Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
File:                     mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft (raw, json)
Hash identifier:          i3VMGDQKvR1lZy++Dpp4mrgQt4CEH+JEzSyUP6aFjw0=
Subject key identifier:   19:6C:E0:39:8B:AE:83:D5:B3:F7:21:42:2F:4E:7C:63:37:F4:A4:8E
Authority key identifier: 9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5
Certificate issuer:       /CN=A9121348/serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
Certificate serial:       02B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
Manifest number:          02B4
Signing time:             Sat 07 Jun 2025 01:29:18 +0000
Manifest this update:     Sat 07 Jun 2025 01:29:17 +0000
Manifest next update:     Sat 14 Jun 2025 01:29:17 +0000
Files and hashes:         1: mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl (hash: nKGVClk7afBNEgPKTWwzFAq4hHfJDXLp+OHMaETBViE=)
                          2: 3E251228F81711ECBF85A038C4F9AE02.roa (hash: UgAj2CxLYzSG9xICUOGQnuTvII7f5bwTJDXx/aWs0m0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl
                          rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Jun 2025 01:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696 (0x2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121348, serialNumber=9B1F3A835FB425557681CFD6676B721BE7A238C5
        Validity
            Not Before: Jun  7 01:29:17 2025 GMT
            Not After : Jun 14 01:29:17 2025 GMT
        Subject: CN=684395ee-4a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:94:04:41:b6:fd:26:75:33:39:a1:45:1a:
                    42:18:f1:18:71:50:f8:e4:10:a6:d0:a4:59:0b:93:
                    1a:ee:ae:c9:d2:5b:e3:13:38:f5:27:35:0c:a2:56:
                    86:41:c7:f0:70:a3:17:e6:b6:01:55:32:83:d6:49:
                    5f:38:0a:a7:65:31:03:2c:47:aa:6d:61:c1:db:0f:
                    1e:2d:a2:7d:73:75:84:03:2b:cb:07:8e:54:1b:a4:
                    50:79:50:ec:4d:0b:b4:5b:10:da:e6:45:df:fb:9c:
                    3d:51:7b:2f:85:c6:1d:5b:7d:09:82:a3:f0:6c:cf:
                    37:61:52:47:8e:72:b1:36:85:f8:97:30:51:38:b4:
                    d4:59:ae:d8:70:f0:ad:bd:72:37:03:91:92:a5:d4:
                    7b:78:53:87:44:d3:1c:bb:64:50:7a:28:72:cd:fe:
                    db:83:8f:59:a4:15:36:14:4f:e7:72:81:c4:cb:d1:
                    96:b4:f4:f1:7e:a9:2c:cf:3b:60:8d:c8:d1:4b:32:
                    85:ba:c9:2e:47:11:4a:ad:47:73:a0:09:17:6e:2a:
                    34:6c:b9:d4:1b:a0:85:a2:ef:99:3d:67:dd:ef:18:
                    90:51:2f:78:c9:49:45:f2:32:ea:5f:4f:b4:92:b3:
                    c6:aa:5c:b3:17:d2:c5:08:fa:41:66:cf:92:18:60:
                    3b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6C:E0:39:8B:AE:83:D5:B3:F7:21:42:2F:4E:7C:63:37:F4:A4:8E
            X509v3 Authority Key Identifier:
