Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.mft
File:                     f-Bbou6G6oexhMP_X7EbO6oUiuw.mft (raw, json)
Hash identifier:          Gd5owT9Ulwvzw9K7xNf7tRBR2cClEr8dAY4NJLobr1U=
Subject key identifier:   16:75:74:ED:A6:91:58:FE:1C:2B:93:B7:71:2D:06:F2:E3:8B:4A:05
Authority key identifier: 7F:E0:5B:A2:EE:86:EA:87:B1:84:C3:FF:5F:B1:1B:3B:AA:14:8A:EC
Certificate issuer:       /CN=A918BAEC/serialNumber=7FE05BA2EE86EA87B184C3FF5FB11B3BAA148AEC
Certificate serial:       08
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.mft
Manifest number:          06
Signing time:             Sat 29 Mar 2025 07:32:56 +0000
Manifest this update:     Sat 29 Mar 2025 07:32:56 +0000
Manifest next update:     Sat 05 Apr 2025 07:32:55 +0000
Files and hashes:         1: f-Bbou6G6oexhMP_X7EbO6oUiuw.crl (hash: ADBVbe6GSps8vkbCZVXs9bNquUhl2YFWXIPOyNa9AMg=)
                          2: FFAB3BEA093D11F09D0BF611C4F9AE02.roa (hash: yI/j1xgiS/fqVtmbq53pKNzmCkVrwuDmHepyJ+SQ0M0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.crl
                          rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BAEC
        Validity
            Not Before: Mar 29 07:32:56 2025 GMT
            Not After : Apr  5 07:32:55 2025 GMT
        Subject: CN=67e7a228-32fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ab:ac:89:7e:77:6e:df:4c:8b:cf:28:3b:94:
                    94:29:5b:5c:a1:63:1a:a8:e4:25:bc:88:d7:a6:e8:
                    bf:76:d7:b9:8e:aa:ab:a2:2a:22:1f:df:de:e9:82:
                    00:2c:58:27:c3:7b:a2:8c:06:80:42:ac:d7:79:63:
                    ec:64:0a:37:a7:37:d2:05:f8:33:72:3a:d4:93:a9:
                    9c:74:6c:08:44:c8:63:63:f2:c6:94:43:b3:de:8b:
                    b1:ad:2a:27:dc:90:bd:40:7f:6f:17:fa:6e:38:62:
                    45:b7:77:00:40:75:42:2f:7b:4c:fb:bd:4b:02:e7:
                    e8:72:10:41:7f:42:37:f2:9d:74:24:bb:8c:12:13:
                    84:35:59:cd:5f:6d:c7:5c:bc:46:fb:52:58:a2:f6:
                    b4:4f:95:0d:6f:ee:79:5e:51:54:0d:4d:b7:fb:c4:
                    d3:6f:70:17:e1:66:67:bd:b4:d3:c8:0c:ec:09:67:
                    dd:e9:a6:04:13:34:64:38:0a:d3:39:c4:a0:12:8c:
                    4a:5e:ed:f6:91:43:21:f0:42:f5:3f:28:18:9f:f6:
                    8c:28:bf:bc:15:52:f2:de:ac:6b:c8:5a:24:b4:d2:
                    46:49:22:14:14:3d:65:3b:35:cb:f3:02:61:09:a0:
                    77:eb:af:86:ef:e8:85:0c:41:d8:28:95:8b:5b:6d:
                    37:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:75:74:ED:A6:91:58:FE:1C:2B:93:B7:71:2D:06:F2:E3:8B:4A:05
            X509v3 Authority Key Identifier:
                keyid:7F:E0:5B:A2:EE:86:EA:87:B1:84:C3:FF:5F:B1:1B:3B:AA:14:8A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f-Bbou6G6oexhMP_X7EbO6oUiuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BAEC/6623A652093C11F0B284880DC4F9AE02/f-Bbou6G6oexhMP_X7EbO6oUiuw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:4d:f0:43:54:9f:e2:c5:14:66:5c:91:a2:b2:dc:69:ed:70:
         20:11:5e:4d:ce:2a:6b:c5:5e:5e:b8:67:9c:66:a9:fc:af:ae:
         05:f6:e5:4b:e2:57:3a:9d:6c:1c:76:ab:28:25:89:51:a6:61:
         6f:11:96:f8:47:39:3f:46:02:72:db:1f:cd:8d:fe:dc:dc:27:
         52:86:49:fa:cf:7e:b7:b1:ba:15:d9:42:73:12:5c:89:97:a3:
         f0:28:70:64:0e:64:1e:7d:0a:5a:e8:23:87:5f:ae:44:a9:93:
         b3:65:fb:29:61:71:cf:e3:6c:f8:a4:9c:de:67:2d:8c:d5:4b:
         f4:ef:be:e7:7e:a0:d2:d4:45:60:08:a6:fa:61:8d:94:8c:11:
         f1:30:39:ba:1f:8a:89:fc:f3:4b:bf:b3:d7:bf:b6:f4:78:5c:
         68:d4:69:5e:8a:6b:10:5a:ce:17:ff:6d:fe:63:4c:76:08:c9:
         0d:30:10:73:52:73:13:0d:e2:aa:1a:bb:e2:96:52:7c:9b:f6:
         35:f1:4b:c5:6d:68:ad:5f:88:fc:94:ff:b1:24:11:6d:2e:d3:
         78:75:8d:48:f5:a8:5c:fd:2d:5f:5e:78:1f:d5:6e:22:eb:e7:
         6a:28:17:1d:72:90:f6:15:e1:2a:76:65:67:c6:99:5a:86:c8:
         fb:0f:3e:02
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QkFFQzExMC8GA1UEBRMoN0ZFMDVCQTJFRTg2RUE4N0IxODRDM0ZGNUZCMTFCM0JB
QTE0OEFFQzAeFw0yNTAzMjkwNzMyNTZaFw0yNTA0MDUwNzMyNTVaMBgxFjAUBgNV
BAMTDTY3ZTdhMjI4LTMyZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDYq6yJfndu30yLzyg7lJQpW1yhYxqo5CW8iNem6L9217mOqquiKiIf397pggAs
WCfDe6KMBoBCrNd5Y+xkCjenN9IF+DNyOtSTqZx0bAhEyGNj8saUQ7Pei7GtKifc
kL1Af28X+m44YkW3dwBAdUIve0z7vUsC5+hyEEF/QjfynXQku4wSE4Q1Wc1fbcdc
vEb7Ulii9rRPlQ1v7nleUVQNTbf7xNNvcBfhZme9tNPIDOwJZ93ppgQTNGQ4CtM5
xKASjEpe7faRQyHwQvU/KBif9owov7wVUvLerGvIWiS00kZJIhQUPWU7NcvzAmEJ
oHfrr4bv6IUMQdgolYtbbTc/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFnV07aaR
WP4cK5O3cS0G8uOLSgUwHwYDVR0jBBgwFoAUf+Bbou6G6oexhMP/X7EbO6oUiuww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCQUVDLzY2MjNBNjUyMDkz
QzExRjBCMjg0ODgwREM0RjlBRTAyL2YtQmJvdTZHNm9leGhNUF9YN0ViTzZvVWl1
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvZi1CYm91Nkc2b2V4aE1QX1g3RWJPNm9VaXV3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC
QUVDLzY2MjNBNjUyMDkzQzExRjBCMjg0ODgwREM0RjlBRTAyL2YtQmJvdTZHNm9l
eGhNUF9YN0ViTzZvVWl1dy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMhN8ENUn+LFFGZckaKy3GntcCARXk3OKmvFXl64Z5xmqfyvrgX25Uvi
VzqdbBx2qygliVGmYW8RlvhHOT9GAnLbH82N/tzcJ1KGSfrPfrexuhXZQnMSXImX
o/AocGQOZB59ClroI4dfrkSpk7Nl+ylhcc/jbPiknN5nLYzVS/Tvvud+oNLURWAI
pvphjZSMEfEwObofion880u/s9e/tvR4XGjUaV6KaxBazhf/bf5jTHYIyQ0wEHNS
cxMN4qoau+KWUnyb9jXxS8VtaK1fiPyU/7EkEW0u03h1jUj1qFz9LV9eeB/VbiLr
52ooFx1ykPYV4Sp2ZWfGmVqGyPsPPgI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:57 2025 by rpki-client