Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
File:                     snrsU_-6svW1vAy0fAhwbVBTMhA.mft (raw, json)
Hash identifier:          hOtLeF5FXVLVyrpJAtfK3PDFoI770YVH1FF78Ll490A=
Subject key identifier:   7A:25:D3:F6:37:C2:94:04:71:56:7E:AE:E2:4F:51:65:69:FB:16:C0
Authority key identifier: B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10
Certificate issuer:       /CN=A914A7D6/serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
Certificate serial:       04DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
Manifest number:          04D5
Signing time:             Sat 10 May 2025 23:23:42 +0000
Manifest this update:     Sat 10 May 2025 23:23:41 +0000
Manifest next update:     Sat 17 May 2025 23:23:41 +0000
Files and hashes:         1: snrsU_-6svW1vAy0fAhwbVBTMhA.crl (hash: OIqRLhDg8oEUXlcRsaqpKhUsbUfJaqhUpatyhH30XZI=)
                          2: 793A891A1EA111ECA967444FC4F9AE02.roa (hash: TuwY0bH/I8eBppDazNaeZzaGUKdY+8ax5yn8wmQ1iv4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl
                          rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 18:24:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1244 (0x4dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A7D6, serialNumber=B27AEC53FFBAB2F5B5BC0CB47C08706D50533210
        Validity
            Not Before: May 10 23:23:41 2025 GMT
            Not After : May 17 23:23:41 2025 GMT
        Subject: CN=681fdffe-8d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:29:de:8b:e3:42:6f:d1:f7:a6:49:bd:ed:60:
                    c1:c1:8e:82:ef:81:fe:79:6b:3c:68:c2:4c:da:84:
                    33:9d:a7:fb:38:a7:22:f9:0a:f2:4d:6d:bd:6a:84:
                    88:26:3a:fa:9b:a1:15:ea:cc:e4:a7:37:00:c5:33:
                    dd:90:9f:d2:dc:e7:d1:6f:71:84:32:5e:09:67:a0:
                    bf:18:d6:50:21:6d:1a:57:ee:4e:ce:52:ef:a4:db:
                    d4:d9:b4:34:f2:83:1d:53:7a:da:44:c8:70:29:6b:
                    98:d9:64:ec:2b:14:54:b4:96:d2:00:4f:eb:6d:75:
                    3e:ab:5a:ec:b4:de:55:76:a3:98:0f:01:72:ef:a8:
                    e1:33:47:2e:73:c9:f9:1f:52:72:a5:a5:cb:b8:51:
                    21:ae:eb:74:8d:0a:c0:74:c7:a7:40:98:90:c8:fb:
                    ca:d4:52:54:15:86:41:92:34:62:1c:41:78:47:d2:
                    e4:32:4d:af:8b:b0:7c:aa:c7:d4:ee:c2:56:76:0a:
                    10:d8:76:76:be:51:8f:48:c3:fe:ba:ba:5a:2f:5c:
                    1c:d6:89:41:03:1b:67:4f:96:f7:47:96:0e:38:71:
                    62:e3:69:9e:de:a5:8c:87:cd:6c:ce:a7:0e:d8:2f:
                    0c:54:32:70:89:2e:d8:e1:e5:60:29:a9:89:08:6b:
                    5a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:25:D3:F6:37:C2:94:04:71:56:7E:AE:E2:4F:51:65:69:FB:16:C0
            X509v3 Authority Key Identifier:
                keyid:B2:7A:EC:53:FF:BA:B2:F5:B5:BC:0C:B4:7C:08:70:6D:50:53:32:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/snrsU_-6svW1vAy0fAhwbVBTMhA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A7D6/DD8E57241E9D11EC9C2B9F4AC4F9AE02/snrsU_-6svW1vAy0fAhwbVBTMhA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:03:2b:60:23:fa:20:6c:3d:35:39:0c:b3:06:8d:15:bc:b2:
         86:9a:2a:e8:ab:f4:9b:0e:83:fc:56:d6:af:c8:d0:d5:60:ad:
         91:6f:88:b3:f2:45:0f:2b:7b:44:7b:f6:da:4d:56:87:77:62:
         74:cc:da:0f:70:b3:a0:97:d6:b7:60:a3:62:70:35:24:e5:a8:
         36:2f:06:a6:29:f1:bf:d8:4e:f2:5f:79:1f:34:c3:87:e8:e6:
         88:fd:b1:8c:4f:e4:f1:93:b4:17:ef:0f:d1:b6:b3:5b:fd:a8:
         07:9a:ec:16:08:83:96:bd:a7:87:42:9d:60:cc:93:63:f5:73:
         25:30:ec:19:be:fc:ce:bd:1b:05:64:ff:3f:2a:c3:53:48:71:
         73:4e:30:93:76:12:ff:65:a6:db:bd:e7:e2:c5:1a:71:18:78:
         d7:94:53:d2:c1:65:2c:13:df:aa:2d:86:ca:ef:b6:59:48:42:
         06:ab:48:d0:85:01:6f:6a:8c:4c:95:7e:22:56:92:1c:7a:9e:
         ea:c6:6b:23:d7:b3:e4:76:ce:6f:25:84:f7:31:8a:f9:9c:9d:
         46:41:77:09:59:5a:2d:3c:5f:5e:c1:53:af:2b:53:68:aa:58:
         3e:ee:34:e0:19:06:c2:21:09:d4:a9:b9:41:c3:c1:46:4e:b2:
         54:ea:a2:50
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBNwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEE3RDYxMTAvBgNVBAUTKEIyN0FFQzUzRkZCQUIyRjVCNUJDMENCNDdDMDg3MDZE
NTA1MzMyMTAwHhcNMjUwNTEwMjMyMzQxWhcNMjUwNTE3MjMyMzQxWjAYMRYwFAYD
VQQDEw02ODFmZGZmZS04ZDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApynei+NCb9H3pkm97WDBwY6C74H+eWs8aMJM2oQznaf7OKci+QryTW29aoSI
Jjr6m6EV6szkpzcAxTPdkJ/S3OfRb3GEMl4JZ6C/GNZQIW0aV+5OzlLvpNvU2bQ0
8oMdU3raRMhwKWuY2WTsKxRUtJbSAE/rbXU+q1rstN5VdqOYDwFy76jhM0cuc8n5
H1JypaXLuFEhrut0jQrAdMenQJiQyPvK1FJUFYZBkjRiHEF4R9LkMk2vi7B8qsfU
7sJWdgoQ2HZ2vlGPSMP+urpaL1wc1olBAxtnT5b3R5YOOHFi42me3qWMh81szqcO
2C8MVDJwiS7Y4eVgKamJCGtaxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHol0/Y3
wpQEcVZ+ruJPUWVp+xbAMB8GA1UdIwQYMBaAFLJ67FP/urL1tbwMtHwIcG1QUzIQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QTdENi9ERDhFNTcyNDFF
OUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2VzF2QXkwZkFod2JWQlRN
aEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NucnNVXy02c3ZXMXZBeTBmQWh3YlZCVE1oQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QTdENi9ERDhFNTcyNDFFOUQxMUVDOUMyQjlGNEFDNEY5QUUwMi9zbnJzVV8tNnN2
VzF2QXkwZkFod2JWQlRNaEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCjAytgI/ogbD01OQyzBo0VvLKGmiroq/SbDoP8VtavyNDVYK2Rb4iz
8kUPK3tEe/baTVaHd2J0zNoPcLOgl9a3YKNicDUk5ag2LwamKfG/2E7yX3kfNMOH
6OaI/bGMT+Txk7QX7w/RtrNb/agHmuwWCIOWvaeHQp1gzJNj9XMlMOwZvvzOvRsF
ZP8/KsNTSHFzTjCTdhL/ZabbvefixRpxGHjXlFPSwWUsE9+qLYbK77ZZSEIGq0jQ
hQFvaoxMlX4iVpIcep7qxmsj17Pkds5vJYT3MYr5nJ1GQXcJWVotPF9ewVOvK1No
qlg+7jTgGQbCIQnUqblBw8FGTrJU6qJQ
-----END CERTIFICATE-----
Generated at Sun May 11 01:16:29 2025 by rpki-client