Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
File:                     Cc_-Rn87CcPQbySRnPrH4APku3U.mft (raw, json)
Hash identifier:          Zj7zGmsy6oxrKK8lC3BqQMUQTyNuU7Dfr7p+Gab7ZYs=
Subject key identifier:   91:39:F6:A3:C5:05:B2:5F:AA:86:3B:D3:21:95:34:C8:45:52:F2:A0
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Certificate issuer:       /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial:       1BE4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
Manifest number:          1BC2
Signing time:             Thu 24 Apr 2025 16:16:03 +0000
Manifest this update:     Thu 24 Apr 2025 16:16:02 +0000
Manifest next update:     Thu 01 May 2025 16:16:02 +0000
Files and hashes:         1: Cc_-Rn87CcPQbySRnPrH4APku3U.crl (hash: 47KJUyJXH3TXlbAIn3NXHUuUIDwoCduqANbQl33x+RA=)
                          2: F7CC52C45DF611EC8F523217C4F9AE02.roa (hash: l1Lp6717izpzzjuLJ/WIAZ1x52OL2D3LQu0E5xm6nH8=)
                          3: 398C15006B8711EF96847F5FC4F9AE02.roa (hash: /yvn8ijOa8FBDJ5ASQ/Lery7dqjE4HE5gFGgvkPmpE0=)
                          4: 6996CEB84E7011EFA4A32D5CC4F9AE02.roa (hash: 06vkEMgrkkkWPxaN6n0p0hSzGNVGXFIfC5HD0mArdMk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
                          rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 16:16:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7140 (0x1be4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
        Validity
            Not Before: Apr 24 16:16:02 2025 GMT
            Not After : May  1 16:16:02 2025 GMT
        Subject: CN=680a63c3-499d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a5:f5:64:ba:5e:54:5e:52:4b:af:ff:b8:e3:
                    24:20:c1:90:5c:c8:1f:23:63:c1:e7:c7:ed:07:20:
                    dd:d7:50:41:30:0b:80:5d:e2:a3:ba:c7:8e:ff:8b:
                    98:ce:44:71:8e:06:f4:ff:4b:7c:ca:d4:09:02:f6:
                    eb:06:6a:77:76:60:31:df:46:d2:96:86:ba:c9:4d:
                    47:be:60:89:79:2a:5f:df:0e:6c:06:f8:1d:bf:3f:
                    4a:52:0b:20:16:3c:31:6d:be:d9:4e:45:68:91:1b:
                    ec:b4:55:8b:f3:1b:cd:cd:2d:f6:01:65:45:47:1e:
                    75:df:e7:c6:05:c0:02:e9:05:92:13:18:f2:99:22:
                    89:d7:3b:b9:6a:29:c2:9a:a8:2f:36:c6:be:da:04:
                    fa:a3:25:1a:51:a6:35:5e:8f:39:70:7c:21:61:ef:
                    26:79:f5:e2:bd:a7:71:40:80:07:21:0f:88:0d:86:
                    fa:ac:9e:c1:4e:7a:21:3a:4d:ab:77:1b:61:73:99:
                    23:22:59:41:25:28:99:e6:ac:bf:e1:c0:f1:4f:6a:
                    d3:6c:2c:07:37:d5:f8:2a:48:9f:2c:cc:ca:54:cb:
                    00:df:80:81:0b:6a:87:4e:a4:b5:50:63:91:be:63:
                    d2:03:6a:6f:5f:9b:3c:f4:c4:49:f0:da:1e:92:53:
