Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
File:                     7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft (raw, json)
Hash identifier:          Rm0CV1nXNvE/c016NT0vPouR7mqzgT4DYJ0YWFpMCvA=
Subject key identifier:   64:FE:AD:D3:8E:46:62:C4:56:92:58:D6:D4:C6:D6:1E:74:DC:D3:9C
Authority key identifier: EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D
Certificate issuer:       /CN=A913DC07/serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D
Certificate serial:       04AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
Manifest number:          04A0
Signing time:             Tue 06 May 2025 23:51:11 +0000
Manifest this update:     Tue 06 May 2025 23:51:11 +0000
Manifest next update:     Tue 13 May 2025 23:51:11 +0000
Files and hashes:         1: 7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl (hash: loAfnJC7PA/eqG5kUwMR9iieFDDq5Uv7uHl/V5+l7lo=)
                          2: 1E6E1BE8DB0711EFBD49DC56C4F9AE02.roa (hash: gvMSrYkjgEBiNDDMq1X7x98IStl9qcCUAlgSn78iVmM=)
                          3: 18612BE6DB0711EF9B67D356C4F9AE02.roa (hash: K6xw9z5FHd3cBcaSkpj6+6W0ng+CbMowA+OXIfonnos=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl
                          rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 13 May 2025 23:16:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1194 (0x4aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DC07, serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D
        Validity
            Not Before: May  6 23:51:11 2025 GMT
            Not After : May 13 23:51:11 2025 GMT
        Subject: CN=681aa06f-3431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:7a:8d:63:b5:c4:23:f9:14:bf:10:12:ff:
                    80:0f:2b:14:85:2c:49:d4:70:54:a5:db:c1:6f:53:
                    b0:d7:a3:c3:3d:77:e5:53:3d:39:b2:fc:55:b6:4b:
                    a7:a5:af:06:3e:be:17:70:1e:bc:a1:67:8e:88:52:
                    ce:a6:56:fe:88:48:80:47:1b:aa:bb:55:50:56:59:
                    54:b7:06:10:6e:98:48:82:45:d2:9d:5d:be:24:8f:
                    b5:69:7a:b0:e6:b1:eb:ae:6c:1a:ec:08:bc:67:90:
                    d4:9b:69:f6:7e:5a:d5:45:3e:1d:ae:5c:18:22:26:
                    78:27:43:4d:de:9a:2f:3a:90:ae:3b:66:bd:a0:11:
                    b6:f3:35:02:6d:91:45:d2:64:9b:c2:0d:02:d7:d9:
                    68:8f:c8:1e:e4:c3:b1:fb:68:29:7b:cc:5e:ad:76:
                    f1:3c:d1:1e:cc:4a:98:4a:a3:52:80:ff:8c:cb:b1:
                    29:a0:91:25:51:5c:17:bb:f8:d6:31:9a:3e:45:55:
                    81:70:73:ca:e7:cb:eb:78:3e:e0:fa:cd:03:bb:b6:
                    16:f7:ce:da:9b:dc:1f:41:79:af:47:9e:17:6f:71:
                    77:db:1a:c4:42:ce:33:05:48:83:f1:cd:90:73:93:
                    5c:44:92:98:cd:23:d2:17:73:62:7d:9d:fd:9d:59:
                    9b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FE:AD:D3:8E:46:62:C4:56:92:58:D6:D4:C6:D6:1E:74:DC:D3:9C
            X509v3 Authority Key Identifier:
                keyid:EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:f7:9f:f3:5d:ef:e3:b9:53:b5:5e:38:16:8c:51:2b:3c:c5:
         dc:2f:e7:04:ce:c3:1a:0d:7d:fb:63:4d:25:32:0c:8f:a5:4d:
         fb:e5:c5:44:fa:63:91:ba:7c:0c:b2:ef:6a:e5:28:ff:80:8a:
         2d:09:66:9a:db:28:d2:96:ba:b5:af:e2:71:68:b8:95:c0:05:
         47:82:11:63:2f:a8:6b:78:95:e0:79:dc:f2:22:52:57:b8:e3:
         e6:02:3a:41:99:99:d2:08:74:5d:7e:37:95:92:4e:ed:1f:33:
         f9:27:48:eb:51:63:3f:7a:3d:f1:f6:63:e5:e7:7d:4f:88:dc:
         fd:fb:ff:bd:55:fe:86:63:22:dd:36:7f:ff:3e:85:5a:63:07:
         94:02:c9:ce:59:48:3c:a2:15:02:78:d6:72:17:c6:b7:21:6b:
         a5:e5:6b:76:dc:69:60:ba:84:2b:25:16:04:42:32:a5:db:08:
         91:b2:94:3f:33:57:52:22:5c:1e:65:1a:9b:52:8d:97:ee:1e:
         17:09:a8:39:61:a2:dd:3e:5c:a6:fc:76:04:ad:a9:cc:6c:91:
         66:32:d2:1a:24:15:0d:c4:99:4f:cc:84:97:e9:63:0a:3d:9b:
         68:a6:fe:8b:27:d0:50:26:86:63:e4:ff:a5:5f:59:7e:dc:c6:
         c6:0b:a8:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0RDMDcxMTAvBgNVBAUTKEVDQUEzRDE1RkE4QjE0REFBQUZFMjA1OUE0MDE5QjIw
RjUyN0Y4M0QwHhcNMjUwNTA2MjM1MTExWhcNMjUwNTEzMjM1MTExWjAYMRYwFAYD
VQQDEw02ODFhYTA2Zi0zNDMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxhx6jWO1xCP5FL8QEv+ADysUhSxJ1HBUpdvBb1Ow16PDPXflUz05svxVtkun
pa8GPr4XcB68oWeOiFLOplb+iEiARxuqu1VQVllUtwYQbphIgkXSnV2+JI+1aXqw
5rHrrmwa7Ai8Z5DUm2n2flrVRT4drlwYIiZ4J0NN3povOpCuO2a9oBG28zUCbZFF
0mSbwg0C19loj8ge5MOx+2gpe8xerXbxPNEezEqYSqNSgP+My7EpoJElUVwXu/jW
MZo+RVWBcHPK58vreD7g+s0Du7YW987am9wfQXmvR54Xb3F32xrEQs4zBUiD8c2Q
c5NcRJKYzSPSF3NifZ39nVmb7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGT+rdOO
RmLEVpJY1tTG1h503NOcMB8GA1UdIwQYMBaAFOyqPRX6ixTaqv4gWaQBmyD1J/g9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzREMwNy80RUI5RURENjMz
NjIxMUVDQTdBQzUxMzFDNEY5QUUwMi83S285RmZxTEZOcXFfaUJacEFHYklQVW4t
RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzdLbzlGZnFMRk5xcV9pQlpwQUdiSVBVbi1EMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
REMwNy80RUI5RURENjMzNjIxMUVDQTdBQzUxMzFDNEY5QUUwMi83S285RmZxTEZO
cXFfaUJacEFHYklQVW4tRDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC/95/zXe/juVO1XjgWjFErPMXcL+cEzsMaDX37Y00lMgyPpU375cVE
+mORunwMsu9q5Sj/gIotCWaa2yjSlrq1r+JxaLiVwAVHghFjL6hreJXgedzyIlJX
uOPmAjpBmZnSCHRdfjeVkk7tHzP5J0jrUWM/ej3x9mPl531PiNz9+/+9Vf6GYyLd
Nn//PoVaYweUAsnOWUg8ohUCeNZyF8a3IWul5Wt23GlguoQrJRYEQjKl2wiRspQ/
M1dSIlweZRqbUo2X7h4XCag5YaLdPlym/HYEranMbJFmMtIaJBUNxJlPzISX6WMK
PZtopv6LJ9BQJoZj5P+lX1l+3MbGC6jO
-----END CERTIFICATE-----
Generated at Wed May 7 21:02:38 2025 by rpki-client