Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
File:                     Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft (raw, json)
Hash identifier:          BskDEy9e+DEYdaUKWsJI/9ToUBRhePJ7qYzqH9OUiS4=
Subject key identifier:   6A:EC:E0:AD:E7:80:78:77:07:37:A7:30:84:ED:E9:8D:30:DE:60:35
Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
Certificate issuer:       /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Certificate serial:       0FAE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
Manifest number:          0FA0
Signing time:             Fri 30 May 2025 17:42:48 +0000
Manifest this update:     Fri 30 May 2025 17:42:47 +0000
Manifest next update:     Fri 06 Jun 2025 17:42:47 +0000
Files and hashes:         1: Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl (hash: Q2d4psCDBm8Ybf5cBdmpXr8idsqn23LCh9NK3PmZj1E=)
                          2: 27A298A00C6C11EC82638A40C4F9AE02.roa (hash: 2kQLQw6kE7NSPMlRLkoH5WBQYX+DAijxoh/54ahkGGs=)
                          3: 1313114A5B3D11E996E4A744C4F9AE02.roa (hash: oIrl9BWKoF5yDRsF0RcL0nlEBDtMIcn28rtSOP6iY7Q=)
                          4: 373ADDFC1CC411EF90865B7DC4F9AE02.roa (hash: NRcQiGVBqenDcfR+9zwB2e+0xfcMr/ZJ4M+D8EcQ3UU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 17:42:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4014 (0xfae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
        Validity
            Not Before: May 30 17:42:47 2025 GMT
            Not After : Jun  6 17:42:47 2025 GMT
        Subject: CN=6839ee17-e1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a3:78:9d:d3:a0:ef:b2:ba:b7:85:9b:78:2d:
                    b7:9d:bd:d3:e4:d6:b7:4d:e2:c0:d1:76:1c:18:c4:
                    23:ec:da:2a:55:c4:94:94:24:1f:17:e2:51:6a:f5:
                    14:8f:37:24:b0:0a:35:75:24:77:9f:55:6b:ad:f5:
                    8a:66:33:79:88:d6:6b:c6:e6:15:c7:d8:52:5a:ca:
                    7e:31:3a:00:08:e2:24:c2:7a:1a:4e:6d:9f:5e:c5:
                    f7:89:1a:d5:a5:98:3e:f7:c5:87:6c:5a:76:50:0c:
                    39:f6:87:09:fd:76:70:22:7f:8b:83:8c:16:92:ad:
                    64:9b:9a:62:fc:f8:eb:a0:4e:db:7a:23:60:c6:14:
                    fc:bb:27:a3:2e:76:e2:86:51:48:93:84:a0:0b:a8:
                    21:96:0a:73:9f:d5:70:03:56:c5:8b:aa:64:48:e1:
                    ce:b1:c4:7c:c4:79:85:9a:d6:72:b4:8d:6d:1f:e0:
                    ac:8b:03:d9:25:37:ae:0a:fc:3c:fb:ca:3f:53:f9:
                    6f:4e:92:a3:56:9a:80:3f:c1:6b:f4:a3:31:d8:90:
                    f7:da:f2:93:05:6f:0d:2c:0c:2a:93:99:28:d8:de:
                    b0:e6:f1:21:1b:e0:f7:db:c0:fa:7a:5e:9a:1b:c6:
                    5c:de:f5:2f:fe:8d:af:83:51:56:e0:86:19:6e:b6:
                    07:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EC:E0:AD:E7:80:78:77:07:37:A7:30:84:ED:E9:8D:30:DE:60:35
            X509v3 Authority Key Identifier:
                keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:32:39:5c:4c:92:ce:0d:76:72:f2:d7:9e:9a:2b:59:40:ff:
         b6:53:b3:20:87:17:ba:cc:85:3b:98:69:ef:2f:fd:c4:14:ad:
         72:15:63:93:93:34:ff:2a:4a:39:73:c7:49:63:a7:3e:64:3c:
         4e:c1:27:38:3b:ef:27:ae:71:2e:23:15:e9:2b:ba:9b:93:2f:
         83:20:1f:b8:c3:c1:bf:4c:61:8f:a1:3b:34:62:be:88:80:ee:
         9f:f3:3f:85:6a:1f:06:7b:28:00:d1:60:bb:3f:cf:aa:f0:1d:
         3d:75:40:4e:1e:e1:c5:b6:f0:e3:15:b1:bf:30:95:d4:2c:77:
         0e:57:cc:92:8f:9c:74:22:11:2b:03:ed:50:4f:9b:c4:22:3d:
         a4:20:34:21:80:3f:e1:12:d4:14:3e:0a:44:16:08:9a:23:d5:
         b5:50:c5:16:40:d9:69:7c:99:ba:23:7b:e1:9b:c6:b5:96:1f:
         9d:25:c4:16:a1:bb:e8:24:cb:3d:02:32:00:10:fa:00:49:a0:
         29:ba:5d:d5:40:aa:4e:1a:ee:3c:f9:c9:68:1c:e1:f2:26:5c:
         c1:36:1e:1a:df:5e:9a:4b:35:e0:21:73:54:d4:01:4d:5e:d1:
         64:5b:61:48:c9:a3:d6:f8:01:47:62:58:40:ea:35:8a:8d:cd:
         f2:b8:4c:34
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICD64wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRFNTExMTAvBgNVBAUTKDY2RkREQjQzRTU0OTQyRTM0OTJGMTA2NTBFNTMyMzky
NkM0NUM0ODQwHhcNMjUwNTMwMTc0MjQ3WhcNMjUwNjA2MTc0MjQ3WjAYMRYwFAYD
VQQDEw02ODM5ZWUxNy1lMWNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3KN4ndOg77K6t4WbeC23nb3T5Na3TeLA0XYcGMQj7NoqVcSUlCQfF+JRavUU
jzcksAo1dSR3n1VrrfWKZjN5iNZrxuYVx9hSWsp+MToACOIkwnoaTm2fXsX3iRrV
pZg+98WHbFp2UAw59ocJ/XZwIn+Lg4wWkq1km5pi/PjroE7beiNgxhT8uyejLnbi
hlFIk4SgC6ghlgpzn9VwA1bFi6pkSOHOscR8xHmFmtZytI1tH+CsiwPZJTeuCvw8
+8o/U/lvTpKjVpqAP8Fr9KMx2JD32vKTBW8NLAwqk5ko2N6w5vEhG+D328D6el6a
G8Zc3vUv/o2vg1FW4IYZbrYHIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGrs4K3n
gHh3BzenMITt6Y0w3mA1MB8GA1UdIwQYMBaAFGb920PlSULjSS8QZQ5TI5JsRcSE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEU1MS84OUY4NkYwQTVC
M0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1TkpMeEJsRGxNamtteEZ4
SVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1p2M2JRLVZKUXVOSkx4QmxEbE1qa214RnhJUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEU1MS84OUY4NkYwQTVCM0IxMUU5ODY5QUE2NDFDNEY5QUUwMi9adjNiUS1WSlF1
TkpMeEJsRGxNamtteEZ4SVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBVMjlcTJLODXZy8teemitZQP+2U7Mghxe6zIU7mGnvL/3EFK1yFWOT
kzT/Kko5c8dJY6c+ZDxOwSc4O+8nrnEuIxXpK7qbky+DIB+4w8G/TGGPoTs0Yr6I
gO6f8z+Fah8GeygA0WC7P8+q8B09dUBOHuHFtvDjFbG/MJXULHcOV8ySj5x0IhEr
A+1QT5vEIj2kIDQhgD/hEtQUPgpEFgiaI9W1UMUWQNlpfJm6I3vhm8a1lh+dJcQW
obvoJMs9AjIAEPoASaApul3VQKpOGu48+cloHOHyJlzBNh4a316aSzXgIXNU1AFN
XtFkW2FIyaPW+AFHYlhA6jWKjc3yuEw0
-----END CERTIFICATE-----
Generated at Sat May 31 17:53:07 2025 by rpki-client