Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
File:                     H7TDxXlvFLOd9R77qdra_Vzr0Js.mft (raw, json)
Hash identifier:          L+18MCHpx/6wUMgpnKo/C2ZWEH3Nu/NglWYHv3bMBOs=
Subject key identifier:   0C:47:AC:D1:99:FB:E0:56:0E:99:65:B0:32:4E:07:F4:A1:7C:85:C6
Authority key identifier: 1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B
Certificate issuer:       /CN=A916732F/serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
Certificate serial:       059E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
Manifest number:          058E
Signing time:             Fri 30 May 2025 23:27:39 +0000
Manifest this update:     Fri 30 May 2025 23:27:39 +0000
Manifest next update:     Fri 06 Jun 2025 23:27:39 +0000
Files and hashes:         1: H7TDxXlvFLOd9R77qdra_Vzr0Js.crl (hash: vVjKU+1HM550WHt6dtYf58bDEOEU5MWSlpTMz1YLZLY=)
                          2: 8DA93CBEBDDD11EFB1946851C4F9AE02.roa (hash: 0+1YoEpfMajvg53SL4gOebhqOGyRHlx7OSHPjEcp7CQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl
                          rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1438 (0x59e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916732F, serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
        Validity
            Not Before: May 30 23:27:39 2025 GMT
            Not After : Jun  6 23:27:39 2025 GMT
        Subject: CN=683a3eeb-e75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c4:45:b1:ae:cf:ff:d1:19:57:73:d7:1f:34:
                    d6:f1:0e:87:1f:fd:86:ac:b8:1e:b1:1d:95:1f:04:
                    0f:40:42:f3:5f:49:63:8a:98:3f:51:1c:64:a2:d5:
                    0c:1b:f1:e6:a2:e9:bb:9d:04:0c:94:49:26:4c:bb:
                    b0:84:ac:87:a9:b1:88:8c:da:1e:9f:05:ad:66:6e:
                    02:d3:2b:30:1b:00:9f:72:34:74:57:94:c3:f4:c9:
                    11:31:c6:01:52:b1:05:f6:08:13:3f:c6:8d:42:43:
                    03:3d:1c:da:a1:3b:1a:6f:92:65:73:78:57:7b:6e:
                    81:fb:1c:d1:3b:2d:b6:1b:7f:64:76:73:0d:1f:b7:
                    ee:30:39:45:08:a5:85:e3:21:dd:82:ff:fb:6b:5b:
                    54:4e:8a:e7:f2:a3:6f:bb:4c:96:73:c2:ec:0e:8a:
                    6b:08:52:78:7c:c7:db:30:37:b4:21:48:8d:61:47:
                    c2:ae:f9:7b:26:9a:d4:cc:f4:c3:57:ef:70:b5:f6:
                    d5:26:83:a2:43:23:1b:0c:26:02:9e:a2:18:7a:97:
                    3a:9d:de:58:33:d1:e8:a5:79:1c:c8:c2:3f:4c:93:
                    f6:5a:4c:c6:a1:6d:cf:c9:db:a7:ea:70:b8:71:43:
                    b1:d8:23:fc:60:57:6f:9b:35:d2:d6:b2:5f:99:6a:
                    18:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:47:AC:D1:99:FB:E0:56:0E:99:65:B0:32:4E:07:F4:A1:7C:85:C6
