Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
File:                     YV7YTETmV_cJXgISr-oFLFQqDZE.mft (raw, json)
Hash identifier:          rZHje8OWK+bVUAy4vgbQPBIykgpSVg2kK9c7HSGSc8s=
Subject key identifier:   2C:C1:02:69:B4:D7:FC:69:01:6A:B6:46:5D:4E:76:E4:75:C4:45:91
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       19B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
Manifest number:          1923
Signing time:             Fri 30 May 2025 16:39:22 +0000
Manifest this update:     Fri 30 May 2025 16:39:22 +0000
Manifest next update:     Fri 06 Jun 2025 16:39:22 +0000
Files and hashes:         1: YV7YTETmV_cJXgISr-oFLFQqDZE.crl (hash: OvosHkJopcdaAKYIi8LWMVgFj+PET8c7+xe26pdlKio=)
                          2: 897785E099AA11EE9E218060C4F9AE02.roa (hash: Hbvrl5qt3755vAHPJTM1ht4CNvz+/1G82ZsixjxL3vU=)
                          3: 1071470CF41311EA9FD4EE0FC4F9AE02.roa (hash: nBufo1kIX8wiHW05HK56kjkzuY8kLzWX8hul7hd+tSI=)
                          4: DE542790058711F0928FB866C4F9AE02.roa (hash: oZxBVSj1Mv8VRpXOWfSpeRcfrv00LslYo58qNkYud80=)
                          5: 64F859DA812611EDA597255EC4F9AE02.roa (hash: rBeoIA3irlO1Deytx/F8atxZ8cpZ0/tW3IVa0ZmI0Ng=)
                          6: DEB0EB98F74011EE9C9F952CC4F9AE02.roa (hash: k+AAWBwdOcaG1er130l80X1HT3IwfL4MKpto67md1U4=)
                          7: A41A01F2812311ED9367FC43C4F9AE02.roa (hash: Ujge7k/lW8pB/Dx6DwlTSva6Rx5jbEwksa1MWF/rwvA=)
                          8: EC0E245CF74211EEA182A952C4F9AE02.roa (hash: 8BZnHd6aGsdJmphgS32PS3wAYQMMb45rh9EbaJkomOw=)
                          9: DF4A9778E56111EBB6ADAC1FC4F9AE02.roa (hash: m235rMsu+BzhfmXOYnBQggbCKWWyvZ/zw0hFkBbbwgI=)
                          10: 1B97493E7FFF11EF85F9E340C4F9AE02.roa (hash: AMtq6/+OGfNb8zZYL0wKHdGiK4TvIJSI20dtRQ6bo7c=)
                          11: FBC5FF822EE711EF96610B4EC4F9AE02.roa (hash: RTrVR5wL9yOQXY6b1OrprvdMWmvSxZvI7qM3sOKAsPc=)
                          12: CF2F506C8A0F11EA9DFF7F19C4F9AE02.roa (hash: U1zVQ5bqYpLe5FAQ5Vpdv4iV73y5ug6j2NtqdB0U6DA=)
                          13: DE11F1B4F74011EE9C9F952CC4F9AE02.roa (hash: iwLGgkob40yON+N3mwyjlp9Fh6761bLtwjZcibQClEM=)
                          14: 4524F69EF73211EE8BA96C65C4F9AE02.roa (hash: b/6uKuOBQOCAf1O3SZSHMcVD1+K7GM0OQRNX6RqtTnM=)
                          15: 596C54DCE83F11EE81772A87C4F9AE02.roa (hash: gkJptkaETgFISWJvcQGnHB0jn74oacHoYRhEpbDvdJY=)
                          16: AD1655A2DFEF11EB8486545FC4F9AE02.roa (hash: E1uTNeLdjmVHLcuJqLs/moW5iBQyqjH1xn1TM16vxig=)
