Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
File:                     4rutOTFYoGdMaUnsO4oLc_hgKaI.mft (raw, json)
Hash identifier:          Gp+RNptFBQrzpaiWI8OUDXjQZ9UYZUnR9TMwvzRb5Eo=
Subject key identifier:   BC:10:BA:98:7D:6E:A6:5E:0C:B2:9B:A0:95:F5:0F:06:63:CB:63:7D
Authority key identifier: E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2
Certificate issuer:       /CN=A9156740/serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
Certificate serial:       026C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
Manifest number:          0262
Signing time:             Sat 31 May 2025 01:58:29 +0000
Manifest this update:     Sat 31 May 2025 01:58:29 +0000
Manifest next update:     Sat 07 Jun 2025 01:58:29 +0000
Files and hashes:         1: 4rutOTFYoGdMaUnsO4oLc_hgKaI.crl (hash: zdc5n99jB7M8pKP8iawncILn+hdS6InSyi/L2CUaY4w=)
                          2: BBF0DD5216CD11EDBB046C79C4F9AE02.roa (hash: axhlzcql8Um5s2iVqGj/BuPhDZVy8siOPCHeHdpqbOU=)
                          3: EC75126616CA11ED8E290A59C4F9AE02.roa (hash: ldX/DKDOg9xZhESj3T5OZ1Y87w44jU1f3a2RytTmEgo=)
                          4: 4EEAF1DAE96211ED9A14B935C4F9AE02.roa (hash: RgIHOi6o2CyuImHKbYCkxFcAJ9v5chcNqvLkjQHCgqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl
                          rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 01:58:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156740, serialNumber=E2BBAD393158A0674C6949EC3B8A0B73F86029A2
        Validity
            Not Before: May 31 01:58:29 2025 GMT
            Not After : Jun  7 01:58:29 2025 GMT
        Subject: CN=683a6245-67ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:83:1d:73:31:7a:db:6d:7c:4d:bd:4d:5f:73:
                    2b:99:c3:f1:70:f4:41:46:50:5c:ae:7f:b5:77:03:
                    aa:35:b5:bd:ef:2c:32:65:76:6d:89:4a:66:85:56:
                    b0:ee:f5:92:5c:40:87:e1:0a:8f:65:46:c0:80:f8:
                    69:9c:3f:e2:0c:91:7c:55:9e:bb:98:79:5e:07:69:
                    4b:ae:78:d4:65:df:75:e1:78:3a:3e:62:2f:73:91:
                    31:0f:da:73:f0:e9:f2:16:f4:f3:01:e9:29:fa:2a:
                    48:67:fb:44:ef:fd:1d:87:92:c1:55:77:93:5f:2a:
                    86:2e:2c:e5:20:dd:2a:34:c2:ca:1d:85:67:f7:bc:
                    ce:18:7e:ac:75:83:6e:88:6d:f6:a9:e5:83:a0:05:
                    0d:b5:70:97:4a:77:cf:76:7e:f6:b4:bd:48:e1:fc:
                    ae:2a:40:c6:6a:06:5d:3f:e2:80:62:88:2a:5d:37:
                    51:e6:6e:3a:52:b8:52:9d:27:ca:b4:d0:e3:35:9c:
                    85:dd:d3:01:ba:01:b0:3b:6f:16:2d:75:42:30:34:
                    27:a4:bb:bc:87:c5:59:a8:70:32:1e:7c:4d:ac:d1:
                    a5:d0:e6:d7:51:5d:15:b6:c5:58:73:4f:b6:75:73:
                    d8:8d:0c:5d:09:29:ab:c3:12:3b:db:93:c6:5d:ae:
                    26:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:10:BA:98:7D:6E:A6:5E:0C:B2:9B:A0:95:F5:0F:06:63:CB:63:7D
