Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
File:                     -swzUrzjgChT2_SwQFJc_B4VLmA.mft (raw, json)
Hash identifier:          oT+tu7Q4jJmou2LR/J6WAHwaUWXDEIwsNEky5Y4E4Hg=
Subject key identifier:   B6:6E:39:68:08:21:C1:85:9A:25:6A:D9:5E:8C:24:81:A6:B6:D8:3D
Authority key identifier: FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60
Certificate issuer:       /CN=A911B22E/serialNumber=FACC3352BCE3802853DBF4B040525CFC1E152E60
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
Manifest number:          8F
Signing time:             Sat 05 Apr 2025 05:42:12 +0000
Manifest this update:     Sat 05 Apr 2025 05:42:11 +0000
Manifest next update:     Sat 12 Apr 2025 05:42:11 +0000
Files and hashes:         1: -swzUrzjgChT2_SwQFJc_B4VLmA.crl (hash: mR7zogHD7hzyAS5LG50y8mLRn2/7l2DTgjxepXEpKLU=)
                          2: 164D3C32379711EF9ECC714EC4F9AE02.roa (hash: MwAJLA+u3nsJdB5hxYAQtsiYv2wQXxIJZHkWx14cyEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl
                          rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 05:42:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B22E
        Validity
            Not Before: Apr  5 05:42:11 2025 GMT
            Not After : Apr 12 05:42:11 2025 GMT
        Subject: CN=67f0c2b3-4bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cf:af:0d:13:53:4b:93:5e:30:37:0f:af:61:
                    45:47:b9:b2:4a:9c:40:d2:2b:57:27:68:c1:8f:ee:
                    f5:18:70:a8:11:24:ed:00:b8:c0:ae:68:bb:1b:b9:
                    12:0f:19:06:ed:c4:54:45:bf:b3:c0:a5:4a:e0:bb:
                    2e:5f:a6:5a:84:59:53:88:60:ff:9b:ce:4d:6d:0e:
                    e7:cf:5f:f6:d0:f0:10:2c:fb:6b:a9:2d:c3:4a:40:
                    f9:15:e6:0a:31:f2:c4:bc:65:65:33:84:6a:8e:f3:
                    87:be:03:b7:21:51:ea:57:c8:4c:db:60:c2:76:c6:
                    6a:e9:df:86:16:24:64:93:0b:4b:66:5c:54:a6:30:
                    73:c1:15:f8:c1:57:05:44:29:0b:72:cf:4c:3c:05:
                    93:31:dd:0c:6f:9a:0d:bb:bf:31:6a:c3:97:a4:2e:
                    f7:c3:02:67:a0:7d:3c:5b:86:3e:c1:c2:3e:ad:df:
                    43:49:bd:0b:69:fa:59:d3:72:c8:54:9e:f6:0d:5d:
                    f9:45:b1:11:55:25:48:7c:69:eb:49:51:5d:90:36:
                    00:5c:d3:84:c3:aa:87:7f:b0:9a:9f:d4:af:59:46:
                    17:7b:1d:f5:da:e3:dd:5f:41:65:5b:cf:c4:f5:84:
                    dd:1a:bb:11:b3:4a:68:cd:66:e0:df:a0:03:09:8f:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6E:39:68:08:21:C1:85:9A:25:6A:D9:5E:8C:24:81:A6:B6:D8:3D
            X509v3 Authority Key Identifier:
