Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          V2JMHWwj+viFNtS0av9tcERxUikgSL2G1GFx5z9xj34=
Subject key identifier:   18:2F:9F:18:B0:04:94:CF:91:89:F2:79:FB:32:BB:A1:1D:93:04:7B
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0484
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          03CC
Signing time:             Sat 31 May 2025 01:29:23 +0000
Manifest this update:     Sat 31 May 2025 01:29:23 +0000
Manifest next update:     Sat 07 Jun 2025 01:29:23 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: Im05Ym1bFDWKnszCOh3kCT9Exny5d+4PvdGd2BgFF0A=)
                          2: B351D67E295D11F0B6373D85C4F9AE02.roa (hash: zaPH2MAJeJ91/7IAof0KACedklF43f1hbHSDn20lqZ4=)
                          3: 235C33AA841511EEB8881E26C4F9AE02.roa (hash: +YRAKRYqk613xfLgB0zdZc+SXbgEgwFsbZ4MAXHqfD4=)
                          4: FC458FFABD2F11EFACAEDF48C4F9AE02.roa (hash: JhXAK3rvu+eA5A55zrWLUy9P2VWJ9TdInDYIPpvwJmg=)
                          5: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: /TmCm+1t1YPk+UGCkNyTLyr0vk3D0SFXpKZxvuA+ssc=)
                          6: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: j9uwlF1XU1bhm01I4UfNei0qn7GHjRRQXfewbREQbL0=)
                          7: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: aHmcIpJIE1GcUyI4Yny/qSd6Or3byAxj4bJ8cE5T4kk=)
                          8: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: tdnv3yegEbxd1X05RwDaloSoRTHWIFMLf521OQY7jzA=)
                          9: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: aqom3HQAn6x60ccWSgWXEn4twflM44rVgDlrpW0nn+w=)
                          10: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: u4HP0rAc9OJ4yrGzZJUJfmamAqusvJcVWc3Rh5qqJHA=)
                          11: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: CYb1AUfDdwBmZIiw43Uzz4pNurCcroPrczZ8tZZSS/s=)
                          12: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: VWNAPC6UIfMVQch4vSc+1QxFpjuFdCFpkSLGoYnJWLQ=)
                          13: DD12F48AEC2611EF94F85F09C4F9AE02.roa (hash: STez8mDGGIo+dLC131vZHCpo98lp6VAK6pump85Nkmo=)
                          14: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: jy6vuCkSSKn5jRqSlZSZkzcBPcsjCkh7JsvXNhpfjoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 01:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156 (0x484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: May 31 01:29:23 2025 GMT
            Not After : Jun  7 01:29:23 2025 GMT
        Subject: CN=683a5b73-8653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:c5:83:1a:ec:a5:93:49:3e:19:2c:2e:33:
                    ef:8d:0a:5b:e4:d3:c2:4c:09:1b:f6:68:5c:34:30:
                    48:b8:81:bb:bd:fa:cb:1a:1d:da:5d:aa:03:54:a0:
                    98:17:c4:37:06:b8:c4:84:fe:78:2d:3c:08:e9:fb:
                    52:47:dd:58:1a:0a:1c:bc:58:32:bb:ff:6d:e8:83:
                    87:2a:90:13:62:56:c4:7e:54:aa:91:bd:db:1b:0c:
                    da:97:05:b7:8f:68:6d:f0:65:3c:9a:32:05:d7:26:
                    5e:8f:6a:ed:44:07:cb:f2:d6:05:a4:5b:75:48:7e:
                    74:da:49:d7:24:70:1e:82:87:51:3e:1e:5e:08:a3:
                    dc:c7:2c:12:4d:43:af:86:f5:db:18:b6:f3:7a:a4:
                    1b:22:43:a0:90:17:4c:ca:9b:8f:93:38:f7:59:b1:
                    4f:a3:0c:b8:9b:00:13:56:07:55:c8:fc:6e:b7:5a:
                    05:31:4e:fb:46:ad:79:a3:76:b2:02:43:d6:7c:6c:
                    d9:9d:d6:d1:cf:93:d3:5f:8a:f0:c5:5e:ef:c5:d3:
                    1a:7d:f2:6c:ca:22:4b:ae:8c:cc:c0:d9:59:d1:32:
                    24:c7:f5:2d:82:3c:3e:72:b1:ab:16:e3:ef:11:85:
                    95:13:25:a7:97:42:67:d3:d2:d6:e5:1f:f0:fc:68:
                    62:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2F:9F:18:B0:04:94:CF:91:89:F2:79:FB:32:BB:A1:1D:93:04:7B
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e3:df:8d:b6:20:c3:66:03:c1:09:52:25:3d:66:95:04:de:
         7d:88:8a:5f:2f:56:33:88:64:a0:71:60:29:31:54:6a:f9:e1:
         65:60:39:08:17:3e:97:35:48:5a:10:6c:33:83:83:2e:68:b7:
         88:8e:8f:fe:d4:c0:48:bb:4f:2f:55:aa:e5:2f:9d:4a:0b:ce:
         0c:52:e0:8b:b3:f0:d6:1e:ff:c0:4f:5d:75:32:63:1a:f5:08:
         d9:f7:ef:e3:78:46:ce:fe:f7:71:28:9c:f4:ae:df:c2:c5:6b:
         3f:55:e4:14:1d:7f:c1:58:e2:b6:3e:39:5d:e0:00:77:a1:cb:
         ac:4c:62:6d:d3:a0:0b:75:1c:ab:05:0c:33:62:8a:b3:61:fb:
         83:4e:26:2a:6b:d3:b5:d8:67:a4:43:71:81:23:3f:e1:c0:8f:
         56:d8:17:de:1c:cd:75:39:43:eb:63:3e:56:66:55:7d:36:43:
         5c:78:00:a0:a2:bd:ad:e2:df:a4:f5:c3:76:9d:28:15:d0:5e:
         59:75:78:2e:f3:b5:c6:dd:ed:ab:ab:dd:12:46:1e:2c:65:94:
         ab:b4:a1:2e:ef:7c:4e:ca:e2:39:f4:9a:9c:c8:0b:03:fa:58:
         3e:87:13:94:b9:55:eb:0a:84:b3:af:dc:81:8a:ac:ba:51:86:
         b6:94:e9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:30:37 2025 by rpki-client