Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
File:                     2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft (raw, json)
Hash identifier:          rmDKTA3KLQzJevTrro/9k9olTafKpfl+W3OveLUG614=
Subject key identifier:   4E:30:18:06:A5:50:5C:47:F0:9D:4C:F9:11:09:B6:1A:30:3A:FA:9A
Authority key identifier: DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1
Certificate issuer:       /CN=A918A56A/serialNumber=DA4310B2F0879DF4BD9839A14C8E3FBBB6F1EBF1
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
Manifest number:          010C
Signing time:             Sat 29 Mar 2025 04:24:35 +0000
Manifest this update:     Sat 29 Mar 2025 04:24:34 +0000
Manifest next update:     Sat 05 Apr 2025 04:24:34 +0000
Files and hashes:         1: 2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl (hash: yGinmCAsCsCxBgZfIKQhw/2lokKRKFjJVaksAMUwysc=)
                          2: 3D8F78D8772511EEA2E37420C4F9AE02.roa (hash: 0mz+0e1i75LjHInfBODtd+9jL2NlY68nRhoEgkLCSZI=)
                          3: E5502F78772411EE8659D21FC4F9AE02.roa (hash: nIeveHqzY8IyETLM0F2uy8t9PYzf3G6mHt7Vhh6frsc=)
                          4: 3DF6459A772511EEA2E37420C4F9AE02.roa (hash: iSOdJt+BL8ENRxFcv4jaFJ7KNoHUX0Q/WLaLzbaI1bk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl
                          rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 04:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A56A
        Validity
            Not Before: Mar 29 04:24:34 2025 GMT
            Not After : Apr  5 04:24:34 2025 GMT
        Subject: CN=67e77602-11f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6a:16:72:c7:8c:9b:14:38:c8:fa:7a:7c:af:
                    cc:a7:12:2f:85:c2:34:96:d0:44:81:44:b4:9d:60:
                    7d:e5:fa:78:23:9d:df:e7:34:13:b0:b5:66:19:dd:
                    a0:f5:f4:b7:3f:3f:81:55:2b:57:b4:3a:fd:eb:6a:
                    19:44:f6:59:74:4c:73:3a:3e:bf:e2:23:35:ac:7c:
                    5f:b0:1d:e6:a2:a1:39:18:43:7f:c9:35:d3:19:04:
                    3d:0e:13:02:2d:7d:1e:f8:1b:f9:58:f6:56:b3:df:
                    b3:d3:e8:61:72:63:2e:f2:e2:3e:75:e5:2f:bb:1c:
                    6f:9b:dc:f9:b6:6f:cd:1c:b2:72:56:af:2f:3d:e9:
                    c1:cb:02:d1:20:42:e4:44:5f:4c:a0:b8:f7:fd:9e:
                    f9:1b:10:07:ba:3c:a1:2f:37:2b:e1:4f:6d:b0:6a:
                    41:48:04:04:b9:6d:56:ec:b3:4e:f4:1c:85:76:39:
                    e6:45:46:b3:b2:57:3c:63:51:00:bb:6e:0d:65:7c:
                    07:84:fa:fe:99:f0:a6:2a:d0:c1:d9:ec:9f:60:5b:
                    cc:4a:50:ca:1f:8b:56:55:4e:bc:8e:1d:5c:f7:c9:
                    8d:5f:95:56:fe:27:2d:6a:ed:19:d1:ed:bf:4b:62:
                    c6:95:8b:c5:6e:cd:6b:65:82:19:61:d5:68:67:98:
                    64:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:30:18:06:A5:50:5C:47:F0:9D:4C:F9:11:09:B6:1A:30:3A:FA:9A
