Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
File:                     _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft (raw, json)
Hash identifier:          B0N0mliTImeEBX7yZ8HiWy0MyIG9hAj3sn4/dav0iMA=
Subject key identifier:   0C:79:F9:13:32:E1:A1:4F:29:3B:A7:9D:B4:0E:E9:4E:80:F9:46:80
Authority key identifier: FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94
Certificate issuer:       /CN=A9186C2F/serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
Certificate serial:       0370
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
Manifest number:          0361
Signing time:             Sat 31 May 2025 01:09:41 +0000
Manifest this update:     Sat 31 May 2025 01:09:41 +0000
Manifest next update:     Sat 07 Jun 2025 01:09:41 +0000
Files and hashes:         1: _hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl (hash: plSnvzfL3DT6ampSWKW4Wz+FjOC/pZdsyILkpXk72bI=)
                          2: AB3742F4B34411ECB016765EC4F9AE02.roa (hash: oywLtrB7Dks1CdJjkD2xhNPjQlapRspAyRegZBX074I=)
                          3: E0722F2EB41B11ECB8529210C4F9AE02.roa (hash: 1PytUGKxFSlnKa32cmpuSKajNJ5x4qip8klGcU604cA=)
                          4: 9837349AB41E11ECAFDA1F1AC4F9AE02.roa (hash: dAddIv0JPSHHamMka9fq5eu7LbrsYsvnj5ro8P4sxvE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl
                          rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 01:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186C2F, serialNumber=FE19778A0D07BDDB5FF6B9F05BE2D545520EC494
        Validity
            Not Before: May 31 01:09:41 2025 GMT
            Not After : Jun  7 01:09:41 2025 GMT
        Subject: CN=683a56d5-83fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:6f:e9:16:c4:07:f2:ac:c0:01:58:c5:be:
                    b4:0e:30:db:32:e6:34:15:51:6d:91:0d:89:c4:21:
                    ba:c7:ea:4a:28:de:35:40:60:2e:db:48:95:b0:cd:
                    3f:7a:30:0c:29:e1:75:80:04:db:9c:b6:ab:8e:41:
                    e8:87:af:1a:ad:d4:17:d6:e5:e7:b4:68:ba:ad:5e:
                    ee:40:57:d2:b9:4f:0b:14:c9:9d:63:bb:2e:e7:1e:
                    bc:db:3e:6e:d7:bb:70:9d:87:16:31:1f:23:49:87:
                    f4:ba:e2:ba:2a:98:e3:0e:19:e4:e5:41:11:e4:36:
                    b6:da:6e:4b:e1:5f:a6:66:26:8b:f7:bf:d7:ee:df:
                    f8:44:f1:46:89:1f:9e:fa:b1:f0:6b:05:b8:01:5e:
                    c6:60:b6:0d:34:71:e4:e3:f5:df:7a:6c:5c:81:47:
                    78:60:a2:4b:5c:ab:10:b3:a4:9c:71:e1:e2:b0:77:
                    09:24:80:bc:ac:39:88:6c:23:64:9b:a3:48:44:dc:
                    13:17:68:b0:55:59:65:a5:77:c1:80:89:04:e4:ae:
                    a0:c2:50:2a:78:c1:9c:99:24:c6:04:c1:b0:df:47:
                    a8:df:aa:af:3c:8e:fa:c9:5b:4e:b6:60:b5:cd:65:
                    06:74:9b:6e:1b:1d:fc:50:3e:78:d9:80:53:69:a1:
                    a1:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:79:F9:13:32:E1:A1:4F:29:3B:A7:9D:B4:0E:E9:4E:80:F9:46:80
