Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
File:                     Yl7U298nRjIvVZOFco6Ojl_4usI.mft (raw, json)
Hash identifier:          jmYQWU30r1swgai4n1bDVDyHwWMFuRTKW6WkvMBcKVs=
Subject key identifier:   50:27:4F:33:30:29:92:1D:67:D9:C6:71:4C:3C:EE:0C:22:C3:82:54
Authority key identifier: 62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2
Certificate issuer:       /CN=A9114899/serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
Certificate serial:       0774
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
Manifest number:          0767
Signing time:             Sat 12 Apr 2025 21:14:26 +0000
Manifest this update:     Sat 12 Apr 2025 21:14:25 +0000
Manifest next update:     Sat 19 Apr 2025 21:14:25 +0000
Files and hashes:         1: Yl7U298nRjIvVZOFco6Ojl_4usI.crl (hash: Iwr4Yo1KoESHb4Wl/R3DtPrdDzqGLJbKSqXQnzCrk1A=)
                          2: 2FEEF9460BA411F09C0DA13EC4F9AE02.roa (hash: nYQ3v1iu2XL5boe2h2z3J0bY4n0AsQbbrEjIQJNVO1Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl
                          rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 21:14:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1908 (0x774)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114899, serialNumber=625ED4DBDF2746322F559385728E8E8E5FF8BAC2
        Validity
            Not Before: Apr 12 21:14:25 2025 GMT
            Not After : Apr 19 21:14:25 2025 GMT
        Subject: CN=67fad7b1-3fde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ea:63:55:99:68:c3:41:8d:7a:5c:c7:ff:0e:
                    ec:ae:23:a8:4e:1c:2c:19:5d:f9:eb:ee:97:5d:dd:
                    2d:bd:c2:a0:49:98:7d:ad:6d:1a:ab:54:42:9e:d0:
                    bb:e1:d6:54:87:11:5a:3f:a0:fe:e9:8c:04:2c:66:
                    dd:ca:f7:c1:11:34:28:d3:40:2c:4d:77:8a:f9:5e:
                    ce:cf:6a:a5:5c:0e:14:37:73:2b:4e:0d:f1:61:17:
                    b2:38:01:5f:ba:2e:ca:b5:ee:b6:66:02:ac:eb:2b:
                    96:36:54:ff:4d:77:d1:2e:c1:35:ee:ed:cb:bc:ff:
                    6f:a0:be:7b:76:08:a2:80:9f:01:26:eb:a3:77:49:
                    d3:58:27:13:fd:c6:6b:76:41:13:cb:c4:af:84:36:
                    fc:5e:4a:5a:81:9d:15:6a:93:4a:45:b5:26:86:0e:
                    b5:a0:fe:81:ab:9e:d9:2d:73:fd:19:c4:ad:b2:2b:
                    3b:fd:d0:3a:9e:a2:b0:25:a6:e7:4e:f3:5e:83:03:
                    5e:42:0e:72:3e:3d:42:df:49:b4:b6:f3:65:2d:e4:
                    1c:91:92:6d:da:57:19:b6:05:10:d8:3d:b0:90:72:
                    3f:5c:5f:e0:0e:c1:e9:ab:f2:8d:6b:bb:fd:66:da:
                    cb:bb:79:32:16:84:42:55:ba:c5:ef:02:4e:97:17:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:27:4F:33:30:29:92:1D:67:D9:C6:71:4C:3C:EE:0C:22:C3:82:54
            X509v3 Authority Key Identifier:
                keyid:62:5E:D4:DB:DF:27:46:32:2F:55:93:85:72:8E:8E:8E:5F:F8:BA:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yl7U298nRjIvVZOFco6Ojl_4usI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114899/EF2326C6141811EB928F8F66C4F9AE02/Yl7U298nRjIvVZOFco6Ojl_4usI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:3f:e1:93:19:be:a4:fb:4f:44:18:3f:0a:32:95:93:22:89:
         ff:b0:68:af:7f:c9:ed:4a:4c:89:60:49:93:4a:8a:66:46:71:
         15:6f:07:14:01:cb:43:91:91:7e:47:4b:8e:81:18:f7:b9:9f:
         69:dd:3f:cc:c5:3f:f7:d5:a4:01:85:c4:42:db:ee:55:2d:13:
         3f:14:be:f7:4f:b7:77:7b:4b:9d:24:f7:68:20:a8:ba:51:26:
         60:af:9d:8b:4c:bf:48:a4:92:42:c2:ff:a0:85:02:d9:99:87:
         ba:6f:67:43:15:fc:aa:eb:3a:05:24:bc:e5:97:f0:b1:d2:a8:
         5c:2d:d2:5c:59:29:58:0e:62:10:c4:9f:0a:07:5e:04:15:8a:
         6a:aa:22:69:af:f3:e6:b3:38:b6:40:98:37:ba:82:f9:12:30:
         0f:05:70:a2:00:37:ec:7d:a5:c2:e8:53:da:99:58:b5:52:b6:
         03:d1:8c:63:38:dd:8b:2b:de:2a:12:86:05:32:48:09:b2:cc:
         84:5a:d5:a0:80:d1:ef:26:f5:cf:a0:d0:d0:1c:09:77:67:55:
         13:73:84:ff:3c:00:66:bf:24:8a:e4:03:c4:00:60:d0:5f:5d:
         00:33:7e:c4:dd:1b:74:dc:1d:d7:eb:56:8a:3a:14:b4:0f:0d:
         13:a5:15:33
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB3QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTQ4OTkxMTAvBgNVBAUTKDYyNUVENERCREYyNzQ2MzIyRjU1OTM4NTcyOEU4RThF
NUZGOEJBQzIwHhcNMjUwNDEyMjExNDI1WhcNMjUwNDE5MjExNDI1WjAYMRYwFAYD
VQQDEw02N2ZhZDdiMS0zZmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzepjVZlow0GNelzH/w7sriOoThwsGV356+6XXd0tvcKgSZh9rW0aq1RCntC7
4dZUhxFaP6D+6YwELGbdyvfBETQo00AsTXeK+V7Oz2qlXA4UN3MrTg3xYReyOAFf
ui7Kte62ZgKs6yuWNlT/TXfRLsE17u3LvP9voL57dgiigJ8BJuujd0nTWCcT/cZr
dkETy8SvhDb8XkpagZ0VapNKRbUmhg61oP6Bq57ZLXP9GcStsis7/dA6nqKwJabn
TvNegwNeQg5yPj1C30m0tvNlLeQckZJt2lcZtgUQ2D2wkHI/XF/gDsHpq/KNa7v9
ZtrLu3kyFoRCVbrF7wJOlxd7pQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFAnTzMw
KZIdZ9nGcUw87gwiw4JUMB8GA1UdIwQYMBaAFGJe1NvfJ0YyL1WThXKOjo5f+LrC
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNDg5OS9FRjIzMjZDNjE0
MTgxMUVCOTI4RjhGNjZDNEY5QUUwMi9ZbDdVMjk4blJqSXZWWk9GY282T2psXzR1
c0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lsN1UyOThuUmpJdlZaT0ZjbzZPamxfNHVzSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NDg5OS9FRjIzMjZDNjE0MTgxMUVCOTI4RjhGNjZDNEY5QUUwMi9ZbDdVMjk4blJq
SXZWWk9GY282T2psXzR1c0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCpP+GTGb6k+09EGD8KMpWTIon/sGivf8ntSkyJYEmTSopmRnEVbwcU
ActDkZF+R0uOgRj3uZ9p3T/MxT/31aQBhcRC2+5VLRM/FL73T7d3e0udJPdoIKi6
USZgr52LTL9IpJJCwv+ghQLZmYe6b2dDFfyq6zoFJLzll/Cx0qhcLdJcWSlYDmIQ
xJ8KB14EFYpqqiJpr/Pmszi2QJg3uoL5EjAPBXCiADfsfaXC6FPamVi1UrYD0Yxj
ON2LK94qEoYFMkgJssyEWtWggNHvJvXPoNDQHAl3Z1UTc4T/PABmvySK5APEAGDQ
X10AM37E3Rt03B3X61aKOhS0Dw0TpRUz
-----END CERTIFICATE-----
Generated at Sun Apr 13 05:31:39 2025 by rpki-client