Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
File:                     T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft (raw, json)
Hash identifier:          NBYlrRQQ163N92nPNrPOeZape3p0tmpeiHhkFIlLHIA=
Subject key identifier:   09:3B:D3:4F:67:9E:7B:63:9C:D8:7D:38:A0:9D:AC:2E:FD:7A:E4:A1
Authority key identifier: 4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C
Certificate issuer:       /CN=A9190818/serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
Manifest number:          75
Signing time:             Tue 03 Jun 2025 06:36:21 +0000
Manifest this update:     Tue 03 Jun 2025 06:36:21 +0000
Manifest next update:     Tue 10 Jun 2025 06:36:21 +0000
Files and hashes:         1: T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl (hash: GYzmLnnnsjBujB0xovdSWqxlzzrVCRk0JRRbwY9IM9Y=)
                          2: DE3EC424979411EF875EE369C4F9AE02.roa (hash: 5QE8zDybdgUA94Tpp6+guNsFhK7KXTxJ0yxg/2zsqZo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl
                          rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 06:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190818, serialNumber=4F45FA69D9E5F55084DDC922895276A640239C1C
        Validity
            Not Before: Jun  3 06:36:21 2025 GMT
            Not After : Jun 10 06:36:21 2025 GMT
        Subject: CN=683e97e5-943a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:0e:51:ba:f3:58:1d:0d:ee:09:b6:00:d5:
                    c4:75:e6:3e:3c:30:9f:bc:69:35:c1:0b:cf:1a:27:
                    e4:5e:97:f3:0c:a9:6f:8f:50:83:a9:7f:8f:c7:43:
                    2b:d0:2c:15:1a:17:c5:62:ed:7f:cd:41:14:e5:7e:
                    91:e8:f3:df:a4:1c:de:67:56:b7:af:5d:32:0b:04:
                    ca:ad:3d:27:0f:e0:8a:82:32:84:a7:cb:91:07:76:
                    60:19:c5:22:f2:19:c4:dc:3f:84:6c:49:bb:4f:06:
                    a9:f9:65:5d:3e:f4:c5:89:1b:b0:07:49:05:bb:9b:
                    27:66:31:c1:87:ef:0e:45:d8:d8:6f:62:4d:ba:95:
                    2a:b8:e2:48:f8:68:0f:6a:2f:1d:f5:2d:25:e6:34:
                    b5:23:bc:42:e6:5c:39:97:f7:07:04:28:11:59:26:
                    cc:f4:f3:be:a9:15:5e:00:b9:ad:6e:de:14:7a:4e:
                    e2:9c:68:01:71:8c:06:f7:ac:8a:96:b6:39:30:76:
                    1b:e4:80:0f:20:81:dd:0e:2f:55:12:18:f6:5d:8c:
                    cb:54:5a:40:34:50:36:40:57:6e:f0:bd:ec:50:a7:
                    6a:a6:4a:71:a0:8d:90:de:3d:2c:52:72:a8:13:7d:
                    36:84:b7:46:2c:86:18:6f:af:fe:a8:e8:b6:73:6e:
                    bb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3B:D3:4F:67:9E:7B:63:9C:D8:7D:38:A0:9D:AC:2E:FD:7A:E4:A1
            X509v3 Authority Key Identifier:
                keyid:4F:45:FA:69:D9:E5:F5:50:84:DD:C9:22:89:52:76:A6:40:23:9C:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T0X6adnl9VCE3ckiiVJ2pkAjnBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/753C3018909D11EF9717F650C4F9AE02/T0X6adnl9VCE3ckiiVJ2pkAjnBw.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:09:72:d7:43:4b:b0:84:24:f3:d0:70:c9:ce:2f:f6:1c:35:
         ea:56:38:15:e0:c9:d3:3e:3c:81:eb:fc:98:67:a6:f1:33:2b:
         f6:43:7d:5f:4b:44:1c:6a:90:0e:7f:0e:67:6c:2b:85:88:49:
         c8:e5:b7:33:a4:c2:18:c2:11:4c:55:6e:76:43:f2:36:91:d2:
         e0:45:22:5c:18:cd:1f:e8:1c:5f:8d:75:ac:52:2f:d1:d1:38:
         b3:82:28:02:52:c5:87:f3:4f:97:13:fe:21:04:67:2e:08:ef:
         3c:49:94:8b:f0:ee:af:c0:18:df:c3:86:2c:e4:7a:e9:71:17:
         a0:e6:25:9c:32:dc:32:83:ca:7e:71:0c:a9:0c:31:7b:b6:3e:
         78:e8:79:88:00:13:f1:81:e7:c7:10:10:4d:49:ac:ec:9c:8d:
         66:54:7d:e9:73:a4:d5:b3:94:f5:6c:83:4c:e8:c8:37:7c:48:
         e4:7a:40:63:92:89:7a:aa:ff:0f:63:49:c7:f4:39:cb:ab:b0:
         b4:e4:ae:06:de:89:c5:5f:f9:58:93:dd:ff:72:83:98:5e:87:
         6e:68:53:5c:77:fa:87:a3:fe:13:e7:9c:55:b9:61:09:74:04:
         b9:79:a4:e5:13:c3:bb:ce:b3:34:9f:16:5f:e2:36:d2:e6:ba:
         b9:50:87:7f
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MDgxODExMC8GA1UEBRMoNEY0NUZBNjlEOUU1RjU1MDg0RERDOTIyODk1Mjc2QTY0
MDIzOUMxQzAeFw0yNTA2MDMwNjM2MjFaFw0yNTA2MTAwNjM2MjFaMBgxFjAUBgNV
BAMTDTY4M2U5N2U1LTk0M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDQxA5RuvNYHQ3uCbYA1cR15j48MJ+8aTXBC88aJ+Rel/MMqW+PUIOpf4/HQyvQ
LBUaF8Vi7X/NQRTlfpHo89+kHN5nVrevXTILBMqtPScP4IqCMoSny5EHdmAZxSLy
GcTcP4RsSbtPBqn5ZV0+9MWJG7AHSQW7mydmMcGH7w5F2NhvYk26lSq44kj4aA9q
Lx31LSXmNLUjvELmXDmX9wcEKBFZJsz0876pFV4Aua1u3hR6TuKcaAFxjAb3rIqW
tjkwdhvkgA8ggd0OL1USGPZdjMtUWkA0UDZAV27wvexQp2qmSnGgjZDePSxScqgT
fTaEt0Yshhhvr/6o6LZzbrvvAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCTvTT2ee
e2Oc2H04oJ2sLv165KEwHwYDVR0jBBgwFoAUT0X6adnl9VCE3ckiiVJ2pkAjnBww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkwODE4Lzc1M0MzMDE4OTA5
RDExRUY5NzE3RjY1MEM0RjlBRTAyL1QwWDZhZG5sOVZDRTNja2lpVkoycGtBam5C
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvVDBYNmFkbmw5VkNFM2NraWlWSjJwa0FqbkJ3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkw
ODE4Lzc1M0MzMDE4OTA5RDExRUY5NzE3RjY1MEM0RjlBRTAyL1QwWDZhZG5sOVZD
RTNja2lpVkoycGtBam5Cdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKgJctdDS7CEJPPQcMnOL/YcNepWOBXgydM+PIHr/JhnpvEzK/ZDfV9L
RBxqkA5/DmdsK4WIScjltzOkwhjCEUxVbnZD8jaR0uBFIlwYzR/oHF+NdaxSL9HR
OLOCKAJSxYfzT5cT/iEEZy4I7zxJlIvw7q/AGN/DhizkeulxF6DmJZwy3DKDyn5x
DKkMMXu2PnjoeYgAE/GB58cQEE1JrOycjWZUfelzpNWzlPVsg0zoyDd8SOR6QGOS
iXqq/w9jScf0OcursLTkrgbeicVf+ViT3f9yg5heh25oU1x3+oej/hPnnFW5YQl0
BLl5pOUTw7vOszSfFl/iNtLmurlQh38=
-----END CERTIFICATE-----
Generated at Wed Jun 4 00:09:11 2025 by rpki-client