Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
File:                     276b_H-KPTvgW7W2Ah91Rb6YG_A.mft (raw, json)
Hash identifier:          NEMGv3iy99ZRY7HKy+T5cAoPyfyFTCt+NqLBNmKNGrk=
Subject key identifier:   6C:D2:72:BE:A3:FF:D4:43:74:29:55:23:B2:DF:14:6A:29:E3:A2:E8
Authority key identifier: DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0
Certificate issuer:       /CN=A913D03A/serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0
Certificate serial:       076A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
Manifest number:          0761
Signing time:             Fri 30 May 2025 21:51:26 +0000
Manifest this update:     Fri 30 May 2025 21:51:25 +0000
Manifest next update:     Fri 06 Jun 2025 21:51:25 +0000
Files and hashes:         1: 276b_H-KPTvgW7W2Ah91Rb6YG_A.crl (hash: gEtK1cT3oOiSjckPiPIaBnHsOEO0UDNa8Mvoy9ZDF3I=)
                          2: 3A9F3ADC234A11EBA0C40C2FC4F9AE02.roa (hash: rhQRS5c9b4woxqf3Lh4ekB6IlqaEB8oCpxpphU5va4Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl
                          rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:51:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1898 (0x76a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D03A, serialNumber=DBBE9BFC7F8A3D3BE05BB5B6021F7545BE981BF0
        Validity
            Not Before: May 30 21:51:25 2025 GMT
            Not After : Jun  6 21:51:25 2025 GMT
        Subject: CN=683a285e-ff32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:16:f1:37:f3:a4:85:0f:98:19:9f:37:79:
                    87:6e:f1:91:35:fd:68:8b:76:69:a0:b6:59:6d:73:
                    5d:e4:0a:db:93:c2:e4:e3:c9:9e:94:39:c1:68:da:
                    fe:51:59:97:d7:a4:29:34:a8:43:d7:cd:f6:7d:ad:
                    01:39:11:4f:a7:4c:d1:14:ab:bb:61:c5:68:4d:9b:
                    88:7a:ba:b1:70:0e:ae:6f:24:af:47:da:de:4f:a4:
                    e9:68:9f:3d:ab:5d:1a:df:0f:5e:c8:e0:4c:34:3b:
                    23:5c:52:d7:60:45:ea:eb:03:fb:25:8a:52:dc:b6:
                    9f:29:ba:54:e9:10:73:94:18:60:a4:c1:39:ed:c4:
                    d4:66:bf:59:55:5d:63:f6:ca:ef:13:f3:3e:40:e9:
                    6f:2c:f4:e2:97:27:3c:2e:1a:2c:dd:25:42:bb:25:
                    a6:2d:80:a2:2a:cb:f2:87:89:27:d9:03:91:92:b4:
                    27:d7:d8:6e:3a:c0:e6:c6:cd:d2:3e:ad:4d:f6:b7:
                    c5:7d:16:81:f7:df:86:67:92:10:cf:9d:fa:12:36:
                    42:29:50:e6:9f:9a:8a:e3:0b:8e:53:1f:a6:14:4d:
                    42:ff:08:bf:69:5b:37:7c:cf:c5:7e:42:9c:83:14:
                    8a:e4:7f:aa:c1:93:38:d1:84:92:7e:fb:2c:01:ab:
                    80:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D2:72:BE:A3:FF:D4:43:74:29:55:23:B2:DF:14:6A:29:E3:A2:E8
            X509v3 Authority Key Identifier:
                keyid:DB:BE:9B:FC:7F:8A:3D:3B:E0:5B:B5:B6:02:1F:75:45:BE:98:1B:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/276b_H-KPTvgW7W2Ah91Rb6YG_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D03A/926B43E8219011EB82A41B48C4F9AE02/276b_H-KPTvgW7W2Ah91Rb6YG_A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:93:ba:f5:68:bf:fd:ba:55:09:84:d1:55:18:49:9b:d0:af:
         70:4c:ae:90:25:46:f2:c5:4f:d0:61:e2:b9:5e:66:00:6a:7e:
         5e:13:cc:03:86:98:54:13:01:06:68:b8:27:2b:f1:09:27:5b:
         a0:ac:be:88:fe:1e:fe:0e:50:5d:e6:f9:8e:2c:f3:f6:68:88:
         8c:39:8a:af:cd:33:a4:25:a0:35:5c:91:49:aa:40:ca:6a:34:
         e5:cb:2a:40:be:2b:b7:19:1e:66:cb:ad:5e:af:12:07:0b:ef:
         21:de:6a:f0:bb:c7:8d:f6:94:c8:43:f8:51:11:7f:5b:34:0e:
         6d:bd:d2:81:84:99:3e:67:d8:a8:27:ad:d7:27:0a:87:fe:11:
         42:50:d7:4a:6e:23:1b:18:b1:ab:a8:16:89:8d:36:9b:85:57:
         ab:db:09:55:5e:71:35:da:cd:c9:78:4c:f6:99:76:8f:09:af:
         e7:3d:05:59:82:73:bb:be:0f:30:31:05:af:8f:29:b8:ca:da:
         84:2e:7a:bf:7f:7c:29:51:54:23:0f:71:2c:41:c8:37:07:19:
         f0:36:a8:f3:5b:5c:4d:e8:63:16:06:b7:8e:35:d6:7b:fe:4a:
         85:90:4d:91:a9:75:03:b8:36:bb:7d:96:94:86:e5:04:b0:67:
         1e:54:9f:eb
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB2owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QwM0ExMTAvBgNVBAUTKERCQkU5QkZDN0Y4QTNEM0JFMDVCQjVCNjAyMUY3NTQ1
QkU5ODFCRjAwHhcNMjUwNTMwMjE1MTI1WhcNMjUwNjA2MjE1MTI1WjAYMRYwFAYD
VQQDEw02ODNhMjg1ZS1mZjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqs8W8TfzpIUPmBmfN3mHbvGRNf1oi3ZpoLZZbXNd5Arbk8Lk48melDnBaNr+
UVmX16QpNKhD1832fa0BORFPp0zRFKu7YcVoTZuIerqxcA6ubySvR9reT6TpaJ89
q10a3w9eyOBMNDsjXFLXYEXq6wP7JYpS3LafKbpU6RBzlBhgpME57cTUZr9ZVV1j
9srvE/M+QOlvLPTilyc8Lhos3SVCuyWmLYCiKsvyh4kn2QORkrQn19huOsDmxs3S
Pq1N9rfFfRaB99+GZ5IQz536EjZCKVDmn5qK4wuOUx+mFE1C/wi/aVs3fM/FfkKc
gxSK5H+qwZM40YSSfvssAauAMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGzScr6j
/9RDdClVI7LfFGop46LoMB8GA1UdIwQYMBaAFNu+m/x/ij074Fu1tgIfdUW+mBvw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDAzQS85MjZCNDNFODIx
OTAxMUVCODJBNDFCNDhDNEY5QUUwMi8yNzZiX0gtS1BUdmdXN1cyQWg5MVJiNllH
X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzI3NmJfSC1LUFR2Z1c3VzJBaDkxUmI2WUdfQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDAzQS85MjZCNDNFODIxOTAxMUVCODJBNDFCNDhDNEY5QUUwMi8yNzZiX0gtS1BU
dmdXN1cyQWg5MVJiNllHX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBzk7r1aL/9ulUJhNFVGEmb0K9wTK6QJUbyxU/QYeK5XmYAan5eE8wD
hphUEwEGaLgnK/EJJ1ugrL6I/h7+DlBd5vmOLPP2aIiMOYqvzTOkJaA1XJFJqkDK
ajTlyypAviu3GR5my61erxIHC+8h3mrwu8eN9pTIQ/hREX9bNA5tvdKBhJk+Z9io
J63XJwqH/hFCUNdKbiMbGLGrqBaJjTabhVer2wlVXnE12s3JeEz2mXaPCa/nPQVZ
gnO7vg8wMQWvjym4ytqELnq/f3wpUVQjD3EsQcg3BxnwNqjzW1xN6GMWBreONdZ7
/kqFkE2RqXUDuDa7fZaUhuUEsGceVJ/r
-----END CERTIFICATE-----
Generated at Sat May 31 17:37:48 2025 by rpki-client