Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          TArCIyJ5sYlkVTa98tF+Mx6Aih8Y3qdzb36bKAf09CM=
Subject key identifier:   CF:9C:0E:42:02:97:E5:AD:E7:BC:77:A8:0C:36:3B:81:30:47:CB:2C
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       049A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          03D5
Signing time:             Fri 13 Jun 2025 00:48:24 +0000
Manifest this update:     Fri 13 Jun 2025 00:48:24 +0000
Manifest next update:     Fri 20 Jun 2025 00:48:24 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: /t/ccTmi8/F5v2UDre6hkItiGzRHz1ELyAwJHhxkeR0=)
                          2: B351D67E295D11F0B6373D85C4F9AE02.roa (hash: 6J+RHRu9KQC19R4POfCZ6vtZ0F8pQfkQ77qgKUv03E0=)
                          3: 235C33AA841511EEB8881E26C4F9AE02.roa (hash: gh6H1oXOeu80i+EJHcbBEp2/DgpqUvIG4FhNIsmOBc8=)
                          4: FC458FFABD2F11EFACAEDF48C4F9AE02.roa (hash: zB6o1ufSPR15qZaXVJkiDWkGqSq/IwuqWXWe0bUcf1Y=)
                          5: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: 3+hYQrTmF+e7jJciHHC9Syz1XLKiAuOCDuMHFEIoOO8=)
                          6: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: yoHxToNdVsEl2/mlXGoTSTZxsnICbltZ8OX7V22JdbQ=)
                          7: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: xMiHMYItwXrD425Qd67NbjvjX4HrJ3EnpnA8c/QF/4k=)
                          8: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: SilbnDSMyvFBaNxXZnHVsn7YIdcJKbT+9vzuxU+MumM=)
                          9: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: A8LP0mnaTBBKppNqPSMaDhPFCk6GGBkjSaBDc8dCjBI=)
                          10: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: GEOmMPHt+G2/MbW4UDY6/tPaY4MdJDx+hT+IJOD6OI0=)
                          11: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: 9J2iOFdXW0WTaVQoSkjTpRubYQV1uYwslH5WX54SWS8=)
                          12: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: cEUErhxJhRs9Ayd1OjEDxa3aUEaS/H1Cn1wGLQy/Hdo=)
                          13: DD12F48AEC2611EF94F85F09C4F9AE02.roa (hash: 5x3hwbD6OKSIDNRFPjnTH18AkwSHTg00pMz0FKOos+E=)
                          14: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: R2/WUKzxoHuFFd/QsgqeEUvYq+HCK78+7w9Z8fUIsWc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Jun 2025 00:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1178 (0x49a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Jun 13 00:48:24 2025 GMT
            Not After : Jun 20 00:48:24 2025 GMT
        Subject: CN=684b7558-7eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:33:e7:01:5b:95:15:49:95:fb:70:42:49:58:
                    74:a9:55:50:6f:43:b8:81:02:45:13:f4:e3:70:c7:
                    52:ce:f8:3e:09:84:36:36:64:a6:d5:12:51:d7:b5:
                    68:5c:dd:43:51:3c:68:5c:53:66:8e:d0:e4:bf:98:
                    23:70:bf:e7:0f:b7:9e:30:e4:f8:5b:c4:56:cd:1a:
                    6b:8f:4c:fa:aa:ca:2a:f9:ba:1d:41:3c:f7:a7:de:
                    34:10:0e:53:32:22:b6:d1:2a:09:d6:48:09:02:37:
                    73:0e:b3:8f:06:fc:c1:68:3d:33:e4:74:ed:35:96:
                    6c:b3:c9:45:e0:ce:77:01:c4:fe:39:75:8c:fb:1f:
                    f5:cc:46:5c:e9:9f:0c:49:ea:94:f0:51:34:a9:73:
                    fc:d6:d0:cc:b7:38:f4:99:84:d1:19:a6:06:d7:90:
                    93:ce:8a:fa:ec:03:2a:8c:4a:88:d1:4b:54:52:4c:
                    4c:50:d1:fb:a9:96:28:bf:04:cd:02:a4:a1:6a:80:
                    89:f9:46:5c:9e:ee:8e:ef:0e:eb:09:9c:f9:28:3e:
                    8c:86:6e:ca:a3:24:8d:1e:a3:c8:d1:e3:38:e7:bd:
                    b9:5a:ab:12:41:76:63:f7:c5:99:1f:0a:8d:6f:e1:
                    04:42:47:27:44:be:b1:f7:e6:76:88:d6:3e:21:00:
                    89:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9C:0E:42:02:97:E5:AD:E7:BC:77:A8:0C:36:3B:81:30:47:CB:2C
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ad:b1:68:53:13:cf:87:55:66:dc:7c:ec:9d:b9:f7:cb:11:
         04:b1:15:9b:5b:12:ee:f2:cc:34:d3:3a:3d:8f:29:3b:c9:e6:
         66:e7:8a:48:5c:cf:0a:0e:7f:3f:db:3c:e0:94:cb:cb:24:f3:
         ac:91:7b:95:f5:6b:b5:f6:55:a0:88:d5:a0:3b:07:02:4f:6f:
         5b:87:f2:cd:f2:61:84:34:3f:2a:77:0f:d3:99:60:ee:6e:43:
         58:50:19:ac:ce:1e:1b:3a:5e:b8:25:7b:2c:aa:fc:42:f6:6d:
         e4:4a:89:dc:02:2c:06:65:24:84:b4:b9:95:97:38:92:fb:61:
         98:85:12:dd:c8:65:41:b7:f8:16:e0:fd:42:ef:67:20:0d:a6:
         38:bf:d2:24:7c:65:df:8b:82:86:77:04:b2:3a:64:a9:74:99:
         8c:69:77:3f:8d:15:a1:a7:60:07:46:bb:48:ed:3d:a3:37:5c:
         3a:03:33:fb:7b:82:99:91:d7:22:e0:59:f0:6f:41:b9:05:5c:
         d9:4d:98:4f:83:94:31:a0:2f:c2:d0:2e:21:ec:f0:26:3a:51:
         74:aa:f2:6f:2e:69:9e:e1:8d:73:1c:56:85:2e:13:38:a5:09:
         3e:27:90:a2:e2:65:19:69:5c:3a:18:f5:f6:53:48:ca:64:f7:
         30:92:2b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:25:38 2025 by rpki-client