Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
File:                     oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft (raw, json)
Hash identifier:          w/rJZ6oFVovM9iLAWZiz6/8/h0YjS9fJxarFiJVFPCw=
Subject key identifier:   A6:33:BF:A6:DB:CA:47:4B:3E:63:EF:7D:09:9A:8D:24:2F:E6:DE:DC
Authority key identifier: A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C
Certificate issuer:       /CN=A918D771/serialNumber=A32153712537600D71342EC069A57F3EED60D70C
Certificate serial:       076B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
Manifest number:          0757
Signing time:             Thu 12 Jun 2025 21:21:14 +0000
Manifest this update:     Thu 12 Jun 2025 21:21:13 +0000
Manifest next update:     Thu 19 Jun 2025 21:21:13 +0000
Files and hashes:         1: oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl (hash: 09yK0zu9AwCTQDmuV49tMksQKXN45AzczY7KYdZTC1w=)
                          2: B10AE62CBC4711EFAB43324BC4F9AE02.roa (hash: Cg9ICYE9I7QHfG+L0DGU6D2Wt92m7BQcheqj3kGMwFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl
                          rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 21:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1899 (0x76b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D771, serialNumber=A32153712537600D71342EC069A57F3EED60D70C
        Validity
            Not Before: Jun 12 21:21:13 2025 GMT
            Not After : Jun 19 21:21:13 2025 GMT
        Subject: CN=684b44c9-b8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f2:f8:90:2a:07:8c:2b:3e:e4:18:59:6d:72:
                    92:f2:e7:78:21:e8:e4:c9:4b:a7:1e:93:d2:95:64:
                    7e:87:f8:cf:bf:50:54:4c:21:22:46:42:ca:5e:7f:
                    02:63:c9:0f:6f:a5:9e:5c:c4:33:97:95:3c:43:f6:
                    7a:74:ea:31:b3:e6:2d:fa:a3:6a:05:1f:e9:03:12:
                    50:3d:1e:4a:4f:44:9a:3a:05:b3:4a:85:61:e7:c9:
                    68:3d:2d:3b:24:a5:b2:fd:93:7d:95:f5:eb:27:18:
                    bc:5f:6e:ef:c4:d6:54:db:f0:06:17:88:3d:12:04:
                    ec:ab:c0:15:80:83:7a:89:81:48:c0:e2:51:18:67:
                    d9:d7:75:00:17:bf:90:19:5b:0f:80:23:ad:ee:39:
                    00:4a:cb:39:89:1f:80:90:88:7f:03:c7:f4:c9:e6:
                    f4:28:7a:00:7b:e9:38:b9:79:fb:8a:07:2e:03:ca:
                    7e:0c:5a:d9:91:a3:02:56:f7:65:a1:c6:95:7b:86:
                    11:c6:27:de:60:05:b6:dc:a4:2a:6b:ba:b3:56:57:
                    9f:0d:ea:19:f4:cb:22:e2:d8:2c:7a:25:9c:5f:1a:
                    90:1d:b9:92:83:22:b2:16:18:b7:43:96:50:cc:08:
                    56:07:97:c1:9a:bc:c8:36:12:ab:59:a6:3a:53:b3:
                    47:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:33:BF:A6:DB:CA:47:4B:3E:63:EF:7D:09:9A:8D:24:2F:E6:DE:DC
