Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
File:                     YLrcBCw3e4bA3J7riVEnJc4-IzY.mft (raw, json)
Hash identifier:          tHtwaVh2bqdHW9tfWu/useKhXfTtXt0Bpt4XU0f/33g=
Subject key identifier:   ED:4D:39:89:0C:4B:8F:0C:CF:76:49:9A:56:5B:70:B0:99:C6:A7:BD
Authority key identifier: 60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36
Certificate issuer:       /CN=A918D0AA/serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
Certificate serial:       01CE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
Manifest number:          01C7
Signing time:             Tue 29 Apr 2025 03:07:12 +0000
Manifest this update:     Tue 29 Apr 2025 03:07:11 +0000
Manifest next update:     Tue 06 May 2025 03:07:11 +0000
Files and hashes:         1: YLrcBCw3e4bA3J7riVEnJc4-IzY.crl (hash: A98eA3DN3cgGmBVaplgwZKQv3kG2mx6JIpK7FUYRPGE=)
                          2: B6C4F8787A5911EDB8C4E04FC4F9AE02.roa (hash: EGxldo7AGw1cFMotW1VKii2ay/EqR5jKmsG9yMQNqRc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl
                          rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 May 2025 03:07:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 462 (0x1ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D0AA, serialNumber=60BADC042C377B86C0DC9EEB89512725CE3E2336
        Validity
            Not Before: Apr 29 03:07:11 2025 GMT
            Not After : May  6 03:07:11 2025 GMT
        Subject: CN=6810425f-795e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2d:41:ac:2c:0b:e4:6c:0c:02:b2:6b:e1:e8:
                    7c:20:95:17:b7:13:96:50:16:b3:0e:3d:68:ff:39:
                    8f:46:9b:1e:56:bc:ff:74:81:f4:f0:06:fe:e2:f7:
                    c9:20:1a:cc:1b:11:3a:2d:8b:a5:d8:04:10:06:c1:
                    29:64:02:fe:98:e7:cb:e1:02:7f:f6:41:68:4e:66:
                    27:9b:1e:11:10:ba:ca:17:d0:80:50:29:1d:62:b4:
                    68:81:31:db:ac:26:be:4b:06:8f:42:24:29:d4:f2:
                    c1:43:ec:46:23:06:31:87:e6:da:8a:c7:46:85:6b:
                    7c:f5:7b:04:4c:1c:ae:dc:5d:f5:cd:9f:3f:5d:73:
                    1c:9e:f7:e6:2a:48:fb:70:6c:5f:17:d2:c2:38:32:
                    8a:c6:a3:9f:83:d3:4b:0f:24:d3:47:1f:e5:a3:1a:
                    ca:ad:06:61:90:e5:fd:16:03:5c:25:0f:85:5b:ad:
                    0e:c9:15:02:2f:7c:d6:29:bc:ea:67:76:d5:1f:dd:
                    81:80:ff:48:6f:f6:48:48:ba:85:c0:fa:49:ae:7e:
                    e8:3f:ba:b9:f8:68:65:e8:f2:0f:70:82:a1:29:14:
                    f4:24:b1:9f:48:db:b7:04:c1:f2:25:54:2f:d6:12:
                    89:4f:42:a5:cd:33:0c:17:68:48:18:fc:4a:fd:a1:
                    48:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4D:39:89:0C:4B:8F:0C:CF:76:49:9A:56:5B:70:B0:99:C6:A7:BD
            X509v3 Authority Key Identifier:
