Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
File:                     cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft (raw, json)
Hash identifier:          hi5dZxwwlaAnQDKzpHMsQi47rfeWepX8ifOlHpO0F7I=
Subject key identifier:   84:21:9F:3B:4B:FF:5B:01:58:C1:1A:0F:93:E5:A7:BA:2C:D4:AE:43
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
Manifest number:          0150
Signing time:             Sat 05 Apr 2025 03:49:24 +0000
Manifest this update:     Sat 05 Apr 2025 03:49:24 +0000
Manifest next update:     Sat 12 Apr 2025 03:49:24 +0000
Files and hashes:         1: cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl (hash: 4fS2nSz0pC4QAQwszvW8xcs03AJWHJmCzjXjL+sbo8A=)
                          2: 9DB1FB565EA511EFBA70FD68C4F9AE02.roa (hash: 4Ah/QLfJHlIj6dW20RpkEQlUiHl1IpCVTVGIN9SKd94=)
                          3: 9AADC284366311EEB376DC3AC4F9AE02.roa (hash: 7n+dP3DomtnmMtbxA80Fq/rZrQRw0nuu83uCWiKsr0A=)
                          4: 986FD2A0366311EEB376DC3AC4F9AE02.roa (hash: GhhggZHcmG8xazItX7R9+gh23ZMJG7qSLYcPNvSJFoE=)
                          5: 9767C3CC366311EEB376DC3AC4F9AE02.roa (hash: /kzB6t0e2pIjrtu3XsEpKLUUcDNjuBfLcGgruTa29yo=)
                          6: 75A05C926E8211EFA843807EC4F9AE02.roa (hash: MjTh8AW1DZ7u20XYuEekJB2oVk8O+HGzspm35tkqSi4=)
                          7: 97F664EC366311EEB376DC3AC4F9AE02.roa (hash: jVgsFzrdDjMbKaPnRbnUFCbiiTiaCFys2RcAiFEFE1Y=)
                          8: 9663A3B0366311EEB376DC3AC4F9AE02.roa (hash: wnmUO76JZp85+6TihvqjqAM1N82zX1eYSMWfhDXNXJY=)
                          9: 6BA10D8EAD9511EFAA7B4C1AC4F9AE02.roa (hash: uNH21LRQ+JewOtlVWuPyuyGaCSI3PGZenOSMtffk8oE=)
                          10: BFDC8CE68AAB11EF93DB792CC4F9AE02.roa (hash: sVEWr8cHjR39v6HfMG/t80nfPCrUOYbbrrhYH6aQohw=)
                          11: 99B68AAA366311EEB376DC3AC4F9AE02.roa (hash: HqHx/0ENjdkTLzMg3QNvatBgii/b6Dv1FTm2YDg1foE=)
                          12: 96EE3F5C366311EEB376DC3AC4F9AE02.roa (hash: iqhmC9coSd2mzPbX3c1Fi/SFAwy7h2jkexQ+YuDufDA=)
                          13: DC25866C6E6011EF830E7360C4F9AE02.roa (hash: OxiDT0SIFYyQoxxlhldZuYHR+pzMlUPJXfn9ZyBjWvM=)
                          14: 95EA48DA366311EEB376DC3AC4F9AE02.roa (hash: C4dhE2J+JR7WSKraMxcvR+Zja04JWKmYhWbZTHMV9AY=)
                          15: 993E65A2366311EEB376DC3AC4F9AE02.roa (hash: fVieB3CbqkvA15ScxDkYzRN045+h0GFMVwnZjL5ZWgk=)
                          16: 957D5E14366311EEB376DC3AC4F9AE02.roa (hash: pgOaeP/yDCO2Cd6nEAR34lCV049Kw8nNm7xRomHrUYU=)
                          17: 9B616A50366311EEB376DC3AC4F9AE02.roa (hash: uBzB0Mx36ap5dWU5XV4Be+Yi0frCuCO0c0j3Jvjl9Eo=)
                          18: 9C62F7D4366311EEB376DC3AC4F9AE02.roa (hash: 9g3C+nEwKUK4F3WWkxyvzCO8aTpUHXvcIzgpC5OoQrM=)
                          19: 9BDF5D70366311EEB376DC3AC4F9AE02.roa (hash: uTpk1PzmtkDm1Pw1+mRz53sS8x0F8j3TW2RqmuyIpuA=)
