Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
File:                     o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft (raw, json)
Hash identifier:          2JrpSlNv2oVJ06qogBqg26wgfPPf2+mJHS5ivU7O03U=
Subject key identifier:   37:62:FC:E5:9B:0C:B7:40:37:AD:1D:D1:F7:39:BB:56:EB:EA:F0:93
Authority key identifier: A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B
Certificate issuer:       /CN=A913F26E/serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
Certificate serial:       03F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
Manifest number:          03F2
Signing time:             Thu 15 May 2025 00:31:02 +0000
Manifest this update:     Thu 15 May 2025 00:31:02 +0000
Manifest next update:     Thu 22 May 2025 00:31:02 +0000
Files and hashes:         1: o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl (hash: 60iEAECs6GMXlyg5MhD/lU2mJ1E4TwiWd/4F/LVheKU=)
                          2: 61F1288A76B311ECABA1A612C4F9AE02.roa (hash: PnVC3vOx/m/d2i5GijyZP2nHOvoHme0AIyPBMzeLZ6g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl
                          rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 00:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1014 (0x3f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F26E, serialNumber=A3FC9A10E25D3194218CC07D3E3B79549C24292B
        Validity
            Not Before: May 15 00:31:02 2025 GMT
            Not After : May 22 00:31:02 2025 GMT
        Subject: CN=682535c6-35b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:cf:22:a5:58:ff:12:d7:b3:33:66:1b:ad:
                    11:31:f9:88:9d:37:41:12:7e:40:d9:81:26:f0:d9:
                    0d:25:08:7f:30:a3:32:fd:36:f4:45:0b:13:ed:87:
                    57:3d:f6:14:e7:df:e2:1a:7b:aa:35:7b:40:93:02:
                    4c:59:28:d1:ed:5a:cc:51:0f:7c:2d:55:e5:fb:8f:
                    ff:25:ec:6e:dd:16:37:d9:a0:08:4c:f9:21:a1:fb:
                    39:99:19:81:58:8b:fd:1c:b1:11:a7:f4:6d:e6:fe:
                    1c:09:55:39:bb:ac:fa:a4:4d:c6:18:c7:3d:84:59:
                    8f:17:41:e8:ec:70:8e:03:42:ed:11:04:7b:ea:50:
                    37:5b:da:df:2e:47:1a:61:3e:69:51:6b:1e:84:3e:
                    bf:67:db:4a:3e:18:98:43:d7:72:7b:c5:90:c2:ff:
                    7d:c1:b9:f9:a8:4c:78:5d:3c:f3:fa:32:4b:b1:be:
                    bd:6e:39:9b:55:c3:e5:76:aa:d6:70:f9:6d:61:4c:
                    99:b7:51:93:e7:eb:ff:b4:13:5a:35:20:50:e9:b0:
                    31:2a:6a:7a:f7:29:50:15:ed:93:18:1d:88:8a:ae:
                    1f:bd:d8:0d:60:b1:94:82:c8:56:33:1e:b3:c3:ef:
                    a9:c7:b4:2e:bf:cb:9a:12:5b:8f:cb:47:7b:53:04:
                    c7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:62:FC:E5:9B:0C:B7:40:37:AD:1D:D1:F7:39:BB:56:EB:EA:F0:93
