Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
File:                     mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft (raw, json)
Hash identifier:          MoRBDlxMUTO9uHgVj+l0OHrmh7e81hBAu/C59hstIRw=
Subject key identifier:   6B:30:E9:BD:40:22:9D:6D:23:6A:38:C1:00:E6:51:72:2D:CC:17:A6
Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B
Certificate issuer:       /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
Certificate serial:       ED
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
Manifest number:          EB
Signing time:             Fri 11 Apr 2025 04:34:52 +0000
Manifest this update:     Fri 11 Apr 2025 04:34:51 +0000
Manifest next update:     Fri 18 Apr 2025 04:34:51 +0000
Files and hashes:         1: mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl (hash: r/I+uFNCGHAJF0G+mlMmh2UMc/CRh1FZxOwETWS18JU=)
                          2: A023DD56B12F11EEB1221E32C4F9AE02.roa (hash: NmbBdfuCudYxF5RZcp9GpJHBkLSfYF/OMfMDOKpiQbY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl
                          rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 04:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
        Validity
            Not Before: Apr 11 04:34:51 2025 GMT
            Not After : Apr 18 04:34:51 2025 GMT
        Subject: CN=67f89beb-3826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4e:d5:45:82:32:22:1a:43:07:3d:58:d3:5c:
                    4c:c2:2a:fa:7b:06:b1:47:3f:8a:3e:a8:3e:c3:cb:
                    cf:d8:d1:3e:c8:78:1a:a8:28:2a:09:17:10:1c:59:
                    63:51:d0:76:ee:5a:5d:bb:01:a2:f5:04:5d:6a:e9:
                    41:34:ba:b8:48:98:98:e8:56:74:0e:d9:60:f6:87:
                    47:39:16:44:71:b5:18:f9:0f:03:02:05:44:e1:ab:
                    c9:b6:63:0f:c0:ea:61:b0:50:a2:25:b5:91:a3:81:
                    1e:ce:f0:bf:5f:b2:c4:d4:c2:df:ec:72:5f:99:91:
                    0d:e9:3f:ca:83:4c:fc:fd:9a:b6:c5:b0:4d:7c:74:
                    c7:b6:3b:04:c8:25:21:14:5e:87:66:93:59:00:e3:
                    32:82:36:cc:fc:fd:d1:07:c6:89:63:9f:8d:55:94:
                    56:a0:c2:90:3e:8f:97:36:28:5a:d1:0e:11:9a:9c:
                    c7:9b:05:3a:5b:54:bc:99:2a:11:7e:2c:5d:ff:71:
                    1b:0d:c7:f8:d6:d4:75:76:5a:9b:1c:d3:ef:c7:a5:
                    b6:d1:fd:a0:eb:bb:01:72:f7:f0:3e:42:37:c9:8e:
                    69:ce:9b:99:9b:b9:f3:34:39:65:e9:c1:d5:81:22:
                    46:59:3b:f4:00:e0:43:bc:93:d0:23:9e:d6:bb:03:
                    af:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:30:E9:BD:40:22:9D:6D:23:6A:38:C1:00:E6:51:72:2D:CC:17:A6
            X509v3 Authority Key Identifier:
                keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:dd:be:09:7d:42:ee:05:a8:8c:88:89:67:59:7c:f5:84:7d:
         54:d1:1f:26:a3:0b:49:9c:00:e4:f8:4c:7d:fc:c4:3b:d3:3d:
         c6:5f:75:3a:32:71:0b:81:53:d0:96:11:16:c0:6b:0a:f7:b4:
         f4:cf:78:d2:ac:6a:25:8d:94:12:3b:32:a1:95:6d:0f:4a:6b:
         58:81:d8:9e:dc:0e:1f:57:86:bb:97:8c:ae:8b:a6:b0:ba:e5:
         ff:c3:33:4e:49:08:6f:67:f1:2b:98:08:60:49:69:67:dc:ca:
         f3:aa:d4:24:f7:bd:8f:d4:9e:95:10:fa:41:06:c9:bc:ce:18:
         a5:69:a5:32:ea:41:48:22:6c:3c:a1:aa:d2:cc:ee:bd:1c:56:
         6f:28:42:ce:1c:07:9f:9d:91:8a:d0:69:ae:e0:d2:ea:43:c7:
         d1:e4:72:52:ca:ec:42:6a:26:38:64:d3:40:67:09:36:08:91:
         17:27:4b:b2:3a:cc:4d:1d:3f:34:7b:c6:02:41:2e:31:25:4e:
         00:3d:c4:cd:ba:8c:cc:8c:49:f9:3b:00:09:ce:8b:8f:1b:df:
         59:07:30:d8:ed:26:94:9b:23:14:f1:a4:c6:9b:69:71:5a:eb:
         61:ef:f6:f4:db:9b:27:50:3c:d3:94:7e:80:55:cd:fe:53:31:
         33:eb:31:6b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjEzMjIxMTAvBgNVBAUTKDk4NzM4ODk3ODNGNzUzMEVCNDRCRTAwOTdBQTM2MThC
MDcxNjhGM0IwHhcNMjUwNDExMDQzNDUxWhcNMjUwNDE4MDQzNDUxWjAYMRYwFAYD
VQQDEw02N2Y4OWJlYi0zODI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoE7VRYIyIhpDBz1Y01xMwir6ewaxRz+KPqg+w8vP2NE+yHgaqCgqCRcQHFlj
UdB27lpduwGi9QRdaulBNLq4SJiY6FZ0Dtlg9odHORZEcbUY+Q8DAgVE4avJtmMP
wOphsFCiJbWRo4EezvC/X7LE1MLf7HJfmZEN6T/Kg0z8/Zq2xbBNfHTHtjsEyCUh
FF6HZpNZAOMygjbM/P3RB8aJY5+NVZRWoMKQPo+XNiha0Q4RmpzHmwU6W1S8mSoR
fixd/3EbDcf41tR1dlqbHNPvx6W20f2g67sBcvfwPkI3yY5pzpuZm7nzNDll6cHV
gSJGWTv0AOBDvJPQI57WuwOv6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGsw6b1A
Ip1tI2o4wQDmUXItzBemMB8GA1UdIwQYMBaAFJhziJeD91MOtEvgCXqjYYsHFo87
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80OUU0QjAwOEIw
RUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3NjBTLUFKZXFOaGl3Y1dq
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21IT0lsNFAzVXc2MFMtQUplcU5oaXdjV2p6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MTMyMi80OUU0QjAwOEIwRUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3
NjBTLUFKZXFOaGl3Y1dqenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBa3b4JfULuBaiMiIlnWXz1hH1U0R8mowtJnADk+Ex9/MQ70z3GX3U6
MnELgVPQlhEWwGsK97T0z3jSrGoljZQSOzKhlW0PSmtYgdie3A4fV4a7l4yui6aw
uuX/wzNOSQhvZ/ErmAhgSWln3MrzqtQk972P1J6VEPpBBsm8zhilaaUy6kFIImw8
oarSzO69HFZvKELOHAefnZGK0Gmu4NLqQ8fR5HJSyuxCaiY4ZNNAZwk2CJEXJ0uy
OsxNHT80e8YCQS4xJU4APcTNuozMjEn5OwAJzouPG99ZBzDY7SaUmyMU8aTGm2lx
Wuth7/b025snUDzTlH6AVc3+UzEz6zFr
-----END CERTIFICATE-----
Generated at Sun Apr 13 05:13:29 2025 by rpki-client