                          20: 6A32721CAD9511EFAA7B4C1AC4F9AE02.roa (hash: 5EuaV2pKmfgRERw28f/5Lxl1VQWoTEyn2eDoW1PwmPM=)
                          21: 9A3920B4366311EEB376DC3AC4F9AE02.roa (hash: O/ffCsKG2xasRSJeYinW7rjVtt6bLKUgyWdrzBes+/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 03:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C
        Validity
            Not Before: Apr  5 03:49:24 2025 GMT
            Not After : Apr 12 03:49:24 2025 GMT
        Subject: CN=67f0a844-9b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6d:18:35:1c:e2:8f:ba:4d:8b:d6:34:7f:c7:
                    9b:12:4f:e7:97:83:7f:9e:ab:e5:ca:64:b5:f3:cb:
                    14:6c:b6:49:f2:aa:c8:d2:de:8e:e3:2c:9d:2e:8c:
                    42:f5:ef:bf:d0:6d:3e:3c:93:1b:22:6b:4c:66:1a:
                    de:93:c5:8f:28:bd:c9:23:16:55:13:f8:a2:70:81:
                    5f:e0:f6:8c:52:9a:49:68:ab:3b:a5:59:73:c3:30:
                    e6:1e:d4:14:aa:12:15:6a:b9:56:4e:45:9c:b8:fe:
                    33:ad:5f:a5:c9:58:5c:6b:14:10:46:e5:3a:a8:5a:
                    63:4b:be:4c:60:32:8e:44:13:3f:f7:b6:8d:33:33:
                    0d:bb:0e:d6:10:58:4e:51:e6:0f:78:ea:69:e3:89:
                    77:2a:1d:1c:3f:47:fb:71:e4:f3:f9:d0:11:54:b0:
                    77:f3:3a:1f:06:e6:f3:57:31:f2:07:a1:31:25:9e:
                    c4:81:3e:08:ca:ea:d4:47:c2:fc:00:ce:5a:76:44:
                    70:5a:c3:df:e5:7e:17:11:4c:a4:21:fa:34:08:8c:
                    6f:ab:ce:63:44:15:c3:35:03:12:82:bf:11:32:4e:
                    42:4d:d9:3a:d7:24:6e:88:0a:f2:d9:50:c8:9a:dd:
                    54:86:c8:db:bf:8e:93:6a:3c:dc:33:29:9d:78:83:
                    74:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:21:9F:3B:4B:FF:5B:01:58:C1:1A:0F:93:E5:A7:BA:2C:D4:AE:43
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:fd:52:a5:04:60:dc:4b:d8:77:9c:32:8a:c2:f0:18:ca:b8:
         ee:e5:36:c8:f0:67:93:78:6e:1a:b8:19:8e:98:1f:85:ec:c8:
         24:11:e4:20:b8:32:83:57:9c:ef:26:34:9b:b2:50:17:db:e5:
         31:1c:14:8c:39:76:b9:35:a0:10:97:aa:c6:cf:fe:b0:a5:91:
         50:34:e9:07:39:25:bf:2e:7d:9d:9f:af:b7:e3:76:a9:70:1b:
         8b:58:b4:27:44:11:4a:33:e8:ad:6d:0b:58:a6:32:56:07:8d:
         d7:e6:cc:eb:9e:18:89:94:25:19:a1:3f:ca:d3:36:92:e2:cf:
         be:8b:5c:e1:fc:d0:e0:08:bf:04:30:6d:2c:33:10:eb:9c:9a:
         5b:74:22:59:40:ee:64:af:9d:b7:91:70:1e:ae:a6:81:45:95:
         05:b1:7b:c7:a0:37:ee:c5:26:0e:e9:f6:09:34:c5:81:72:bc:
         d3:23:de:a4:9f:00:b1:ef:0d:f9:c6:99:52:26:04:25:df:7c:
         a6:c3:df:71:2c:05:df:db:69:88:cb:3b:52:f4:93:64:93:65:
         75:89:37:97:f6:4c:75:82:22:45:2c:8f:0a:9d:24:14:d4:22:
         b1:ed:b0:fe:31:48:a5:5f:56:bc:9d:a1:1f:95:86:de:7d:6e:
         06:ad:1c:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:49:15 2025 by rpki-client