            X509v3 Authority Key Identifier:
                keyid:E2:BB:AD:39:31:58:A0:67:4C:69:49:EC:3B:8A:0B:73:F8:60:29:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rutOTFYoGdMaUnsO4oLc_hgKaI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156740/3528B0CC16C011ED80089A21C4F9AE02/4rutOTFYoGdMaUnsO4oLc_hgKaI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1c:eb:e0:06:a0:ac:ce:d7:b2:37:8b:54:48:2d:82:e0:1a:
         6c:7a:02:18:af:84:c2:e0:16:14:ee:cc:36:03:2c:ad:4e:b6:
         f7:33:47:86:f9:2a:f1:4c:ef:fc:8a:9c:42:c9:dc:67:9f:9d:
         56:b0:bb:d9:f9:50:22:b7:ea:85:d1:bf:eb:52:c3:62:6b:6a:
         a9:e1:b1:ea:de:a4:fc:35:57:6d:7c:78:be:36:65:3e:e1:61:
         59:53:4a:bf:9c:61:55:47:b0:d4:d2:77:bc:a0:aa:47:08:3c:
         bf:ee:e9:73:6b:69:72:4b:8b:09:33:d3:15:1a:da:79:b7:4c:
         72:d9:4e:3c:08:a8:88:66:7e:f9:51:25:f1:79:30:bd:0d:7a:
         8c:e2:3c:2e:26:36:dd:6b:30:1e:17:32:38:46:40:d4:36:43:
         15:01:a3:ba:78:25:39:f3:8d:47:18:ac:54:4a:19:2c:c1:24:
         28:d9:ed:ac:30:b8:1c:ae:8c:90:8f:ca:36:2f:f2:9b:c1:9a:
         ef:6c:80:ac:94:bf:7a:66:c4:94:70:38:6f:02:23:a7:fb:b7:
         97:1b:58:5b:a4:c5:4e:ac:77:45:f0:00:31:de:70:ef:10:4b:
         18:95:ec:bb:f6:9b:c7:72:d5:fa:20:9c:69:8a:38:3b:63:22:
         52:12:a8:82
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTY3NDAxMTAvBgNVBAUTKEUyQkJBRDM5MzE1OEEwNjc0QzY5NDlFQzNCOEEwQjcz
Rjg2MDI5QTIwHhcNMjUwNTMxMDE1ODI5WhcNMjUwNjA3MDE1ODI5WjAYMRYwFAYD
VQQDEw02ODNhNjI0NS02N2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvoMdczF62218Tb1NX3MrmcPxcPRBRlBcrn+1dwOqNbW97ywyZXZtiUpmhVaw
7vWSXECH4QqPZUbAgPhpnD/iDJF8VZ67mHleB2lLrnjUZd914Xg6PmIvc5ExD9pz
8OnyFvTzAekp+ipIZ/tE7/0dh5LBVXeTXyqGLizlIN0qNMLKHYVn97zOGH6sdYNu
iG32qeWDoAUNtXCXSnfPdn72tL1I4fyuKkDGagZdP+KAYogqXTdR5m46UrhSnSfK
tNDjNZyF3dMBugGwO28WLXVCMDQnpLu8h8VZqHAyHnxNrNGl0ObXUV0VtsVYc0+2
dXPYjQxdCSmrwxI725PGXa4mewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLwQuph9
bqZeDLKboJX1DwZjy2N9MB8GA1UdIwQYMBaAFOK7rTkxWKBnTGlJ7DuKC3P4YCmi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Njc0MC8zNTI4QjBDQzE2
QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9HZE1hVW5zTzRvTGNfaGdL
YUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRydXRPVEZZb0dkTWFVbnNPNG9MY19oZ0thSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Njc0MC8zNTI4QjBDQzE2QzAxMUVEODAwODlBMjFDNEY5QUUwMi80cnV0T1RGWW9H
ZE1hVW5zTzRvTGNfaGdLYUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQArHOvgBqCszteyN4tUSC2C4BpsegIYr4TC4BYU7sw2AyytTrb3M0eG
+SrxTO/8ipxCydxnn51WsLvZ+VAit+qF0b/rUsNia2qp4bHq3qT8NVdtfHi+NmU+
4WFZU0q/nGFVR7DU0ne8oKpHCDy/7ulza2lyS4sJM9MVGtp5t0xy2U48CKiIZn75
USXxeTC9DXqM4jwuJjbdazAeFzI4RkDUNkMVAaO6eCU5841HGKxUShkswSQo2e2s
MLgcroyQj8o2L/KbwZrvbICslL96ZsSUcDhvAiOn+7eXG1hbpMVOrHdF8AAx3nDv
EEsYley79pvHctX6IJxpijg7YyJSEqiC
-----END CERTIFICATE-----
Generated at Sat May 31 16:49:06 2025 by rpki-client