Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
File:                     D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft (raw, json)
Hash identifier:          nc47BP22nwEcSUcfJQ1t/jVATNC0RQmcxitgQdmEv90=
Subject key identifier:   30:26:0F:FB:BB:38:5F:0C:87:4A:25:29:24:17:36:02:BE:3C:23:FF
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
Manifest number:          0151
Signing time:             Fri 25 Apr 2025 03:35:22 +0000
Manifest this update:     Fri 25 Apr 2025 03:35:22 +0000
Manifest next update:     Fri 02 May 2025 03:35:22 +0000
Files and hashes:         1: D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl (hash: wYP/9uYYpnbPTKXP5az5Kcz5HBIaYsDMadHFr8wDsHk=)
                          2: E506BE2CF03811EFAD4C2257C4F9AE02.roa (hash: l3vFzxttEXhfOuZjeQF8CrGkxbV17axCXSipPqSoFKA=)
                          3: B67EFE26A2DB11EEABACB981C4F9AE02.roa (hash: ra0yVXf7WKyMc/TV/KsDqYCa6PLBvgSOfzPKvq7nVBw=)
                          4: A045C92CB46611EEAFEE8758C4F9AE02.roa (hash: VlIb3exIwpSPjFwHyuIwV8wlOpGvSIVB8uNPjyxZHoM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
                          rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:35:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: Apr 25 03:35:22 2025 GMT
            Not After : May  2 03:35:22 2025 GMT
        Subject: CN=680b02fa-4364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:74:77:ee:8c:40:54:7e:0d:6d:d4:ff:cb:ad:
                    57:e6:e1:34:c0:e8:1e:2c:23:a3:e8:6c:4d:89:07:
                    43:63:29:dc:0e:59:9e:41:d5:47:10:18:28:5c:d6:
                    4b:80:13:14:8e:18:9a:b2:fb:05:0c:d5:33:45:9b:
                    27:46:69:6b:89:ce:b7:45:0b:d2:2c:ea:f2:2b:6e:
                    33:93:b4:0b:85:61:0b:bf:77:4b:79:43:9e:a5:4c:
                    27:bf:e0:46:56:74:a0:17:01:64:e6:36:51:c0:7a:
                    ec:9f:e6:4a:1d:14:3d:51:e4:08:c4:67:e9:6c:c7:
                    12:40:5c:65:4a:46:e8:a3:7f:35:58:a0:e5:f1:9e:
                    f1:6d:2a:3a:80:fa:8a:73:79:12:a6:ba:8f:7b:80:
                    ed:3a:55:fb:e9:b5:13:e1:c0:25:f0:32:5a:33:4c:
                    dd:80:09:ef:b7:87:b3:ea:1c:0f:dd:4a:a6:7b:d6:
                    8f:87:ec:2b:2f:15:e0:c8:6c:4e:b8:66:28:bc:b4:
                    7f:4e:16:94:60:45:ba:ed:66:a7:f4:58:b3:ce:71:
                    7f:3c:5d:10:64:18:3d:78:b2:fd:11:07:ac:97:b4:
                    6b:46:31:48:9a:45:2b:5a:ad:5e:f1:a4:cd:3c:ef:
                    d8:ef:2b:bb:06:bb:3d:af:fe:1f:fe:5b:3b:d6:d1:
                    e6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:26:0F:FB:BB:38:5F:0C:87:4A:25:29:24:17:36:02:BE:3C:23:FF