            X509v3 Authority Key Identifier:
                keyid:A3:FC:9A:10:E2:5D:31:94:21:8C:C0:7D:3E:3B:79:54:9C:24:29:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F26E/DA1A6C6C76AF11ECA513220EC4F9AE02/o_yaEOJdMZQhjMB9Pjt5VJwkKSs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e6:16:6e:7a:31:84:a3:84:89:63:34:86:73:34:82:d4:df:
         69:eb:b9:8d:8a:af:02:b9:8b:0e:8b:bd:d4:81:bf:7f:25:f1:
         4d:3d:d5:75:10:3d:3c:44:a2:fe:be:c6:5a:71:c3:75:d1:ae:
         99:d5:27:e7:51:a3:1e:da:24:c6:58:25:ef:29:ef:4e:9f:d7:
         dd:4c:60:07:ad:8b:c3:c3:72:06:06:44:3e:9c:a0:e3:bf:45:
         5c:a0:7b:9c:74:57:0b:7b:6b:90:ab:74:b5:1f:bf:4e:70:c8:
         44:e8:28:03:7a:0a:39:ec:49:f8:07:77:22:cf:d8:22:4d:d5:
         67:f1:4c:6b:d6:f6:eb:98:0e:fc:a8:6f:9e:82:35:b0:77:18:
         ad:66:13:dd:a2:2f:bb:e8:3a:11:d2:9e:99:6a:69:ca:99:db:
         76:45:1d:59:85:fc:e2:85:23:1a:c7:2e:25:61:b6:76:e9:ce:
         4e:94:f7:a1:37:12:b2:8d:77:80:1f:17:d8:3f:d7:0b:4d:86:
         da:5e:00:ce:38:e1:22:5b:c4:f2:02:96:e6:15:45:a2:93:c4:
         22:20:fb:77:5a:d9:e1:00:f1:cc:f3:20:c4:04:88:6a:f2:f2:
         a2:ed:24:ac:59:f7:b2:41:3d:c0:d8:02:29:d8:0e:bd:be:42:
         1c:a6:26:25
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0YyNkUxMTAvBgNVBAUTKEEzRkM5QTEwRTI1RDMxOTQyMThDQzA3RDNFM0I3OTU0
OUMyNDI5MkIwHhcNMjUwNTE1MDAzMTAyWhcNMjUwNTIyMDAzMTAyWjAYMRYwFAYD
VQQDEw02ODI1MzVjNi0zNWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0bPPIqVY/xLXszNmG60RMfmInTdBEn5A2YEm8NkNJQh/MKMy/Tb0RQsT7YdX
PfYU59/iGnuqNXtAkwJMWSjR7VrMUQ98LVXl+4//Jexu3RY32aAITPkhofs5mRmB
WIv9HLERp/Rt5v4cCVU5u6z6pE3GGMc9hFmPF0Ho7HCOA0LtEQR76lA3W9rfLkca
YT5pUWsehD6/Z9tKPhiYQ9dye8WQwv99wbn5qEx4XTzz+jJLsb69bjmbVcPldqrW
cPltYUyZt1GT5+v/tBNaNSBQ6bAxKmp69ylQFe2TGB2Iiq4fvdgNYLGUgshWMx6z
w++px7Quv8uaEluPy0d7UwTHBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDdi/OWb
DLdAN60d0fc5u1br6vCTMB8GA1UdIwQYMBaAFKP8mhDiXTGUIYzAfT47eVScJCkr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjI2RS9EQTFBNkM2Qzc2
QUYxMUVDQTUxMzIyMEVDNEY5QUUwMi9vX3lhRU9KZE1aUWhqTUI5UGp0NVZKd2tL
U3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29feWFFT0pkTVpRaGpNQjlQanQ1Vkp3a0tTcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjI2RS9EQTFBNkM2Qzc2QUYxMUVDQTUxMzIyMEVDNEY5QUUwMi9vX3lhRU9KZE1a
UWhqTUI5UGp0NVZKd2tLU3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBO5hZuejGEo4SJYzSGczSC1N9p67mNiq8CuYsOi73Ugb9/JfFNPdV1
ED08RKL+vsZaccN10a6Z1SfnUaMe2iTGWCXvKe9On9fdTGAHrYvDw3IGBkQ+nKDj
v0VcoHucdFcLe2uQq3S1H79OcMhE6CgDego57En4B3ciz9giTdVn8Uxr1vbrmA78
qG+egjWwdxitZhPdoi+76DoR0p6ZamnKmdt2RR1ZhfzihSMaxy4lYbZ26c5OlPeh
NxKyjXeAHxfYP9cLTYbaXgDOOOEiW8TyApbmFUWik8QiIPt3WtnhAPHM8yDEBIhq
8vKi7SSsWfeyQT3A2AIp2A69vkIcpiYl
-----END CERTIFICATE-----
Generated at Thu May 15 03:49:39 2025 by rpki-client