Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
File:                     B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft (raw, json)
Hash identifier:          Iw6IjfMbc6Ev0MojOKloQ9A48yGKo4F0HeonSIWETDg=
Subject key identifier:   B8:9C:D3:E1:B3:D2:B1:58:3C:E5:BE:01:62:1D:83:54:73:90:46:1A
Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE
Certificate issuer:       /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
Certificate serial:       04BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
Manifest number:          049F
Signing time:             Sat 31 May 2025 00:16:32 +0000
Manifest this update:     Sat 31 May 2025 00:16:31 +0000
Manifest next update:     Sat 07 Jun 2025 00:16:31 +0000
Files and hashes:         1: B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl (hash: P8B0KJO10LZTZB6IVFZTdnaHjYCpRs8UW52bDXLUNck=)
                          2: 6F155A6E144F11EE86CD7A23C4F9AE02.roa (hash: aI/sq9frDUa4oxfrwH2vEYRuVBCHaeAM/ywxuno+wUs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl
                          rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 00:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212 (0x4bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B443, serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE
        Validity
            Not Before: May 31 00:16:31 2025 GMT
            Not After : Jun  7 00:16:31 2025 GMT
        Subject: CN=683a4a60-ef51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:a9:1d:25:94:7b:eb:4f:ba:f9:61:c8:9f:
                    09:b5:53:de:7d:1d:9d:c6:c9:1f:93:c4:ff:28:3f:
                    93:2d:97:78:d2:8f:9f:6f:e6:4c:8a:06:c0:ee:92:
                    ce:71:96:57:9d:59:99:76:f0:4a:b7:81:d5:9d:5e:
                    65:58:04:b2:8c:a2:a7:43:5c:c8:fd:78:b3:07:e7:
                    8e:0a:7f:d6:19:da:0e:01:a7:b3:92:23:ac:d2:86:
                    af:ca:7c:99:5a:97:00:f1:78:43:05:c6:48:c4:bf:
                    b1:52:43:29:b3:a5:06:21:80:84:d4:63:c5:a3:de:
                    b8:f2:d5:ae:65:05:c5:4e:d1:13:1e:36:8a:33:2d:
                    0c:58:4f:ce:42:d7:0c:11:32:bd:67:48:0f:fa:d2:
                    a3:47:74:6f:fa:f9:5d:ab:8c:e1:e5:86:7a:73:86:
                    55:ff:26:ba:60:70:d6:ac:f5:a5:7e:66:7c:b4:92:
                    89:6c:de:65:a2:7b:06:45:25:37:77:83:16:37:0c:
                    d4:bc:6f:fc:67:45:ea:08:97:56:df:c7:ef:d0:9e:
                    51:52:7c:92:e0:df:92:be:61:d0:ad:2d:35:18:4c:
                    14:25:7a:82:9f:95:48:c3:84:da:46:86:7f:e0:17:
                    52:7c:24:2f:72:d1:fc:63:18:d9:57:2c:6b:2b:c8:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:9C:D3:E1:B3:D2:B1:58:3C:E5:BE:01:62:1D:83:54:73:90:46:1A