                keyid:60:BA:DC:04:2C:37:7B:86:C0:DC:9E:EB:89:51:27:25:CE:3E:23:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YLrcBCw3e4bA3J7riVEnJc4-IzY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D0AA/2C75FEC87A3C11ED861B2933C4F9AE02/YLrcBCw3e4bA3J7riVEnJc4-IzY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:05:66:3a:37:57:4e:0a:29:a9:57:7f:9e:c4:ac:75:8d:0e:
         51:ce:50:28:9d:15:d6:da:ee:d5:18:75:2c:e3:9c:3b:e5:3a:
         d4:a9:89:5c:37:3a:16:b7:2e:aa:c9:75:66:91:a6:af:93:07:
         38:ac:4b:3c:0f:59:2b:6d:8a:c1:c7:b5:68:0b:db:06:2b:f8:
         51:ac:1a:34:ad:18:06:2a:0e:33:27:c9:f6:06:a2:af:ba:e2:
         48:0b:c8:5f:4e:44:85:4b:36:6a:1a:b0:b0:9e:ab:f8:77:21:
         f6:90:f4:51:1f:56:68:5a:11:86:95:15:bf:7f:c7:b0:99:19:
         d6:49:32:13:c9:bc:cc:68:c9:62:c3:da:71:4f:b4:a8:cf:c7:
         cf:b0:c0:bc:2f:0f:d1:b2:9c:81:80:37:2e:f2:c6:2b:60:39:
         d0:60:90:87:da:cd:9f:11:c1:3e:3e:fd:c1:e4:55:9f:58:52:
         a1:be:39:b4:a0:40:ca:68:92:51:af:cd:ad:33:3f:86:f6:5e:
         89:96:80:f6:6d:b8:73:85:c9:79:66:1f:6d:9e:b5:d3:c1:c7:
         59:b6:96:09:ac:77:b7:59:e1:77:2f:ee:6d:9c:a7:2b:de:5c:
         e9:89:c9:16:8c:d0:ae:10:67:5d:9f:af:0a:a3:08:85:50:01:
         d9:d1:53:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAc4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQwQUExMTAvBgNVBAUTKDYwQkFEQzA0MkMzNzdCODZDMERDOUVFQjg5NTEyNzI1
Q0UzRTIzMzYwHhcNMjUwNDI5MDMwNzExWhcNMjUwNTA2MDMwNzExWjAYMRYwFAYD
VQQDEw02ODEwNDI1Zi03OTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvC1BrCwL5GwMArJr4eh8IJUXtxOWUBazDj1o/zmPRpseVrz/dIH08Ab+4vfJ
IBrMGxE6LYul2AQQBsEpZAL+mOfL4QJ/9kFoTmYnmx4RELrKF9CAUCkdYrRogTHb
rCa+SwaPQiQp1PLBQ+xGIwYxh+baisdGhWt89XsETByu3F31zZ8/XXMcnvfmKkj7
cGxfF9LCODKKxqOfg9NLDyTTRx/loxrKrQZhkOX9FgNcJQ+FW60OyRUCL3zWKbzq
Z3bVH92BgP9Ib/ZISLqFwPpJrn7oP7q5+Ghl6PIPcIKhKRT0JLGfSNu3BMHyJVQv
1hKJT0KlzTMMF2hIGPxK/aFIcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO1NOYkM
S48Mz3ZJmlZbcLCZxqe9MB8GA1UdIwQYMBaAFGC63AQsN3uGwNye64lRJyXOPiM2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDBBQS8yQzc1RkVDODdB
M0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0YkEzSjdyaVZFbkpjNC1J
elkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1lMcmNCQ3czZTRiQTNKN3JpVkVuSmM0LUl6WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDBBQS8yQzc1RkVDODdBM0MxMUVEODYxQjI5MzNDNEY5QUUwMi9ZTHJjQkN3M2U0
YkEzSjdyaVZFbkpjNC1JelkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfBWY6N1dOCimpV3+exKx1jQ5RzlAonRXW2u7VGHUs45w75TrUqYlc
NzoWty6qyXVmkaavkwc4rEs8D1krbYrBx7VoC9sGK/hRrBo0rRgGKg4zJ8n2BqKv
uuJIC8hfTkSFSzZqGrCwnqv4dyH2kPRRH1ZoWhGGlRW/f8ewmRnWSTITybzMaMli
w9pxT7Soz8fPsMC8Lw/RspyBgDcu8sYrYDnQYJCH2s2fEcE+Pv3B5FWfWFKhvjm0
oEDKaJJRr82tMz+G9l6JloD2bbhzhcl5Zh9tnrXTwcdZtpYJrHe3WeF3L+5tnKcr
3lzpickWjNCuEGddn68KowiFUAHZ0VO6
-----END CERTIFICATE-----
Generated at Tue Apr 29 17:16:22 2025 by rpki-client