                          17: BCA3B016F72811EE8C4CBB51C4F9AE02.roa (hash: vD8uFo9ZdrCHkm7kGVREsqduAN/X3LQWjfNNIMx3BBA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 16:39:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6576 (0x19b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: May 30 16:39:22 2025 GMT
            Not After : Jun  6 16:39:22 2025 GMT
        Subject: CN=6839df3a-07ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:af:a1:a7:26:df:de:0d:29:f7:d4:7f:77:39:
                    6e:7a:cf:e5:6a:cb:33:2a:f1:2c:54:24:f1:85:ea:
                    4c:31:fb:f1:2e:58:0e:dc:fc:c4:ae:2b:92:b0:ad:
                    4b:13:23:c6:db:26:2f:e6:f5:f2:cb:a1:7d:89:ae:
                    d3:e4:c5:da:42:f3:05:16:49:df:9f:00:11:9b:d9:
                    ab:29:23:4a:ef:74:97:50:dc:c0:97:73:fd:5e:e2:
                    90:a1:34:d3:97:a7:36:63:f2:62:10:fa:2f:c6:f3:
                    85:1e:be:4c:13:24:c0:27:d7:25:e0:58:3a:0b:2a:
                    c6:65:65:46:dc:f2:57:48:de:4c:5a:c1:b2:e1:4d:
                    e1:58:0c:7f:c9:cb:18:18:0a:53:84:6c:86:6d:6c:
                    d2:ff:30:63:5e:e1:0b:52:62:8b:c3:a2:cb:77:7d:
                    46:3f:22:35:43:d6:e4:be:84:f7:1b:9a:63:9f:d2:
                    67:ef:3d:46:33:79:de:60:fc:9a:0d:27:d1:43:53:
                    51:6c:52:05:17:b4:13:d0:d4:f7:f3:45:86:31:7d:
                    f3:ab:57:28:2e:70:ef:7d:ce:be:0e:66:6b:55:87:
                    57:d5:76:fa:e0:ec:ff:cc:d6:fb:46:6c:a5:bc:04:
                    52:36:70:bd:8b:d1:d2:ee:e0:10:7a:b9:14:82:8c:
                    f7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C1:02:69:B4:D7:FC:69:01:6A:B6:46:5D:4E:76:E4:75:C4:45:91
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:40:68:d2:01:53:65:80:c8:68:6f:7c:03:2d:7a:2a:25:95:
         8c:8d:d9:0c:29:e6:d4:d5:78:d0:49:3c:4b:83:ad:19:e8:0d:
         a4:0d:96:37:bf:cb:f2:1c:9f:45:e4:00:7a:2f:e7:16:df:bf:
         a7:b0:25:7d:51:7c:7a:71:33:34:d5:02:79:d3:d2:0a:1b:9b:
         7f:d3:78:d8:ff:51:e3:f1:c2:9d:70:c1:3e:03:07:ce:50:cb:
         4c:a0:92:d9:8c:c6:5f:22:49:bb:3c:5c:f9:c2:21:42:2d:d9:
         24:94:ed:f6:72:bf:df:83:42:86:44:06:fc:3b:d7:df:ae:fc:
         59:3a:be:ba:30:bc:33:16:28:fe:4c:d3:3c:ea:3e:d9:53:b4:
         20:8a:7b:19:31:a0:4c:3f:06:24:bc:36:20:2f:95:c4:4a:56:
         21:5b:7d:b8:94:12:6a:6c:50:3e:d9:ce:2b:90:89:be:ea:34:
         ce:cc:e8:03:f3:0d:d6:63:18:98:b4:12:a5:03:b6:7d:6d:35:
         02:6d:37:cb:4e:cb:4f:86:dd:c1:17:32:65:d9:63:a9:f1:f8:
         84:92:cc:d0:21:8d:12:1f:16:3e:3a:c1:c1:87:ab:7d:30:92:
         a1:c8:5e:c6:d5:7f:1f:40:27:52:9e:ac:7c:45:e6:4b:27:1c:
         21:14:71:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:06:27 2025 by rpki-client