Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
File:                     W6misTDnBTYhO9nUaJ_nvVTwrSM.mft (raw, json)
Hash identifier:          9FISohOV+ZtGYzx1atio2gatnNhWzJ2UULlleHNvVNw=
Subject key identifier:   16:66:6F:09:04:EB:B9:B7:32:2C:D6:75:8D:33:42:C5:1F:4B:A3:5B
Authority key identifier: 5B:A9:A2:B1:30:E7:05:36:21:3B:D9:D4:68:9F:E7:BD:54:F0:AD:23
Certificate issuer:       /CN=A918BF70/serialNumber=5BA9A2B130E70536213BD9D4689FE7BD54F0AD23
Certificate serial:       0BAC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
Manifest number:          0BA6
Signing time:             Fri 04 Apr 2025 19:02:55 +0000
Manifest this update:     Fri 04 Apr 2025 19:02:54 +0000
Manifest next update:     Fri 11 Apr 2025 19:02:54 +0000
Files and hashes:         1: W6misTDnBTYhO9nUaJ_nvVTwrSM.crl (hash: 0e93soAjj/AqcgIUAfu46/oXzNvFIKNSLotAinSXuQ8=)
                          2: 8D720AC81D9211EA88894911C4F9AE02.roa (hash: eDzZS0BLQQgZmboEzi1MeyFIGvpWBV3MnFnzSkClZZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.crl
                          rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 19:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2988 (0xbac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918BF70
        Validity
            Not Before: Apr  4 19:02:54 2025 GMT
            Not After : Apr 11 19:02:54 2025 GMT
        Subject: CN=67f02cdf-506e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e1:2c:f0:c7:31:36:dd:ea:0b:ef:c1:e2:d8:
                    2c:f9:48:03:e4:da:b1:52:fd:be:69:6e:d5:79:7b:
                    d7:b5:1c:24:18:59:85:a2:b1:ae:5d:6b:5a:4f:db:
                    e5:99:f1:16:f8:f0:2a:d7:94:38:32:4d:d5:29:8b:
                    68:02:c7:8f:57:03:30:1c:fa:d6:d3:99:f1:e8:b6:
                    ad:06:8c:68:f8:76:21:a6:35:e5:4c:e7:68:54:76:
                    11:f6:f8:06:98:d6:47:26:3e:c7:c6:4c:ba:09:30:
                    16:c7:0a:48:7c:1e:ee:79:2c:fe:36:79:42:d9:2c:
                    4d:1a:71:b9:fb:46:7d:13:7f:5d:b2:cd:fc:da:c4:
                    a4:19:41:5e:67:cd:06:fd:01:4f:54:72:20:ac:93:
                    34:60:e5:0e:29:dd:16:dc:33:1c:24:af:55:25:a1:
                    0f:9a:33:83:14:e3:0e:c1:98:86:75:3a:6c:0c:e2:
                    6d:26:08:da:77:ef:6e:1d:72:ba:c2:e7:81:74:3e:
                    88:16:e5:14:58:14:1e:9a:48:c8:29:14:d8:77:3a:
                    74:2a:89:72:d8:6d:8d:de:73:6a:65:59:ca:0a:d4:
                    5d:29:ab:4f:e4:6e:be:02:6e:9c:ad:41:16:76:a7:
                    b8:f3:6b:10:09:7a:5d:40:d9:f6:e0:5a:cb:cc:31:
                    25:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:66:6F:09:04:EB:B9:B7:32:2C:D6:75:8D:33:42:C5:1F:4B:A3:5B
            X509v3 Authority Key Identifier:
                keyid:5B:A9:A2:B1:30:E7:05:36:21:3B:D9:D4:68:9F:E7:BD:54:F0:AD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W6misTDnBTYhO9nUaJ_nvVTwrSM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BF70/D0288C361D9011EAAAF6E00DC4F9AE02/W6misTDnBTYhO9nUaJ_nvVTwrSM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c2:37:5c:db:30:5a:c1:88:60:45:8c:db:4a:30:20:be:1f:
         ed:fc:a2:f6:c5:7d:a4:b8:89:24:8d:08:ff:77:a7:37:c6:20:
         f1:dc:a3:9b:f1:64:89:d4:62:3f:9e:ff:2b:fc:6e:5b:be:6c:
         fc:34:2f:43:7d:dc:63:91:1f:c2:a5:40:6d:8c:65:5b:fe:3c:
         c5:29:48:0b:e7:87:84:e4:0f:1b:d0:33:26:55:c6:1a:b4:8d:
         9a:22:ba:d5:0b:e4:86:bc:7a:c8:55:d6:03:ca:ed:be:b9:87:
         41:c6:29:70:43:fb:05:45:84:50:0a:a9:cd:56:bc:ee:40:93:
         6d:b9:ce:92:e9:a7:a4:52:fb:7f:97:63:40:c8:29:4a:b4:26:
         25:58:96:11:70:91:57:8b:a4:14:ee:7e:fa:a1:b2:3a:48:2c:
         ff:7a:79:7f:e8:b1:a1:d9:02:f8:b2:e7:0c:5f:e4:50:07:29:
         a9:da:00:06:dc:4f:81:9c:3b:44:8a:eb:25:4f:bc:03:9d:e4:
         91:13:d2:c9:63:b4:81:68:ab:c0:f2:42:09:c1:0f:f0:16:99:
         77:05:f4:63:af:58:01:e1:94:68:3f:11:d4:32:f1:5a:f0:62:
         26:a2:e6:e0:d6:96:da:2b:d4:02:6c:bf:f4:96:7b:39:74:b7:
         e3:9c:60:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICC6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEJGNzAxMTAvBgNVBAUTKDVCQTlBMkIxMzBFNzA1MzYyMTNCRDlENDY4OUZFN0JE
NTRGMEFEMjMwHhcNMjUwNDA0MTkwMjU0WhcNMjUwNDExMTkwMjU0WjAYMRYwFAYD
VQQDEw02N2YwMmNkZi01MDZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5OEs8McxNt3qC+/B4tgs+UgD5NqxUv2+aW7VeXvXtRwkGFmForGuXWtaT9vl
mfEW+PAq15Q4Mk3VKYtoAsePVwMwHPrW05nx6LatBoxo+HYhpjXlTOdoVHYR9vgG
mNZHJj7Hxky6CTAWxwpIfB7ueSz+NnlC2SxNGnG5+0Z9E39dss382sSkGUFeZ80G
/QFPVHIgrJM0YOUOKd0W3DMcJK9VJaEPmjODFOMOwZiGdTpsDOJtJgjad+9uHXK6
wueBdD6IFuUUWBQemkjIKRTYdzp0Koly2G2N3nNqZVnKCtRdKatP5G6+Am6crUEW
dqe482sQCXpdQNn24FrLzDElIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZmbwkE
67m3MizWdY0zQsUfS6NbMB8GA1UdIwQYMBaAFFuporEw5wU2ITvZ1Gif571U8K0j
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkY3MC9EMDI4OEMzNjFE
OTAxMUVBQUFGNkUwMERDNEY5QUUwMi9XNm1pc1REbkJUWWhPOW5VYUpfbnZWVHdy
U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1c2bWlzVERuQlRZaE85blVhSl9udlZUd3JTTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QkY3MC9EMDI4OEMzNjFEOTAxMUVBQUFGNkUwMERDNEY5QUUwMi9XNm1pc1REbkJU
WWhPOW5VYUpfbnZWVHdyU00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCxwjdc2zBawYhgRYzbSjAgvh/t/KL2xX2kuIkkjQj/d6c3xiDx3KOb
8WSJ1GI/nv8r/G5bvmz8NC9DfdxjkR/CpUBtjGVb/jzFKUgL54eE5A8b0DMmVcYa
tI2aIrrVC+SGvHrIVdYDyu2+uYdBxilwQ/sFRYRQCqnNVrzuQJNtuc6S6aekUvt/
l2NAyClKtCYlWJYRcJFXi6QU7n76obI6SCz/enl/6LGh2QL4sucMX+RQBymp2gAG
3E+BnDtEiuslT7wDneSRE9LJY7SBaKvA8kIJwQ/wFpl3BfRjr1gB4ZRoPxHUMvFa
8GImoubg1pbaK9QCbL/0lns5dLfjnGDf
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:07:38 2025 by rpki-client