Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
File:                     rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft (raw, json)
Hash identifier:          0IjfZ/StXpygIJbrOZb08EQWFDgAigrfBS5X41XjCYA=
Subject key identifier:   C6:29:6C:90:DD:2B:3A:04:93:0D:D2:75:9D:7F:89:D6:CF:62:47:42
Authority key identifier: AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C
Certificate issuer:       /CN=A918CD53/serialNumber=AD6D47B75853B68E2F14AF74C65A764EE4D1D99C
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
Manifest number:          01D1
Signing time:             Thu 03 Apr 2025 02:11:00 +0000
Manifest this update:     Thu 03 Apr 2025 02:10:59 +0000
Manifest next update:     Thu 10 Apr 2025 02:10:59 +0000
Files and hashes:         1: rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl (hash: Q2NWw91zzAnEx7yq8qH0TRWgKSWa4g/RREy6STnbWQE=)
                          2: 01F3383E4A1F11EDBFDEFE29C4F9AE02.roa (hash: 79hpZAVwx1DDoLtalxNbxLsW7+220EotRranSNFA/dc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl
                          rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 02:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CD53
        Validity
            Not Before: Apr  3 02:10:59 2025 GMT
            Not After : Apr 10 02:10:59 2025 GMT
        Subject: CN=67edee34-c042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:3a:ca:a4:00:a0:e2:28:e9:98:56:22:15:
                    30:cd:72:d2:6d:a5:ba:9c:d6:00:44:3a:79:97:a4:
                    fa:58:32:ac:f0:5f:ea:5a:96:6a:f3:98:95:71:93:
                    8c:4d:f7:3c:d9:a0:cc:09:03:86:ce:28:d0:eb:03:
                    95:b6:cd:11:cc:37:3b:ef:2f:3c:f9:f9:0f:b6:f7:
                    c8:82:d5:f6:e0:45:4b:2f:20:f2:dc:de:25:d4:ca:
                    3d:1e:4c:5c:52:f3:2d:df:49:01:3a:29:6d:1f:6d:
                    5c:0f:70:98:af:11:fb:60:38:a9:2a:02:13:3d:4e:
                    4c:34:d1:d5:15:76:99:5b:da:4d:16:c0:86:c1:cf:
                    dd:ff:31:9f:1a:67:79:fb:81:3d:75:18:61:ef:94:
                    c5:18:80:59:74:50:bf:3a:9c:c9:8d:2c:ec:6d:17:
                    0c:6a:c1:22:e9:87:79:a4:e9:be:7d:f0:49:37:1b:
                    8d:85:95:1d:9c:92:2a:ee:f9:fc:77:f4:4a:a6:07:
                    e9:99:b5:d7:20:20:ba:42:83:d7:8e:b1:c9:0f:78:
                    1b:ab:aa:63:39:3d:3a:b2:da:5f:03:b7:b3:0b:cf:
                    18:e2:a5:ae:e8:ef:dd:83:67:31:cd:8c:85:2d:0d:
                    d5:b9:2f:7c:de:43:84:7f:1a:cb:9b:24:20:0a:60:
                    e7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:29:6C:90:DD:2B:3A:04:93:0D:D2:75:9D:7F:89:D6:CF:62:47:42
            X509v3 Authority Key Identifier:
                keyid:AD:6D:47:B7:58:53:B6:8E:2F:14:AF:74:C6:5A:76:4E:E4:D1:D9:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rW1Ht1hTto4vFK90xlp2TuTR2Zw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CD53/C11537984A1B11EDBFA60825C4F9AE02/rW1Ht1hTto4vFK90xlp2TuTR2Zw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:bf:73:e1:4c:26:db:d2:68:84:8a:d8:39:df:dc:14:f5:c1:
         aa:6e:ac:8b:e6:ca:d3:80:8d:5f:d8:b0:2d:fb:29:3f:82:67:
         2f:73:96:78:f4:fa:7c:b6:de:26:62:06:40:58:4b:1e:9b:30:
         a6:5c:81:ac:9b:13:e7:27:7b:46:97:a9:c6:37:4e:86:c4:a3:
         35:c2:56:ae:cf:34:40:eb:f3:57:7c:07:46:15:bc:95:70:76:
         9f:1d:29:50:f1:47:e1:78:12:2e:e8:a4:23:10:94:16:90:6f:
         2b:9d:62:42:30:ec:01:2a:b7:00:49:b1:d1:f3:5e:df:15:61:
         fd:3e:0c:47:9c:e3:5c:38:d4:4b:7c:ec:9b:b3:11:a2:d0:bb:
         42:99:92:88:60:47:08:81:18:64:50:22:d5:bb:9d:2a:42:de:
         12:72:11:25:9b:ee:f3:c2:c5:cc:80:95:67:76:a1:dd:fd:30:
         ab:89:f1:b9:96:0a:0b:e3:a7:72:1a:ca:5d:6b:01:09:ce:7d:
         26:4a:73:ea:99:8f:86:22:c0:2c:bd:05:4a:08:af:00:26:78:
         57:92:ba:aa:89:0b:17:19:b4:1f:27:32:6c:ac:ec:1d:cd:e6:
         f7:77:d8:4f:28:00:8a:9c:86:36:91:a2:ca:40:f4:61:c0:dd:
         78:b6:f3:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OENENTMxMTAvBgNVBAUTKEFENkQ0N0I3NTg1M0I2OEUyRjE0QUY3NEM2NUE3NjRF
RTREMUQ5OUMwHhcNMjUwNDAzMDIxMDU5WhcNMjUwNDEwMDIxMDU5WjAYMRYwFAYD
VQQDEw02N2VkZWUzNC1jMDQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArh86yqQAoOIo6ZhWIhUwzXLSbaW6nNYARDp5l6T6WDKs8F/qWpZq85iVcZOM
Tfc82aDMCQOGzijQ6wOVts0RzDc77y88+fkPtvfIgtX24EVLLyDy3N4l1Mo9Hkxc
UvMt30kBOiltH21cD3CYrxH7YDipKgITPU5MNNHVFXaZW9pNFsCGwc/d/zGfGmd5
+4E9dRhh75TFGIBZdFC/OpzJjSzsbRcMasEi6Yd5pOm+ffBJNxuNhZUdnJIq7vn8
d/RKpgfpmbXXICC6QoPXjrHJD3gbq6pjOT06stpfA7ezC88Y4qWu6O/dg2cxzYyF
LQ3VuS983kOEfxrLmyQgCmDnzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMYpbJDd
KzoEkw3SdZ1/idbPYkdCMB8GA1UdIwQYMBaAFK1tR7dYU7aOLxSvdMZadk7k0dmc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0Q1My9DMTE1Mzc5ODRB
MUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRvNHZGSzkweGxwMlR1VFIy
WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JXMUh0MWhUdG80dkZLOTB4bHAyVHVUUjJady5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
Q0Q1My9DMTE1Mzc5ODRBMUIxMUVEQkZBNjA4MjVDNEY5QUUwMi9yVzFIdDFoVHRv
NHZGSzkweGxwMlR1VFIyWncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDCv3PhTCbb0miEitg539wU9cGqbqyL5srTgI1f2LAt+yk/gmcvc5Z4
9Pp8tt4mYgZAWEsemzCmXIGsmxPnJ3tGl6nGN06GxKM1wlauzzRA6/NXfAdGFbyV
cHafHSlQ8UfheBIu6KQjEJQWkG8rnWJCMOwBKrcASbHR817fFWH9PgxHnONcONRL
fOybsxGi0LtCmZKIYEcIgRhkUCLVu50qQt4SchElm+7zwsXMgJVndqHd/TCrifG5
lgoL46dyGspdawEJzn0mSnPqmY+GIsAsvQVKCK8AJnhXkrqqiQsXGbQfJzJsrOwd
zeb3d9hPKACKnIY2kaLKQPRhwN14tvOH
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:34:41 2025 by rpki-client