Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
File:                     dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft (raw, json)
Hash identifier:          GYX/yl4f/bxE7f/n56OrVWZbxZD6mo+Dk63JKjNFjqU=
Subject key identifier:   94:17:80:6F:BF:57:66:AA:C0:C2:A8:2D:C2:69:64:5A:DC:46:C1:47
Authority key identifier: 77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33
Certificate issuer:       /CN=A919ECE7/serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
Certificate serial:       0706
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
Manifest number:          06D5
Signing time:             Thu 24 Apr 2025 21:58:39 +0000
Manifest this update:     Thu 24 Apr 2025 21:58:38 +0000
Manifest next update:     Thu 01 May 2025 21:58:38 +0000
Files and hashes:         1: dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl (hash: 9zi+8ZIx09F5WQSNUkkn0FyX1eY6jbiTcE78AyRadPE=)
                          2: CA9C08E07C7E11EFBDC93555C4F9AE02.roa (hash: B9gXP8wVYa4nzRdqoTryX/TqkLwtBQMA1wTvqei6JOM=)
                          3: 6B0EF3045B4911ED8862970DC4F9AE02.roa (hash: HufxlMWBsko144G4tR19UzbVfHKirhQM0DbZOGV07n8=)
                          4: 4641C3785C2311EDA3D17465C4F9AE02.roa (hash: 1cYw/FnNhsdWx9pKxBCUUJjrGeyH6sgJ5u2vBWIY2hY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl
                          rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 21:58:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1798 (0x706)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919ECE7, serialNumber=77370BC07305D19DBDACCE4BF7209E1EB6D40E33
        Validity
            Not Before: Apr 24 21:58:38 2025 GMT
            Not After : May  1 21:58:38 2025 GMT
        Subject: CN=680ab40e-d0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:89:99:fc:21:58:af:b7:8f:85:4c:09:e8:
                    5f:c6:01:b0:f6:49:12:76:e8:57:69:5a:8f:ea:fc:
                    51:a1:7b:ec:65:d3:e0:4f:5e:9e:a5:28:c4:41:34:
                    93:60:fd:2b:5a:4a:f6:9e:1b:06:b7:03:ef:2b:8e:
                    94:5d:fa:a7:23:3d:c7:c5:59:4d:16:29:dc:ce:54:
                    d5:d1:7d:2f:50:d4:8c:66:6f:64:29:cf:c7:be:4e:
                    26:74:58:7b:f7:16:bb:0a:82:e8:31:8a:55:78:9c:
                    c6:50:d2:1b:d8:8e:68:05:e6:2d:27:37:c5:63:82:
                    43:aa:e9:e5:55:02:36:f1:ff:72:59:b2:93:4f:16:
                    3c:70:90:c2:93:6c:f3:a5:6f:7b:d4:a5:a4:d8:e7:
                    fd:32:2b:7b:30:58:25:2a:4c:4e:9f:4e:be:26:b0:
                    0a:04:e8:0d:ba:6b:7e:74:43:4c:74:03:a5:cd:e6:
                    df:94:4e:75:8a:88:74:ec:50:6f:ae:d5:dd:5b:e3:
                    79:a9:73:04:c5:7f:c1:6e:41:fc:5e:59:27:09:b4:
                    45:3d:7d:8f:f8:c6:ca:dc:b5:73:7b:52:8f:13:7d:
                    5c:dd:6f:6f:44:23:38:e8:24:53:bf:bd:26:31:1e:
                    02:e2:05:13:f7:7f:8e:a4:62:d2:75:bf:d3:3d:28:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:80:6F:BF:57:66:AA:C0:C2:A8:2D:C2:69:64:5A:DC:46:C1:47
