Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
File:                     6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json)
Hash identifier:          d/UsD1FedOnRfQnHHXvtkYY7hwg9qSdM4tVYPtPLSEs=
Subject key identifier:   49:74:B3:40:AA:4E:AB:A5:A6:CE:51:6E:3F:0A:3A:1E:35:BD:4B:A8
Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E
Certificate issuer:       /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E
Certificate serial:       0A94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
Manifest number:          0A7F
Signing time:             Tue 08 Apr 2025 19:30:25 +0000
Manifest this update:     Tue 08 Apr 2025 19:30:25 +0000
Manifest next update:     Tue 15 Apr 2025 19:30:25 +0000
Files and hashes:         1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: mVScYPjGgGjd1w1j8JEOpqtB4MPdDxbCmBitIiYO3Ms=)
                          2: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: BMLck7ad8d48GKkf5hIYa+BMluvYHrRfqqVkHmYs2MI=)
                          3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: xk3hG5cT6tov5WpRqBgw1GYiI5TquI6c93azZDBwgS8=)
                          4: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YdPahH5dD4zuJY8bYiwVpnXjRlbDVfqoQdod66sRqWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl
                          rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 19:30:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2708 (0xa94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154B7E
        Validity
            Not Before: Apr  8 19:30:25 2025 GMT
            Not After : Apr 15 19:30:25 2025 GMT
        Subject: CN=67f57951-a747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:b5:b8:6b:cb:94:85:c9:7b:d7:f1:39:38:
                    d1:90:d0:ed:cc:c2:e5:71:23:ca:f6:77:1b:3f:ed:
                    d5:7a:c6:a0:9c:42:07:8a:7b:f1:e7:94:5f:5f:3e:
                    69:82:cb:a6:be:75:7a:d6:b0:02:ac:f2:03:86:3a:
                    20:02:ed:68:9d:f4:90:67:c6:36:c4:af:db:15:89:
                    3d:5b:16:8c:dd:66:8f:2a:f4:39:2b:d4:cf:30:39:
                    c7:71:73:17:71:f3:ec:83:c4:50:b4:52:20:07:a6:
                    e6:ff:d0:30:91:a6:24:3b:6a:2a:b6:f5:b3:12:49:
                    c4:6b:79:4c:e9:b3:33:9b:43:74:ce:ef:bf:24:ff:
                    df:e4:58:fd:d4:36:d7:4d:fd:82:46:ed:e9:b2:e2:
                    8f:15:b0:5e:97:91:0a:a2:2b:f3:00:b7:2f:c5:d5:
                    09:84:3c:cd:1c:5f:6c:72:af:9b:94:ec:d1:16:7f:
                    9f:4f:c6:2e:c4:e7:64:7b:72:74:0b:73:52:49:d1:
                    f9:ba:de:8d:b1:e2:f3:bd:2d:8d:eb:37:d7:86:e9:
                    7e:06:d0:1d:b6:ab:14:fa:23:2b:51:7b:61:0f:b8:
                    d3:7e:80:65:fc:32:fe:dc:61:c5:e8:12:4c:84:64:
                    25:5f:a3:c4:28:70:82:2c:5d:7a:3f:d6:6f:19:02:
                    06:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:74:B3:40:AA:4E:AB:A5:A6:CE:51:6E:3F:0A:3A:1E:35:BD:4B:A8
            X509v3 Authority Key Identifier:
                keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c5:2d:88:95:18:97:27:9e:88:bf:11:aa:4d:1a:e4:64:e9:
         67:f6:b7:cf:5f:48:a3:0a:61:ba:0b:df:22:7e:ac:d3:82:4a:
         cd:a5:48:57:69:de:5c:c6:1f:32:ce:c5:cc:f1:29:3f:41:7d:
         02:cb:bd:39:69:e4:7b:a2:ab:a3:4a:b1:df:49:fd:ab:f2:a5:
         12:cd:88:83:29:fe:4d:c1:c4:c1:b7:ef:d8:11:90:31:6b:e2:
         25:4a:33:ef:fe:78:1f:cd:f6:c7:ab:df:f0:dd:b1:9a:ac:b5:
         d0:69:71:97:a8:cd:57:16:24:7f:d2:7f:44:69:05:e4:6f:13:
         99:57:a4:db:fb:42:e2:3d:77:96:4c:26:31:5b:b5:22:04:2e:
         fa:7f:be:8d:62:95:88:99:b2:25:5a:c5:66:85:64:fc:cc:72:
         c6:a9:ff:81:98:ff:32:56:92:e4:d7:7f:0a:88:d3:fa:2b:b1:
         e7:6f:e0:1a:1f:3a:76:ae:0d:92:7e:aa:9e:96:a0:a2:b1:f6:
         52:e6:8a:69:da:a7:bc:d3:1d:3a:30:bd:13:20:db:59:ed:7f:
         85:87:54:a4:ec:ae:4c:49:4f:4e:27:cd:79:29:a2:a2:b2:76:
         7d:f7:f4:fa:10:3a:2e:42:12:b5:34:02:ef:97:2a:64:ec:49:
         56:a5:48:9c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCpQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRCN0UxMTAvBgNVBAUTKEVBRjE1MkJEMURENDcwRUY3M0E1MUQ0Qjk1MUQ0RkEw
QUE0Q0NEOEUwHhcNMjUwNDA4MTkzMDI1WhcNMjUwNDE1MTkzMDI1WjAYMRYwFAYD
VQQDEw02N2Y1Nzk1MS1hNzQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtmC1uGvLlIXJe9fxOTjRkNDtzMLlcSPK9ncbP+3VesagnEIHinvx55RfXz5p
gsumvnV61rACrPIDhjogAu1onfSQZ8Y2xK/bFYk9WxaM3WaPKvQ5K9TPMDnHcXMX
cfPsg8RQtFIgB6bm/9AwkaYkO2oqtvWzEknEa3lM6bMzm0N0zu+/JP/f5Fj91DbX
Tf2CRu3psuKPFbBel5EKoivzALcvxdUJhDzNHF9scq+blOzRFn+fT8YuxOdke3J0
C3NSSdH5ut6NseLzvS2N6zfXhul+BtAdtqsU+iMrUXthD7jTfoBl/DL+3GHF6BJM
hGQlX6PEKHCCLF16P9ZvGQIGiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEl0s0Cq
Tqulps5Rbj8KOh41vUuoMB8GA1UdIwQYMBaAFOrxUr0d1HDvc6UdS5UdT6CqTM2O
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEI3RS8zRjM1QzA4NDU5
MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNPOXpwUjFMbFIxUG9LcE16
WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ2RlN2UjNVY085enBSMUxsUjFQb0twTXpZNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NEI3RS8zRjM1QzA4NDU5MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNP
OXpwUjFMbFIxUG9LcE16WTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBKxS2IlRiXJ56IvxGqTRrkZOln9rfPX0ijCmG6C98ifqzTgkrNpUhX
ad5cxh8yzsXM8Sk/QX0Cy705aeR7oqujSrHfSf2r8qUSzYiDKf5NwcTBt+/YEZAx
a+IlSjPv/ngfzfbHq9/w3bGarLXQaXGXqM1XFiR/0n9EaQXkbxOZV6Tb+0LiPXeW
TCYxW7UiBC76f76NYpWImbIlWsVmhWT8zHLGqf+BmP8yVpLk138KiNP6K7Hnb+Aa
Hzp2rg2SfqqelqCisfZS5opp2qe80x06ML0TINtZ7X+Fh1Sk7K5MSU9OJ815KaKi
snZ99/T6EDouQhK1NALvlypk7ElWpUic
-----END CERTIFICATE-----
Generated at Thu Apr 10 18:54:49 2025 by rpki-client