Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
File:                     xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft (raw, json)
Hash identifier:          qnhuYmxu+5GyTEVNBnYUm+0K+Qojm/MaQegrvWQmbZI=
Subject key identifier:   64:BF:65:16:F5:41:02:3A:ED:D3:46:3B:E4:82:24:88:D8:88:02:DB
Authority key identifier: C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA
Certificate issuer:       /CN=A9169ADA/serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
Certificate serial:       0E4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
Manifest number:          0E2E
Signing time:             Fri 30 May 2025 17:58:18 +0000
Manifest this update:     Fri 30 May 2025 17:58:18 +0000
Manifest next update:     Fri 06 Jun 2025 17:58:18 +0000
Files and hashes:         1: xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl (hash: j4fAK99+yQav1OgOTn3hkNqmMU5S6CwwNq30qNDr1qo=)
                          2: C16E8E16256511EA98F3D465C4F9AE02.roa (hash: K0BpqfADIAgpRrVb5VAxiR5k6a1N4eJk58+OYvAmefI=)
                          3: AF573166309511EABE9B5934C4F9AE02.roa (hash: wBVLudr4r1jyDPH+Ghnt4yYJmAXvAyl8ooTj+H1Y8oI=)
                          4: BBE075C6906911EF97FA0D58C4F9AE02.roa (hash: JffyrCPpCuKQ4JV9hKAHpBOYaMhGWQal4zN+8n2snKI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl
                          rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 17:58:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3660 (0xe4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169ADA, serialNumber=C41715FEF200133D9123250FBB6531E88A4A99DA
        Validity
            Not Before: May 30 17:58:18 2025 GMT
            Not After : Jun  6 17:58:18 2025 GMT
        Subject: CN=6839f1ba-1f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:94:77:48:f2:27:87:ef:86:3e:ae:7b:87:2d:
                    c1:41:89:2a:c6:55:7c:da:00:44:57:5b:65:60:b7:
                    9d:47:a0:56:f8:0f:4e:fb:55:95:5c:83:74:98:69:
                    df:69:32:2d:38:84:7f:6d:7c:68:ff:b5:e1:d6:bb:
                    94:8d:1e:91:37:e0:e3:99:03:28:10:ae:f5:1a:ee:
                    46:0f:76:53:db:d2:14:1a:61:ee:d3:a4:e0:54:5e:
                    d9:16:c8:65:6f:1d:aa:d0:a3:97:2e:69:55:cd:af:
                    c8:ab:b8:1c:36:44:3e:f4:dc:59:2f:8a:3d:2b:c1:
                    58:de:c4:9a:ac:0d:6d:4a:55:a1:46:1a:99:ac:79:
                    76:9d:7d:96:90:5c:0e:61:ed:a7:28:df:2c:35:d8:
                    e7:ff:ec:6e:3c:d0:e8:21:3d:49:ac:0b:a2:b3:16:
                    e5:f4:55:df:e4:2f:1b:95:53:a9:95:29:6b:4d:8e:
                    ee:19:cd:0d:f2:2e:ed:c2:d7:ec:1d:42:e9:c0:0e:
                    ed:ac:40:06:16:28:d7:c0:85:a8:25:23:83:1f:0e:
                    e5:bf:8b:98:89:2b:7b:7f:3b:7c:15:85:80:73:68:
                    51:48:2e:5f:a3:f4:50:56:b9:93:5f:09:66:30:42:
                    9e:a0:35:5f:1d:dc:33:38:93:07:d1:59:0f:78:2b:
