Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
File:                     _7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft (raw, json)
Hash identifier:          8u48/zVstlKDCbb/RrMwLnugIDSeSQMbJm58T1o91FE=
Subject key identifier:   B7:53:FB:6A:DA:CF:F6:9D:6F:F6:8D:E2:00:C4:24:AA:67:57:B1:4B
Authority key identifier: FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64
Certificate issuer:       /CN=A913E7CA/serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64
Certificate serial:       062D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
Manifest number:          0624
Signing time:             Wed 14 May 2025 22:49:25 +0000
Manifest this update:     Wed 14 May 2025 22:49:25 +0000
Manifest next update:     Wed 21 May 2025 22:49:25 +0000
Files and hashes:         1: _7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl (hash: aq6i96dO2hqPe3kHL0nZTiiZnWw215zPVwaKy04VxjQ=)
                          2: CE7287309A9811EBAC99AD22C4F9AE02.roa (hash: VNVV+MtZbRQoHTpqnT0qQ5QpoY/GhvN/UD4lPsIWN/0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl
                          rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 22:49:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581 (0x62d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E7CA, serialNumber=FFB503F202320CD86973AFE61A16FBB5C6F28D64
        Validity
            Not Before: May 14 22:49:25 2025 GMT
            Not After : May 21 22:49:25 2025 GMT
        Subject: CN=68251df5-5b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e9:d1:58:63:09:46:c9:62:1d:5c:2e:be:35:
                    1b:72:8b:ec:97:23:58:0a:4e:e6:5b:d8:81:f2:25:
                    3f:7e:a5:c9:12:3e:94:24:3a:c1:88:a9:d0:f1:76:
                    8c:5f:eb:12:fa:6a:d9:87:83:d0:93:49:8a:8f:cd:
                    fc:d0:07:ed:6c:d8:b5:fb:c2:e2:d5:10:00:3f:76:
                    8b:61:f5:57:eb:9b:a5:de:00:7c:2d:7f:44:2e:2e:
                    d2:e7:91:b9:69:54:d4:6c:10:c6:12:8e:59:42:fa:
                    d3:26:f6:69:28:37:ac:f9:71:71:94:4a:86:47:8a:
                    2a:2d:54:c8:01:4d:44:6f:a6:a2:44:6f:6d:71:89:
                    e3:79:05:55:d8:37:5b:14:52:9d:9e:35:71:7f:65:
                    59:36:1b:8b:76:66:b5:e1:bc:58:41:06:d3:fd:61:
                    c1:a3:89:e2:57:21:4d:ac:07:56:34:a4:f1:6c:4f:
                    3c:10:16:58:44:d3:fc:c5:62:46:08:c3:73:08:e5:
                    93:18:93:8b:37:2e:c4:07:5c:6b:18:bc:f9:c4:ff:
                    a9:b8:e5:c9:f3:fc:4e:80:32:49:3a:65:4e:b1:df:
                    db:57:a0:3e:ee:7e:d7:c6:0b:bf:7c:37:f6:fc:cf:
                    a7:87:1f:ad:82:69:5a:74:26:c6:d0:45:1f:27:37:
                    84:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:53:FB:6A:DA:CF:F6:9D:6F:F6:8D:E2:00:C4:24:AA:67:57:B1:4B
            X509v3 Authority Key Identifier:
                keyid:FF:B5:03:F2:02:32:0C:D8:69:73:AF:E6:1A:16:FB:B5:C6:F2:8D:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E7CA/003DE0609A9011EB89797049C4F9AE02/_7UD8gIyDNhpc6_mGhb7tcbyjWQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:2e:c6:ec:2e:6c:8f:9b:dc:03:06:49:b4:38:99:01:49:
         8e:ac:09:65:2c:ce:4d:6c:62:b2:ef:c4:31:b7:cd:21:0e:bf:
         74:ed:05:e4:8d:22:46:ca:e6:d3:25:b7:e2:5b:1d:74:f5:99:
         08:05:03:fb:5b:4a:91:e6:f4:ef:c4:2e:4d:35:89:50:d0:a6:
         41:3d:05:7f:19:b4:83:23:39:d3:fc:04:f5:fb:3f:f5:00:a7:
         01:3d:18:bc:cc:4e:1d:8a:ae:66:8c:45:0c:91:6e:ec:e0:a0:
         89:36:61:fa:e5:72:62:bb:f1:f1:93:9e:17:c5:3d:13:49:47:
         6c:04:10:35:82:23:2e:26:ba:87:b1:80:62:12:20:dd:f2:99:
         65:ab:1e:b0:0f:c6:4c:78:cd:9a:84:a9:be:07:c9:c8:84:b7:
         fb:db:27:7e:b2:9e:4b:91:d8:c6:37:82:a0:fe:80:c4:f5:7c:
         5d:a6:c5:66:49:4c:9c:13:eb:9a:75:54:9a:ae:e9:5c:2e:d0:
         f0:42:94:81:65:1e:b0:2e:da:0b:db:d8:45:ff:1a:4a:09:55:
         6a:f4:0e:0c:30:7e:f2:97:f7:bf:ca:d9:ff:95:ef:ac:4b:d1:
         44:7c:c5:b0:14:f2:72:1a:9a:3e:f0:9d:be:67:ae:35:2c:67:
         4a:a7:8a:00
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBi0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0U3Q0ExMTAvBgNVBAUTKEZGQjUwM0YyMDIzMjBDRDg2OTczQUZFNjFBMTZGQkI1
QzZGMjhENjQwHhcNMjUwNTE0MjI0OTI1WhcNMjUwNTIxMjI0OTI1WjAYMRYwFAYD
VQQDEw02ODI1MWRmNS01YjhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1enRWGMJRsliHVwuvjUbcovslyNYCk7mW9iB8iU/fqXJEj6UJDrBiKnQ8XaM
X+sS+mrZh4PQk0mKj8380AftbNi1+8Li1RAAP3aLYfVX65ul3gB8LX9ELi7S55G5
aVTUbBDGEo5ZQvrTJvZpKDes+XFxlEqGR4oqLVTIAU1Eb6aiRG9tcYnjeQVV2Ddb
FFKdnjVxf2VZNhuLdma14bxYQQbT/WHBo4niVyFNrAdWNKTxbE88EBZYRNP8xWJG
CMNzCOWTGJOLNy7EB1xrGLz5xP+puOXJ8/xOgDJJOmVOsd/bV6A+7n7Xxgu/fDf2
/M+nhx+tgmladCbG0EUfJzeE0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLdT+2ra
z/adb/aN4gDEJKpnV7FLMB8GA1UdIwQYMBaAFP+1A/ICMgzYaXOv5hoW+7XG8o1k
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRTdDQS8wMDNERTA2MDlB
OTAxMUVCODk3OTcwNDlDNEY5QUUwMi9fN1VEOGdJeUROaHBjNl9tR2hiN3RjYnlq
V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL183VUQ4Z0l5RE5ocGM2X21HaGI3dGNieWpXUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RTdDQS8wMDNERTA2MDlBOTAxMUVCODk3OTcwNDlDNEY5QUUwMi9fN1VEOGdJeURO
aHBjNl9tR2hiN3RjYnlqV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBuHS7G7C5sj5vcAwZJtDiZAUmOrAllLM5NbGKy78Qxt80hDr907QXk
jSJGyubTJbfiWx109ZkIBQP7W0qR5vTvxC5NNYlQ0KZBPQV/GbSDIznT/AT1+z/1
AKcBPRi8zE4diq5mjEUMkW7s4KCJNmH65XJiu/Hxk54XxT0TSUdsBBA1giMuJrqH
sYBiEiDd8pllqx6wD8ZMeM2ahKm+B8nIhLf72yd+sp5LkdjGN4Kg/oDE9XxdpsVm
SUycE+uadVSarulcLtDwQpSBZR6wLtoL29hF/xpKCVVq9A4MMH7yl/e/ytn/le+s
S9FEfMWwFPJyGpo+8J2+Z641LGdKp4oA
-----END CERTIFICATE-----
Generated at Fri May 16 00:33:42 2025 by rpki-client