            X509v3 Authority Key Identifier:
                keyid:DA:43:10:B2:F0:87:9D:F4:BD:98:39:A1:4C:8E:3F:BB:B6:F1:EB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kMQsvCHnfS9mDmhTI4_u7bx6_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A56A/26FA1818772411EEA1674E1FC4F9AE02/2kMQsvCHnfS9mDmhTI4_u7bx6_E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:46:10:75:28:5e:6c:ce:d6:c6:0b:72:fb:bc:12:90:57:b6:
         a7:2d:93:63:98:21:87:4d:f6:00:93:8f:94:4b:db:69:28:bd:
         11:7c:b9:1d:6e:eb:59:ba:e8:d2:33:83:90:1a:bd:a3:fc:96:
         65:80:85:e2:27:c9:ab:00:d1:d1:57:19:01:1c:c0:25:f6:f0:
         3c:18:70:b2:a8:6b:36:3d:24:4f:be:a4:7b:b5:90:ed:8b:82:
         08:d9:e8:a2:ec:8e:d8:19:2d:40:a9:b3:fd:ec:46:8a:41:ac:
         42:24:98:7e:3e:35:e4:e0:c1:c6:56:0b:4c:4b:bc:7c:06:6e:
         4b:eb:55:d1:75:21:b3:f3:bc:42:15:9b:dc:81:fe:7b:9c:c4:
         d2:bd:4b:fe:26:dc:f8:b0:6b:65:0a:dd:a2:b7:1f:c2:77:9b:
         6d:87:89:d8:e3:60:cd:56:a7:0e:3f:3b:43:53:a5:70:38:f8:
         02:cd:45:8d:0a:e2:7f:1d:cb:83:c3:10:1c:1d:e8:c6:b4:f3:
         01:79:70:40:ad:43:00:45:49:26:39:92:f8:af:9f:51:80:02:
         99:8f:c7:99:6c:97:46:3d:23:90:2a:d6:45:3c:79:98:1a:53:
         2e:24:2d:6d:69:83:9c:3c:91:36:20:f2:ce:90:ac:8b:ef:ce:
         82:69:3e:15
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE1NkExMTAvBgNVBAUTKERBNDMxMEIyRjA4NzlERjRCRDk4MzlBMTRDOEUzRkJC
QjZGMUVCRjEwHhcNMjUwMzI5MDQyNDM0WhcNMjUwNDA1MDQyNDM0WjAYMRYwFAYD
VQQDEw02N2U3NzYwMi0xMWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4GoWcseMmxQ4yPp6fK/MpxIvhcI0ltBEgUS0nWB95fp4I53f5zQTsLVmGd2g
9fS3Pz+BVStXtDr962oZRPZZdExzOj6/4iM1rHxfsB3moqE5GEN/yTXTGQQ9DhMC
LX0e+Bv5WPZWs9+z0+hhcmMu8uI+deUvuxxvm9z5tm/NHLJyVq8vPenBywLRIELk
RF9MoLj3/Z75GxAHujyhLzcr4U9tsGpBSAQEuW1W7LNO9ByFdjnmRUazslc8Y1EA
u24NZXwHhPr+mfCmKtDB2eyfYFvMSlDKH4tWVU68jh1c98mNX5VW/ictau0Z0e2/
S2LGlYvFbs1rZYIZYdVoZ5hkQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4wGAal
UFxH8J1M+REJthowOvqaMB8GA1UdIwQYMBaAFNpDELLwh530vZg5oUyOP7u28evx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTU2QS8yNkZBMTgxODc3
MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5mUzltRG1oVEk0X3U3Yng2
X0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJrTVFzdkNIbmZTOW1EbWhUSTRfdTdieDZfRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTU2QS8yNkZBMTgxODc3MjQxMUVFQTE2NzRFMUZDNEY5QUUwMi8ya01Rc3ZDSG5m
UzltRG1oVEk0X3U3Yng2X0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBRRhB1KF5sztbGC3L7vBKQV7anLZNjmCGHTfYAk4+US9tpKL0RfLkd
butZuujSM4OQGr2j/JZlgIXiJ8mrANHRVxkBHMAl9vA8GHCyqGs2PSRPvqR7tZDt
i4II2eii7I7YGS1AqbP97EaKQaxCJJh+PjXk4MHGVgtMS7x8Bm5L61XRdSGz87xC
FZvcgf57nMTSvUv+Jtz4sGtlCt2itx/Cd5tth4nY42DNVqcOPztDU6VwOPgCzUWN
CuJ/HcuDwxAcHejGtPMBeXBArUMARUkmOZL4r59RgAKZj8eZbJdGPSOQKtZFPHmY
GlMuJC1taYOcPJE2IPLOkKyL786CaT4V
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:31:45 2025 by rpki-client