Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
File:                     _dJQeCIYPOgHWUGdVlQGBqJIa0s.mft (raw, json)
Hash identifier:          +YJYihU/iYMiVwxYSkxn3PIZ2NFFWryber3mKVBR8Is=
Subject key identifier:   92:9A:8B:DC:29:88:63:30:75:00:19:11:EB:68:69:97:77:DA:08:99
Authority key identifier: FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
Certificate issuer:       /CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Certificate serial:       0841
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
Manifest number:          0825
Signing time:             Fri 30 May 2025 21:03:42 +0000
Manifest this update:     Fri 30 May 2025 21:03:42 +0000
Manifest next update:     Fri 06 Jun 2025 21:03:42 +0000
Files and hashes:         1: _dJQeCIYPOgHWUGdVlQGBqJIa0s.crl (hash: ANbmaR6GDnXDQ6z3SEvyTAw4fOJnYDBehEWSAepjOpw=)
                          2: FD18A8AAD97B11EAB138A00FC4F9AE02.roa (hash: dUADLZNofYstB4J1GHJqZ4NyoXP/5OBBFPnTwTmX5d0=)
                          3: 5818925E826A11ECBF45DE23C4F9AE02.roa (hash: pVe/D2y8+Q5khNjEW30/uK4SviswKm/bN634mRuECH4=)
                          4: A69B6B8C082411EDADBE0C60C4F9AE02.roa (hash: JKAxoURLcld4TYBs+HuThRABfXOXWBihIh336+ir050=)
                          5: BFECDAAC803F11EC8394C23AC4F9AE02.roa (hash: Vhzmp3txj0Xul7ynXkTKnMTWBScHUp4m7KHYrp1yvUA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
                          rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:03:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2113 (0x841)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917647E, serialNumber=FDD2507822183CE80759419D56540606A2486B4B
        Validity
            Not Before: May 30 21:03:42 2025 GMT
            Not After : Jun  6 21:03:42 2025 GMT
        Subject: CN=683a1d2e-daa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:76:f5:41:93:03:ac:b7:d4:f6:83:c7:61:9f:
                    61:9a:d4:7d:02:da:23:d8:3c:87:6a:c4:11:0b:0e:
                    9b:e4:3e:e2:90:ab:2c:24:0f:48:34:54:86:68:ae:
                    5d:ff:6e:86:31:5a:0f:dc:27:09:37:d1:7c:ac:cb:
                    61:a3:f0:4f:6e:55:99:e9:10:36:12:c0:e2:cf:bb:
                    a7:bf:ad:36:e1:3d:f2:a3:93:22:21:ba:f1:ec:6e:
                    9e:65:20:f6:1a:4e:56:f8:3e:50:46:18:67:4d:16:
                    c3:b1:02:05:3a:7f:d0:e9:96:9e:fc:24:68:a7:61:
                    a7:46:ff:2b:1e:7c:1e:d1:5a:5d:9d:dd:a2:81:24:
                    7e:65:de:db:4e:b1:1d:10:c3:aa:07:7a:58:ed:31:
                    ad:76:7d:6b:37:3b:ab:11:3a:ba:d8:8a:be:03:7c:
                    d9:f2:0a:0a:61:50:9e:aa:fe:be:40:da:fa:ca:8b:
                    80:5a:b5:00:db:74:dc:90:9a:7d:c6:84:2f:e7:72:
                    e7:48:72:d4:9c:41:d7:6b:a0:01:2e:66:9f:0c:ca:
                    95:b7:0c:00:5b:ce:ec:3b:f8:05:40:03:0e:8b:6b:
