Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
File:                     y7RecR9QOMR1deb07gwOjFZ744g.mft (raw, json)
Hash identifier:          ifoSBzEzLVLrnKnnGRHg7eoHBffpxfMQ6qQ8eAKznLw=
Subject key identifier:   0E:9B:2D:7B:EC:B1:AB:9B:DB:41:D5:AA:87:A5:BD:26:6F:98:08:8D
Authority key identifier: CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88
Certificate issuer:       /CN=A9186CDF/serialNumber=CBB45E711F5038C47575E6F4EE0C0E8C567BE388
Certificate serial:       0765
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
Manifest number:          0ED1
Signing time:             Tue 08 Apr 2025 21:17:36 +0000
Manifest this update:     Tue 08 Apr 2025 21:17:36 +0000
Manifest next update:     Tue 15 Apr 2025 21:17:36 +0000
Files and hashes:         1: y7RecR9QOMR1deb07gwOjFZ744g.crl (hash: /ReO4ayFl4/dfig58zKWKbmDWlzAgZotZ+XlqIcbZKU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl
                          rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 21:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893 (0x765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186CDF
        Validity
            Not Before: Apr  8 21:17:36 2025 GMT
            Not After : Apr 15 21:17:36 2025 GMT
        Subject: CN=67f59270-edd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:a3:09:d7:fd:a3:6c:de:6a:a7:7e:d6:0c:
                    b1:8c:06:95:37:df:a7:ec:4b:61:2a:f6:48:cd:04:
                    ab:7b:cc:17:b8:07:06:50:78:4c:ba:04:42:4d:df:
                    ce:25:bf:b2:b5:27:06:bb:d3:e8:5a:28:2c:a2:38:
                    9a:44:3a:4e:37:64:5c:85:0f:9a:99:5a:c5:1e:42:
                    de:69:22:8f:8d:8d:6d:89:4b:19:af:96:e4:df:2b:
                    26:d6:5c:d2:eb:66:29:52:0a:82:f9:cd:71:cd:af:
                    f4:84:a0:29:d1:71:33:45:0c:f8:57:6f:91:11:c3:
                    64:14:66:cc:04:fd:42:ac:32:ec:a0:c4:4a:c1:0e:
                    13:e2:db:1d:e5:59:63:3c:b6:17:4c:85:f6:2d:5d:
                    71:f4:7a:5b:b7:6a:ad:bd:a8:11:a8:cb:c4:0c:60:
                    4d:11:78:9b:66:51:5b:3f:85:71:ce:5f:3f:0d:c2:
                    5a:f2:80:bb:fe:e1:7a:c6:4f:00:01:f4:04:a2:ab:
                    6f:f4:ba:78:29:2f:7a:f9:7f:29:7c:50:d9:7b:9a:
                    1c:01:c9:15:c1:50:ff:96:78:cb:e4:33:dd:f0:ea:
                    e4:7f:ef:9a:10:c2:16:75:ec:c0:6c:27:be:40:68:
                    96:a4:61:8d:31:21:8b:c3:d7:d8:84:cc:fa:12:32:
                    6b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9B:2D:7B:EC:B1:AB:9B:DB:41:D5:AA:87:A5:BD:26:6F:98:08:8D
            X509v3 Authority Key Identifier:
                keyid:CB:B4:5E:71:1F:50:38:C4:75:75:E6:F4:EE:0C:0E:8C:56:7B:E3:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y7RecR9QOMR1deb07gwOjFZ744g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186CDF/4481F0A811DE11EBB9F9F777C4F9AE02/y7RecR9QOMR1deb07gwOjFZ744g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:44:f5:29:b6:b0:ea:5f:b1:cd:60:84:68:0c:db:52:93:21:
         bf:d7:2d:2d:c8:62:6c:4f:74:de:d4:98:d3:85:7b:97:d7:f5:
         0b:c1:d6:e2:41:4f:37:0d:7a:57:f5:76:88:1b:a1:8c:ea:18:
         0d:3e:f9:f1:8f:55:c5:37:78:a4:62:6a:4e:3e:d4:c9:32:a8:
         bb:1b:4e:0b:0d:92:3e:b2:f0:e4:a8:83:c6:a2:6b:64:89:c2:
         fe:f6:d7:a5:22:13:d4:bc:f5:02:70:88:ef:86:66:2a:06:19:
         4d:07:6b:56:c4:99:2f:b3:10:3a:ac:b7:ef:0d:b1:26:26:f3:
         0e:1d:2d:89:73:0e:46:f4:8c:ae:a7:f3:6f:7c:86:fa:c3:ff:
         ed:9b:d8:29:9f:89:96:46:85:fa:a0:54:14:14:07:ab:02:ff:
         28:91:b0:fd:31:ac:79:52:0f:45:56:bc:61:eb:7c:f2:0e:ca:
         2e:35:77:2d:a6:b9:81:56:69:e0:c4:60:2f:a6:e4:d8:fa:45:
         6d:61:ca:0d:fa:e1:bb:6b:6c:fd:0e:c8:af:7e:24:47:c5:99:
         96:b0:b8:d6:84:2e:5e:59:38:cb:16:a2:52:26:21:bb:6f:39:
         14:b6:88:05:29:bf:48:1b:2e:4d:bd:bc:0a:bd:e5:8a:27:f4:
         b9:f0:dc:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZDREYxMTAvBgNVBAUTKENCQjQ1RTcxMUY1MDM4QzQ3NTc1RTZGNEVFMEMwRThD
NTY3QkUzODgwHhcNMjUwNDA4MjExNzM2WhcNMjUwNDE1MjExNzM2WjAYMRYwFAYD
VQQDEw02N2Y1OTI3MC1lZGQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1OijCdf9o2zeaqd+1gyxjAaVN9+n7EthKvZIzQSre8wXuAcGUHhMugRCTd/O
Jb+ytScGu9PoWigsojiaRDpON2RchQ+amVrFHkLeaSKPjY1tiUsZr5bk3ysm1lzS
62YpUgqC+c1xza/0hKAp0XEzRQz4V2+REcNkFGbMBP1CrDLsoMRKwQ4T4tsd5Vlj
PLYXTIX2LV1x9Hpbt2qtvagRqMvEDGBNEXibZlFbP4Vxzl8/DcJa8oC7/uF6xk8A
AfQEoqtv9Lp4KS96+X8pfFDZe5ocAckVwVD/lnjL5DPd8Orkf++aEMIWdezAbCe+
QGiWpGGNMSGLw9fYhMz6EjJrIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA6bLXvs
saub20HVqoelvSZvmAiNMB8GA1UdIwQYMBaAFMu0XnEfUDjEdXXm9O4MDoxWe+OI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkNERi80NDgxRjBBODEx
REUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9NUjFkZWIwN2d3T2pGWjc0
NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3k3UmVjUjlRT01SMWRlYjA3Z3dPakZaNzQ0Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkNERi80NDgxRjBBODExREUxMUVCQjlGOUY3NzdDNEY5QUUwMi95N1JlY1I5UU9N
UjFkZWIwN2d3T2pGWjc0NGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCARPUptrDqX7HNYIRoDNtSkyG/1y0tyGJsT3Te1JjThXuX1/ULwdbi
QU83DXpX9XaIG6GM6hgNPvnxj1XFN3ikYmpOPtTJMqi7G04LDZI+svDkqIPGomtk
icL+9telIhPUvPUCcIjvhmYqBhlNB2tWxJkvsxA6rLfvDbEmJvMOHS2Jcw5G9Iyu
p/NvfIb6w//tm9gpn4mWRoX6oFQUFAerAv8okbD9Max5Ug9FVrxh63zyDsouNXct
prmBVmngxGAvpuTY+kVtYcoN+uG7a2z9DsivfiRHxZmWsLjWhC5eWTjLFqJSJiG7
bzkUtogFKb9IGy5NvbwKveWKJ/S58NyH
-----END CERTIFICATE-----
Generated at Thu Apr 10 11:18:11 2025 by rpki-client