Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
File:                     B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft (raw, json)
Hash identifier:          zrzIDWqAhIQMs+sPxQdiiNwqV7VAYBW1L+OQTE/uSvk=
Subject key identifier:   67:42:87:19:0A:96:0C:10:48:56:5B:AC:B6:CE:A5:AD:0F:7A:AE:96
Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
Certificate issuer:       /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Certificate serial:       04A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
Manifest number:          0483
Signing time:             Thu 03 Apr 2025 00:10:08 +0000
Manifest this update:     Thu 03 Apr 2025 00:10:08 +0000
Manifest next update:     Thu 10 Apr 2025 00:10:08 +0000
Files and hashes:         1: B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl (hash: xjVEN51UgT1MO7qYojD9XCheqXiwH7oNPYTrHx59EUo=)
                          2: 6F155A6E144F11EE86CD7A23C4F9AE02.roa (hash: aI/sq9frDUa4oxfrwH2vEYRuVBCHaeAM/ywxuno+wUs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl
                          rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 00:10:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184 (0x4a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B443
        Validity
            Not Before: Apr  3 00:10:08 2025 GMT
            Not After : Apr 10 00:10:08 2025 GMT
        Subject: CN=67edd1e0-e733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:be:15:8e:00:12:e8:73:af:8a:2a:4d:9d:
                    84:41:46:a9:43:bd:51:82:e4:9d:51:f8:96:52:a3:
                    a7:8a:e3:db:cd:ab:b7:1f:e2:87:46:a9:1e:1e:c9:
                    a6:f1:ee:14:5e:b5:31:f7:40:e2:24:78:5f:03:2c:
                    5a:22:e0:9d:b2:21:e3:e5:e1:f7:9a:d9:e2:21:bf:
                    e7:bb:35:a9:27:2d:a0:b1:eb:79:5d:0b:0e:ce:e7:
                    ce:b6:bb:0c:e3:53:1d:20:a1:96:ed:61:e4:d4:95:
                    08:d0:c7:95:2b:dd:5d:c1:d4:75:7e:8d:df:8f:f7:
                    e3:92:1a:87:58:05:aa:33:58:75:be:a8:28:f3:d1:
                    3a:c7:bd:1c:49:c9:39:a4:35:73:fd:cb:67:1f:a1:
                    75:b9:43:a7:ec:e4:de:e3:01:3e:10:61:80:d7:ca:
                    df:1f:16:d2:cb:8e:d6:5b:4d:df:b4:ad:c1:1b:09:
                    97:d1:8d:eb:ed:56:41:f7:5f:7f:af:2c:66:54:a2:
                    a2:8e:d3:4c:f2:88:11:b4:6e:6c:30:e7:8c:05:f2:
                    df:2f:96:8d:37:a1:2d:3b:7d:18:53:43:b2:2f:9b:
                    9c:ea:0c:7a:95:9b:cb:0c:cf:2e:5e:a3:f4:60:75:
                    be:07:90:50:36:9d:30:3c:2c:c9:7e:1d:0f:9e:5a:
                    b9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:42:87:19:0A:96:0C:10:48:56:5B:AC:B6:CE:A5:AD:0F:7A:AE:96
            X509v3 Authority Key Identifier:
                keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f5:e2:bb:a3:88:46:da:74:03:2b:b2:75:d1:1d:fa:bb:7e:
         19:82:1a:48:e7:ae:97:8f:16:f7:6c:b7:af:c3:50:86:2c:46:
         85:c9:de:b3:32:e4:f9:b7:1c:05:3c:a2:d4:59:f6:97:e3:ef:
         77:00:90:25:6d:bc:66:80:f8:5c:d0:fd:82:2d:93:12:e0:14:
         e2:d6:7f:aa:c0:93:ba:e4:3b:ac:d3:3a:2a:f7:57:96:6b:7c:
         d0:09:34:35:37:74:1c:00:2d:fb:7f:12:f1:da:6c:f6:ae:a3:
         ca:b2:b6:e9:cd:25:70:0d:ff:de:c7:e8:59:82:22:da:fa:e8:
         51:f2:aa:60:7f:13:66:e6:02:63:a6:29:0a:76:c5:75:ec:f1:
         ad:d6:f4:14:10:ce:ce:b8:09:cb:48:1b:e1:42:f5:38:f6:86:
         63:5a:79:79:05:78:e0:61:56:ab:8e:9f:6c:0b:e8:c7:59:fb:
         5b:c3:70:c0:d2:f8:9e:30:58:5f:2e:c2:49:e0:f6:a9:6f:5f:
         8a:c6:ef:37:b2:28:5c:c3:98:c1:ba:05:26:9b:85:c3:73:cf:
         ac:1b:d5:34:23:de:76:dd:b4:03:2a:dd:f9:6d:fa:df:89:65:
         c8:8b:9e:f2:0b:54:6b:7d:ef:fc:a9:37:24:70:1f:5c:94:b3:
         4c:a2:9c:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI0NDMxMTAvBgNVBAUTKDA3QUE3M0E3RUQ2NzQxMTg5MUJEOEY3MjcyNjE5NTFD
NDFDNzE2REUwHhcNMjUwNDAzMDAxMDA4WhcNMjUwNDEwMDAxMDA4WjAYMRYwFAYD
VQQDEw02N2VkZDFlMC1lNzMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmxy+FY4AEuhzr4oqTZ2EQUapQ71RguSdUfiWUqOniuPbzau3H+KHRqkeHsmm
8e4UXrUx90DiJHhfAyxaIuCdsiHj5eH3mtniIb/nuzWpJy2gset5XQsOzufOtrsM
41MdIKGW7WHk1JUI0MeVK91dwdR1fo3fj/fjkhqHWAWqM1h1vqgo89E6x70cSck5
pDVz/ctnH6F1uUOn7OTe4wE+EGGA18rfHxbSy47WW03ftK3BGwmX0Y3r7VZB919/
ryxmVKKijtNM8ogRtG5sMOeMBfLfL5aNN6EtO30YU0OyL5uc6gx6lZvLDM8uXqP0
YHW+B5BQNp0wPCzJfh0Pnlq5xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdChxkK
lgwQSFZbrLbOpa0Peq6WMB8GA1UdIwQYMBaAFAeqc6ftZ0EYkb2PcnJhlRxBxxbe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjQ0My85MjQyNkY4NjQy
MEExMUVDOTRDNEYxNUFDNEY5QUUwMi9CNnB6cC0xblFSaVJ2WTl5Y21HVkhFSEhG
dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I2cHpwLTFuUVJpUnZZOXljbUdWSEVISEZ0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjQ0My85MjQyNkY4NjQyMEExMUVDOTRDNEYxNUFDNEY5QUUwMi9CNnB6cC0xblFS
aVJ2WTl5Y21HVkhFSEhGdDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBv9eK7o4hG2nQDK7J10R36u34ZghpI566Xjxb3bLevw1CGLEaFyd6z
MuT5txwFPKLUWfaX4+93AJAlbbxmgPhc0P2CLZMS4BTi1n+qwJO65Dus0zoq91eW
a3zQCTQ1N3QcAC37fxLx2mz2rqPKsrbpzSVwDf/ex+hZgiLa+uhR8qpgfxNm5gJj
pikKdsV17PGt1vQUEM7OuAnLSBvhQvU49oZjWnl5BXjgYVarjp9sC+jHWftbw3DA
0vieMFhfLsJJ4Papb1+Kxu83sihcw5jBugUmm4XDc8+sG9U0I9523bQDKt35bfrf
iWXIi57yC1Rrfe/8qTckcB9clLNMopw9
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:24:14 2025 by rpki-client