Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
File:                     4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft (raw, json)
Hash identifier:          fDBsgjVrxLVn3Zr3u9ORf8Qw1nrvLd6IVdq3MTsfGlc=
Subject key identifier:   DA:01:7A:83:BC:8D:10:AB:EE:9D:91:1E:DF:11:3A:90:73:D3:EF:9D
Authority key identifier: E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E
Certificate issuer:       /CN=A9142091/serialNumber=E08813BD188CDC2ABF5018DE6FE37F443747208E
Certificate serial:       0198
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
Manifest number:          0194
Signing time:             Mon 07 Apr 2025 02:25:06 +0000
Manifest this update:     Mon 07 Apr 2025 02:25:05 +0000
Manifest next update:     Mon 14 Apr 2025 02:25:05 +0000
Files and hashes:         1: 4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl (hash: dwnvS5gxEjyCUOlB9tQgCGOgg6GBxLVOsIFgAJ6LsRE=)
                          2: A8C0A13EAB5D11ED88A54424C4F9AE02.roa (hash: n8o3xnaflWVbOqkp6JntoRCYSrJ8NdzSSuqGUsQkMzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl
                          rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 02:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142091
        Validity
            Not Before: Apr  7 02:25:05 2025 GMT
            Not After : Apr 14 02:25:05 2025 GMT
        Subject: CN=67f33781-bff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9a:f6:c4:8d:54:a9:cb:12:2c:50:74:c3:42:
                    4a:ef:b4:a6:4b:3a:9a:c3:ca:e8:2b:c6:31:4e:ff:
                    db:4b:d5:15:62:ed:da:e9:11:5a:f3:72:b9:31:7c:
                    3c:9e:02:2d:d8:fe:ba:0e:40:45:ca:d4:b0:2f:ba:
                    45:b5:0a:8e:4e:be:60:67:7a:94:27:01:8d:0e:5b:
                    c1:21:cf:05:b5:62:1d:b8:10:ae:a6:2f:2d:09:d0:
                    00:63:c6:37:9a:30:35:03:15:c7:65:ba:03:19:46:
                    9c:83:71:15:81:0f:e3:2c:9e:df:20:56:51:9d:c2:
                    97:0f:e4:d8:00:40:db:5c:d0:ff:49:04:22:cf:dc:
                    9f:8e:23:6e:ca:0c:47:2c:f9:ae:45:a4:66:24:21:
                    c8:cf:7f:f3:a8:32:5e:79:e2:f2:31:79:d6:7a:8e:
                    af:89:71:a3:46:23:c7:97:a0:1b:b7:31:6f:c4:71:
                    cf:2c:bb:69:13:e1:b5:32:7c:13:37:db:da:63:69:
                    ac:a3:d3:8c:42:ca:6f:df:d9:ec:7d:72:1d:78:79:
                    e1:ec:5d:c6:30:c8:fe:af:db:a4:ef:70:34:74:ad:
                    6e:60:61:c3:1f:76:0c:40:86:c1:91:3a:55:1d:83:
                    9b:61:c6:71:b9:fd:e9:fd:3a:92:97:e1:ca:3b:a8:
                    47:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:01:7A:83:BC:8D:10:AB:EE:9D:91:1E:DF:11:3A:90:73:D3:EF:9D
            X509v3 Authority Key Identifier:
                keyid:E0:88:13:BD:18:8C:DC:2A:BF:50:18:DE:6F:E3:7F:44:37:47:20:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IgTvRiM3Cq_UBjeb-N_RDdHII4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142091/ABC4D444AB5911ED9B79B11EC4F9AE02/4IgTvRiM3Cq_UBjeb-N_RDdHII4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:18:0d:2a:d9:c1:13:97:5d:80:78:29:4a:65:84:4f:cb:7a:
         0f:5a:7a:d6:9c:42:5e:20:4d:36:9b:19:c9:19:b8:31:33:be:
         e2:43:5c:46:c5:c4:1c:1b:48:77:4a:3b:2b:0e:2f:bc:e2:58:
         75:db:ef:54:af:ae:10:c7:fe:e8:c1:e0:50:ec:c7:18:af:e2:
         c2:fd:49:6a:c6:e8:26:8d:da:1d:fa:d3:2a:e1:b7:9f:20:96:
         e3:20:25:cf:bd:fa:6a:ad:8b:e6:a2:34:1b:e8:53:0d:39:22:
         51:b8:02:fc:ac:41:28:e8:a1:b1:d9:d4:99:4b:ad:81:98:77:
         66:db:bf:29:d5:da:d2:9f:ac:0c:a0:8d:1e:03:09:63:99:7e:
         d4:bc:5a:e0:34:3d:ec:a9:8d:87:a3:5a:a2:6c:45:aa:c6:69:
         1b:73:07:53:fd:d9:a8:7b:91:37:0a:dc:9b:c2:72:05:99:e5:
         ae:33:e9:c2:25:6b:c5:0a:c1:7d:02:71:ba:b1:40:af:24:1b:
         57:b2:84:32:b3:82:93:f3:8d:86:2a:0a:7a:f2:b6:5a:25:38:
         ff:41:6f:40:c1:2b:e9:3d:0b:8e:3b:ee:8d:51:ab:a7:d1:d1:
         c7:54:78:2a:55:84:fe:72:b0:ca:3d:a7:15:21:1c:37:7d:cd:
         5b:e5:c0:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDIwOTExMTAvBgNVBAUTKEUwODgxM0JEMTg4Q0RDMkFCRjUwMThERTZGRTM3RjQ0
Mzc0NzIwOEUwHhcNMjUwNDA3MDIyNTA1WhcNMjUwNDE0MDIyNTA1WjAYMRYwFAYD
VQQDEw02N2YzMzc4MS1iZmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Jr2xI1UqcsSLFB0w0JK77SmSzqaw8roK8YxTv/bS9UVYu3a6RFa83K5MXw8
ngIt2P66DkBFytSwL7pFtQqOTr5gZ3qUJwGNDlvBIc8FtWIduBCupi8tCdAAY8Y3
mjA1AxXHZboDGUacg3EVgQ/jLJ7fIFZRncKXD+TYAEDbXND/SQQiz9yfjiNuygxH
LPmuRaRmJCHIz3/zqDJeeeLyMXnWeo6viXGjRiPHl6AbtzFvxHHPLLtpE+G1MnwT
N9vaY2mso9OMQspv39nsfXIdeHnh7F3GMMj+r9uk73A0dK1uYGHDH3YMQIbBkTpV
HYObYcZxuf3p/TqSl+HKO6hHuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoBeoO8
jRCr7p2RHt8ROpBz0++dMB8GA1UdIwQYMBaAFOCIE70YjNwqv1AY3m/jf0Q3RyCO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MjA5MS9BQkM0RDQ0NEFC
NTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTNDcV9VQmplYi1OX1JEZEhJ
STQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRJZ1R2UmlNM0NxX1VCamViLU5fUkRkSElJNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
MjA5MS9BQkM0RDQ0NEFCNTkxMUVEOUI3OUIxMUVDNEY5QUUwMi80SWdUdlJpTTND
cV9VQmplYi1OX1JEZEhJSTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBLGA0q2cETl12AeClKZYRPy3oPWnrWnEJeIE02mxnJGbgxM77iQ1xG
xcQcG0h3SjsrDi+84lh12+9Ur64Qx/7oweBQ7McYr+LC/Ulqxugmjdod+tMq4bef
IJbjICXPvfpqrYvmojQb6FMNOSJRuAL8rEEo6KGx2dSZS62BmHdm278p1drSn6wM
oI0eAwljmX7UvFrgND3sqY2Ho1qibEWqxmkbcwdT/dmoe5E3CtybwnIFmeWuM+nC
JWvFCsF9AnG6sUCvJBtXsoQys4KT842GKgp68rZaJTj/QW9AwSvpPQuOO+6NUaun
0dHHVHgqVYT+crDKPacVIRw3fc1b5cDo
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:02:59 2025 by rpki-client