Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
File:                     _dkd0w6bH-o7t-Eq73YhZigSmyM.mft (raw, json)
Hash identifier:          owkm6EGpr0aOkaFPZgCBc1yxGmLJEREzAjbO/io0SNI=
Subject key identifier:   D9:89:9A:3F:A8:02:81:F9:19:FD:B0:F3:6F:70:20:DA:16:F0:CC:F1
Authority key identifier: FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23
Certificate issuer:       /CN=A9192B86/serialNumber=FDD91DD30E9B1FEA3BB7E12AEF76216628129B23
Certificate serial:       F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
Manifest number:          F0
Signing time:             Sat 05 Apr 2025 04:37:34 +0000
Manifest this update:     Sat 05 Apr 2025 04:37:33 +0000
Manifest next update:     Sat 12 Apr 2025 04:37:33 +0000
Files and hashes:         1: _dkd0w6bH-o7t-Eq73YhZigSmyM.crl (hash: kJumjkNe6g2bR3YVG/25qt8U+jssXVSrzsTMlgA+YqY=)
                          2: DECE1662A87D11EE882D7B6EC4F9AE02.roa (hash: C77jJoshdfxzPcbWVGuVdmC/Yt4X5b0+J8bsZe99ndM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl
                          rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:37:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192B86
        Validity
            Not Before: Apr  5 04:37:33 2025 GMT
            Not After : Apr 12 04:37:33 2025 GMT
        Subject: CN=67f0b38e-480f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0b:c5:e4:53:3f:c7:23:f4:b7:72:92:43:44:
                    15:21:dd:9e:99:06:eb:a4:93:42:37:b9:0c:0e:b7:
                    d6:6b:a3:f5:34:24:af:cf:e4:0d:0c:73:39:7a:fe:
                    34:fb:ba:07:d1:21:24:b7:7c:a9:74:30:ef:f6:84:
                    12:fb:1e:19:0b:c5:2d:8e:36:b2:cf:f6:c7:8b:9a:
                    2b:07:78:92:b6:ca:be:72:59:61:45:ee:01:02:48:
                    ef:ac:4c:be:ef:f3:bd:b6:5b:09:72:a3:65:45:2e:
                    ee:de:f1:1d:ec:5c:d9:6d:ba:93:f7:f4:e4:e5:60:
                    65:3a:e2:64:1a:8e:1c:46:6d:4e:ee:ee:cd:dc:87:
                    ac:ba:f6:77:0e:b9:40:9f:72:f6:5d:44:45:3f:4c:
                    61:3a:28:c2:03:7f:ce:1b:f6:4b:d3:82:c8:b5:6d:
                    67:72:ba:d1:af:6e:74:a9:fe:ae:8a:dd:1b:43:1e:
                    05:e8:9e:c4:c9:9c:84:44:91:66:4d:d7:ad:f7:2e:
                    18:b5:8d:b7:b8:16:3d:88:e8:00:98:6e:ea:82:c3:
                    0b:05:f3:d1:5b:b9:f0:61:34:a5:4e:a9:8c:1d:30:
                    49:65:26:c3:36:5a:33:62:0f:67:0a:17:6b:84:58:
                    28:92:8c:a4:84:c7:d8:c1:e4:26:81:f4:31:c6:64:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:89:9A:3F:A8:02:81:F9:19:FD:B0:F3:6F:70:20:DA:16:F0:CC:F1
            X509v3 Authority Key Identifier:
                keyid:FD:D9:1D:D3:0E:9B:1F:EA:3B:B7:E1:2A:EF:76:21:66:28:12:9B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dkd0w6bH-o7t-Eq73YhZigSmyM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192B86/86E977CAA87D11EE9FA55A6DC4F9AE02/_dkd0w6bH-o7t-Eq73YhZigSmyM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:37:82:14:11:c7:c4:43:ba:b7:53:49:ee:42:95:73:d1:96:
         44:fd:28:b3:73:f0:d7:d4:cf:37:ce:1f:d9:8a:e9:4f:19:14:
         67:7b:ce:56:aa:a9:5c:11:56:89:c7:92:fd:d7:c1:7c:7e:68:
         93:59:52:c2:7f:5d:06:3d:57:72:ca:68:96:b5:55:21:63:bb:
         02:0a:79:a7:bb:f8:e9:6a:cd:86:d7:31:2f:c1:6c:4c:80:af:
         25:b4:99:a9:55:62:f7:42:2b:a3:ab:49:ad:2e:65:af:7c:19:
         75:b6:42:3e:30:11:1a:3e:1c:e3:98:9a:6c:ef:77:93:bf:e3:
         b0:0f:86:31:74:b7:a1:b2:dc:d2:d1:8b:8f:4c:ec:16:4b:1a:
         49:87:c1:c1:33:72:f0:c6:d0:5b:fc:77:17:6e:77:f8:13:8f:
         bc:4e:c6:3c:bd:c0:9c:81:7a:92:83:09:2e:7a:ec:90:43:ce:
         35:6d:ec:65:98:03:9a:96:16:d7:18:c1:0a:03:ba:20:94:5d:
         21:81:5e:20:04:e1:42:99:8e:6c:0d:28:36:f3:20:9c:58:57:
         db:97:7e:7a:55:7f:94:76:62:d7:d3:05:ef:7d:43:a8:62:00:
         e3:ab:14:a9:20:a7:00:db:ad:c6:44:f7:f4:a1:2b:f2:8b:e3:
         7f:7e:06:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJCODYxMTAvBgNVBAUTKEZERDkxREQzMEU5QjFGRUEzQkI3RTEyQUVGNzYyMTY2
MjgxMjlCMjMwHhcNMjUwNDA1MDQzNzMzWhcNMjUwNDEyMDQzNzMzWjAYMRYwFAYD
VQQDEw02N2YwYjM4ZS00ODBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArgvF5FM/xyP0t3KSQ0QVId2emQbrpJNCN7kMDrfWa6P1NCSvz+QNDHM5ev40
+7oH0SEkt3ypdDDv9oQS+x4ZC8Utjjayz/bHi5orB3iStsq+cllhRe4BAkjvrEy+
7/O9tlsJcqNlRS7u3vEd7FzZbbqT9/Tk5WBlOuJkGo4cRm1O7u7N3IesuvZ3DrlA
n3L2XURFP0xhOijCA3/OG/ZL04LItW1ncrrRr250qf6uit0bQx4F6J7EyZyERJFm
Tdet9y4YtY23uBY9iOgAmG7qgsMLBfPRW7nwYTSlTqmMHTBJZSbDNlozYg9nChdr
hFgokoykhMfYweQmgfQxxmRuGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmJmj+o
AoH5Gf2w829wINoW8MzxMB8GA1UdIwQYMBaAFP3ZHdMOmx/qO7fhKu92IWYoEpsj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkI4Ni84NkU5NzdDQUE4
N0QxMUVFOUZBNTVBNkRDNEY5QUUwMi9fZGtkMHc2Ykgtbzd0LUVxNzNZaFppZ1Nt
eU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19ka2QwdzZiSC1vN3QtRXE3M1loWmlnU215TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkI4Ni84NkU5NzdDQUE4N0QxMUVFOUZBNTVBNkRDNEY5QUUwMi9fZGtkMHc2Ykgt
bzd0LUVxNzNZaFppZ1NteU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC4N4IUEcfEQ7q3U0nuQpVz0ZZE/Sizc/DX1M83zh/ZiulPGRRne85W
qqlcEVaJx5L918F8fmiTWVLCf10GPVdyymiWtVUhY7sCCnmnu/jpas2G1zEvwWxM
gK8ltJmpVWL3Qiujq0mtLmWvfBl1tkI+MBEaPhzjmJps73eTv+OwD4YxdLehstzS
0YuPTOwWSxpJh8HBM3LwxtBb/HcXbnf4E4+8TsY8vcCcgXqSgwkueuyQQ841bexl
mAOalhbXGMEKA7oglF0hgV4gBOFCmY5sDSg28yCcWFfbl356VX+UdmLX0wXvfUOo
YgDjqxSpIKcA263GRPf0oSvyi+N/fgax
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:53:15 2025 by rpki-client