                keyid:9B:1F:3A:83:5F:B4:25:55:76:81:CF:D6:67:6B:72:1B:E7:A2:38:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx86g1-0JVV2gc_WZ2tyG-eiOMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121348/1231237EF81111EC9280C82DC4F9AE02/mx86g1-0JVV2gc_WZ2tyG-eiOMU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:de:39:10:9c:39:4d:27:aa:de:54:46:ea:51:df:d6:c1:c3:
         6a:c9:e9:b4:19:c3:d1:59:89:21:13:e8:35:79:29:99:22:ad:
         71:96:dd:bb:5d:12:4b:e9:61:6a:4e:ea:7f:a6:73:34:21:8c:
         0a:b5:27:71:ba:ac:d8:93:ab:3f:fa:5d:44:d1:66:60:3a:16:
         7f:c5:19:64:f8:43:f4:ef:d6:2c:98:e5:de:1f:74:6e:e3:1b:
         6d:1b:f7:f4:60:57:b8:5a:10:3a:10:62:e0:4f:9b:e5:b1:39:
         a3:d7:38:ad:64:c5:8f:d8:84:68:8d:c6:e6:85:08:d4:ab:b7:
         cc:8f:59:36:5d:29:a1:10:4d:6d:c8:1e:47:b2:8f:b4:ca:89:
         66:c6:0e:f2:6b:0e:d4:b1:03:09:5e:14:e8:67:ec:4c:41:8b:
         16:91:49:32:ae:5e:dc:3e:f3:ce:ef:b4:51:90:61:c8:ce:f0:
         d0:47:b3:36:88:cb:83:c9:9e:e4:0f:fb:82:56:65:20:16:d9:
         d6:45:78:02:ff:5f:f3:9e:0c:b4:c4:38:cc:32:6e:8e:c5:ec:
         e7:9f:67:73:ba:4b:21:c3:d8:b0:17:14:29:d5:f6:fc:aa:9a:
         c4:f6:a4:63:79:f9:09:30:06:1e:71:61:ee:f8:c8:fc:0d:2a:
         53:e2:46:55
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICArgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjEzNDgxMTAvBgNVBAUTKDlCMUYzQTgzNUZCNDI1NTU3NjgxQ0ZENjY3NkI3MjFC
RTdBMjM4QzUwHhcNMjUwNjA3MDEyOTE3WhcNMjUwNjE0MDEyOTE3WjAYMRYwFAYD
VQQDEw02ODQzOTVlZS00YTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxrKUBEG2/SZ1MzmhRRpCGPEYcVD45BCm0KRZC5Ma7q7J0lvjEzj1JzUMolaG
QcfwcKMX5rYBVTKD1klfOAqnZTEDLEeqbWHB2w8eLaJ9c3WEAyvLB45UG6RQeVDs
TQu0WxDa5kXf+5w9UXsvhcYdW30JgqPwbM83YVJHjnKxNoX4lzBROLTUWa7YcPCt
vXI3A5GSpdR7eFOHRNMcu2RQeihyzf7bg49ZpBU2FE/ncoHEy9GWtPTxfqkszztg
jcjRSzKFuskuRxFKrUdzoAkXbio0bLnUG6CFou+ZPWfd7xiQUS94yUlF8jLqX0+0
krPGqlyzF9LFCPpBZs+SGGA7IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBls4DmL
roPVs/chQi9OfGM39KSOMB8GA1UdIwQYMBaAFJsfOoNftCVVdoHP1mdrchvnojjF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTM0OC8xMjMxMjM3RUY4
MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpWVjJnY19XWjJ0eUctZWlP
TVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL214ODZnMS0wSlZWMmdjX1daMnR5Ry1laU9NVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTM0OC8xMjMxMjM3RUY4MTExMUVDOTI4MEM4MkRDNEY5QUUwMi9teDg2ZzEtMEpW
VjJnY19XWjJ0eUctZWlPTVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDF3jkQnDlNJ6reVEbqUd/WwcNqyem0GcPRWYkhE+g1eSmZIq1xlt27
XRJL6WFqTup/pnM0IYwKtSdxuqzYk6s/+l1E0WZgOhZ/xRlk+EP079YsmOXeH3Ru
4xttG/f0YFe4WhA6EGLgT5vlsTmj1zitZMWP2IRojcbmhQjUq7fMj1k2XSmhEE1t
yB5Hso+0yolmxg7yaw7UsQMJXhToZ+xMQYsWkUkyrl7cPvPO77RRkGHIzvDQR7M2
iMuDyZ7kD/uCVmUgFtnWRXgC/1/zngy0xDjMMm6Oxeznn2dzukshw9iwFxQp1fb8
qprE9qRjefkJMAYecWHu+Mj8DSpT4kZV
-----END CERTIFICATE-----
Generated at Sat Jun 7 06:54:52 2025 by rpki-client