            X509v3 Authority Key Identifier:
                keyid:FE:19:77:8A:0D:07:BD:DB:5F:F6:B9:F0:5B:E2:D5:45:52:0E:C4:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186C2F/773D39B6B34111EC8203195BC4F9AE02/_hl3ig0Hvdtf9rnwW-LVRVIOxJQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:37:a2:79:34:72:8b:96:47:88:53:78:45:1e:a6:5a:0a:da:
         67:4a:29:e3:4a:8d:08:f5:93:94:0f:23:d9:95:02:56:71:2d:
         06:c8:b7:f2:a2:31:60:ba:ae:93:86:1b:c7:14:6b:21:c2:4d:
         3b:dc:f3:4a:01:04:a7:46:01:2f:4e:46:88:dc:65:f9:2f:25:
         a6:f1:a7:83:fc:7b:f9:2d:e2:96:30:75:90:f3:46:3f:7e:ff:
         cb:97:f3:2e:de:72:db:06:61:f3:08:55:f0:c6:95:4c:f1:fa:
         98:cd:21:9c:39:3d:ad:92:71:a6:cc:1c:31:67:e1:0d:8c:a2:
         a6:2f:2b:ec:79:80:f5:c5:5c:7d:89:54:1b:b7:57:b3:a0:21:
         08:3d:00:4b:f6:09:ef:74:67:e1:ad:25:13:9c:a8:d4:dd:cc:
         c5:d9:8a:17:6a:7b:52:06:03:dc:a2:5f:26:60:e2:87:40:a1:
         27:9e:a5:54:42:30:90:c4:7e:56:1b:8a:70:8b:3b:4a:0a:d0:
         58:89:54:0c:e9:3d:74:84:92:e1:bb:43:96:1d:aa:ac:ea:86:
         57:bf:19:75:25:b9:1b:9f:f4:c9:23:93:2a:59:27:41:f7:21:
         2a:23:42:8e:19:6e:9b:45:dc:0a:a1:6b:e5:57:24:5d:54:36:
         6f:13:47:4a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA3AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZDMkYxMTAvBgNVBAUTKEZFMTk3NzhBMEQwN0JEREI1RkY2QjlGMDVCRTJENTQ1
NTIwRUM0OTQwHhcNMjUwNTMxMDEwOTQxWhcNMjUwNjA3MDEwOTQxWjAYMRYwFAYD
VQQDEw02ODNhNTZkNS04M2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxUBv6RbEB/KswAFYxb60DjDbMuY0FVFtkQ2JxCG6x+pKKN41QGAu20iVsM0/
ejAMKeF1gATbnLarjkHoh68ardQX1uXntGi6rV7uQFfSuU8LFMmdY7su5x682z5u
17twnYcWMR8jSYf0uuK6KpjjDhnk5UER5Da22m5L4V+mZiaL97/X7t/4RPFGiR+e
+rHwawW4AV7GYLYNNHHk4/XfemxcgUd4YKJLXKsQs6ScceHisHcJJIC8rDmIbCNk
m6NIRNwTF2iwVVllpXfBgIkE5K6gwlAqeMGcmSTGBMGw30eo36qvPI76yVtOtmC1
zWUGdJtuGx38UD542YBTaaGh2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAx5+RMy
4aFPKTunnbQO6U6A+UaAMB8GA1UdIwQYMBaAFP4Zd4oNB73bX/a58Fvi1UVSDsSU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkMyRi83NzNEMzlCNkIz
NDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZkdGY5cm53Vy1MVlJWSU94
SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL19obDNpZzBIdmR0ZjlybndXLUxWUlZJT3hKUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NkMyRi83NzNEMzlCNkIzNDExMUVDODIwMzE5NUJDNEY5QUUwMi9faGwzaWcwSHZk
dGY5cm53Vy1MVlJWSU94SlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCrN6J5NHKLlkeIU3hFHqZaCtpnSinjSo0I9ZOUDyPZlQJWcS0GyLfy
ojFguq6ThhvHFGshwk073PNKAQSnRgEvTkaI3GX5LyWm8aeD/Hv5LeKWMHWQ80Y/
fv/Ll/Mu3nLbBmHzCFXwxpVM8fqYzSGcOT2tknGmzBwxZ+ENjKKmLyvseYD1xVx9
iVQbt1ezoCEIPQBL9gnvdGfhrSUTnKjU3czF2YoXantSBgPcol8mYOKHQKEnnqVU
QjCQxH5WG4pwiztKCtBYiVQM6T10hJLhu0OWHaqs6oZXvxl1Jbkbn/TJI5MqWSdB
9yEqI0KOGW6bRdwKoWvlVyRdVDZvE0dK
-----END CERTIFICATE-----
Generated at Sat May 31 17:06:26 2025 by rpki-client