            X509v3 Authority Key Identifier:
                keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e1:6e:41:28:76:61:9a:45:93:90:82:0a:60:f3:d8:ae:8a:
         b8:66:55:6b:ae:1d:98:72:cb:c9:d8:59:54:4a:51:5c:11:5f:
         23:d5:47:41:76:49:6a:9e:8e:c0:11:04:f4:dc:69:d1:c6:d1:
         2b:b0:11:a1:4f:70:34:4b:f9:ca:78:55:07:99:81:7a:8a:7f:
         f5:d9:71:b6:a8:6c:72:79:2a:1c:8b:34:cc:50:8e:d1:1b:10:
         c0:98:fb:2c:16:ba:65:16:aa:61:4f:11:bf:dc:a8:ee:e4:64:
         6f:3c:18:3c:85:71:b3:70:0b:bf:a7:0f:94:eb:d3:6a:35:d7:
         01:38:20:52:7c:1b:40:ee:42:d3:03:f9:57:c1:96:b4:ef:35:
         cd:2b:c4:74:66:03:f9:91:12:7c:bb:aa:b9:41:d9:bc:d5:14:
         81:72:37:d2:22:a4:09:a7:4d:b1:d3:83:8d:1c:43:73:32:a0:
         d9:92:d5:09:55:52:70:14:c8:bb:bf:0e:89:93:00:ab:81:3d:
         81:cf:84:4e:e3:20:da:4b:ff:08:dc:78:bc:5a:76:4d:6a:43:
         93:b7:6e:b6:a1:10:b9:e7:95:c1:03:d1:34:a2:7b:4a:19:2a:
         27:c8:1a:0d:6e:e4:a0:d8:fc:a2:a0:1e:8c:bf:04:52:fe:b6:
         4c:6b:14:67
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBLwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI0NDMxMTAvBgNVBAUTKDA3QUE3M0E3RUQ2NzQxMTg5MUJEOEY3MjcyNjE5NTFD
NDFDNzE2REUwHhcNMjUwNTMxMDAxNjMxWhcNMjUwNjA3MDAxNjMxWjAYMRYwFAYD
VQQDEw02ODNhNGE2MC1lZjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0RKpHSWUe+tPuvlhyJ8JtVPefR2dxskfk8T/KD+TLZd40o+fb+ZMigbA7pLO
cZZXnVmZdvBKt4HVnV5lWASyjKKnQ1zI/XizB+eOCn/WGdoOAaezkiOs0oavynyZ
WpcA8XhDBcZIxL+xUkMps6UGIYCE1GPFo9648tWuZQXFTtETHjaKMy0MWE/OQtcM
ETK9Z0gP+tKjR3Rv+vldq4zh5YZ6c4ZV/ya6YHDWrPWlfmZ8tJKJbN5lonsGRSU3
d4MWNwzUvG/8Z0XqCJdW38fv0J5RUnyS4N+SvmHQrS01GEwUJXqCn5VIw4TaRoZ/
4BdSfCQvctH8YxjZVyxrK8hqnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLic0+Gz
0rFYPOW+AWIdg1RzkEYaMB8GA1UdIwQYMBaAFAeqc6ftZ0EYkb2PcnJhlRxBxxbe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjQ0My85MjQyNkY4NjQy
MEExMUVDOTRDNEYxNUFDNEY5QUUwMi9CNnB6cC0xblFSaVJ2WTl5Y21HVkhFSEhG
dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0I2cHpwLTFuUVJpUnZZOXljbUdWSEVISEZ0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjQ0My85MjQyNkY4NjQyMEExMUVDOTRDNEYxNUFDNEY5QUUwMi9CNnB6cC0xblFS
aVJ2WTl5Y21HVkhFSEhGdDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAC4W5BKHZhmkWTkIIKYPPYroq4ZlVrrh2YcsvJ2FlUSlFcEV8j1UdB
dklqno7AEQT03GnRxtErsBGhT3A0S/nKeFUHmYF6in/12XG2qGxyeSocizTMUI7R
GxDAmPssFrplFqphTxG/3Kju5GRvPBg8hXGzcAu/pw+U69NqNdcBOCBSfBtA7kLT
A/lXwZa07zXNK8R0ZgP5kRJ8u6q5Qdm81RSBcjfSIqQJp02x04ONHENzMqDZktUJ
VVJwFMi7vw6JkwCrgT2Bz4RO4yDaS/8I3Hi8WnZNakOTt262oRC555XBA9E0ontK
GSonyBoNbuSg2PyioB6MvwRS/rZMaxRn
-----END CERTIFICATE-----
Generated at Sat May 31 17:26:19 2025 by rpki-client