                    97:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:39:F6:A3:C5:05:B2:5F:AA:86:3B:D3:21:95:34:C8:45:52:F2:A0
            X509v3 Authority Key Identifier:
                keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:8c:79:8a:fc:4d:0e:90:be:80:52:48:b3:ad:c6:19:ef:73:
         28:42:95:a5:8c:88:58:6a:a7:20:39:1a:b8:73:d6:af:b1:61:
         f8:e2:10:00:4b:82:b4:82:73:51:b1:99:c4:66:56:e3:f6:f5:
         74:48:9e:66:52:5a:a1:8a:22:6e:c9:a3:18:27:58:ae:8b:cf:
         14:3f:73:1d:f4:0e:c1:48:80:05:51:e8:f0:4b:d8:fd:c4:80:
         fa:e4:c8:5f:1e:51:d5:67:49:4a:21:63:3e:98:b4:e7:4d:3c:
         8c:e9:83:ed:9b:aa:24:8c:2a:4d:74:4b:fd:12:f5:58:63:cd:
         7b:c1:bf:be:69:6f:9b:68:d9:15:aa:90:b4:53:c2:ab:54:dd:
         e4:b4:ac:34:45:2f:f9:23:99:eb:7a:c1:a2:2d:c6:4e:cc:03:
         af:7f:f7:38:c3:b3:3b:64:4e:2a:00:40:db:82:a7:a3:48:1b:
         db:93:06:f6:7d:6a:55:f1:ca:b1:46:d9:1a:a4:17:19:d6:5a:
         2d:a9:ac:fd:18:03:05:8b:24:5d:df:f0:02:e7:1a:2a:95:d4:
         8a:3f:b9:5c:33:bb:e3:a9:a2:53:1c:97:5c:df:93:0b:f4:3d:
         f8:5f:c6:e8:1c:8d:0a:a5:c3:5e:72:d2:30:cb:b3:f9:26:b3:
         b0:07:d2:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICG+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFBNzgxMTAvBgNVBAUTKDA5Q0ZGRTQ2N0YzQjA5QzNEMDZGMjQ5MTlDRkFDN0Uw
MDNFNEJCNzUwHhcNMjUwNDI0MTYxNjAyWhcNMjUwNTAxMTYxNjAyWjAYMRYwFAYD
VQQDEw02ODBhNjNjMy00OTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAl6X1ZLpeVF5SS6//uOMkIMGQXMgfI2PB58ftByDd11BBMAuAXeKjuseO/4uY
zkRxjgb0/0t8ytQJAvbrBmp3dmAx30bSloa6yU1HvmCJeSpf3w5sBvgdvz9KUgsg
Fjwxbb7ZTkVokRvstFWL8xvNzS32AWVFRx513+fGBcAC6QWSExjymSKJ1zu5ainC
mqgvNsa+2gT6oyUaUaY1Xo85cHwhYe8mefXivadxQIAHIQ+IDYb6rJ7BTnohOk2r
dxthc5kjIllBJSiZ5qy/4cDxT2rTbCwHN9X4KkifLMzKVMsA34CBC2qHTqS1UGOR
vmPSA2pvX5s89MRJ8NoeklOXRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJE59qPF
BbJfqoY70yGVNMhFUvKgMB8GA1UdIwQYMBaAFAnP/kZ/OwnD0G8kkZz6x+AD5Lt1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE3OC82OEQzMzQ5MEZE
NjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0NjUFFieVNSblBySDRBUGt1
M1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NjXy1Sbjg3Q2NQUWJ5U1JuUHJINEFQa3UzVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QUE3OC82OEQzMzQ5MEZENjQxMUU2QTEwOTU0ODNDNEY5QUUwMi9DY18tUm44N0Nj
UFFieVNSblBySDRBUGt1M1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBwjHmK/E0OkL6AUkizrcYZ73MoQpWljIhYaqcgORq4c9avsWH44hAA
S4K0gnNRsZnEZlbj9vV0SJ5mUlqhiiJuyaMYJ1iui88UP3Md9A7BSIAFUejwS9j9
xID65MhfHlHVZ0lKIWM+mLTnTTyM6YPtm6okjCpNdEv9EvVYY817wb++aW+baNkV
qpC0U8KrVN3ktKw0RS/5I5nresGiLcZOzAOvf/c4w7M7ZE4qAEDbgqejSBvbkwb2
fWpV8cqxRtkapBcZ1lotqaz9GAMFiyRd3/AC5xoqldSKP7lcM7vjqaJTHJdc35ML
9D34X8boHI0KpcNectIwy7P5JrOwB9I9
-----END CERTIFICATE-----
Generated at Sat Apr 26 04:30:44 2025 by rpki-client