Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
File:                     at4O10LYxa-hMzuQNYwGs_6HaIM.mft (raw, json)
Hash identifier:          ccg7RDWzkprhyO0HyPjpXMF8Mt93c+4Eu1VQTIJK4Ks=
Subject key identifier:   AE:9C:76:7C:7A:88:5B:B3:12:E6:4B:DA:0D:82:B6:40:DC:9D:5F:FF
Authority key identifier: 6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83
Certificate issuer:       /CN=A911C356/serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
Certificate serial:       0718
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
Manifest number:          070B
Signing time:             Fri 30 May 2025 22:07:08 +0000
Manifest this update:     Fri 30 May 2025 22:07:07 +0000
Manifest next update:     Fri 06 Jun 2025 22:07:07 +0000
Files and hashes:         1: at4O10LYxa-hMzuQNYwGs_6HaIM.crl (hash: 11wl0Z0Hv96omsx/S2AQRg/j02+AtbupfS1XGUqnnu4=)
                          2: 68894B22402811EB91B49250C4F9AE02.roa (hash: IQPXsBjrCF2xQwF3Cbjloney1bFO9XCueS1DA232hlU=)
                          3: 86BED34677F011EB9E69B472C4F9AE02.roa (hash: j7nBCo//segTbSYNY1h0+pWssVZ/bx4SZszp4wl16ww=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl
                          rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 22:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1816 (0x718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C356, serialNumber=6ADE0ED742D8C5AFA1333B90358C06B3FE876883
        Validity
            Not Before: May 30 22:07:07 2025 GMT
            Not After : Jun  6 22:07:07 2025 GMT
        Subject: CN=683a2c0b-2b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:76:81:9b:20:ab:8b:23:7c:1e:50:49:c7:48:
                    65:04:96:aa:fc:c6:8e:a3:b5:0e:1e:a0:d2:b9:37:
                    dc:21:b1:44:5a:0b:0a:9e:6c:81:15:43:4a:90:ec:
                    0f:d4:ad:85:0f:c4:98:51:56:cd:c3:13:a2:30:12:
                    ab:1d:df:dc:f0:79:22:2a:02:ee:2e:8c:de:bf:57:
                    4c:37:bd:0d:ad:5d:6c:e3:50:51:f9:2c:04:85:4a:
                    09:8a:da:ea:15:c2:2f:22:68:2f:c1:7f:1d:68:ed:
                    8d:20:b9:08:21:61:02:04:ae:f5:7e:e3:64:04:9a:
                    1c:3e:50:51:0c:38:aa:ff:da:93:0e:c2:e1:2a:68:
                    45:0a:c7:b3:ef:ea:ab:e6:03:2b:fc:82:0f:52:6c:
                    e9:8a:43:56:b6:66:63:5c:98:ab:a7:ff:14:1d:e7:
                    d0:4f:cc:0c:a2:b2:29:ef:d1:fc:4b:82:5e:12:ea:
                    aa:01:34:2a:bd:18:42:9d:89:0b:e7:60:ee:03:2a:
                    1a:ac:65:18:e2:85:5d:2d:18:cf:78:16:11:31:09:
                    4b:af:ee:eb:94:d0:f8:6c:51:d3:b2:64:ba:25:f8:
                    9a:7b:62:32:02:9a:e0:09:8a:6c:12:3a:b2:b4:90:
                    63:16:02:b6:30:1e:1f:a1:a4:08:5b:dd:56:26:ac:
                    77:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:9C:76:7C:7A:88:5B:B3:12:E6:4B:DA:0D:82:B6:40:DC:9D:5F:FF
            X509v3 Authority Key Identifier:
                keyid:6A:DE:0E:D7:42:D8:C5:AF:A1:33:3B:90:35:8C:06:B3:FE:87:68:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/at4O10LYxa-hMzuQNYwGs_6HaIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C356/671B7DA6401D11EB8E0CCB5EC4F9AE02/at4O10LYxa-hMzuQNYwGs_6HaIM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:95:c8:57:7b:5b:71:ee:f7:6f:da:81:4a:a3:bd:29:1a:f3:
         16:76:86:5b:c7:a5:50:d2:b6:d1:e6:d0:5c:98:7d:58:7e:9b:
         c1:1e:fa:3e:6b:72:c9:f2:73:03:55:b7:fe:d2:ea:de:03:e1:
         5d:5e:a0:c9:28:a2:3c:d4:21:fc:1c:bf:a5:19:ab:e6:74:f9:
         c4:53:2f:51:32:c4:6e:34:d6:ab:99:0c:52:81:42:bd:15:2f:
         a5:bf:08:11:be:06:2f:2f:9b:6d:2e:14:be:c5:9e:1a:e9:46:
         ca:0c:55:fb:e6:91:08:5d:a7:8a:6c:f3:63:91:59:42:04:7f:
         fa:27:92:4a:19:f3:7c:6f:83:f7:e4:90:5c:4f:0b:f7:0e:37:
         26:35:4d:3c:29:50:f6:ba:e6:43:ee:f8:dd:d4:2d:d3:56:a7:
         13:7a:57:1c:4a:1d:35:99:92:d6:6b:88:31:de:d3:60:1d:1e:
         25:d5:f2:bb:22:fb:57:01:6b:5c:ab:d6:34:bd:5e:bb:28:bd:
         63:f3:00:2b:17:3f:b0:5c:29:c0:bb:c8:fb:1e:7c:1e:47:50:
         e1:15:f2:c6:8c:27:db:99:06:b7:fb:43:6f:6e:63:f2:69:c6:
         3e:7f:e0:8d:9b:90:63:01:a6:d2:14:67:71:ed:b8:42:ee:93:
         a2:8c:ed:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBxgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMzNTYxMTAvBgNVBAUTKDZBREUwRUQ3NDJEOEM1QUZBMTMzM0I5MDM1OEMwNkIz
RkU4NzY4ODMwHhcNMjUwNTMwMjIwNzA3WhcNMjUwNjA2MjIwNzA3WjAYMRYwFAYD
VQQDEw02ODNhMmMwYi0yYjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA03aBmyCriyN8HlBJx0hlBJaq/MaOo7UOHqDSuTfcIbFEWgsKnmyBFUNKkOwP
1K2FD8SYUVbNwxOiMBKrHd/c8HkiKgLuLozev1dMN70NrV1s41BR+SwEhUoJitrq
FcIvImgvwX8daO2NILkIIWECBK71fuNkBJocPlBRDDiq/9qTDsLhKmhFCsez7+qr
5gMr/IIPUmzpikNWtmZjXJirp/8UHefQT8wMorIp79H8S4JeEuqqATQqvRhCnYkL
52DuAyoarGUY4oVdLRjPeBYRMQlLr+7rlND4bFHTsmS6Jfiae2IyAprgCYpsEjqy
tJBjFgK2MB4foaQIW91WJqx3AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK6cdnx6
iFuzEuZL2g2CtkDcnV//MB8GA1UdIwQYMBaAFGreDtdC2MWvoTM7kDWMBrP+h2iD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM1Ni82NzFCN0RBNjQw
MUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhhLWhNenVRTll3R3NfNkhh
SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2F0NE8xMExZeGEtaE16dVFOWXdHc182SGFJTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzM1Ni82NzFCN0RBNjQwMUQxMUVCOEUwQ0NCNUVDNEY5QUUwMi9hdDRPMTBMWXhh
LWhNenVRTll3R3NfNkhhSU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAGlchXe1tx7vdv2oFKo70pGvMWdoZbx6VQ0rbR5tBcmH1YfpvBHvo+
a3LJ8nMDVbf+0ureA+FdXqDJKKI81CH8HL+lGavmdPnEUy9RMsRuNNarmQxSgUK9
FS+lvwgRvgYvL5ttLhS+xZ4a6UbKDFX75pEIXaeKbPNjkVlCBH/6J5JKGfN8b4P3
5JBcTwv3DjcmNU08KVD2uuZD7vjd1C3TVqcTelccSh01mZLWa4gx3tNgHR4l1fK7
IvtXAWtcq9Y0vV67KL1j8wArFz+wXCnAu8j7HnweR1DhFfLGjCfbmQa3+0NvbmPy
acY+f+CNm5BjAabSFGdx7bhC7pOijO3q
-----END CERTIFICATE-----
Generated at Sat May 31 17:44:08 2025 by rpki-client