Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
File:                     4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft (raw, json)
Hash identifier:          KlnpiAHZdFyUBMvCmdITuPl790/As3JNjiJUIRB5mQM=
Subject key identifier:   A1:DA:C4:81:27:2F:85:76:CB:A9:01:A2:AD:53:E2:49:BB:DC:94:FA
Authority key identifier: E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F
Certificate issuer:       /CN=A915B361/serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
Certificate serial:       0D61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
Manifest number:          0D58
Signing time:             Sat 12 Apr 2025 17:53:09 +0000
Manifest this update:     Sat 12 Apr 2025 17:53:08 +0000
Manifest next update:     Sat 19 Apr 2025 17:53:08 +0000
Files and hashes:         1: 4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl (hash: 4qjnr1chSGg0dzPfP/crQMLBf8J/Gt3fpG/AahODKyg=)
                          2: 83157C50385711EB86284653C4F9AE02.roa (hash: RP2ttD5D5uXKftKTc9Uy3WvFvGaHxDRyE1UTWMKFpHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl
                          rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 17:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3425 (0xd61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B361, serialNumber=E0B9A2E9939D558F18BE62175C95D768D245D31F
        Validity
            Not Before: Apr 12 17:53:08 2025 GMT
            Not After : Apr 19 17:53:08 2025 GMT
        Subject: CN=67faa884-59b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:e6:4d:54:ed:5d:06:34:54:87:81:2b:61:
                    19:39:40:ae:22:d3:00:94:e9:68:48:19:07:8e:c4:
                    f2:05:0e:98:54:d1:74:b6:b1:84:b4:3a:35:e6:ed:
                    b1:25:39:c0:aa:7b:34:98:02:f9:24:dd:65:5b:2d:
                    b4:70:a9:b2:5f:18:22:bd:db:90:64:47:de:21:4e:
                    aa:3e:db:c8:8e:4d:4e:f4:e2:b5:70:24:31:98:57:
                    b2:39:e3:2e:97:ce:31:77:43:54:47:3e:c4:66:0d:
                    36:26:3f:96:f8:dd:02:f7:60:9b:7b:d8:c3:43:8e:
                    de:98:69:cf:90:5d:77:d5:4b:83:fc:9c:ab:33:d9:
                    b3:db:d1:69:69:dc:4b:40:90:65:bd:0e:2e:c6:59:
                    21:d1:b2:04:70:05:b3:9d:5b:14:30:08:54:c4:6a:
                    59:7f:13:f6:15:3f:86:24:f9:2c:a0:99:e1:61:12:
                    97:7f:60:a4:a6:40:f7:c3:5c:42:f0:78:85:c6:d2:
                    a1:ff:93:0c:a4:b0:c1:de:5c:a2:75:d2:f9:8a:60:
                    94:61:95:82:20:1f:82:26:60:42:dc:23:5e:50:92:
                    b9:a9:3c:eb:76:96:7b:ec:59:0f:2e:bf:7a:40:33:
                    94:3c:8b:f6:3f:69:39:8f:da:ab:6a:83:96:ac:bb:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DA:C4:81:27:2F:85:76:CB:A9:01:A2:AD:53:E2:49:BB:DC:94:FA
            X509v3 Authority Key Identifier:
                keyid:E0:B9:A2:E9:93:9D:55:8F:18:BE:62:17:5C:95:D7:68:D2:45:D3:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B361/7C8D800ACA3311E98113A354C4F9AE02/4Lmi6ZOdVY8YvmIXXJXXaNJF0x8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:75:66:d9:eb:31:ce:af:dc:39:4e:12:3b:8a:71:48:a1:65:
         f0:3f:43:08:31:29:b2:f1:51:ed:63:f3:8f:c9:24:5a:e9:91:
         36:76:73:35:6e:8a:b8:57:16:39:bf:04:f5:0a:c9:11:3f:73:
         6c:61:f3:50:25:78:fe:6a:24:f2:bd:ff:ed:d9:08:3c:41:e8:
         01:07:b4:65:7c:6e:7e:98:49:f9:98:0f:f3:f1:f9:97:53:45:
         0f:3a:44:9d:49:bc:ac:40:d8:0a:26:09:9e:c2:1a:f3:79:1a:
         4d:bb:38:d8:46:8b:0f:a7:aa:7f:42:02:5e:d1:13:83:bc:86:
         ba:c5:c8:e8:36:85:9c:bd:a4:11:fd:92:a6:ec:c5:07:7e:f2:
         3f:7d:dc:65:db:2d:bf:03:2c:e0:33:e3:f5:d1:98:b9:ee:bb:
         7c:3c:41:d4:95:1a:43:10:5c:c1:84:16:25:9a:ed:11:c2:b1:
         a0:b3:5c:99:c3:55:a6:00:0c:fa:9d:0e:03:5d:81:a2:25:aa:
         8e:8d:a8:6f:b3:6a:ca:a3:a2:5f:a9:e4:36:21:18:e0:7f:56:
         ab:42:3a:39:be:9b:a4:79:9e:41:f8:0f:36:ef:74:7a:43:38:
         e1:36:8a:31:b8:c5:bf:0e:06:bb:35:f3:33:02:b4:dc:b6:e2:
         af:8c:3d:bd
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUIzNjExMTAvBgNVBAUTKEUwQjlBMkU5OTM5RDU1OEYxOEJFNjIxNzVDOTVENzY4
RDI0NUQzMUYwHhcNMjUwNDEyMTc1MzA4WhcNMjUwNDE5MTc1MzA4WjAYMRYwFAYD
VQQDEw02N2ZhYTg4NC01OWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsH3mTVTtXQY0VIeBK2EZOUCuItMAlOloSBkHjsTyBQ6YVNF0trGEtDo15u2x
JTnAqns0mAL5JN1lWy20cKmyXxgivduQZEfeIU6qPtvIjk1O9OK1cCQxmFeyOeMu
l84xd0NURz7EZg02Jj+W+N0C92Cbe9jDQ47emGnPkF131UuD/JyrM9mz29FpadxL
QJBlvQ4uxlkh0bIEcAWznVsUMAhUxGpZfxP2FT+GJPksoJnhYRKXf2CkpkD3w1xC
8HiFxtKh/5MMpLDB3lyiddL5imCUYZWCIB+CJmBC3CNeUJK5qTzrdpZ77FkPLr96
QDOUPIv2P2k5j9qraoOWrLvSlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKHaxIEn
L4V2y6kBoq1T4km73JT6MB8GA1UdIwQYMBaAFOC5oumTnVWPGL5iF1yV12jSRdMf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjM2MS83QzhEODAwQUNB
MzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZOFl2bUlYWEpYWGFOSkYw
eDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRMbWk2Wk9kVlk4WXZtSVhYSlhYYU5KRjB4OC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QjM2MS83QzhEODAwQUNBMzMxMUU5ODExM0EzNTRDNEY5QUUwMi80TG1pNlpPZFZZ
OFl2bUlYWEpYWGFOSkYweDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC7dWbZ6zHOr9w5ThI7inFIoWXwP0MIMSmy8VHtY/OPySRa6ZE2dnM1
boq4VxY5vwT1CskRP3NsYfNQJXj+aiTyvf/t2Qg8QegBB7RlfG5+mEn5mA/z8fmX
U0UPOkSdSbysQNgKJgmewhrzeRpNuzjYRosPp6p/QgJe0RODvIa6xcjoNoWcvaQR
/ZKm7MUHfvI/fdxl2y2/AyzgM+P10Zi57rt8PEHUlRpDEFzBhBYlmu0RwrGgs1yZ
w1WmAAz6nQ4DXYGiJaqOjahvs2rKo6JfqeQ2IRjgf1arQjo5vpukeZ5B+A8273R6
QzjhNooxuMW/Dga7NfMzArTctuKvjD29
-----END CERTIFICATE-----
Generated at Mon Apr 14 01:35:43 2025 by rpki-client