Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
File:                     7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft (raw, json)
Hash identifier:          ZjS5/WidfgjIWyGYzOr6v3B+nFlqz8sSW0eH+4mnJh4=
Subject key identifier:   8F:B8:1E:53:65:F8:9A:FE:BA:CE:40:80:D9:1A:0B:92:B0:7B:23:70
Authority key identifier: EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D
Certificate issuer:       /CN=A913DC07/serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D
Certificate serial:       049C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
Manifest number:          0492
Signing time:             Tue 08 Apr 2025 23:45:31 +0000
Manifest this update:     Tue 08 Apr 2025 23:45:30 +0000
Manifest next update:     Tue 15 Apr 2025 23:45:30 +0000
Files and hashes:         1: 7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl (hash: zz4L7S+LaiI1qHQ878/AhNf25ds8arQZX7RRPb3Kfss=)
                          2: 1E6E1BE8DB0711EFBD49DC56C4F9AE02.roa (hash: gvMSrYkjgEBiNDDMq1X7x98IStl9qcCUAlgSn78iVmM=)
                          3: 18612BE6DB0711EF9B67D356C4F9AE02.roa (hash: K6xw9z5FHd3cBcaSkpj6+6W0ng+CbMowA+OXIfonnos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl
                          rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 23:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180 (0x49c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DC07
        Validity
            Not Before: Apr  8 23:45:30 2025 GMT
            Not After : Apr 15 23:45:30 2025 GMT
        Subject: CN=67f5b51a-ae08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:44:9c:06:e1:c0:a2:43:3b:63:be:4c:02:
                    ac:75:62:9a:ac:bc:2d:31:db:97:53:59:d7:30:05:
                    55:1a:31:69:6a:66:0d:2b:44:34:71:1a:bd:40:ed:
                    ff:9d:43:17:9e:88:eb:01:0d:70:f2:a3:09:b0:8d:
                    ef:0b:c0:9b:80:18:3b:d7:79:99:5e:d3:52:a4:80:
                    ec:0f:26:61:01:e8:67:08:1f:23:18:12:6a:29:cd:
                    92:02:51:ae:6f:46:db:39:01:21:be:2d:37:86:59:
                    9a:be:e5:9d:21:93:57:8d:6e:54:15:aa:c3:0b:3f:
                    89:eb:b4:0c:99:25:df:09:26:89:1b:4d:82:92:86:
                    9b:0e:3d:89:38:04:5d:79:93:db:b3:fb:6f:72:b0:
                    a5:ab:32:d0:2e:08:ef:46:e0:e8:a1:90:8a:f4:98:
                    b6:02:fd:47:d7:fd:71:b7:dd:a7:22:17:86:4f:a3:
                    df:df:01:04:02:e7:cd:dd:80:5b:fe:56:aa:74:28:
                    6c:64:af:8a:44:56:46:f5:99:14:86:0a:14:e0:56:
                    5e:d7:47:54:2b:98:5d:56:e1:a2:a3:92:b0:9a:b5:
                    65:cb:64:cc:04:0b:8f:eb:a2:7e:e6:ea:cf:04:69:
                    e7:ba:c7:d7:e2:0b:42:8c:71:8d:1b:32:f4:03:1c:
                    fe:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B8:1E:53:65:F8:9A:FE:BA:CE:40:80:D9:1A:0B:92:B0:7B:23:70
            X509v3 Authority Key Identifier:
                keyid:EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:d3:68:5f:57:60:0f:ef:d8:42:cd:17:65:98:83:ee:51:47:
         f1:b9:8e:63:c7:75:96:8e:b6:af:d2:4f:3d:94:b2:4a:a2:92:
         3c:7a:3a:2b:db:51:e9:61:5b:70:27:89:30:63:64:6f:0e:35:
         8e:74:13:d5:9c:a2:67:35:d9:ae:38:19:30:c5:be:77:f4:df:
         01:e5:7e:2a:e3:8c:34:be:9c:09:95:b1:de:73:96:0b:a4:ff:
         4a:7d:74:e6:56:33:a3:b0:98:45:de:f1:f4:fb:91:ee:30:84:
         d2:34:fd:53:e1:ba:37:0d:b1:e8:91:97:bc:75:a4:7b:1e:39:
         6a:79:23:c3:aa:5d:68:c0:b2:7a:4d:d2:41:59:b4:bb:bb:c9:
         b3:af:ed:c3:8d:94:2c:90:85:84:50:36:7a:7f:ab:71:d0:99:
         ab:ed:e6:ec:1d:e9:ff:7b:8a:cf:be:63:51:6a:69:73:2e:15:
         95:42:43:46:f1:2c:9d:b3:a5:d5:9f:9c:0e:ea:c0:04:75:7c:
         38:1c:ac:e9:40:54:8f:01:1b:a5:c8:34:42:70:d8:1a:d4:f7:
         3b:25:d3:31:5a:19:f6:77:6f:2e:89:6c:03:5c:39:db:69:48:
         68:79:19:69:55:bd:83:44:9c:97:35:98:2d:44:d9:5c:12:09:
         8f:39:7c:f9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0RDMDcxMTAvBgNVBAUTKEVDQUEzRDE1RkE4QjE0REFBQUZFMjA1OUE0MDE5QjIw
RjUyN0Y4M0QwHhcNMjUwNDA4MjM0NTMwWhcNMjUwNDE1MjM0NTMwWjAYMRYwFAYD
VQQDEw02N2Y1YjUxYS1hZTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArsJEnAbhwKJDO2O+TAKsdWKarLwtMduXU1nXMAVVGjFpamYNK0Q0cRq9QO3/
nUMXnojrAQ1w8qMJsI3vC8CbgBg713mZXtNSpIDsDyZhAehnCB8jGBJqKc2SAlGu
b0bbOQEhvi03hlmavuWdIZNXjW5UFarDCz+J67QMmSXfCSaJG02CkoabDj2JOARd
eZPbs/tvcrClqzLQLgjvRuDooZCK9Ji2Av1H1/1xt92nIheGT6Pf3wEEAufN3YBb
/laqdChsZK+KRFZG9ZkUhgoU4FZe10dUK5hdVuGio5KwmrVly2TMBAuP66J+5urP
BGnnusfX4gtCjHGNGzL0Axz+MQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI+4HlNl
+Jr+us5AgNkaC5KweyNwMB8GA1UdIwQYMBaAFOyqPRX6ixTaqv4gWaQBmyD1J/g9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREMwNy80RUI5RURENjMz
NjIxMUVDQTdBQzUxMzFDNEY5QUUwMi83S285RmZxTEZOcXFfaUJacEFHYklQVW4t
RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdLbzlGZnFMRk5xcV9pQlpwQUdiSVBVbi1EMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
REMwNy80RUI5RURENjMzNjIxMUVDQTdBQzUxMzFDNEY5QUUwMi83S285RmZxTEZO
cXFfaUJacEFHYklQVW4tRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDF02hfV2AP79hCzRdlmIPuUUfxuY5jx3WWjrav0k89lLJKopI8ejor
21HpYVtwJ4kwY2RvDjWOdBPVnKJnNdmuOBkwxb539N8B5X4q44w0vpwJlbHec5YL
pP9KfXTmVjOjsJhF3vH0+5HuMITSNP1T4bo3DbHokZe8daR7HjlqeSPDql1owLJ6
TdJBWbS7u8mzr+3DjZQskIWEUDZ6f6tx0Jmr7ebsHen/e4rPvmNRamlzLhWVQkNG
8Syds6XVn5wO6sAEdXw4HKzpQFSPARulyDRCcNga1Pc7JdMxWhn2d28uiWwDXDnb
aUhoeRlpVb2DRJyXNZgtRNlcEgmPOXz5
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:01:51 2025 by rpki-client