            X509v3 Authority Key Identifier:
                keyid:1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:5f:14:da:42:f8:3c:ff:7d:0f:ad:38:0a:fc:b2:20:d5:a5:
         d8:56:be:0c:c8:ef:63:62:3e:2f:0d:42:ff:ac:a7:7f:20:91:
         1c:f0:ec:20:ba:09:4f:f0:14:8c:ab:8c:5e:db:03:dc:b6:0e:
         87:6e:58:f9:45:23:76:c2:83:fd:22:98:80:6f:6c:3f:6b:50:
         33:d1:96:2b:51:89:d1:a5:4a:85:8f:bf:ab:05:d8:b3:c4:3d:
         d3:6d:99:fd:0b:58:9d:ec:0d:f2:49:b2:89:d6:5e:3c:da:1a:
         a4:39:dc:ec:5d:5e:61:0a:cf:a2:d5:ba:c4:c0:cf:a9:67:49:
         73:37:55:a5:06:a1:a7:a4:9b:ef:2c:b2:f4:5d:30:3b:d2:c5:
         5c:c5:c4:8b:2f:47:2a:40:cc:c5:a2:7c:d7:d3:b4:ef:df:c9:
         85:fd:b6:bd:59:52:f7:31:05:64:95:68:8d:ed:40:39:ab:d0:
         cc:f7:27:15:c8:16:4a:02:b4:0f:21:03:ae:e6:de:90:0a:5d:
         7e:d3:cb:73:ed:85:f1:22:54:67:1e:f3:37:c7:1d:29:11:c9:
         4b:5b:9a:7b:d5:85:bf:52:1e:b1:56:7f:4e:57:84:c9:92:0a:
         a1:13:f0:ce:df:48:21:92:5a:f6:46:de:e0:ba:29:4b:7d:87:
         4f:09:e8:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjczMkYxMTAvBgNVBAUTKDFGQjRDM0M1Nzk2RjE0QjM5REY1MUVGQkE5REFEQUZE
NUNFQkQwOUIwHhcNMjUwNTMwMjMyNzM5WhcNMjUwNjA2MjMyNzM5WjAYMRYwFAYD
VQQDEw02ODNhM2VlYi1lNzVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxcRFsa7P/9EZV3PXHzTW8Q6HH/2GrLgesR2VHwQPQELzX0ljipg/URxkotUM
G/Hmoum7nQQMlEkmTLuwhKyHqbGIjNoenwWtZm4C0yswGwCfcjR0V5TD9MkRMcYB
UrEF9ggTP8aNQkMDPRzaoTsab5Jlc3hXe26B+xzROy22G39kdnMNH7fuMDlFCKWF
4yHdgv/7a1tUTorn8qNvu0yWc8LsDoprCFJ4fMfbMDe0IUiNYUfCrvl7JprUzPTD
V+9wtfbVJoOiQyMbDCYCnqIYepc6nd5YM9HopXkcyMI/TJP2WkzGoW3Pydun6nC4
cUOx2CP8YFdvmzXS1rJfmWoYTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAxHrNGZ
++BWDpllsDJOB/ShfIXGMB8GA1UdIwQYMBaAFB+0w8V5bxSznfUe+6na2v1c69Cb
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzMyRi8wNkI1NjE1MEQ5
MTcxMUVCODk5MThEN0RDNEY5QUUwMi9IN1REeFhsdkZMT2Q5Ujc3cWRyYV9WenIw
SnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g3VER4WGx2RkxPZDlSNzdxZHJhX1Z6cjBKcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NzMyRi8wNkI1NjE1MEQ5MTcxMUVCODk5MThEN0RDNEY5QUUwMi9IN1REeFhsdkZM
T2Q5Ujc3cWRyYV9WenIwSnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBFXxTaQvg8/30PrTgK/LIg1aXYVr4MyO9jYj4vDUL/rKd/IJEc8Owg
uglP8BSMq4xe2wPctg6Hblj5RSN2woP9IpiAb2w/a1Az0ZYrUYnRpUqFj7+rBdiz
xD3TbZn9C1id7A3ySbKJ1l482hqkOdzsXV5hCs+i1brEwM+pZ0lzN1WlBqGnpJvv
LLL0XTA70sVcxcSLL0cqQMzFonzX07Tv38mF/ba9WVL3MQVklWiN7UA5q9DM9ycV
yBZKArQPIQOu5t6QCl1+08tz7YXxIlRnHvM3xx0pEclLW5p71YW/Uh6xVn9OV4TJ
kgqhE/DO30ghklr2Rt7guilLfYdPCehE
-----END CERTIFICATE-----
Generated at Sat May 31 17:01:21 2025 by rpki-client