Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
File:                     7tgLGUJsDUqCvG8LULm7El4f04o.mft (raw, json)
Hash identifier:          e6Y6AIgsA2GyiyBWhPyBlUN2v7vRHjqsSluzn6LtpgQ=
Subject key identifier:   2D:68:6D:50:E6:E0:3F:87:67:61:EA:88:6F:60:9B:64:D0:D1:67:AF
Authority key identifier: EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A
Certificate issuer:       /CN=A918EDB2/serialNumber=EED80B19426C0D4A82BC6F0B50B9BB125E1FD38A
Certificate serial:       0488
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
Manifest number:          0488
Signing time:             Sun 16 Feb 2025 15:32:00 +0000
Manifest this update:     Sun 16 Feb 2025 15:31:59 +0000
Manifest next update:     Sun 23 Feb 2025 15:31:59 +0000
Files and hashes:         1: 7tgLGUJsDUqCvG8LULm7El4f04o.crl (hash: nMfP6fyWdlGcvSJqCwsXLPJXu4ehN/8xEVDMVzAdam0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1160 (0x488)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2
        Validity
            Not Before: Feb 16 15:31:59 2025 GMT
            Not After : Feb 23 15:31:59 2025 GMT
        Subject: CN=67b204f0-0f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8d:b8:07:90:72:d2:f0:e2:c9:ed:17:08:20:
                    ba:38:6d:43:ff:5a:98:c3:97:9f:d7:fe:ed:10:da:
                    e2:cb:fd:35:a2:de:c6:61:ae:f2:8a:53:91:fe:1e:
                    aa:8f:0e:17:ee:72:fd:36:27:0f:34:78:a7:ec:60:
                    12:ee:b5:ab:d7:bb:b8:cc:8a:f1:dd:53:66:dd:d7:
                    fa:49:7e:3b:85:e5:73:1b:a1:b7:73:5d:93:2f:03:
                    25:e1:95:6a:07:04:7c:8a:25:36:fe:a4:f4:15:84:
                    f0:cc:45:f7:2a:25:91:c8:61:33:5e:61:13:e1:a0:
                    0b:a6:40:ea:92:4c:53:3d:47:52:5c:b7:e2:50:e1:
                    c4:7b:cb:ce:f2:db:9b:4a:cf:e7:ad:e3:4d:b2:27:
                    9f:40:03:fc:ae:ef:83:2c:7f:28:88:56:45:fe:1d:
                    5f:6a:ba:ec:b3:23:ba:37:e9:83:ff:c3:ba:65:e1:
                    81:63:f1:41:43:9f:2b:a4:ba:f9:bc:09:79:56:e5:
                    a3:b1:9e:84:90:ee:e2:c8:78:c6:7f:b3:75:a0:c0:
                    6c:72:ad:7f:42:9e:5e:37:fd:64:bb:59:46:e4:bd:
                    e6:53:88:a2:3f:95:df:7e:d4:2c:ef:ca:4c:71:f1:
                    11:56:03:2a:a9:38:bf:68:de:2c:08:eb:6b:0e:ba:
                    e4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:68:6D:50:E6:E0:3F:87:67:61:EA:88:6F:60:9B:64:D0:D1:67:AF
            X509v3 Authority Key Identifier:
                keyid:EE:D8:0B:19:42:6C:0D:4A:82:BC:6F:0B:50:B9:BB:12:5E:1F:D3:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tgLGUJsDUqCvG8LULm7El4f04o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/547C858641DA11EC905E3252C4F9AE02/7tgLGUJsDUqCvG8LULm7El4f04o.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:39:e9:9e:01:47:9e:25:19:57:a0:55:7a:46:1f:a1:cf:38:
         4d:13:82:32:a9:df:6a:89:b4:45:53:0d:07:d4:57:72:77:3c:
         69:6c:d7:01:77:f4:c7:38:4f:03:4e:00:ad:7e:03:18:9c:76:
         03:54:f1:eb:20:e5:8b:14:2c:ff:42:c2:99:76:ab:4a:cd:13:
         d1:6a:3e:15:4c:74:9a:7b:32:b0:61:45:ba:14:1e:b1:bd:ff:
         af:ae:93:a7:18:6e:5a:e2:ae:c3:bc:ff:cb:f4:9a:76:ad:09:
         c4:6d:2a:0d:1e:a1:47:f3:fa:4b:f6:ac:aa:75:68:71:fc:7f:
         ee:c9:7a:ad:4f:28:0e:a9:7e:c0:59:2e:71:2e:86:1a:cd:12:
         e3:55:8e:4f:b6:99:6a:16:06:7b:46:d1:47:4f:e9:75:1c:17:
         cb:2c:c7:56:07:a1:08:fc:52:74:0e:cd:45:3e:35:d0:fd:f2:
         2e:d2:37:ec:ef:b1:c6:91:5c:1e:ea:a7:fd:85:b9:97:f0:a8:
         14:dc:c9:fc:6b:4d:70:a2:4b:92:a2:3d:a1:35:0c:14:51:40:
         c7:d7:18:00:37:23:ee:18:8e:00:dc:45:17:02:69:6d:2a:88:
         7c:fe:52:7f:37:c0:fb:f5:75:1b:0b:b1:16:b9:d8:30:7e:6e:
         98:5f:be:6c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVEQjIxMTAvBgNVBAUTKEVFRDgwQjE5NDI2QzBENEE4MkJDNkYwQjUwQjlCQjEy
NUUxRkQzOEEwHhcNMjUwMjE2MTUzMTU5WhcNMjUwMjIzMTUzMTU5WjAYMRYwFAYD
VQQDEw02N2IyMDRmMC0wZjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Y24B5By0vDiye0XCCC6OG1D/1qYw5ef1/7tENriy/01ot7GYa7yilOR/h6q
jw4X7nL9NicPNHin7GAS7rWr17u4zIrx3VNm3df6SX47heVzG6G3c12TLwMl4ZVq
BwR8iiU2/qT0FYTwzEX3KiWRyGEzXmET4aALpkDqkkxTPUdSXLfiUOHEe8vO8tub
Ss/nreNNsiefQAP8ru+DLH8oiFZF/h1farrssyO6N+mD/8O6ZeGBY/FBQ58rpLr5
vAl5VuWjsZ6EkO7iyHjGf7N1oMBscq1/Qp5eN/1ku1lG5L3mU4iiP5XfftQs78pM
cfERVgMqqTi/aN4sCOtrDrrkRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1obVDm
4D+HZ2HqiG9gm2TQ0WevMB8GA1UdIwQYMBaAFO7YCxlCbA1KgrxvC1C5uxJeH9OK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi81NDdDODU4NjQx
REExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RVcUN2RzhMVUxtN0VsNGYw
NG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzd0Z0xHVUpzRFVxQ3ZHOExVTG03RWw0ZjA0by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RURCMi81NDdDODU4NjQxREExMUVDOTA1RTMyNTJDNEY5QUUwMi83dGdMR1VKc0RV
cUN2RzhMVUxtN0VsNGYwNG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAmOemeAUeeJRlXoFV6Rh+hzzhNE4Iyqd9qibRFUw0H1FdydzxpbNcB
d/THOE8DTgCtfgMYnHYDVPHrIOWLFCz/QsKZdqtKzRPRaj4VTHSaezKwYUW6FB6x
vf+vrpOnGG5a4q7DvP/L9Jp2rQnEbSoNHqFH8/pL9qyqdWhx/H/uyXqtTygOqX7A
WS5xLoYazRLjVY5PtplqFgZ7RtFHT+l1HBfLLMdWB6EI/FJ0Ds1FPjXQ/fIu0jfs
77HGkVwe6qf9hbmX8KgU3Mn8a01wokuSoj2hNQwUUUDH1xgANyPuGI4A3EUXAmlt
Koh8/lJ/N8D79XUbC7EWudgwfm6YX75s
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:01:51 2025 by rpki-client