Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
File:                     9cHnH7saQdeYC-JY2XxIc5qvgso.mft (raw, json)
Hash identifier:          uzoKNYU1sM+5oB1lkKd+acHraDWR8Kpdf9krmPJDhA0=
Subject key identifier:   B6:40:6D:81:B8:5B:8F:A6:FC:DA:CE:EE:95:58:1B:89:C6:37:6B:D1
Authority key identifier: F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA
Certificate issuer:       /CN=A913D16D/serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA
Certificate serial:       0469
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
Manifest number:          0463
Signing time:             Sat 07 Jun 2025 00:11:30 +0000
Manifest this update:     Sat 07 Jun 2025 00:11:29 +0000
Manifest next update:     Sat 14 Jun 2025 00:11:29 +0000
Files and hashes:         1: 9cHnH7saQdeYC-JY2XxIc5qvgso.crl (hash: LHa3lS8b/wB+1oQSIrF50M2vHcWyErkhkHVhNMr+x/w=)
                          2: 3D546FCE4F0711EC960AFD0CC4F9AE02.roa (hash: OH+ilqdv9s3kTRrQEcIweA5ha/9ZRdWs4Wko3puaZH4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl
                          rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Jun 2025 00:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D16D, serialNumber=F5C1E71FBB1A41D7980BE258D97C48739AAF82CA
        Validity
            Not Before: Jun  7 00:11:29 2025 GMT
            Not After : Jun 14 00:11:29 2025 GMT
        Subject: CN=684383b1-7291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fd:c0:dc:85:5d:23:6d:9a:f1:af:00:82:0e:
                    13:a1:a0:95:43:b7:31:8b:c8:96:c7:03:0c:75:0d:
                    da:b1:af:06:fc:5c:55:2d:de:5c:21:ba:3f:b2:b4:
                    70:4c:26:43:f7:90:17:e3:ae:45:4f:e2:13:15:8f:
                    09:db:58:ca:94:90:56:44:9f:2f:ac:e2:4b:f9:4a:
                    ae:35:76:2b:ee:f8:27:d0:39:63:3c:c6:f3:27:21:
                    eb:2f:c2:88:d2:b0:72:c4:9b:f9:57:01:4b:cc:05:
                    6c:a9:2e:68:6e:f8:76:fa:6c:1e:af:da:23:51:30:
                    e4:a8:db:28:61:e3:b5:63:ac:16:1f:4a:63:36:79:
                    9f:91:68:16:22:60:51:bc:11:e0:8e:70:4e:98:20:
                    33:16:c2:0c:88:44:5b:90:1a:87:d8:4b:4b:ad:3b:
                    7e:5a:fa:05:0f:65:fd:d3:b7:1d:b1:e5:0c:68:70:
                    2b:a2:94:39:2a:33:d1:0f:60:54:da:f0:22:68:61:
                    1d:43:4d:0b:3c:52:00:0f:90:6b:c7:da:23:e7:75:
                    b2:6c:25:16:6f:02:7e:73:b3:b0:d7:66:95:5b:04:
                    ca:99:ef:26:94:ba:40:28:89:dd:bc:9d:1c:98:72:
                    99:6d:87:23:ab:b2:89:f2:03:05:2b:d3:c0:79:93:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:40:6D:81:B8:5B:8F:A6:FC:DA:CE:EE:95:58:1B:89:C6:37:6B:D1
            X509v3 Authority Key Identifier:
                keyid:F5:C1:E7:1F:BB:1A:41:D7:98:0B:E2:58:D9:7C:48:73:9A:AF:82:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cHnH7saQdeYC-JY2XxIc5qvgso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D16D/F04207A44F0211EC9D2D1E37C4F9AE02/9cHnH7saQdeYC-JY2XxIc5qvgso.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ae:90:bf:13:87:a1:ec:af:c9:af:3d:07:79:ba:f2:8e:c6:
         29:d3:88:7b:ba:ed:e1:aa:4d:a4:7a:31:04:f7:b7:d4:b9:a6:
         c6:75:99:5f:89:13:f7:ae:d0:7b:5e:2d:b0:bf:f0:58:86:0a:
         3e:91:f3:c3:15:58:07:8f:8e:d7:3e:7c:04:0e:fc:6e:f9:a4:
         4e:7d:ff:86:96:ea:dd:fe:ce:85:cc:9c:06:fc:8f:f9:be:b1:
         77:11:f7:be:52:52:11:af:73:83:a0:54:f9:1a:ff:9b:6f:b9:
         2a:b6:6f:bc:5b:7e:f1:3c:64:c4:91:69:a5:78:ea:aa:f0:5e:
         d4:59:5b:54:99:d7:5f:e8:d2:c8:7a:af:3f:87:e6:58:7c:a0:
         36:56:f8:87:1e:ce:cc:4c:31:7d:f6:e9:8a:87:0b:33:a8:a0:
         15:f2:3a:a2:24:20:a8:76:81:41:3a:1a:3b:f0:58:53:2b:fc:
         a5:4d:f7:ce:59:71:bb:51:ac:41:58:59:ec:7b:09:a6:3d:a1:
         5c:df:0e:7c:e1:e8:96:62:6e:65:83:9f:ab:7d:f8:9c:ea:96:
         c3:85:55:a6:43:b3:4f:55:4c:80:4a:dc:2b:16:27:92:f7:45:
         29:27:51:fe:3c:a1:8e:d8:3a:4b:d3:d7:8b:fb:3b:fd:07:b7:
         7d:38:ba:7c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0QxNkQxMTAvBgNVBAUTKEY1QzFFNzFGQkIxQTQxRDc5ODBCRTI1OEQ5N0M0ODcz
OUFBRjgyQ0EwHhcNMjUwNjA3MDAxMTI5WhcNMjUwNjE0MDAxMTI5WjAYMRYwFAYD
VQQDEw02ODQzODNiMS03MjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxv3A3IVdI22a8a8Agg4ToaCVQ7cxi8iWxwMMdQ3asa8G/FxVLd5cIbo/srRw
TCZD95AX465FT+ITFY8J21jKlJBWRJ8vrOJL+UquNXYr7vgn0DljPMbzJyHrL8KI
0rByxJv5VwFLzAVsqS5obvh2+mwer9ojUTDkqNsoYeO1Y6wWH0pjNnmfkWgWImBR
vBHgjnBOmCAzFsIMiERbkBqH2EtLrTt+WvoFD2X907cdseUMaHAropQ5KjPRD2BU
2vAiaGEdQ00LPFIAD5Brx9oj53WybCUWbwJ+c7Ow12aVWwTKme8mlLpAKIndvJ0c
mHKZbYcjq7KJ8gMFK9PAeZPT1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLZAbYG4
W4+m/NrO7pVYG4nGN2vRMB8GA1UdIwQYMBaAFPXB5x+7GkHXmAviWNl8SHOar4LK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRDE2RC9GMDQyMDdBNDRG
MDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFkZVlDLUpZMlh4SWM1cXZn
c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzljSG5IN3NhUWRlWUMtSlkyWHhJYzVxdmdzby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RDE2RC9GMDQyMDdBNDRGMDIxMUVDOUQyRDFFMzdDNEY5QUUwMi85Y0huSDdzYVFk
ZVlDLUpZMlh4SWM1cXZnc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBbrpC/E4eh7K/Jrz0HebryjsYp04h7uu3hqk2kejEE97fUuabGdZlf
iRP3rtB7Xi2wv/BYhgo+kfPDFVgHj47XPnwEDvxu+aROff+Glurd/s6FzJwG/I/5
vrF3Efe+UlIRr3ODoFT5Gv+bb7kqtm+8W37xPGTEkWmleOqq8F7UWVtUmddf6NLI
eq8/h+ZYfKA2VviHHs7MTDF99umKhwszqKAV8jqiJCCodoFBOho78FhTK/ylTffO
WXG7UaxBWFnsewmmPaFc3w584eiWYm5lg5+rffic6pbDhVWmQ7NPVUyAStwrFieS
90UpJ1H+PKGO2DpL09eL+zv9B7d9OLp8
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:58:16 2025 by rpki-client