Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
File:                     cPhdBJUBOFatAizAkilp4Mj8ReI.mft (raw, json)
Hash identifier:          ymEL4sp3rtZZuPW27n031tjihxpgL1clh13B9HM1mCE=
Subject key identifier:   43:E9:83:15:8D:37:BB:31:C2:F8:44:F1:6C:2B:18:21:CD:7E:26:34
Authority key identifier: 70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2
Certificate issuer:       /CN=A9184F2D/serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
Certificate serial:       057B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
Manifest number:          0574
Signing time:             Thu 24 Apr 2025 23:05:48 +0000
Manifest this update:     Thu 24 Apr 2025 23:05:48 +0000
Manifest next update:     Thu 01 May 2025 23:05:48 +0000
Files and hashes:         1: cPhdBJUBOFatAizAkilp4Mj8ReI.crl (hash: xTmaGKbO1sPNKAKx38/Dtzz5mgD6EEqJUBWCG8M8s4k=)
                          2: A7F88866489611EFA3CACC09C4F9AE02.roa (hash: K+W6rT3tNiWzS6zxZo8wMVS4noOj7tuApl6Pzt9kSYU=)
                          3: E90DFC9CF00111EFB541185CC4F9AE02.roa (hash: CMdVu1oYZTMNZUCHeOb59Qk8iVAIlI8om8iW1SQX+7k=)
                          4: C454E4B4D94F11EBAB5C652FC4F9AE02.roa (hash: lG1e8twU+pC/94F4+2eaNuYCV+UrLlvL+jYILvf5cpw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl
                          rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1403 (0x57b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184F2D, serialNumber=70F85D0495013856AD022CC0922969E0C8FC45E2
        Validity
            Not Before: Apr 24 23:05:48 2025 GMT
            Not After : May  1 23:05:48 2025 GMT
        Subject: CN=680ac3cc-457e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:fe:b6:8e:63:d6:10:30:01:fc:85:10:e3:c2:
                    61:3a:04:e0:3c:b3:e1:cc:6f:32:2f:af:dc:4c:6f:
                    9b:60:f9:54:f8:a0:d2:58:c8:5e:e1:bf:f7:ed:78:
                    2b:62:af:6e:52:4c:ff:ca:9a:d6:a4:d6:88:d9:60:
                    9b:8f:5b:27:5a:ec:22:e5:4a:6d:9e:75:ca:16:02:
                    04:7e:eb:9d:d3:13:29:52:64:13:da:3b:e1:12:8c:
                    d6:a4:63:30:40:b6:db:77:e0:b6:ae:1b:09:3f:ef:
                    61:c3:6c:02:d1:05:78:7e:67:ae:58:fd:e3:ae:6b:
                    a5:32:98:b5:f9:a9:d6:fb:a8:c2:a6:59:19:37:14:
                    34:b4:c6:a7:37:4b:a7:57:cf:59:86:cb:ab:e3:20:
                    2b:be:e7:af:c9:69:30:aa:b4:52:df:16:8f:37:42:
                    4b:a7:97:bd:f0:55:25:3e:ca:ad:1b:b6:72:73:b4:
                    56:df:09:ec:ed:fd:f7:32:e5:88:d3:72:c4:38:51:
                    25:45:d2:42:ca:99:6c:82:77:48:bb:89:e5:e7:ae:
                    36:47:85:5a:74:55:7b:04:10:52:23:71:1c:52:bf:
                    7a:29:5d:41:c5:30:e3:09:8f:84:d9:cf:c5:da:ff:
                    36:fa:8a:dc:1e:95:2f:18:0f:55:8e:74:a2:16:cf:
                    b0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E9:83:15:8D:37:BB:31:C2:F8:44:F1:6C:2B:18:21:CD:7E:26:34