                    81:b2:8c:23:e6:63:da:9d:d9:e3:4a:d0:c6:c0:c9:
                    4d:b6:60:48:14:5c:2d:07:7e:8f:9d:7c:4a:7a:f7:
                    9d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9A:8B:DC:29:88:63:30:75:00:19:11:EB:68:69:97:77:DA:08:99
            X509v3 Authority Key Identifier:
                keyid:FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:aa:d9:8f:6d:17:27:0d:59:1c:93:78:1e:f8:6a:08:36:e9:
         65:dd:36:e7:b7:dc:4a:82:bc:5a:b0:12:92:81:21:c0:75:c7:
         d1:ce:ad:b7:55:f9:9f:61:95:ad:75:f2:53:14:a4:ee:f5:53:
         c9:d4:5a:f5:b6:31:dd:5d:2e:aa:dc:4c:0b:18:5f:9b:9c:30:
         16:6c:87:62:bf:76:21:88:23:d0:69:91:e5:77:51:4d:36:ec:
         0d:d8:d1:59:41:93:b7:b5:36:43:19:55:b2:10:bb:03:79:91:
         81:ef:f1:e3:81:6a:24:70:d0:b2:1a:bb:93:56:97:4b:9e:a8:
         bc:5a:06:3c:d4:a9:28:44:53:52:4d:d4:e0:c5:8d:ab:7f:5c:
         02:01:7d:51:89:ee:2d:54:a4:63:81:c8:ba:33:b6:13:a3:35:
         44:3a:8b:1e:6e:af:24:9f:39:80:a9:55:48:d6:6d:4c:d0:c9:
         b9:a8:f6:ea:95:3f:53:a8:bf:34:6c:5f:a1:9f:d8:6d:07:02:
         7e:7c:60:98:75:cb:3d:e2:13:f6:41:06:eb:fa:fb:f2:25:19:
         dc:91:98:ac:a8:65:5f:d2:01:6f:b7:ea:af:7a:6e:f1:6c:60:
         25:da:e9:97:a5:93:42:f0:ef:54:3e:cc:bc:f0:2b:c7:45:70:
         c7:5f:9e:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzY0N0UxMTAvBgNVBAUTKEZERDI1MDc4MjIxODNDRTgwNzU5NDE5RDU2NTQwNjA2
QTI0ODZCNEIwHhcNMjUwNTMwMjEwMzQyWhcNMjUwNjA2MjEwMzQyWjAYMRYwFAYD
VQQDEw02ODNhMWQyZS1kYWE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyHb1QZMDrLfU9oPHYZ9hmtR9Atoj2DyHasQRCw6b5D7ikKssJA9INFSGaK5d
/26GMVoP3CcJN9F8rMtho/BPblWZ6RA2EsDiz7unv6024T3yo5MiIbrx7G6eZSD2
Gk5W+D5QRhhnTRbDsQIFOn/Q6Zae/CRop2GnRv8rHnwe0Vpdnd2igSR+Zd7bTrEd
EMOqB3pY7TGtdn1rNzurETq62Iq+A3zZ8goKYVCeqv6+QNr6youAWrUA23TckJp9
xoQv53LnSHLUnEHXa6ABLmafDMqVtwwAW87sO/gFQAMOi2uBsowj5mPandnjStDG
wMlNtmBIFFwtB36PnXxKevedzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJKai9wp
iGMwdQAZEetoaZd32giZMB8GA1UdIwQYMBaAFP3SUHgiGDzoB1lBnVZUBgaiSGtL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NjQ3RS8wRDEwQjgwNEQ2
MzExMUVBOUE1QTU4M0JDNEY5QUUwMi9fZEpRZUNJWVBPZ0hXVUdkVmxRR0JxSklh
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19kSlFlQ0lZUE9nSFdVR2RWbFFHQnFKSWEwcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NjQ3RS8wRDEwQjgwNEQ2MzExMUVBOUE1QTU4M0JDNEY5QUUwMi9fZEpRZUNJWVBP
Z0hXVUdkVmxRR0JxSklhMHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBhqtmPbRcnDVkck3ge+GoINull3Tbnt9xKgrxasBKSgSHAdcfRzq23
VfmfYZWtdfJTFKTu9VPJ1Fr1tjHdXS6q3EwLGF+bnDAWbIdiv3YhiCPQaZHld1FN
NuwN2NFZQZO3tTZDGVWyELsDeZGB7/HjgWokcNCyGruTVpdLnqi8WgY81KkoRFNS
TdTgxY2rf1wCAX1Rie4tVKRjgci6M7YTozVEOosebq8knzmAqVVI1m1M0Mm5qPbq
lT9TqL80bF+hn9htBwJ+fGCYdcs94hP2QQbr+vvyJRnckZisqGVf0gFvt+qvem7x
bGAl2umXpZNC8O9UPsy88CvHRXDHX55c
-----END CERTIFICATE-----
Generated at Sat May 31 17:12:58 2025 by rpki-client