                    c3:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:BF:65:16:F5:41:02:3A:ED:D3:46:3B:E4:82:24:88:D8:88:02:DB
            X509v3 Authority Key Identifier:
                keyid:C4:17:15:FE:F2:00:13:3D:91:23:25:0F:BB:65:31:E8:8A:4A:99:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169ADA/FF3201CEA6B211E98D2B1860C4F9AE02/xBcV_vIAEz2RIyUPu2Ux6IpKmdo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:2d:0b:a2:63:bd:33:37:b8:a5:69:da:88:11:dc:d3:87:48:
         10:33:c0:b6:ef:dd:8e:2d:4d:36:51:59:93:f1:79:89:24:4f:
         11:ad:20:6d:db:0c:4a:1b:dd:1d:54:7e:32:e8:cb:ae:ef:c2:
         12:d7:19:c7:c5:e9:74:aa:33:f6:49:9c:30:bf:bf:0f:34:78:
         7f:b7:f1:8d:46:b6:89:90:e9:02:18:cf:9d:3a:4f:8b:f6:7c:
         d0:a7:2d:89:f7:d7:a0:82:40:f4:da:54:1f:f5:ba:c8:b2:c9:
         96:3c:15:34:3a:53:7c:ea:c1:cd:69:7c:17:23:f8:fd:0e:a4:
         44:2f:59:c5:07:58:0a:ee:bc:3a:c7:c5:ab:93:77:98:b7:cb:
         88:d7:0d:71:3f:d1:cc:2b:fb:80:c3:04:38:d3:f1:fb:08:d6:
         30:6b:18:9d:59:ac:72:0a:57:43:d4:15:56:21:85:b7:18:fa:
         8e:e1:c9:d9:a7:c6:5d:5d:cb:6c:ab:52:80:69:92:84:af:c8:
         70:ea:b8:1d:bb:f5:ca:46:aa:00:fe:24:cc:72:7c:1c:cc:6e:
         7e:d7:c5:7f:99:94:d9:63:4a:5b:36:c2:a8:86:59:56:6c:4f:
         ca:bd:b8:bf:8a:c4:7b:20:91:e8:5a:44:90:50:eb:72:1e:72:
         82:bd:af:ca
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlBREExMTAvBgNVBAUTKEM0MTcxNUZFRjIwMDEzM0Q5MTIzMjUwRkJCNjUzMUU4
OEE0QTk5REEwHhcNMjUwNTMwMTc1ODE4WhcNMjUwNjA2MTc1ODE4WjAYMRYwFAYD
VQQDEw02ODM5ZjFiYS0xZjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw5R3SPInh++GPq57hy3BQYkqxlV82gBEV1tlYLedR6BW+A9O+1WVXIN0mGnf
aTItOIR/bXxo/7Xh1ruUjR6RN+DjmQMoEK71Gu5GD3ZT29IUGmHu06TgVF7ZFshl
bx2q0KOXLmlVza/Iq7gcNkQ+9NxZL4o9K8FY3sSarA1tSlWhRhqZrHl2nX2WkFwO
Ye2nKN8sNdjn/+xuPNDoIT1JrAuisxbl9FXf5C8blVOplSlrTY7uGc0N8i7twtfs
HULpwA7trEAGFijXwIWoJSODHw7lv4uYiSt7fzt8FYWAc2hRSC5fo/RQVrmTXwlm
MEKeoDVfHdwzOJMH0VkPeCvDJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGS/ZRb1
QQI67dNGO+SCJIjYiALbMB8GA1UdIwQYMBaAFMQXFf7yABM9kSMlD7tlMeiKSpna
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUFEQS9GRjMyMDFDRUE2
QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6MlJJeVVQdTJVeDZJcEtt
ZG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hCY1ZfdklBRXoyUkl5VVB1MlV4NklwS21kby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUFEQS9GRjMyMDFDRUE2QjIxMUU5OEQyQjE4NjBDNEY5QUUwMi94QmNWX3ZJQUV6
MlJJeVVQdTJVeDZJcEttZG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtLQuiY70zN7iladqIEdzTh0gQM8C2792OLU02UVmT8XmJJE8RrSBt
2wxKG90dVH4y6Muu78IS1xnHxel0qjP2SZwwv78PNHh/t/GNRraJkOkCGM+dOk+L
9nzQpy2J99eggkD02lQf9brIssmWPBU0OlN86sHNaXwXI/j9DqREL1nFB1gK7rw6
x8Wrk3eYt8uI1w1xP9HMK/uAwwQ40/H7CNYwaxidWaxyCldD1BVWIYW3GPqO4cnZ
p8ZdXctsq1KAaZKEr8hw6rgdu/XKRqoA/iTMcnwczG5+18V/mZTZY0pbNsKohllW
bE/Kvbi/isR7IJHoWkSQUOtyHnKCva/K
-----END CERTIFICATE-----
Generated at Sat May 31 17:17:22 2025 by rpki-client