Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
File:                     apVIHOj0DdiJXR-3rukOWVm6g8E.mft (raw, json)
Hash identifier:          PHWpvdCc9wR+26LCKXB5/plGM09QfAhmINZwOBYwQJg=
Subject key identifier:   4E:FE:67:93:BD:B3:AE:52:41:5E:31:32:24:17:55:62:A3:58:55:6A
Authority key identifier: 6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1
Certificate issuer:       /CN=A918DA0C/serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
Certificate serial:       055B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
Manifest number:          0554
Signing time:             Thu 12 Jun 2025 23:00:48 +0000
Manifest this update:     Thu 12 Jun 2025 23:00:47 +0000
Manifest next update:     Thu 19 Jun 2025 23:00:47 +0000
Files and hashes:         1: apVIHOj0DdiJXR-3rukOWVm6g8E.crl (hash: 27ELQWgjSlNPrail3qRF4a+Kca8hqucMtApvmYWm9g4=)
                          2: 0C3D8674345511EFA05D0C10C4F9AE02.roa (hash: ZnpRalcn1+UDz0Qh9MVT7PEHG3mXFgwSlTQlnQVlTtU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl
                          rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Jun 2025 23:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371 (0x55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DA0C, serialNumber=6A95481CE8F40DD8895D1FB7AEE90E5959BA83C1
        Validity
            Not Before: Jun 12 23:00:47 2025 GMT
            Not After : Jun 19 23:00:47 2025 GMT
        Subject: CN=684b5c1f-7a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:09:c4:84:cf:a7:6a:38:4e:2a:c8:15:9f:39:
                    d6:26:9c:bf:4d:f9:a8:17:70:68:65:80:1a:11:64:
                    71:e7:62:4d:84:a7:af:31:a7:38:a3:bc:fd:0e:6c:
                    17:83:c9:4b:96:ff:12:5d:7c:d2:95:11:3b:7e:e9:
                    c3:db:02:fd:cc:b3:41:1e:9b:b3:34:ed:c9:8a:49:
                    11:a2:e7:40:70:04:c2:91:8a:44:28:7a:d9:cf:d7:
                    7f:c3:8b:e2:ef:05:03:db:b7:d6:70:ee:1c:36:8d:
                    8f:fc:21:09:7e:67:9d:52:d2:7d:5f:e6:06:eb:61:
                    95:24:fc:35:8a:74:0c:3a:46:56:41:a7:63:38:c7:
                    92:8b:12:28:f8:e6:69:bb:3b:16:d8:f8:47:aa:20:
                    d8:26:30:55:74:90:68:16:20:9c:03:8b:fd:46:58:
                    1f:17:5d:2a:27:eb:bd:ef:57:e7:a3:43:60:11:e8:
                    ca:0e:63:02:66:19:a6:1a:d6:7a:81:f7:24:23:22:
                    92:15:47:5b:33:30:14:85:ae:79:f6:56:f7:d7:ae:
                    fc:b8:49:cc:b1:97:7e:25:1e:ea:1c:d5:c6:94:62:
                    ad:8a:2f:3f:65:fd:df:94:c6:8f:25:49:27:c3:28:
                    53:1f:84:9e:8e:2e:17:c8:00:7e:7b:dc:5b:c5:56:
                    33:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FE:67:93:BD:B3:AE:52:41:5E:31:32:24:17:55:62:A3:58:55:6A
            X509v3 Authority Key Identifier:
                keyid:6A:95:48:1C:E8:F4:0D:D8:89:5D:1F:B7:AE:E9:0E:59:59:BA:83:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apVIHOj0DdiJXR-3rukOWVm6g8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DA0C/B6DE1312F04911EB941FFB32C4F9AE02/apVIHOj0DdiJXR-3rukOWVm6g8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:9b:69:ca:10:1e:3e:e7:f7:1a:90:08:1e:ed:95:50:8b:c4:
         e0:96:f8:37:17:d8:29:1a:e2:a9:a5:bc:cc:45:31:86:09:ca:
         d8:02:76:d4:2f:d5:ab:f0:5e:20:a4:e4:bf:a5:62:88:b4:b1:
         16:93:b7:df:6e:62:95:99:86:4c:fb:4d:87:43:1e:3e:cb:13:
         69:76:ee:b7:b5:f0:25:83:cb:f7:f6:ca:85:8a:50:ee:8c:ea:
         60:51:1e:7b:86:ff:17:26:54:b9:8b:cc:62:f7:b0:8f:67:c3:
         47:bb:1b:61:1f:a6:a2:ec:1f:d7:73:f2:bc:a1:fe:79:05:80:
         5b:a7:17:97:4c:b7:2c:54:b4:be:d1:b6:ab:9d:af:ad:59:e7:
         ae:df:ce:12:b2:3a:08:2d:45:59:0a:4c:f0:db:af:89:5a:2a:
         ec:7b:a2:71:61:b3:ce:bc:8a:41:b5:f9:24:51:7d:27:5f:63:
         ad:3e:f6:b0:b3:14:12:c5:68:90:d7:30:37:09:ab:3d:2f:35:
         33:f0:43:d9:9a:6f:0e:69:7c:d9:90:d2:f6:b4:1a:f8:39:90:
         8b:1f:7c:0d:b8:b1:70:23:29:d2:29:c7:20:c7:66:cc:fc:a3:
         dd:a1:40:ac:0a:8e:19:21:9a:76:0e:8b:6a:56:ec:86:89:de:
         ff:85:d5:fb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBVswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OERBMEMxMTAvBgNVBAUTKDZBOTU0ODFDRThGNDBERDg4OTVEMUZCN0FFRTkwRTU5
NTlCQTgzQzEwHhcNMjUwNjEyMjMwMDQ3WhcNMjUwNjE5MjMwMDQ3WjAYMRYwFAYD
VQQDEw02ODRiNWMxZi03YTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtQnEhM+najhOKsgVnznWJpy/TfmoF3BoZYAaEWRx52JNhKevMac4o7z9DmwX
g8lLlv8SXXzSlRE7funD2wL9zLNBHpuzNO3JikkRoudAcATCkYpEKHrZz9d/w4vi
7wUD27fWcO4cNo2P/CEJfmedUtJ9X+YG62GVJPw1inQMOkZWQadjOMeSixIo+OZp
uzsW2PhHqiDYJjBVdJBoFiCcA4v9RlgfF10qJ+u971fno0NgEejKDmMCZhmmGtZ6
gfckIyKSFUdbMzAUha559lb31678uEnMsZd+JR7qHNXGlGKtii8/Zf3flMaPJUkn
wyhTH4Seji4XyAB+e9xbxVYzJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7+Z5O9
s65SQV4xMiQXVWKjWFVqMB8GA1UdIwQYMBaAFGqVSBzo9A3YiV0ft67pDllZuoPB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REEwQy9CNkRFMTMxMkYw
NDkxMUVCOTQxRkZCMzJDNEY5QUUwMi9hcFZJSE9qMERkaUpYUi0zcnVrT1dWbTZn
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FwVklIT2owRGRpSlhSLTNydWtPV1ZtNmc4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
REEwQy9CNkRFMTMxMkYwNDkxMUVCOTQxRkZCMzJDNEY5QUUwMi9hcFZJSE9qMERk
aUpYUi0zcnVrT1dWbTZnOEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCSm2nKEB4+5/cakAge7ZVQi8Tglvg3F9gpGuKppbzMRTGGCcrYAnbU
L9Wr8F4gpOS/pWKItLEWk7ffbmKVmYZM+02HQx4+yxNpdu63tfAlg8v39sqFilDu
jOpgUR57hv8XJlS5i8xi97CPZ8NHuxthH6ai7B/Xc/K8of55BYBbpxeXTLcsVLS+
0barna+tWeeu384SsjoILUVZCkzw26+JWirse6JxYbPOvIpBtfkkUX0nX2OtPvaw
sxQSxWiQ1zA3Cas9LzUz8EPZmm8OaXzZkNL2tBr4OZCLH3wNuLFwIynSKccgx2bM
/KPdoUCsCo4ZIZp2DotqVuyGid7/hdX7
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:32:24 2025 by rpki-client