Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
File:                     MmL3gS18farodbwe6NcfkHLO7bw.mft (raw, json)
Hash identifier:          DKyfTAa9oSR1H/7Zl22dKWt9zHT8Dzg0oy7J5xYp9xg=
Subject key identifier:   06:18:AA:C3:76:7C:0D:54:FD:E2:97:B5:0D:3B:EF:66:D9:27:68:F7
Authority key identifier: 32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC
Certificate issuer:       /CN=A915EBAD/serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
Certificate serial:       0E45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
Manifest number:          0E36
Signing time:             Sun 08 Jun 2025 17:38:50 +0000
Manifest this update:     Sun 08 Jun 2025 17:38:49 +0000
Manifest next update:     Sun 15 Jun 2025 17:38:49 +0000
Files and hashes:         1: MmL3gS18farodbwe6NcfkHLO7bw.crl (hash: 3lDw7+/aKIr+zDIf64VdYZdn58QVyh9rQPENUNTZiUE=)
                          2: E2FC1E7EE5B811EDBC8DA36AC4F9AE02.roa (hash: hSdBAGkC3NdMrHlNO891FMpZkgcopmoPEPx2e0kU7og=)
                          3: 5822028E51F811EAB221F834C4F9AE02.roa (hash: jJLLdhgsMFr0SXlBPDR7D/j4Grn7XSvqbioW2zzeEek=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl
                          rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 17:38:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3653 (0xe45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EBAD, serialNumber=3262F7812D7C7DAAE875BC1EE8D71F9072CEEDBC
        Validity
            Not Before: Jun  8 17:38:49 2025 GMT
            Not After : Jun 15 17:38:49 2025 GMT
        Subject: CN=6845caa9-254c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a1:58:02:7b:30:05:0e:a0:21:0b:55:c7:ef:
                    00:1b:7a:90:4c:22:cf:ad:91:31:e3:04:41:fb:78:
                    58:d1:50:26:66:c5:98:4b:f9:d1:9f:fe:58:ba:b7:
                    16:47:78:fa:8f:ae:42:f1:7c:ff:f3:2a:14:47:c0:
                    be:57:13:2d:e8:a3:7f:af:31:c5:48:17:17:64:85:
                    31:45:58:fb:e0:23:65:0e:8f:0f:de:27:c3:b5:b4:
                    1f:b4:e7:19:2d:7a:60:9b:1e:4e:d5:61:13:74:21:
                    46:cb:ac:64:36:27:09:2f:65:e0:11:6f:4a:ff:64:
                    36:53:4d:19:47:c3:d4:4d:e4:6b:09:94:3e:d8:98:
                    ad:8e:0e:d9:33:97:5b:37:e2:07:fa:85:55:c7:53:
                    b9:28:61:58:f9:a6:a5:c1:ac:3e:b4:2f:35:84:38:
                    ff:2c:e4:68:3f:46:94:a2:b8:b6:22:33:d7:bf:de:
                    b0:49:2c:a8:07:b6:d0:00:4f:fc:04:c0:95:eb:2f:
                    55:8b:8d:fb:12:d8:51:7c:b7:8a:ef:9a:a9:1b:5c:
                    ed:48:37:2b:b0:f2:23:f5:5d:62:e7:c0:bd:c2:25:
                    c4:c0:6e:37:6e:a3:c8:29:2a:74:d4:11:7a:a6:ef:
                    84:27:a4:94:54:0b:12:1f:f8:85:0e:82:e3:cb:84:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:18:AA:C3:76:7C:0D:54:FD:E2:97:B5:0D:3B:EF:66:D9:27:68:F7
            X509v3 Authority Key Identifier:
                keyid:32:62:F7:81:2D:7C:7D:AA:E8:75:BC:1E:E8:D7:1F:90:72:CE:ED:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmL3gS18farodbwe6NcfkHLO7bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EBAD/89C0BFC0A43211E988BEB386C4F9AE02/MmL3gS18farodbwe6NcfkHLO7bw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:0e:42:f9:e0:d4:1a:c2:7e:56:a7:1f:70:ca:4e:94:b1:b8:
         b3:14:00:8e:15:cc:6b:90:9e:86:23:50:8b:0c:35:97:31:bf:
         69:52:4f:97:83:67:85:3f:aa:e4:5f:4e:d4:38:7a:5a:09:0a:
         8a:94:d7:17:f7:51:f6:46:66:02:4e:18:86:0a:8a:e5:bb:d2:
         1c:80:cb:33:3e:40:95:5a:a0:9d:09:e4:f1:e9:ed:d0:97:4a:
         93:1f:57:47:e7:1a:43:df:36:6f:70:ac:3a:36:9d:fb:36:a0:
         95:9a:9f:c2:b0:ad:da:b3:8d:2f:28:d4:bb:28:da:34:56:70:
         76:58:ef:e5:e8:48:a0:a0:01:ed:24:4a:96:d6:c7:06:36:0d:
         9e:8a:f7:b1:bf:e4:cb:14:7c:5e:21:40:36:d2:a1:63:3f:37:
         69:31:cb:44:74:aa:0e:ca:5c:69:ee:9e:7d:82:7e:6f:89:30:
         46:54:31:25:3c:ef:a6:aa:ef:6a:6d:c2:ec:9a:30:b3:b3:eb:
         04:c9:bf:54:ba:3c:d6:d2:15:20:a8:e3:8f:e1:c9:a5:d7:aa:
         30:a0:e0:8f:af:19:cf:3a:83:5d:82:41:b7:2e:88:d8:28:fb:
         af:2d:cb:f5:c0:9a:7d:df:b7:ce:37:fd:fa:3f:d0:94:62:a3:
         06:8a:01:e0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDkUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUVCQUQxMTAvBgNVBAUTKDMyNjJGNzgxMkQ3QzdEQUFFODc1QkMxRUU4RDcxRjkw
NzJDRUVEQkMwHhcNMjUwNjA4MTczODQ5WhcNMjUwNjE1MTczODQ5WjAYMRYwFAYD
VQQDEw02ODQ1Y2FhOS0yNTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2qFYAnswBQ6gIQtVx+8AG3qQTCLPrZEx4wRB+3hY0VAmZsWYS/nRn/5YurcW
R3j6j65C8Xz/8yoUR8C+VxMt6KN/rzHFSBcXZIUxRVj74CNlDo8P3ifDtbQftOcZ
LXpgmx5O1WETdCFGy6xkNicJL2XgEW9K/2Q2U00ZR8PUTeRrCZQ+2Jitjg7ZM5db
N+IH+oVVx1O5KGFY+aalwaw+tC81hDj/LORoP0aUori2IjPXv96wSSyoB7bQAE/8
BMCV6y9Vi437EthRfLeK75qpG1ztSDcrsPIj9V1i58C9wiXEwG43bqPIKSp01BF6
pu+EJ6SUVAsSH/iFDoLjy4TcLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAYYqsN2
fA1U/eKXtQ0772bZJ2j3MB8GA1UdIwQYMBaAFDJi94EtfH2q6HW8HujXH5Byzu28
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RUJBRC84OUMwQkZDMEE0
MzIxMUU5ODhCRUIzODZDNEY5QUUwMi9NbUwzZ1MxOGZhcm9kYndlNk5jZmtITE83
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01tTDNnUzE4ZmFyb2Rid2U2TmNma0hMTzdidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RUJBRC84OUMwQkZDMEE0MzIxMUU5ODhCRUIzODZDNEY5QUUwMi9NbUwzZ1MxOGZh
cm9kYndlNk5jZmtITE83YncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCnDkL54NQawn5Wpx9wyk6UsbizFACOFcxrkJ6GI1CLDDWXMb9pUk+X
g2eFP6rkX07UOHpaCQqKlNcX91H2RmYCThiGCorlu9IcgMszPkCVWqCdCeTx6e3Q
l0qTH1dH5xpD3zZvcKw6Np37NqCVmp/CsK3as40vKNS7KNo0VnB2WO/l6EigoAHt
JEqW1scGNg2eivexv+TLFHxeIUA20qFjPzdpMctEdKoOylxp7p59gn5viTBGVDEl
PO+mqu9qbcLsmjCzs+sEyb9UujzW0hUgqOOP4cml16owoOCPrxnPOoNdgkG3LojY
KPuvLcv1wJp937fON/36P9CUYqMGigHg
-----END CERTIFICATE-----
Generated at Tue Jun 10 16:34:29 2025 by rpki-client