Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
File:                     cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft (raw, json)
Hash identifier:          C4oFnas4lPM2pIxoUt5YDmDFqREXCMfjx6P4JjqE05s=
Subject key identifier:   7C:D7:71:8A:8D:84:4B:3B:CC:EE:17:58:CB:95:91:39:97:8A:77:5D
Authority key identifier: 70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E
Certificate issuer:       /CN=A918B936/serialNumber=7045A718BBEB289F18D1F930FA332D6332D9555E
Certificate serial:       20DC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
Manifest number:          20DC
Signing time:             Wed 12 Mar 2025 15:55:13 +0000
Manifest this update:     Wed 12 Mar 2025 15:55:13 +0000
Manifest next update:     Wed 19 Mar 2025 15:55:13 +0000
Files and hashes:         1: cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl (hash: vmW2+YpluC6tYG2acUdYVlC3BDpqGF+TbAl7/S50TzQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl
                          rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 15:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8412 (0x20dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B936
        Validity
            Not Before: Mar 12 15:55:13 2025 GMT
            Not After : Mar 19 15:55:13 2025 GMT
        Subject: CN=67d1ae61-6a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:5c:77:9a:ae:4c:86:98:78:a7:ce:1f:d9:
                    37:22:f5:a6:91:65:67:0f:38:c7:2a:25:ca:46:ed:
                    0f:29:0a:0d:68:7c:bc:f6:12:5e:3f:38:18:8f:0b:
                    b5:ad:d9:8b:5d:39:b9:84:80:b3:36:dc:af:aa:80:
                    11:24:b8:02:27:ba:a6:8b:67:d6:96:d3:bf:5e:ed:
                    a4:7f:89:dd:65:3c:b7:44:4b:85:33:65:33:e4:54:
                    7d:7a:9d:42:08:36:a4:38:0b:5b:b7:3f:7c:fa:da:
                    23:8a:71:00:ad:a2:b9:38:7e:24:fc:1d:10:94:4b:
                    64:97:96:ad:52:9e:f8:c5:07:f7:a7:44:54:b9:29:
                    bb:c6:08:b1:bb:68:cd:d3:68:c1:3c:42:49:ab:73:
                    26:4c:ad:9e:60:a6:43:15:1b:6f:91:d6:a5:49:e2:
                    bb:c0:f8:e9:eb:2f:cc:5c:e4:c0:84:fc:13:56:29:
                    74:2c:f0:57:a0:bc:22:e4:66:2c:5e:45:b9:04:7d:
                    38:94:57:9a:80:82:8a:19:d1:9e:b7:a1:3b:88:e3:
                    87:6a:f8:8f:c2:a8:43:b1:b8:51:a9:4e:9a:82:93:
                    0d:e3:28:7c:e1:5d:e1:26:55:fc:de:14:6b:32:f8:
                    88:46:e9:ad:31:82:4b:ff:1b:d5:df:c6:5d:d6:c5:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D7:71:8A:8D:84:4B:3B:CC:EE:17:58:CB:95:91:39:97:8A:77:5D
            X509v3 Authority Key Identifier:
                keyid:70:45:A7:18:BB:EB:28:9F:18:D1:F9:30:FA:33:2D:63:32:D9:55:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4075121AF0CD11E5A4432E74C4F9AE02/cEWnGLvrKJ8Y0fkw-jMtYzLZVV4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:92:56:0c:45:da:d3:2d:09:5d:0a:9a:92:e0:6f:2f:f3:f3:
         83:b4:f3:bd:74:e5:86:66:e6:f9:fc:9a:8e:7d:12:88:29:30:
         5a:08:f8:b5:cd:41:5b:d7:51:a2:a6:23:44:d5:35:94:fd:a1:
         a7:58:16:a0:b6:dd:59:10:dd:d6:a0:2e:f1:3a:6a:26:52:32:
         76:e5:48:73:97:bb:07:7b:8b:eb:50:a8:9a:a8:1b:c8:75:b7:
         12:29:43:e8:38:36:1a:40:ac:22:95:1c:cb:40:e7:7a:89:34:
         5f:ba:67:7f:cb:58:b8:a9:ab:d4:ff:0d:30:ff:e1:32:81:4c:
         4c:0e:46:7f:b6:e8:48:9d:dd:aa:87:80:37:58:56:d1:eb:29:
         bc:8d:1b:e6:c4:44:3d:df:e3:4b:99:2f:bd:e1:06:ed:e9:d0:
         13:3a:dc:d9:e2:47:fc:cf:53:64:69:12:b2:a0:59:69:4a:ba:
         d3:83:16:40:c5:04:59:1a:a4:ee:f8:ef:a1:f0:1f:e5:09:7b:
         35:1d:fd:6e:19:bb:1e:9d:0c:9f:e7:8c:bc:df:8d:4a:0a:bb:
         87:a3:a9:2e:51:6e:b9:0f:7a:55:5e:72:02:f9:b9:d5:5e:73:
         8b:25:97:c5:da:f3:c3:91:e8:8c:27:d2:0e:78:af:09:85:a9:
         5b:22:94:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICINwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI5MzYxMTAvBgNVBAUTKDcwNDVBNzE4QkJFQjI4OUYxOEQxRjkzMEZBMzMyRDYz
MzJEOTU1NUUwHhcNMjUwMzEyMTU1NTEzWhcNMjUwMzE5MTU1NTEzWjAYMRYwFAYD
VQQDEw02N2QxYWU2MS02YTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsAdcd5quTIaYeKfOH9k3IvWmkWVnDzjHKiXKRu0PKQoNaHy89hJePzgYjwu1
rdmLXTm5hICzNtyvqoARJLgCJ7qmi2fWltO/Xu2kf4ndZTy3REuFM2Uz5FR9ep1C
CDakOAtbtz98+tojinEAraK5OH4k/B0QlEtkl5atUp74xQf3p0RUuSm7xgixu2jN
02jBPEJJq3MmTK2eYKZDFRtvkdalSeK7wPjp6y/MXOTAhPwTVil0LPBXoLwi5GYs
XkW5BH04lFeagIKKGdGet6E7iOOHaviPwqhDsbhRqU6agpMN4yh84V3hJlX83hRr
MviIRumtMYJL/xvV38Zd1sXViQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHzXcYqN
hEs7zO4XWMuVkTmXinddMB8GA1UdIwQYMBaAFHBFpxi76yifGNH5MPozLWMy2VVe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80MDc1MTIxQUYw
Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktKOFkwZmt3LWpNdFl6TFpW
VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2NFV25HTHZyS0o4WTBma3ctak10WXpMWlZWNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QjkzNi80MDc1MTIxQUYwQ0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9jRVduR0x2cktK
OFkwZmt3LWpNdFl6TFpWVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBJklYMRdrTLQldCpqS4G8v8/ODtPO9dOWGZub5/JqOfRKIKTBaCPi1
zUFb11GipiNE1TWU/aGnWBagtt1ZEN3WoC7xOmomUjJ25Uhzl7sHe4vrUKiaqBvI
dbcSKUPoODYaQKwilRzLQOd6iTRfumd/y1i4qavU/w0w/+EygUxMDkZ/tuhInd2q
h4A3WFbR6ym8jRvmxEQ93+NLmS+94Qbt6dATOtzZ4kf8z1NkaRKyoFlpSrrTgxZA
xQRZGqTu+O+h8B/lCXs1Hf1uGbsenQyf54y8341KCruHo6kuUW65D3pVXnIC+bnV
XnOLJZfF2vPDkeiMJ9IOeK8JhalbIpR7
-----END CERTIFICATE-----
Generated at Thu Mar 13 21:30:57 2025 by rpki-client