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:0e:1f:2c:59:bb:2d:ef:8d:94:aa:4f:b2:ee:a9:b8:27:95:
         c3:98:63:86:78:d3:9f:f5:20:66:2a:a9:43:9c:64:32:a4:38:
         e8:09:0b:5b:45:56:ba:eb:88:05:40:66:e3:6d:eb:fa:ad:f9:
         86:fe:91:df:9e:c8:dc:10:55:40:25:76:37:e2:e1:16:96:42:
         07:bc:a5:d7:9f:b5:7e:11:b6:93:5c:75:af:27:37:ed:90:2c:
         f4:36:65:77:e7:e8:96:e4:80:b7:e9:87:27:17:11:30:4b:01:
         e0:d0:2a:51:51:94:a7:dd:74:3e:44:8a:38:24:d4:8e:24:a8:
         ea:de:ad:fc:ac:00:e9:10:ff:fb:0a:59:a4:07:50:bc:60:cd:
         55:6a:ec:ea:29:64:17:7c:23:19:f5:c9:d7:99:7d:c3:33:bc:
         fe:29:b9:04:f2:85:b0:89:1b:60:53:d6:96:2b:77:9c:17:da:
         9a:92:cc:9e:56:5d:d9:51:ae:2d:dc:97:43:bc:48:14:db:29:
         94:c0:6a:1f:9d:9a:38:85:93:56:16:de:68:6a:df:7b:39:1a:
         c1:86:2f:82:cd:58:b0:a9:10:b5:95:28:fa:01:ff:3e:29:1b:
         81:96:c3:4a:55:2b:cd:df:22:6e:47:5d:c0:d0:38:af:c6:43:
         af:4c:dd:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEEwNUQxMTAvBgNVBAUTKDBGNTQ1RTYyNzNEN0M5N0U5OTk1NDExRjc2RDVDNEYw
MDZCQjUxODYwHhcNMjUwNDI1MDMzNTIyWhcNMjUwNTAyMDMzNTIyWjAYMRYwFAYD
VQQDEw02ODBiMDJmYS00MzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt3R37oxAVH4NbdT/y61X5uE0wOgeLCOj6GxNiQdDYyncDlmeQdVHEBgoXNZL
gBMUjhiasvsFDNUzRZsnRmlric63RQvSLOryK24zk7QLhWELv3dLeUOepUwnv+BG
VnSgFwFk5jZRwHrsn+ZKHRQ9UeQIxGfpbMcSQFxlSkboo381WKDl8Z7xbSo6gPqK
c3kSprqPe4DtOlX76bUT4cAl8DJaM0zdgAnvt4ez6hwP3Uqme9aPh+wrLxXgyGxO
uGYovLR/ThaUYEW67Wan9FizznF/PF0QZBg9eLL9EQesl7RrRjFImkUrWq1e8aTN
PO/Y7yu7Brs9r/4f/ls71tHmiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDAmD/u7
OF8Mh0olKSQXNgK+PCP/MB8GA1UdIwQYMBaAFA9UXmJz18l+mZVBH3bVxPAGu1GG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTA1RC9DMUVGQjA4MDRF
MjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlYNlpsVUVmZHRYRThBYTdV
WVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0QxUmVZblBYeVg2WmxVRWZkdFhFOEFhN1VZWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTA1RC9DMUVGQjA4MDRFMjUxMUVFQUFBRTZENDlDNEY5QUUwMi9EMVJlWW5QWHlY
NlpsVUVmZHRYRThBYTdVWVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBEDh8sWbst742Uqk+y7qm4J5XDmGOGeNOf9SBmKqlDnGQypDjoCQtb
RVa664gFQGbjbev6rfmG/pHfnsjcEFVAJXY34uEWlkIHvKXXn7V+EbaTXHWvJzft
kCz0NmV35+iW5IC36YcnFxEwSwHg0CpRUZSn3XQ+RIo4JNSOJKjq3q38rADpEP/7
ClmkB1C8YM1VauzqKWQXfCMZ9cnXmX3DM7z+KbkE8oWwiRtgU9aWK3ecF9qaksye
Vl3ZUa4t3JdDvEgU2ymUwGofnZo4hZNWFt5oat97ORrBhi+CzViwqRC1lSj6Af8+
KRuBlsNKVSvN3yJuR13A0DivxkOvTN0J
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:03:10 2025 by rpki-client