            X509v3 Authority Key Identifier:
                keyid:77:37:0B:C0:73:05:D1:9D:BD:AC:CE:4B:F7:20:9E:1E:B6:D4:0E:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dzcLwHMF0Z29rM5L9yCeHrbUDjM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919ECE7/5E05DBA45FAC11EB8494452FC4F9AE02/dzcLwHMF0Z29rM5L9yCeHrbUDjM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:29:c3:a7:75:6a:2a:8f:02:0e:b5:c5:15:e5:1a:40:a5:db:
         47:ad:5b:de:93:9d:2b:fc:9b:6d:48:39:54:e6:96:57:c9:58:
         d6:1f:01:88:bf:e4:f1:c4:46:d3:a2:71:7a:02:ef:48:bb:3a:
         46:5f:dc:b6:d3:9c:65:85:95:18:76:3e:f2:9c:62:01:3f:b6:
         9b:d3:b9:39:19:8c:bf:b9:21:e7:7b:80:6d:33:d3:b1:ef:e3:
         ea:5b:71:ab:dd:28:38:84:ac:21:b6:c7:a6:e8:c9:85:ce:12:
         db:c9:16:72:52:4c:2f:be:8e:ee:2d:1e:ae:44:2c:a0:77:f6:
         44:61:96:cd:d4:47:03:6a:72:17:e8:da:ca:59:00:06:b2:c1:
         42:89:ad:b1:22:02:f8:c7:23:61:cd:2d:ef:87:a6:90:47:e8:
         4f:59:26:b6:5e:4c:11:d8:4d:f1:d7:3f:b3:58:d9:e8:fd:e4:
         bd:ab:0e:98:a6:38:27:e3:41:e5:01:83:46:6d:26:76:bc:05:
         c9:fe:cb:3a:ba:9f:12:7f:01:dc:58:7b:5d:93:f0:9b:17:7a:
         5a:b8:96:1c:b8:6a:5f:97:41:3c:e7:4a:ca:a0:a7:e4:77:2c:
         42:58:95:91:25:c6:d4:ac:e8:a4:0e:30:86:12:0b:2e:95:d5:
         28:d8:a2:78
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVDRTcxMTAvBgNVBAUTKDc3MzcwQkMwNzMwNUQxOURCREFDQ0U0QkY3MjA5RTFF
QjZENDBFMzMwHhcNMjUwNDI0MjE1ODM4WhcNMjUwNTAxMjE1ODM4WjAYMRYwFAYD
VQQDEw02ODBhYjQwZS1kMGUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm+2JmfwhWK+3j4VMCehfxgGw9kkSduhXaVqP6vxRoXvsZdPgT16epSjEQTST
YP0rWkr2nhsGtwPvK46UXfqnIz3HxVlNFinczlTV0X0vUNSMZm9kKc/Hvk4mdFh7
9xa7CoLoMYpVeJzGUNIb2I5oBeYtJzfFY4JDqunlVQI28f9yWbKTTxY8cJDCk2zz
pW971KWk2Of9Mit7MFglKkxOn06+JrAKBOgNumt+dENMdAOlzebflE51ioh07FBv
rtXdW+N5qXMExX/BbkH8XlknCbRFPX2P+MbK3LVze1KPE31c3W9vRCM46CRTv70m
MR4C4gUT93+OpGLSdb/TPSj+uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJQXgG+/
V2aqwMKoLcJpZFrcRsFHMB8GA1UdIwQYMBaAFHc3C8BzBdGdvazOS/cgnh621A4z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUNFNy81RTA1REJBNDVG
QUMxMUVCODQ5NDQ1MkZDNEY5QUUwMi9kemNMd0hNRjBaMjlyTTVMOXlDZUhyYlVE
ak0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2R6Y0x3SE1GMFoyOXJNNUw5eUNlSHJiVURqTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUNFNy81RTA1REJBNDVGQUMxMUVCODQ5NDQ1MkZDNEY5QUUwMi9kemNMd0hNRjBa
MjlyTTVMOXlDZUhyYlVEak0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCmKcOndWoqjwIOtcUV5RpApdtHrVvek50r/JttSDlU5pZXyVjWHwGI
v+TxxEbTonF6Au9IuzpGX9y205xlhZUYdj7ynGIBP7ab07k5GYy/uSHne4BtM9Ox
7+PqW3Gr3Sg4hKwhtsem6MmFzhLbyRZyUkwvvo7uLR6uRCygd/ZEYZbN1EcDanIX
6NrKWQAGssFCia2xIgL4xyNhzS3vh6aQR+hPWSa2XkwR2E3x1z+zWNno/eS9qw6Y
pjgn40HlAYNGbSZ2vAXJ/ss6up8SfwHcWHtdk/CbF3pauJYcuGpfl0E850rKoKfk
dyxCWJWRJcbUrOikDjCGEgsuldUo2KJ4
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:20:38 2025 by rpki-client