                keyid:FA:CC:33:52:BC:E3:80:28:53:DB:F4:B0:40:52:5C:FC:1E:15:2E:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-swzUrzjgChT2_SwQFJc_B4VLmA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B22E/8BE10084379511EF87CFD64BC4F9AE02/-swzUrzjgChT2_SwQFJc_B4VLmA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:ae:9e:81:39:af:7b:4b:aa:82:79:31:dc:0c:27:f8:ca:f9:
         bf:e4:53:5d:1a:1b:76:35:0d:76:46:cb:de:96:f8:42:ab:cc:
         29:b4:64:b5:11:1b:b1:fc:23:0d:d3:38:f0:85:56:e8:bf:2d:
         7a:8e:90:3b:ff:36:05:d3:c0:4f:1a:1c:6f:47:a5:da:bc:cc:
         d4:2d:f2:29:18:f6:28:fe:7c:d1:46:dc:cb:80:fa:b1:fa:e2:
         c7:29:1a:39:48:e5:45:18:cd:90:73:e9:02:c8:1a:0e:db:25:
         88:15:6a:70:5b:e0:f6:11:53:7d:6a:ee:ad:1b:6a:97:a6:75:
         ec:d0:ae:34:9d:45:9c:2b:99:c4:b8:88:df:9d:91:84:de:7e:
         b3:a5:fb:c0:7f:5c:cd:49:91:2b:16:ea:fc:99:58:32:f3:ef:
         02:2e:37:0f:58:32:c6:fa:4e:ce:62:32:09:3d:31:89:ba:fe:
         87:4a:5e:6e:b5:ec:5e:1c:86:ad:f6:d5:cc:30:5d:88:55:e9:
         57:7b:49:f1:94:f6:f1:6c:ef:d0:95:80:0c:8e:88:4f:ad:5d:
         1e:be:3c:9d:34:e1:f0:43:61:52:16:29:dd:28:07:d9:4c:6e:
         c0:7c:7d:46:21:ff:95:7f:bd:8d:83:76:b3:60:ca:85:ed:c2:
         ae:fb:fc:98
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUIyMkUxMTAvBgNVBAUTKEZBQ0MzMzUyQkNFMzgwMjg1M0RCRjRCMDQwNTI1Q0ZD
MUUxNTJFNjAwHhcNMjUwNDA1MDU0MjExWhcNMjUwNDEyMDU0MjExWjAYMRYwFAYD
VQQDEw02N2YwYzJiMy00YmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx8+vDRNTS5NeMDcPr2FFR7mySpxA0itXJ2jBj+71GHCoESTtALjArmi7G7kS
DxkG7cRURb+zwKVK4LsuX6ZahFlTiGD/m85NbQ7nz1/20PAQLPtrqS3DSkD5FeYK
MfLEvGVlM4RqjvOHvgO3IVHqV8hM22DCdsZq6d+GFiRkkwtLZlxUpjBzwRX4wVcF
RCkLcs9MPAWTMd0Mb5oNu78xasOXpC73wwJnoH08W4Y+wcI+rd9DSb0LafpZ03LI
VJ72DV35RbERVSVIfGnrSVFdkDYAXNOEw6qHf7Can9SvWUYXex312uPdX0FlW8/E
9YTdGrsRs0pozWbg36ADCY95UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZuOWgI
IcGFmiVq2V6MJIGmttg9MB8GA1UdIwQYMBaAFPrMM1K844AoU9v0sEBSXPweFS5g
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQjIyRS84QkUxMDA4NDM3
OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi8tc3d6VXJ6amdDaFQyX1N3UUZKY19CNFZM
bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1zd3pVcnpqZ0NoVDJfU3dRRkpjX0I0VkxtQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QjIyRS84QkUxMDA4NDM3OTUxMUVGODdDRkQ2NEJDNEY5QUUwMi8tc3d6VXJ6amdD
aFQyX1N3UUZKY19CNFZMbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAYrp6BOa97S6qCeTHcDCf4yvm/5FNdGht2NQ12RsvelvhCq8wptGS1
ERux/CMN0zjwhVbovy16jpA7/zYF08BPGhxvR6XavMzULfIpGPYo/nzRRtzLgPqx
+uLHKRo5SOVFGM2Qc+kCyBoO2yWIFWpwW+D2EVN9au6tG2qXpnXs0K40nUWcK5nE
uIjfnZGE3n6zpfvAf1zNSZErFur8mVgy8+8CLjcPWDLG+k7OYjIJPTGJuv6HSl5u
texeHIat9tXMMF2IVelXe0nxlPbxbO/QlYAMjohPrV0evjydNOHwQ2FSFindKAfZ
TG7AfH1GIf+Vf72Ng3azYMqF7cKu+/yY
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:15:10 2025 by rpki-client