            X509v3 Authority Key Identifier:
                keyid:A3:21:53:71:25:37:60:0D:71:34:2E:C0:69:A5:7F:3E:ED:60:D7:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D771/50C0804E294B11EBA78C1B2FC4F9AE02/oyFTcSU3YA1xNC7AaaV_Pu1g1ww.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:9f:2c:d0:78:62:f7:02:4b:f5:f2:1e:8f:97:1f:5e:d6:0a:
         46:bf:22:ff:a4:0b:69:c7:96:97:dd:51:5d:2a:95:9c:03:2b:
         d0:f1:ca:17:83:b7:f7:c0:a4:b8:da:08:82:50:f1:be:53:c8:
         59:fb:eb:75:1e:18:73:ba:96:21:d9:b1:92:64:f3:6a:3a:cc:
         65:2a:3c:b1:46:25:8b:d9:fb:75:7c:f5:f8:fe:c1:e9:91:ed:
         d7:b5:e8:8e:0c:86:ae:16:05:11:4c:57:96:f5:63:99:06:e5:
         a1:f4:fd:34:1d:77:e9:3c:c6:32:05:e7:c9:9a:7d:79:c8:93:
         34:6b:12:3a:c0:52:10:27:bf:c6:6f:58:a8:d8:6f:7e:78:e2:
         f2:e8:cf:da:b0:38:93:ad:3d:f2:3d:d0:bb:1c:22:02:5f:3a:
         74:0e:d6:40:81:b7:8b:44:a7:ba:1f:5c:3d:99:b5:96:46:5c:
         dd:5c:c2:a3:7f:fa:17:9c:5b:4d:63:3e:62:fa:61:ad:76:f8:
         59:7f:76:23:ca:01:93:b3:00:fd:73:d0:85:26:ab:60:2a:41:
         30:7e:fe:cd:97:33:8d:bf:f4:7d:9b:9e:19:05:23:bb:24:a9:
         1e:70:0e:1e:36:ab:57:08:80:50:df:1a:d8:c7:f8:a7:33:26:
         49:5e:d7:fd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ3NzExMTAvBgNVBAUTKEEzMjE1MzcxMjUzNzYwMEQ3MTM0MkVDMDY5QTU3RjNF
RUQ2MEQ3MEMwHhcNMjUwNjEyMjEyMTEzWhcNMjUwNjE5MjEyMTEzWjAYMRYwFAYD
VQQDEw02ODRiNDRjOS1iOGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2PL4kCoHjCs+5BhZbXKS8ud4IejkyUunHpPSlWR+h/jPv1BUTCEiRkLKXn8C
Y8kPb6WeXMQzl5U8Q/Z6dOoxs+Yt+qNqBR/pAxJQPR5KT0SaOgWzSoVh58loPS07
JKWy/ZN9lfXrJxi8X27vxNZU2/AGF4g9EgTsq8AVgIN6iYFIwOJRGGfZ13UAF7+Q
GVsPgCOt7jkASss5iR+AkIh/A8f0yeb0KHoAe+k4uXn7igcuA8p+DFrZkaMCVvdl
ocaVe4YRxifeYAW23KQqa7qzVlefDeoZ9Msi4tgseiWcXxqQHbmSgyKyFhi3Q5ZQ
zAhWB5fBmrzINhKrWaY6U7NHuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYzv6bb
ykdLPmPvfQmajSQv5t7cMB8GA1UdIwQYMBaAFKMhU3ElN2ANcTQuwGmlfz7tYNcM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDc3MS81MEMwODA0RTI5
NEIxMUVCQTc4QzFCMkZDNEY5QUUwMi9veUZUY1NVM1lBMXhOQzdBYWFWX1B1MWcx
d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL295RlRjU1UzWUExeE5DN0FhYVZfUHUxZzF3dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDc3MS81MEMwODA0RTI5NEIxMUVCQTc4QzFCMkZDNEY5QUUwMi9veUZUY1NVM1lB
MXhOQzdBYWFWX1B1MWcxd3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQnyzQeGL3Akv18h6Plx9e1gpGvyL/pAtpx5aX3VFdKpWcAyvQ8coX
g7f3wKS42giCUPG+U8hZ++t1HhhzupYh2bGSZPNqOsxlKjyxRiWL2ft1fPX4/sHp
ke3XteiODIauFgURTFeW9WOZBuWh9P00HXfpPMYyBefJmn15yJM0axI6wFIQJ7/G
b1io2G9+eOLy6M/asDiTrT3yPdC7HCICXzp0DtZAgbeLRKe6H1w9mbWWRlzdXMKj
f/oXnFtNYz5i+mGtdvhZf3YjygGTswD9c9CFJqtgKkEwfv7NlzONv/R9m54ZBSO7
JKkecA4eNqtXCIBQ3xrYx/inMyZJXtf9
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:30:58 2025 by rpki-client