            X509v3 Authority Key Identifier:
                keyid:70:F8:5D:04:95:01:38:56:AD:02:2C:C0:92:29:69:E0:C8:FC:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cPhdBJUBOFatAizAkilp4Mj8ReI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184F2D/CFBED370D94D11EBBE5D312FC4F9AE02/cPhdBJUBOFatAizAkilp4Mj8ReI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c7:86:c6:fd:a9:88:40:8d:d6:ce:1b:d7:b2:a1:96:10:f7:
         19:d0:87:d6:7b:36:63:41:d6:a6:89:34:7f:da:d5:5c:8f:98:
         17:c6:30:08:35:53:23:b0:ce:10:93:ea:16:d2:a7:38:51:88:
         47:2d:15:35:90:42:36:4d:dc:a8:ac:a4:2f:fc:03:f1:06:1b:
         b5:26:52:6b:e3:60:76:64:bf:b3:9b:79:52:14:c1:9a:71:c3:
         8b:ac:d9:d8:7e:47:c1:90:ec:50:57:db:5d:0c:0e:af:ed:8b:
         2a:d6:5b:7a:23:a2:13:ec:cf:aa:0e:f1:a9:46:86:2a:8d:15:
         72:86:24:61:4d:33:26:02:e5:22:b0:70:ed:8c:12:af:a8:fb:
         e0:51:ef:51:59:76:54:3a:f5:cb:4a:c5:e9:4f:97:0c:43:a0:
         25:b1:da:76:69:d8:70:7b:17:c7:37:d0:78:26:9d:87:40:31:
         76:30:b3:22:e5:d5:9e:cd:54:7b:86:13:27:37:3e:44:70:0d:
         37:b5:da:62:ab:56:8f:30:18:2e:68:6a:87:e9:f6:09:73:7a:
         11:d4:21:0b:61:9e:0f:64:73:5c:7f:99:ad:23:28:6c:2e:dc:
         28:ae:be:e2:62:2a:7b:0a:7d:88:8a:9d:39:5d:51:54:81:18:
         ba:f6:61:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODRGMkQxMTAvBgNVBAUTKDcwRjg1RDA0OTUwMTM4NTZBRDAyMkNDMDkyMjk2OUUw
QzhGQzQ1RTIwHhcNMjUwNDI0MjMwNTQ4WhcNMjUwNTAxMjMwNTQ4WjAYMRYwFAYD
VQQDEw02ODBhYzNjYy00NTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyv62jmPWEDAB/IUQ48JhOgTgPLPhzG8yL6/cTG+bYPlU+KDSWMhe4b/37Xgr
Yq9uUkz/yprWpNaI2WCbj1snWuwi5UptnnXKFgIEfuud0xMpUmQT2jvhEozWpGMw
QLbbd+C2rhsJP+9hw2wC0QV4fmeuWP3jrmulMpi1+anW+6jCplkZNxQ0tManN0un
V89Zhsur4yArvuevyWkwqrRS3xaPN0JLp5e98FUlPsqtG7Zyc7RW3wns7f33MuWI
03LEOFElRdJCyplsgndIu4nl5642R4VadFV7BBBSI3EcUr96KV1BxTDjCY+E2c/F
2v82+orcHpUvGA9VjnSiFs+wiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEPpgxWN
N7sxwvhE8WwrGCHNfiY0MB8GA1UdIwQYMBaAFHD4XQSVAThWrQIswJIpaeDI/EXi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NEYyRC9DRkJFRDM3MEQ5
NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9GYXRBaXpBa2lscDRNajhS
ZUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NQaGRCSlVCT0ZhdEFpekFraWxwNE1qOFJlSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NEYyRC9DRkJFRDM3MEQ5NEQxMUVCQkU1RDMxMkZDNEY5QUUwMi9jUGhkQkpVQk9G
YXRBaXpBa2lscDRNajhSZUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAax4bG/amIQI3WzhvXsqGWEPcZ0IfWezZjQdamiTR/2tVcj5gXxjAI
NVMjsM4Qk+oW0qc4UYhHLRU1kEI2TdyorKQv/APxBhu1JlJr42B2ZL+zm3lSFMGa
ccOLrNnYfkfBkOxQV9tdDA6v7Ysq1lt6I6IT7M+qDvGpRoYqjRVyhiRhTTMmAuUi
sHDtjBKvqPvgUe9RWXZUOvXLSsXpT5cMQ6Alsdp2adhwexfHN9B4Jp2HQDF2MLMi
5dWezVR7hhMnNz5EcA03tdpiq1aPMBguaGqH6fYJc3oR1CELYZ4PZHNcf5mtIyhs
Ltworr7iYip7Cn2Iip05XVFUgRi69mG9
-----END CERTIFICATE-----
Generated at Sat Apr 26 05:00:45 2025 by rpki-client