Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
File:                     yEnB9uuNGws3lLBgxJxam9U61Mk.mft (raw, json)
Hash identifier:          hX0o2gXfpS0IIdogGPx+IMy1RT7Pt0IaA/XNirnV0Mw=
Subject key identifier:   37:11:68:63:13:CC:F4:1F:C2:A7:5E:8C:72:5F:58:D1:0A:39:04:FF
Authority key identifier: C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9
Certificate issuer:       /CN=A9180DA5/serialNumber=C849C1F6EB8D1B0B3794B060C49C5A9BD53AD4C9
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
Manifest number:          50
Signing time:             Sat 15 Feb 2025 08:31:20 +0000
Manifest this update:     Sat 15 Feb 2025 08:31:20 +0000
Manifest next update:     Sat 22 Feb 2025 08:31:20 +0000
Files and hashes:         1: yEnB9uuNGws3lLBgxJxam9U61Mk.crl (hash: Xjds7koC4GwcyLXRZ8/GigjwR5pxgH3CUnmXKQPPrnU=)
                          2: FC9B052E73ED11EFBE08A45AC4F9AE02.roa (hash: rHJo5UtLh1VULKC52eRZg4xQTH8t25GY8hXDj9/zGnc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl
                          rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DA5
        Validity
            Not Before: Feb 15 08:31:20 2025 GMT
            Not After : Feb 22 08:31:20 2025 GMT
        Subject: CN=67b050d8-35de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:62:4b:39:22:95:21:70:6c:2f:f7:c5:a5:
                    49:38:4e:36:40:06:18:e0:e7:09:d3:b2:3d:db:d3:
                    67:eb:53:dc:d0:04:3a:02:94:78:75:6e:23:76:16:
                    af:8a:8a:63:bd:41:12:15:2f:d0:7c:70:6f:04:20:
                    76:e5:d0:5d:0b:fd:8e:b4:a9:93:f5:96:cb:a0:ce:
                    6d:f2:ac:d4:9f:8c:9a:68:46:83:a1:80:09:b3:47:
                    3d:a3:8a:40:35:38:57:81:29:17:7b:62:5e:00:1a:
                    c6:e1:82:90:b3:01:90:41:f8:02:e9:54:13:13:17:
                    63:ae:8a:7e:58:77:f1:5e:3f:3e:13:d8:2d:7d:35:
                    39:a7:cd:4a:e4:0f:8e:65:75:c4:43:b0:23:37:df:
                    3b:f0:ac:fb:bc:59:8e:88:1b:aa:cb:7a:ee:4a:d5:
                    d8:52:4a:d9:ba:ea:7a:dd:29:96:9f:7e:4b:74:11:
                    59:fa:8a:eb:a0:ee:5a:57:ab:c5:d7:88:f2:ce:bb:
                    4c:76:84:91:6b:1c:0a:bd:59:fc:06:15:40:88:a3:
                    40:a6:37:3a:f2:ee:cf:d6:0a:7b:a5:87:7f:9c:a4:
                    be:73:50:2c:5d:06:a1:33:63:db:d9:84:1c:ee:dd:
                    49:c2:52:e1:48:83:2d:0b:27:a4:10:6f:c3:80:21:
                    55:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:11:68:63:13:CC:F4:1F:C2:A7:5E:8C:72:5F:58:D1:0A:39:04:FF
            X509v3 Authority Key Identifier:
                keyid:C8:49:C1:F6:EB:8D:1B:0B:37:94:B0:60:C4:9C:5A:9B:D5:3A:D4:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yEnB9uuNGws3lLBgxJxam9U61Mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DA5/A7337C6A73ED11EFB0BA025AC4F9AE02/yEnB9uuNGws3lLBgxJxam9U61Mk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:2e:3c:f0:55:6e:cc:d9:17:12:37:65:98:cd:c1:5a:a7:68:
         82:e2:ba:1e:79:1d:e9:b1:9d:c7:ba:d3:41:49:5d:ff:a0:b7:
         b8:c0:45:60:6c:25:9e:76:d7:61:9f:16:9d:b4:e5:28:ac:68:
         da:20:33:7d:eb:41:bf:18:0d:ab:92:65:d7:b2:30:4f:2a:e5:
         8f:d4:1e:6d:9d:17:eb:94:19:4f:f7:ca:51:d1:9a:99:f2:78:
         6d:d7:19:93:c7:0c:80:c6:59:1f:88:36:72:a3:14:a7:1b:37:
         3c:7b:5f:60:00:d7:11:9a:88:c5:37:5a:81:8b:d5:58:ee:16:
         3e:f8:dd:e9:4e:e6:5e:e4:3f:4e:8b:73:99:00:5c:f4:c8:64:
         fb:55:1c:89:8c:a2:f8:a9:8e:06:ca:e4:a6:42:41:19:a0:ac:
         8f:ab:0a:69:9c:13:dc:88:70:15:b9:59:39:7c:c5:e9:e1:05:
         97:79:25:c7:d1:61:46:a4:0d:11:a4:ec:f9:23:94:51:71:97:
         99:c4:52:4a:62:92:6e:78:d7:8d:a0:68:13:6c:0b:a2:25:cd:
         2e:f8:bc:99:0f:85:f3:ab:64:b8:94:ef:61:38:b1:52:a2:e1:
         27:76:68:24:82:97:06:d8:f8:38:00:14:09:5d:0f:a4:e6:a3:
         8e:aa:c0:ce
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MERBNTExMC8GA1UEBRMoQzg0OUMxRjZFQjhEMUIwQjM3OTRCMDYwQzQ5QzVBOUJE
NTNBRDRDOTAeFw0yNTAyMTUwODMxMjBaFw0yNTAyMjIwODMxMjBaMBgxFjAUBgNV
BAMTDTY3YjA1MGQ4LTM1ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDN0mJLOSKVIXBsL/fFpUk4TjZABhjg5wnTsj3b02frU9zQBDoClHh1biN2Fq+K
imO9QRIVL9B8cG8EIHbl0F0L/Y60qZP1lsugzm3yrNSfjJpoRoOhgAmzRz2jikA1
OFeBKRd7Yl4AGsbhgpCzAZBB+ALpVBMTF2Ouin5Yd/FePz4T2C19NTmnzUrkD45l
dcRDsCM33zvwrPu8WY6IG6rLeu5K1dhSStm66nrdKZaffkt0EVn6iuug7lpXq8XX
iPLOu0x2hJFrHAq9WfwGFUCIo0CmNzry7s/WCnulh3+cpL5zUCxdBqEzY9vZhBzu
3UnCUuFIgy0LJ6QQb8OAIVXpAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNxFoYxPM
9B/Cp16Mcl9Y0Qo5BP8wHwYDVR0jBBgwFoAUyEnB9uuNGws3lLBgxJxam9U61Mkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgwREE1L0E3MzM3QzZBNzNF
RDExRUZCMEJBMDI1QUM0RjlBRTAyL3lFbkI5dXVOR3dzM2xMQmd4SnhhbTlVNjFN
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIveUVuQjl1dU5Hd3MzbExCZ3hKeGFtOVU2MU1rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgw
REE1L0E3MzM3QzZBNzNFRDExRUZCMEJBMDI1QUM0RjlBRTAyL3lFbkI5dXVOR3dz
M2xMQmd4SnhhbTlVNjFNay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAAMuPPBVbszZFxI3ZZjNwVqnaILiuh55Hemxnce600FJXf+gt7jARWBs
JZ5212GfFp205SisaNogM33rQb8YDauSZdeyME8q5Y/UHm2dF+uUGU/3ylHRmpny
eG3XGZPHDIDGWR+INnKjFKcbNzx7X2AA1xGaiMU3WoGL1VjuFj743elO5l7kP06L
c5kAXPTIZPtVHImMovipjgbK5KZCQRmgrI+rCmmcE9yIcBW5WTl8xenhBZd5JcfR
YUakDRGk7PkjlFFxl5nEUkpikm54142gaBNsC6IlzS74vJkPhfOrZLiU72E4sVKi
4Sd2aCSClwbY+DgAFAldD6Tmo46qwM4=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:58 2025 by rpki-client