Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft
File:                     6SWAZhXd5dmqRq915ntcH7cUamo.mft (raw, json)
Hash identifier:          gVwG4fMKrPWKgxU7U9RefOIB6oG1mg/RZjKDrOFpLPc=
Subject key identifier:   2E:4E:F9:B4:A6:76:D8:A4:51:8F:44:E4:9A:E6:59:10:15:BC:77:DA
Authority key identifier: E9:25:80:66:15:DD:E5:D9:AA:46:AF:75:E6:7B:5C:1F:B7:14:6A:6A
Certificate issuer:       /CN=A918B3C9/serialNumber=E925806615DDE5D9AA46AF75E67B5C1FB7146A6A
Certificate serial:       016B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6SWAZhXd5dmqRq915ntcH7cUamo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft
Manifest number:          0165
Signing time:             Thu 03 Apr 2025 03:15:59 +0000
Manifest this update:     Thu 03 Apr 2025 03:15:58 +0000
Manifest next update:     Thu 10 Apr 2025 03:15:58 +0000
Files and hashes:         1: 6SWAZhXd5dmqRq915ntcH7cUamo.crl (hash: XhJ0yZau8XwKS+NFr80D2Gb2C2lNqeShJlReESkQKF0=)
                          2: C8F537F6F57E11ED915A7D33C4F9AE02.roa (hash: MpkM+XF2ej7fzu5nrOssXCsrIIjV/7ySiCzO/chwn20=)
                          3: 55DA06F8038D11EE81D68954C4F9AE02.roa (hash: SZ7cdPPM96RAARhBZpUziv9zc/filt+bKoMSkKIzp10=)
                          4: EEADE2CE038711EE81157F3AC4F9AE02.roa (hash: 2SWOj8P/v2WmcEvu5LXP2xEZxHVg8sbXWoOe+qvwI5o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.crl
                          rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6SWAZhXd5dmqRq915ntcH7cUamo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 03:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B3C9
        Validity
            Not Before: Apr  3 03:15:58 2025 GMT
            Not After : Apr 10 03:15:58 2025 GMT
        Subject: CN=67edfd6e-b26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:af:c8:68:66:74:fe:bb:15:44:c6:32:70:e8:
                    d0:78:1e:bb:65:3a:07:9e:a6:16:16:f5:db:f0:68:
                    a8:14:0e:78:a3:d5:b8:3c:a7:b6:41:10:fe:42:97:
                    5c:50:74:57:30:d8:4a:77:f9:45:e3:01:5f:34:09:
                    34:85:f2:ba:5e:05:34:8d:76:42:1c:38:94:b3:80:
                    46:7f:19:3c:0e:db:fb:3a:62:0d:19:84:79:e2:0c:
                    b2:53:df:08:12:31:93:5e:ae:48:32:3e:a3:7f:c2:
                    0d:a5:06:fe:8a:c3:07:83:86:b1:62:79:31:a6:05:
                    f5:b0:f0:ec:ca:dd:43:b0:5b:ec:97:25:59:f7:70:
                    13:8e:22:12:6e:cb:cf:cd:82:ee:b3:20:81:7c:50:
                    79:47:37:8f:9f:57:0b:05:e6:2c:05:27:cc:86:5f:
                    05:4a:dc:5a:be:e5:1b:18:10:c0:64:b5:cf:fd:48:
                    dc:83:8e:98:84:c0:65:c3:40:38:c2:13:a0:64:4a:
                    7e:69:65:6e:15:8d:22:67:53:22:46:3a:17:29:73:
                    d7:58:0d:7a:9c:e5:f3:92:f8:e5:d2:0b:29:09:8e:
                    8f:6a:61:6a:7b:ec:f9:46:e9:f3:63:d1:1c:4d:05:
                    a6:2a:e0:1a:cf:e6:68:d0:1a:ef:ef:95:7e:98:48:
                    01:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4E:F9:B4:A6:76:D8:A4:51:8F:44:E4:9A:E6:59:10:15:BC:77:DA
            X509v3 Authority Key Identifier:
                keyid:E9:25:80:66:15:DD:E5:D9:AA:46:AF:75:E6:7B:5C:1F:B7:14:6A:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6SWAZhXd5dmqRq915ntcH7cUamo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B3C9/7F18346CF49311ED9565E67CC4F9AE02/6SWAZhXd5dmqRq915ntcH7cUamo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:79:40:b1:7f:0f:bd:42:43:c0:f7:dd:5b:5c:55:01:46:89:
         aa:89:0d:d2:bc:20:4f:07:32:c4:17:22:3a:de:54:dd:4c:95:
         9e:7e:a3:6e:e6:bf:b6:26:55:33:d7:de:7e:7a:fe:44:f7:16:
         0f:0d:0e:9b:6a:69:cb:4c:e2:75:a1:24:90:f3:b6:7a:ae:60:
         2a:0d:a8:60:e4:6e:18:eb:60:0f:c4:95:cb:54:7e:14:91:e1:
         ae:99:9e:b8:0e:95:b3:11:73:44:c1:10:96:e6:10:7d:31:d3:
         10:39:ec:ac:d1:2f:c4:a7:8a:f5:1c:0d:e2:70:9c:dc:89:ae:
         7b:5e:50:a1:9d:f9:38:d7:7c:16:1a:b6:c0:fe:fd:a0:54:f3:
         13:06:71:6e:24:4a:50:8c:72:06:07:f8:b7:c6:bc:c9:91:d8:
         3b:68:d0:e0:b4:6f:e4:39:ea:c6:05:fe:63:7b:1c:37:94:aa:
         3a:63:2a:da:27:96:0c:8c:08:4d:28:62:cb:47:34:3b:22:0b:
         72:ce:c5:76:0a:de:83:68:94:b2:0e:e5:c6:9f:eb:9f:75:ef:
         b7:7f:15:1c:03:57:df:5e:d7:cd:9d:70:7e:63:27:d4:df:86:
         d6:e0:ac:41:e9:02:db:21:05:28:d7:60:e1:37:e4:1d:48:e5:
         17:b3:51:a8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEIzQzkxMTAvBgNVBAUTKEU5MjU4MDY2MTVEREU1RDlBQTQ2QUY3NUU2N0I1QzFG
QjcxNDZBNkEwHhcNMjUwNDAzMDMxNTU4WhcNMjUwNDEwMDMxNTU4WjAYMRYwFAYD
VQQDEw02N2VkZmQ2ZS1iMjZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA06/IaGZ0/rsVRMYycOjQeB67ZToHnqYWFvXb8GioFA54o9W4PKe2QRD+Qpdc
UHRXMNhKd/lF4wFfNAk0hfK6XgU0jXZCHDiUs4BGfxk8Dtv7OmINGYR54gyyU98I
EjGTXq5IMj6jf8INpQb+isMHg4axYnkxpgX1sPDsyt1DsFvslyVZ93ATjiISbsvP
zYLusyCBfFB5RzePn1cLBeYsBSfMhl8FStxavuUbGBDAZLXP/Ujcg46YhMBlw0A4
whOgZEp+aWVuFY0iZ1MiRjoXKXPXWA16nOXzkvjl0gspCY6PamFqe+z5RunzY9Ec
TQWmKuAaz+Zo0Brv75V+mEgBuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC5O+bSm
dtikUY9E5JrmWRAVvHfaMB8GA1UdIwQYMBaAFOklgGYV3eXZqkavdeZ7XB+3FGpq
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjNDOS83RjE4MzQ2Q0Y0
OTMxMUVEOTU2NUU2N0NDNEY5QUUwMi82U1dBWmhYZDVkbXFScTkxNW50Y0g3Y1Vh
bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZTV0FaaFhkNWRtcVJxOTE1bnRjSDdjVWFtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjNDOS83RjE4MzQ2Q0Y0OTMxMUVEOTU2NUU2N0NDNEY5QUUwMi82U1dBWmhYZDVk
bXFScTkxNW50Y0g3Y1VhbW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBCeUCxfw+9QkPA991bXFUBRomqiQ3SvCBPBzLEFyI63lTdTJWefqNu
5r+2JlUz195+ev5E9xYPDQ6bamnLTOJ1oSSQ87Z6rmAqDahg5G4Y62APxJXLVH4U
keGumZ64DpWzEXNEwRCW5hB9MdMQOeys0S/Ep4r1HA3icJzcia57XlChnfk413wW
GrbA/v2gVPMTBnFuJEpQjHIGB/i3xrzJkdg7aNDgtG/kOerGBf5jexw3lKo6Yyra
J5YMjAhNKGLLRzQ7IgtyzsV2Ct6DaJSyDuXGn+ufde+3fxUcA1ffXtfNnXB+YyfU
34bW4KxB6QLbIQUo12DhN+QdSOUXs1Go
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:22:15 2025 by rpki-client