LxhdM//owldE=)
                          3: 783D3BDABCE011EA81F10855C4F9AE02.roa (hash: +JqEbUf+pThX233s1PinTFzcLJbDJ2DJ6J3As12MjOE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.crl
                          rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MeexD3GLEYmgMZ1kR-E_bEZAeqU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 15:38:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9957 (0x26e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918337F, serialNumber=31E7B10F718B1189A0319D6447E13F6C46407AA5
        Validity
            Not Before: Jun 14 15:38:49 2025 GMT
            Not After : Jun 21 15:38:49 2025 GMT
        Subject: CN=684d9789-2919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:4a:69:83:e5:c6:e9:39:ea:d5:ef:f4:fe:
                    6a:9b:58:a8:31:bc:b9:7a:be:a4:b4:09:0b:a9:6e:
                    72:e2:95:5b:c0:7b:3c:00:a5:1f:47:f7:35:b1:5f:
                    49:35:9a:65:bd:34:35:3e:21:9d:3d:4e:76:03:fb:
                    0f:61:b7:37:5e:00:63:87:0d:99:28:23:cb:bd:41:
                    a1:83:21:cc:aa:19:a5:54:b2:ff:a7:d5:7b:87:1c:
                    7a:d8:69:30:b7:0b:f6:18:b4:4c:29:5b:67:f1:1b:
                    d5:7d:22:59:89:21:80:21:34:32:bc:70:8f:e3:31:
                    f2:7b:4d:82:a8:e5:e6:61:08:a6:ed:4c:63:36:8e:
                    28:79:de:98:76:b6:89:b4:e9:8a:e8:aa:56:07:ac:
                    36:49:c5:de:eb:f0:e8:ee:66:8a:fb:e8:47:95:8c:
                    cb:0e:33:e6:0e:6c:70:f1:5e:58:5b:fa:19:61:60:
                    69:46:05:18:33:62:70:e7:0a:a1:f1:b0:c4:ef:19:
                    2c:89:50:1a:be:fb:04:98:89:ca:e0:35:f0:80:4c:
                    b6:3a:22:9e:d7:e7:c2:80:a5:e6:90:74:29:a6:97:
                    34:28:66:b2:41:8c:14:d9:ac:91:68:37:2c:22:d3:
                    e2:9c:f0:96:65:09:b1:e1:f4:a1:90:27:d9:54:00:
                    28:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:62:B4:E1:F8:DC:5C:A9:10:BA:CF:EA:2D:78:42:F2:5E:F3:76:50
            X509v3 Authority Key Identifier:
                keyid:31:E7:B1:0F:71:8B:11:89:A0:31:9D:64:47:E1:3F:6C:46:40:7A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MeexD3GLEYmgMZ1kR-E_bEZAeqU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918337F/468EF726D6AF11E4B3717141C4F9AE02/MeexD3GLEYmgMZ1kR-E_bEZAeqU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:ef:0b:3b:99:72:37:22:16:7c:29:b6:ee:89:86:b9:bc:7d:
         d6:f0:2a:ef:62:a9:e7:3e:91:b6:29:ff:d5:0c:08:1e:0e:2f:
         29:50:bd:5d:69:06:2d:67:4d:78:e3:de:06:78:04:77:54:62:
         3f:3a:d6:75:4e:b6:7a:8b:0d:aa:6a:ee:f5:14:95:a8:02:70:
         b0:da:ac:d3:92:e6:61:be:66:e8:6e:2c:d9:42:26:5d:ac:f5:
         50:40:0b:ef:73:76:29:e6:c1:90:14:df:cf:b8:69:37:9e:0a:
         81:06:e8:e2:8f:a7:33:68:f1:a6:ed:45:69:fa:bc:44:3f:e6:
         2d:3e:ec:df:a0:64:40:49:96:29:49:8b:8c:7a:a9:41:ea:0d:
         ad:fd:4e:21:9c:2f:da:58:f3:0c:2b:83:1a:91:c4:7a:74:61:
         99:05:a3:d4:4b:68:7b:47:f0:86:eb:f7:c9:c1:21:a6:eb:04:
         51:76:ce:04:b4:c9:cd:de:fe:03:67:7f:b6:f6:d4:29:b3:d5:
         78:aa:e1:41:bc:5b:17:3d:b7:87:48:c5:af:1c:3f:e3:41:e6:
         06:99:02:20:67:04:15:00:cf:32:42:9b:50:e3:f3:08:e2:58:
         e8:b8:b8:93:e1:d5:cf:4b:b5:ef:52:63:15:f5:cd:05:7c:05:
         52:9f:92:39
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJuUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODMzN0YxMTAvBgNVBAUTKDMxRTdCMTBGNzE4QjExODlBMDMxOUQ2NDQ3RTEzRjZD
NDY0MDdBQTUwHhcNMjUwNjE0MTUzODQ5WhcNMjUwNjIxMTUzODQ5WjAYMRYwFAYD
VQQDEw02ODRkOTc4OS0yOTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw19KaYPlxuk56tXv9P5qm1ioMby5er6ktAkLqW5y4pVbwHs8AKUfR/c1sV9J
NZplvTQ1PiGdPU52A/sPYbc3XgBjhw2ZKCPLvUGhgyHMqhmlVLL/p9V7hxx62Gkw
twv2GLRMKVtn8RvVfSJZiSGAITQyvHCP4zHye02CqOXmYQim7UxjNo4oed6YdraJ
tOmK6KpWB6w2ScXe6/Do7maK++hHlYzLDjPmDmxw8V5YW/oZYWBpRgUYM2Jw5wqh
8bDE7xksiVAavvsEmInK4DXwgEy2OiKe1+fCgKXmkHQpppc0KGayQYwU2ayRaDcs
ItPinPCWZQmx4fShkCfZVAAoXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBitOH4
3FypELrP6i14QvJe83ZQMB8GA1UdIwQYMBaAFDHnsQ9xixGJoDGdZEfhP2xGQHql
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MzM3Ri80NjhFRjcyNkQ2
QUYxMUU0QjM3MTcxNDFDNEY5QUUwMi9NZWV4RDNHTEVZbWdNWjFrUi1FX2JFWkFl
cVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01lZXhEM0dMRVltZ01aMWtSLUVfYkVaQWVxVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MzM3Ri80NjhFRjcyNkQ2QUYxMUU0QjM3MTcxNDFDNEY5QUUwMi9NZWV4RDNHTEVZ
bWdNWjFrUi1FX2JFWkFlcVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCx7ws7mXI3IhZ8KbbuiYa5vH3W8CrvYqnnPpG2Kf/VDAgeDi8pUL1d
aQYtZ014494GeAR3VGI/OtZ1TrZ6iw2qau71FJWoAnCw2qzTkuZhvmbobizZQiZd
rPVQQAvvc3Yp5sGQFN/PuGk3ngqBBujij6czaPGm7UVp+rxEP+YtPuzfoGRASZYp
SYuMeqlB6g2t/U4hnC/aWPMMK4MakcR6dGGZBaPUS2h7R/CG6/fJwSGm6wRRds4E
tMnN3v4DZ3+29tQps9V4quFBvFsXPbeHSMWvHD/jQeYGmQIgZwQVAM8yQptQ4/MI
4ljouLiT4dXPS7XvUmMV9c0FfAVSn5I5
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:28:52 2025 by rpki-client