Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
File:                     IgUecf7QG75bnNYkR2DObpAwevc.mft (raw, json)
Hash identifier:          kAiz3k+gESQ7od+D/+N9oKf7ovWTWqMoQA9+1GuFRN4=
Subject key identifier:   7C:B1:5E:14:82:C4:B3:C1:A9:24:F2:B7:2B:5A:9F:D7:D5:2D:B9:CF
Authority key identifier: 22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7
Certificate issuer:       /CN=A9190226/serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
Certificate serial:       01F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
Manifest number:          01EE
Signing time:             Tue 17 Jun 2025 01:41:50 +0000
Manifest this update:     Tue 17 Jun 2025 01:41:49 +0000
Manifest next update:     Tue 24 Jun 2025 01:41:49 +0000
Files and hashes:         1: IgUecf7QG75bnNYkR2DObpAwevc.crl (hash: lfdTgQubbrwplob0iNllUEQ/JlkFuSVnvSilY0PVmlk=)
                          2: AF9BA1D2717111ED8518666EC4F9AE02.roa (hash: lr+IV3E8IbLUZRr7dcIaxmNZ6ecPXYlRygnmNCQ86Iw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl
                          rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 24 Jun 2025 01:41:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190226, serialNumber=22051E71FED01BBE5B9CD6244760CE6E90307AF7
        Validity
            Not Before: Jun 17 01:41:49 2025 GMT
            Not After : Jun 24 01:41:49 2025 GMT
        Subject: CN=6850c7dd-6153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:38:66:a5:75:45:99:71:97:f7:89:5c:84:06:
                    83:00:1b:c0:3f:ec:43:1a:72:0a:91:13:81:f0:d2:
                    c5:f6:6a:fb:c3:75:d3:29:12:03:6e:2a:16:37:a6:
                    8b:29:36:90:e6:27:62:7b:de:3b:df:ab:17:e2:ec:
                    46:09:28:39:ca:40:5d:c2:74:2c:f3:b8:0d:e3:fc:
                    96:34:62:79:62:b2:4d:17:ad:25:44:7b:29:b6:93:
                    74:65:72:b2:dc:46:6f:53:0b:f3:10:19:cf:08:55:
                    45:bf:7b:54:bc:96:82:ed:0d:2f:10:b7:08:86:a2:
                    0a:6b:78:25:ec:8b:28:3f:f2:ba:29:16:b4:d2:4f:
                    b2:f6:60:5f:b7:58:e9:6b:10:34:d7:3c:08:9b:57:
                    bf:3f:9d:7b:e2:0b:ba:67:71:a3:4d:29:00:4f:aa:
                    85:2d:ef:86:6d:5b:ec:40:b6:1c:0c:81:af:dc:88:
                    a3:b6:25:c9:ea:f0:ef:d6:01:31:3e:1e:fc:00:f3:
                    c9:57:b4:e9:b6:aa:3d:2f:a5:c3:fc:d4:54:1a:01:
                    4d:93:bc:63:a9:d4:be:79:19:eb:21:f3:a0:6a:02:
                    4b:eb:f4:d4:a6:4f:1c:1f:cd:74:a4:68:16:83:0e:
                    12:af:41:e0:fd:53:48:09:0b:a6:1f:87:2c:60:31:
                    18:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B1:5E:14:82:C4:B3:C1:A9:24:F2:B7:2B:5A:9F:D7:D5:2D:B9:CF
            X509v3 Authority Key Identifier:
                keyid:22:05:1E:71:FE:D0:1B:BE:5B:9C:D6:24:47:60:CE:6E:90:30:7A:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IgUecf7QG75bnNYkR2DObpAwevc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190226/B58EBA3055B411EDA0795053C4F9AE02/IgUecf7QG75bnNYkR2DObpAwevc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:67:32:92:7b:03:40:30:92:16:30:af:84:b2:34:08:5f:c9:
         b4:c8:1d:46:4d:8c:7c:e5:66:ee:e4:ea:ab:a0:7d:c7:47:e9:
         89:45:0d:e3:97:2f:f1:29:8c:5a:62:6f:80:1e:de:08:f8:26:
         be:8a:03:7e:14:a5:2d:d8:2a:11:df:67:dd:56:05:a3:64:37:
         e8:cd:96:78:09:89:77:cd:3a:e6:7c:f7:0d:02:dc:dd:4c:23:
         2a:4e:fb:59:25:d6:be:99:b4:7c:2f:3b:07:35:60:25:bc:bd:
         af:a2:c9:49:b5:56:30:57:cf:dc:7e:2a:92:1c:f6:f5:55:ce:
         6e:55:52:4f:1a:76:d5:b7:9c:81:d8:59:1e:c2:18:2b:9d:a2:
         c7:dc:e5:0a:25:65:c6:fb:1a:92:ce:63:7b:90:db:a3:8b:44:
         2c:f5:a6:c2:53:ed:27:e6:4b:ee:e8:e8:d0:01:1a:fc:1e:68:
         08:59:88:ff:be:75:a1:f7:b0:fb:1e:64:20:88:48:d5:30:25:
         6c:7e:53:68:fd:ae:df:a8:a9:97:1b:2a:99:02:81:79:fc:e6:
         b5:02:88:de:d8:d9:98:60:98:37:52:78:1a:c4:be:f2:3a:94:
         01:5e:39:94:cd:a5:ae:1b:8c:3a:d8:de:08:42:88:fe:cf:56:
         03:8a:a6:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAfIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTAyMjYxMTAvBgNVBAUTKDIyMDUxRTcxRkVEMDFCQkU1QjlDRDYyNDQ3NjBDRTZF
OTAzMDdBRjcwHhcNMjUwNjE3MDE0MTQ5WhcNMjUwNjI0MDE0MTQ5WjAYMRYwFAYD
VQQDEw02ODUwYzdkZC02MTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyzhmpXVFmXGX94lchAaDABvAP+xDGnIKkROB8NLF9mr7w3XTKRIDbioWN6aL
KTaQ5idie94736sX4uxGCSg5ykBdwnQs87gN4/yWNGJ5YrJNF60lRHsptpN0ZXKy
3EZvUwvzEBnPCFVFv3tUvJaC7Q0vELcIhqIKa3gl7IsoP/K6KRa00k+y9mBft1jp
axA01zwIm1e/P5174gu6Z3GjTSkAT6qFLe+GbVvsQLYcDIGv3IijtiXJ6vDv1gEx
Ph78APPJV7Tptqo9L6XD/NRUGgFNk7xjqdS+eRnrIfOgagJL6/TUpk8cH810pGgW
gw4Sr0Hg/VNICQumH4csYDEYRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHyxXhSC
xLPBqSTytytan9fVLbnPMB8GA1UdIwQYMBaAFCIFHnH+0Bu+W5zWJEdgzm6QMHr3
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDIyNi9CNThFQkEzMDU1
QjQxMUVEQTA3OTUwNTNDNEY5QUUwMi9JZ1VlY2Y3UUc3NWJuTllrUjJET2JwQXdl
dmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0lnVWVjZjdRRzc1Ym5OWWtSMkRPYnBBd2V2Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDIyNi9CNThFQkEzMDU1QjQxMUVEQTA3OTUwNTNDNEY5QUUwMi9JZ1VlY2Y3UUc3
NWJuTllrUjJET2JwQXdldmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfZzKSewNAMJIWMK+EsjQIX8m0yB1GTYx85Wbu5OqroH3HR+mJRQ3j
ly/xKYxaYm+AHt4I+Ca+igN+FKUt2CoR32fdVgWjZDfozZZ4CYl3zTrmfPcNAtzd
TCMqTvtZJda+mbR8LzsHNWAlvL2voslJtVYwV8/cfiqSHPb1Vc5uVVJPGnbVt5yB
2FkewhgrnaLH3OUKJWXG+xqSzmN7kNuji0Qs9abCU+0n5kvu6OjQARr8HmgIWYj/
vnWh97D7HmQgiEjVMCVsflNo/a7fqKmXGyqZAoF5/Oa1Aoje2NmYYJg3UngaxL7y
OpQBXjmUzaWuG4w62N4IQoj+z1YDiqao
-----END CERTIFICATE-----
Generated at Tue Jun 17 07:56:24 2025 by rpki-client