Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
File:                     rM6Cte30ohwyAbjitAAMgyRRNQs.mft (raw, json)
Hash identifier:          gwfbqE/OJVwgE5Yhgz+VDqCjAl/dAlx0IzvlWBY+3xw=
Subject key identifier:   97:BE:62:DE:A8:2E:1E:B5:0E:24:7F:08:19:F1:D8:DF:F7:5C:23:8B
Authority key identifier: AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B
Certificate issuer:       /CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B
Certificate serial:       0267
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
Manifest number:          0263
Signing time:             Thu 03 Apr 2025 01:45:08 +0000
Manifest this update:     Thu 03 Apr 2025 01:45:08 +0000
Manifest next update:     Thu 10 Apr 2025 01:45:08 +0000
Files and hashes:         1: rM6Cte30ohwyAbjitAAMgyRRNQs.crl (hash: WyRYI4rb9Mbx35kMX2FLRwowDGMwIX1fNVZElC0iAxY=)
                          2: C59B1D6E0C1811EDA9B32927C4F9AE02.roa (hash: tjanCdEnU91WZWuNneW5uPLOhcdnMX5ORciFEmcFL7c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl
                          rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 01:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 615 (0x267)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F213
        Validity
            Not Before: Apr  3 01:45:08 2025 GMT
            Not After : Apr 10 01:45:08 2025 GMT
        Subject: CN=67ede824-955e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:21:bb:ba:86:c8:58:4b:f0:c4:46:09:bd:1e:
                    07:b0:d8:20:7a:b9:6e:71:49:df:44:45:2f:82:4e:
                    15:43:03:02:fe:54:d7:0b:2d:00:44:5d:a3:8e:f3:
                    7a:dd:46:5a:dd:0c:b4:bb:2c:c7:f1:a0:ca:fd:4a:
                    0b:58:24:24:a3:c6:d7:54:ee:4a:f7:a9:45:a3:6d:
                    71:20:c8:1f:ee:1f:31:0e:63:b3:1e:b5:b5:f3:ef:
                    39:ba:39:49:c0:1a:27:3f:f6:61:b7:66:5e:22:9c:
                    94:1f:5c:4e:7a:7f:00:a4:63:ff:d9:c5:af:bb:7c:
                    2c:e1:87:d8:8e:15:18:43:85:e4:ba:21:e7:18:8f:
                    85:05:0c:9e:a1:a4:24:6c:cd:59:92:82:90:9d:9e:
                    64:54:fe:3d:85:d4:7d:da:4b:d0:db:d2:85:97:ae:
                    d4:81:3a:7d:87:d3:40:6b:f4:99:55:05:45:75:e4:
                    c2:a0:44:a6:42:b9:e5:71:88:40:1e:a1:9a:0f:85:
                    77:14:2b:08:24:38:42:ff:b2:26:9d:b5:2f:e3:db:
                    7b:b4:7b:b8:77:b5:d4:98:33:a8:44:4a:5d:f1:12:
                    17:0b:cb:ad:11:bb:7b:0c:d3:d9:d5:a0:0a:a3:db:
                    ea:d9:f5:bf:c8:64:14:7a:27:e2:93:96:3c:9b:1d:
                    a0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BE:62:DE:A8:2E:1E:B5:0E:24:7F:08:19:F1:D8:DF:F7:5C:23:8B
            X509v3 Authority Key Identifier:
                keyid:AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ac:7b:85:44:d4:a6:68:c7:1a:a4:9e:ba:56:3b:35:e9:14:
         7f:e9:24:d0:0e:cb:8c:b9:fb:fa:c8:4a:e6:3f:59:70:54:99:
         34:8d:b3:cb:5b:5d:86:b1:bd:8a:3a:14:6e:89:d7:2b:a8:87:
         86:ea:21:38:77:2d:cd:5e:47:9b:31:97:4e:92:43:7d:6e:be:
         3e:96:73:d2:92:65:da:78:79:f7:b5:2b:12:75:c9:39:7a:ce:
         1f:a6:f9:7a:bc:55:5b:29:f0:af:f4:af:e7:65:d5:ae:49:17:
         ec:a9:71:d8:07:9c:04:01:5d:66:52:91:bc:73:cc:c5:b1:c0:
         83:ba:df:40:27:07:33:ed:4f:f5:f1:26:90:6a:91:be:ce:e7:
         9b:4e:3a:88:33:73:7b:4b:83:7e:c2:5c:eb:c4:3d:4e:2f:41:
         cb:79:4c:35:14:a0:48:41:f9:b9:56:73:ff:b9:9d:46:8b:f9:
         93:7a:28:ba:29:fd:48:5b:c8:75:a2:ab:33:0d:bb:0e:d1:a4:
         c8:39:7e:c3:1e:42:76:0b:6b:bb:03:62:92:20:d7:b8:68:cd:
         e4:44:fa:18:a4:e8:fd:56:f4:ec:e8:57:b7:62:1f:5e:29:aa:
         26:f2:77:e6:57:88:dc:e4:b7:51:87:04:fc:92:82:09:73:09:
         27:15:66:b3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYyMTMxMTAvBgNVBAUTKEFDQ0U4MkI1RURGNEEyMUMzMjAxQjhFMkI0MDAwQzgz
MjQ1MTM1MEIwHhcNMjUwNDAzMDE0NTA4WhcNMjUwNDEwMDE0NTA4WjAYMRYwFAYD
VQQDEw02N2VkZTgyNC05NTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1yG7uobIWEvwxEYJvR4HsNggerlucUnfREUvgk4VQwMC/lTXCy0ARF2jjvN6
3UZa3Qy0uyzH8aDK/UoLWCQko8bXVO5K96lFo21xIMgf7h8xDmOzHrW18+85ujlJ
wBonP/Zht2ZeIpyUH1xOen8ApGP/2cWvu3ws4YfYjhUYQ4XkuiHnGI+FBQyeoaQk
bM1ZkoKQnZ5kVP49hdR92kvQ29KFl67UgTp9h9NAa/SZVQVFdeTCoESmQrnlcYhA
HqGaD4V3FCsIJDhC/7ImnbUv49t7tHu4d7XUmDOoREpd8RIXC8utEbt7DNPZ1aAK
o9vq2fW/yGQUeifik5Y8mx2gxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJe+Yt6o
Lh61DiR/CBnx2N/3XCOLMB8GA1UdIwQYMBaAFKzOgrXt9KIcMgG44rQADIMkUTUL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIxMy83MjM0RERDNDBD
MTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9od3lBYmppdEFBTWd5UlJO
UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JNNkN0ZTMwb2h3eUFiaml0QUFNZ3lSUk5Rcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjIxMy83MjM0RERDNDBDMTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9o
d3lBYmppdEFBTWd5UlJOUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkrHuFRNSmaMcapJ66Vjs16RR/6STQDsuMufv6yErmP1lwVJk0jbPL
W12Gsb2KOhRuidcrqIeG6iE4dy3NXkebMZdOkkN9br4+lnPSkmXaeHn3tSsSdck5
es4fpvl6vFVbKfCv9K/nZdWuSRfsqXHYB5wEAV1mUpG8c8zFscCDut9AJwcz7U/1
8SaQapG+zuebTjqIM3N7S4N+wlzrxD1OL0HLeUw1FKBIQfm5VnP/uZ1Gi/mTeii6
Kf1IW8h1oqszDbsO0aTIOX7DHkJ2C2u7A2KSINe4aM3kRPoYpOj9VvTs6Fe3Yh9e
Kaom8nfmV4jc5LdRhwT8koIJcwknFWaz
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:19:40 2025 by rpki-client