Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
File:                     0wlAzG8MECS4QLu309gBJjYGylk.mft (raw, json)
Hash identifier:          THOs5gyruecUYnUP8YRFLiDwVV95tHvn+5hDNJgptBk=
Subject key identifier:   55:84:E5:73:03:C5:44:B1:52:DD:7B:96:21:79:1D:2F:DE:CD:01:02
Authority key identifier: D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59
Certificate issuer:       /CN=A91412BC/serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
Manifest number:          10
Signing time:             Sat 31 May 2025 07:36:08 +0000
Manifest this update:     Sat 31 May 2025 07:36:08 +0000
Manifest next update:     Sat 07 Jun 2025 07:36:08 +0000
Files and hashes:         1: 0wlAzG8MECS4QLu309gBJjYGylk.crl (hash: N98q8pp5vrasPOMRnh+urRgKVtcQFxO8gF+t4sCPmPs=)
                          2: 92F3063C248A11F0AD4B1179C4F9AE02.roa (hash: c/3j+UgCAX53wB26IYOnbYkzgiT6NkDiaAOsu5xJNDA=)
                          3: 936B147E248A11F0AD4B1179C4F9AE02.roa (hash: e85Q7MVp1iqFp29TDCzCSbcgnvU2NzugMJ2RSsP+LnM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl
                          rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 07:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91412BC, serialNumber=D30940CC6F0C1024B840BBB7D3D801263606CA59
        Validity
            Not Before: May 31 07:36:08 2025 GMT
            Not After : Jun  7 07:36:08 2025 GMT
        Subject: CN=683ab168-5baa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ec:9c:23:50:53:25:8d:68:e5:bf:8a:a0:cc:
                    e1:2e:38:94:c0:c1:c1:26:8b:1f:83:9d:62:14:28:
                    f1:f8:cd:de:c5:0f:ff:8e:dc:2b:f2:c6:e0:97:62:
                    8f:06:90:d6:11:74:bb:80:de:e4:71:99:2b:ab:68:
                    71:1f:84:be:12:8d:4a:50:bc:1c:90:4d:56:2f:1d:
                    61:ed:9f:f6:81:6b:80:9d:dd:31:de:ce:2b:5b:79:
                    de:15:cf:5c:fc:24:d3:5b:58:cc:0b:d0:e1:62:24:
                    42:13:c3:7c:0a:36:81:14:b4:5a:fc:33:84:0f:78:
                    95:51:6c:73:2b:8c:6a:65:32:6c:36:7c:c4:47:11:
                    a3:40:0b:fe:f8:ac:94:2f:bb:eb:02:37:8b:b8:e9:
                    b0:2f:4b:53:42:0c:4e:0c:04:88:f6:0a:1a:5b:0e:
                    6f:6f:a9:6c:9d:45:05:62:f6:e6:65:49:6f:88:b8:
                    73:dc:0a:ee:3e:3a:9d:0f:f5:2d:9a:1e:13:67:cd:
                    a4:aa:9f:8a:bb:4a:e0:d3:c4:f4:f3:dc:75:84:af:
                    97:19:78:7b:c3:66:18:26:37:26:26:64:bd:86:cb:
                    19:f4:f3:0a:5a:8e:99:e3:86:6f:78:9c:d2:38:7c:
                    07:d3:8a:45:26:c2:e0:fa:6b:31:c8:c3:6d:a6:31:
                    70:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:84:E5:73:03:C5:44:B1:52:DD:7B:96:21:79:1D:2F:DE:CD:01:02
            X509v3 Authority Key Identifier:
                keyid:D3:09:40:CC:6F:0C:10:24:B8:40:BB:B7:D3:D8:01:26:36:06:CA:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0wlAzG8MECS4QLu309gBJjYGylk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91412BC/21A95314248A11F09986D077C4F9AE02/0wlAzG8MECS4QLu309gBJjYGylk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:11:92:fe:55:bd:d6:c7:75:c0:a3:ff:24:ac:ee:77:05:2f:
         f1:60:71:88:03:f1:a3:e4:2e:e4:cf:da:cd:f2:c3:c4:8b:4c:
         f9:ac:91:81:db:95:7d:d1:3a:dd:ae:4e:e1:60:d6:66:62:74:
         11:b3:04:81:eb:c5:f2:3a:c3:81:6a:98:0b:a5:d2:73:18:a0:
         2d:07:54:6d:7a:f8:9a:7d:b2:7f:51:3b:41:94:83:bf:16:e3:
         d7:bb:31:8f:ee:eb:e9:83:4a:0b:11:39:46:9a:85:bf:b3:db:
         a3:22:3d:17:8f:cf:e1:68:f6:c0:dd:a1:dc:b6:78:56:12:55:
         11:94:71:79:fc:ae:3a:a5:b0:07:bf:87:3c:21:6c:58:61:0b:
         6e:fa:a7:75:7d:a7:fc:87:86:0a:b8:6b:61:c6:f6:94:8d:ed:
         7b:1c:b8:72:43:ad:5a:41:a4:35:f4:90:da:d4:fc:71:e6:17:
         19:18:9a:5f:d4:24:30:2b:0a:31:29:88:93:92:9c:32:bd:d3:
         b5:4a:87:ef:ca:e4:80:47:db:e9:64:43:a5:a9:ef:2e:8d:6e:
         8c:6a:44:fe:d9:ef:fb:60:35:bb:ef:25:9e:2a:ca:0e:da:fe:
         bb:e8:6f:34:7b:2f:43:3c:69:c0:08:54:4c:49:97:7d:04:9a:
         6d:71:d8:32
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
MTJCQzExMC8GA1UEBRMoRDMwOTQwQ0M2RjBDMTAyNEI4NDBCQkI3RDNEODAxMjYz
NjA2Q0E1OTAeFw0yNTA1MzEwNzM2MDhaFw0yNTA2MDcwNzM2MDhaMBgxFjAUBgNV
BAMTDTY4M2FiMTY4LTViYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDo7JwjUFMljWjlv4qgzOEuOJTAwcEmix+DnWIUKPH4zd7FD/+O3CvyxuCXYo8G
kNYRdLuA3uRxmSuraHEfhL4SjUpQvByQTVYvHWHtn/aBa4Cd3THezitbed4Vz1z8
JNNbWMwL0OFiJEITw3wKNoEUtFr8M4QPeJVRbHMrjGplMmw2fMRHEaNAC/74rJQv
u+sCN4u46bAvS1NCDE4MBIj2ChpbDm9vqWydRQVi9uZlSW+IuHPcCu4+Op0P9S2a
HhNnzaSqn4q7SuDTxPTz3HWEr5cZeHvDZhgmNyYmZL2Gyxn08wpajpnjhm94nNI4
fAfTikUmwuD6azHIw22mMXDfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUVYTlcwPF
RLFS3XuWIXkdL97NAQIwHwYDVR0jBBgwFoAU0wlAzG8MECS4QLu309gBJjYGylkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQxMkJDLzIxQTk1MzE0MjQ4
QTExRjA5OTg2RDA3N0M0RjlBRTAyLzB3bEF6RzhNRUNTNFFMdTMwOWdCSmpZR3ls
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMHdsQXpHOE1FQ1M0UUx1MzA5Z0JKallHeWxrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQx
MkJDLzIxQTk1MzE0MjQ4QTExRjA5OTg2RDA3N0M0RjlBRTAyLzB3bEF6RzhNRUNT
NFFMdTMwOWdCSmpZR3lsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAJQRkv5VvdbHdcCj/ySs7ncFL/FgcYgD8aPkLuTP2s3yw8SLTPmskYHb
lX3ROt2uTuFg1mZidBGzBIHrxfI6w4FqmAul0nMYoC0HVG16+Jp9sn9RO0GUg78W
49e7MY/u6+mDSgsROUaahb+z26MiPRePz+Fo9sDdody2eFYSVRGUcXn8rjqlsAe/
hzwhbFhhC276p3V9p/yHhgq4a2HG9pSN7XscuHJDrVpBpDX0kNrU/HHmFxkYml/U
JDArCjEpiJOSnDK907VKh+/K5IBH2+lkQ6Wp7y6NboxqRP7Z7/tgNbvvJZ4qyg7a
/rvobzR7L0M8acAIVExJl30Emm1x2DI=
-----END CERTIFICATE-----
Generated at Sat May 31 15:31:50 2025 by rpki-client