Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
File:                     SYklN9iywDJbe-CB_ZKGx5vqaoU.mft (raw, json)
Hash identifier:          EbH3lOVWekz7damPv/4DXVa3iPbwLuiQzYVA1EMxWzc=
Subject key identifier:   AD:AF:CB:3A:00:22:CD:7C:3A:3C:2F:74:D4:58:C1:E3:FA:4B:2E:40
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       31EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
Manifest number:          30EF
Signing time:             Fri 16 May 2025 15:38:56 +0000
Manifest this update:     Fri 16 May 2025 15:38:55 +0000
Manifest next update:     Fri 23 May 2025 15:38:55 +0000
Files and hashes:         1: SYklN9iywDJbe-CB_ZKGx5vqaoU.crl (hash: 5arNvLRzuhb9Eu9ZG9eqg3qH9pD/raZ47AmhkaHIiIA=)
                          2: 4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (hash: EeYrA0oUiX5ob1GCl360Jl12TI+VaTOiyuJgYZMlYyQ=)
                          3: 9C58363E8F2811ECA311FF19C4F9AE02.roa (hash: 2SMCn/npWqcmfZg6nAHuysuldQhi1wmuZFYT9k6JumE=)
                          4: B4D9927A014E11EB9E13483FC4F9AE02.roa (hash: aNflNpZRFbV1iEzwZkerSjooL3ZbHNTo9sqEEuW0z5E=)
                          5: B059C44831AB11ECAB908E42C4F9AE02.roa (hash: mvXnOqucNgAYFkGlwRCZn28/IzHeZDABYgBedIIjNdo=)
                          6: 9CE444808F2811ECA311FF19C4F9AE02.roa (hash: Za7CTLhf4UasBzGSp7I8a3g4a+j+NWEqF/KL56/2vS8=)
                          7: 3E745A08803611ECB2187650C4F9AE02.roa (hash: jeZ1quXhohHcENScdWfxhX0SEjFUrsOnsK/TOw/jZjs=)
                          8: FBD80F88F92111EAABA5882BC4F9AE02.roa (hash: dgpVoO6weS/ndsZQWujNDS9YR9/GTcgU2Ntn/TREgTo=)
                          9: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (hash: lEnvEsVQKg7+MGcOwWT2W3WslnVR/yrmJySbJOft9Z8=)
                          10: 0E95C2D8F14211EAA4333775C4F9AE02.roa (hash: Ahn6ZDXaFlyG3ps/K1qhqsraiLwDj6j+LNP8Jh18fxI=)
                          11: BE430FFA699011EE96387F19C4F9AE02.roa (hash: eghTnl4+9Hou7Dvhi8Y2Dc5HYMDvdB3RFP+Hf9xhTd4=)
                          12: D26B4EE8070A11EB90C85C2BC4F9AE02.roa (hash: THe1NI3B1xx7kSh8zVoF92Sy5zfPL4BkUSLTuhQWgWA=)
                          13: 6A721236977E11EBB7908378C4F9AE02.roa (hash: /e6KrWMRhzwLnS1sGFyJnoQWuznldP9kkNXk2FwS2m8=)
                          14: 3F6A8A20953911EF9AAE0D26C4F9AE02.roa (hash: 9prY2M/EqPnLpXnPyOHzXklHe0Jf7nk8NG7xrlLgD1E=)
                          15: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (hash: 6qeUbqQDZAs4XxUg3gjiDgNNwxCSJtTUmRGvfOUM8Jg=)
                          16: D4002378F15211EAA1BAB944C4F9AE02.roa (hash: Wyi5/LddF842JO/Qup+T+TtnSVCZWmXJ6KXLaRipY9A=)
                          17: F311F68E01C311EB898F2D52C4F9AE02.roa (hash: 85Xzc4sUFq6DeQmrj7B+GSXoAlkSVZuZhM/htcARgis=)
                          18: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (hash: YpHnGald+tUXWOHiLdrxtwMGKIMtsU2LryOXgoLOgKw=)
                          19: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (hash: BHyc8gJj1zrzdD7tccu9ah8CwFB8JYItzsH3eX+N0N0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 15:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12783 (0x31ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: May 16 15:38:55 2025 GMT
            Not After : May 23 15:38:55 2025 GMT
        Subject: CN=68275c0f-68e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:7d:c1:f3:e9:b4:84:94:32:83:4a:64:75:
                    45:03:a5:39:b0:bd:05:17:64:d9:4e:d7:87:d8:34:
                    52:30:49:ca:29:36:46:c5:b2:ba:90:c3:93:25:c2:
                    05:d2:a1:a6:45:4f:03:2c:24:51:03:30:00:43:93:
                    bc:d4:aa:b2:c0:8c:44:38:b0:e2:69:d2:21:1b:b7:
                    c6:94:34:1b:5f:f0:bb:e4:4a:ee:75:24:d8:eb:84:
                    f9:e6:5a:a1:ab:09:59:b9:d0:6b:5b:c0:34:ae:66:
                    1d:56:de:ea:e9:b8:39:6a:4f:ca:cb:08:28:19:29:
                    d0:51:9f:3b:98:85:aa:2c:84:d9:23:de:52:6d:a5:
                    ed:60:28:73:60:56:31:83:32:61:b5:d2:07:04:b8:
                    36:0f:97:a4:7d:0f:91:0b:ba:45:23:0f:48:15:fd:
                    77:4d:14:0f:92:d8:5f:da:be:c1:09:fb:c3:4c:28:
                    30:41:cd:13:8d:09:f6:be:94:f9:a2:34:4d:85:ad:
                    b0:e2:ff:53:ae:f1:7d:ef:00:0b:9f:20:1b:b5:97:
                    29:c6:b5:3d:ff:2f:0e:1e:6c:14:ea:00:b3:6f:1e:
                    c4:55:55:a9:b8:94:34:af:a2:ec:de:96:5e:f6:82:
                    c1:15:38:cf:ec:cc:7e:62:87:d1:07:d1:84:0d:60:
                    4e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AF:CB:3A:00:22:CD:7C:3A:3C:2F:74:D4:58:C1:E3:FA:4B:2E:40
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1b:a8:b3:56:2f:20:80:b0:58:d1:e6:45:7f:81:f6:d3:5b:
         da:38:b0:da:73:37:64:1f:cd:21:15:28:e9:a1:84:6e:5d:07:
         4c:8b:9e:24:2a:18:e8:b9:b5:92:49:f6:58:ed:a2:18:60:e7:
         37:5d:f1:f5:58:01:3f:aa:60:16:58:74:ab:99:74:59:8b:76:
         88:a5:ab:75:6b:c2:1d:c8:12:54:21:df:d1:1d:ac:b3:c2:3b:
         72:e3:dd:2b:ee:54:b2:9f:12:91:6e:b5:c2:2b:13:07:d7:4b:
         81:37:97:a1:1c:57:91:e0:d0:1c:6d:c3:a4:b4:ef:fc:94:57:
         5f:31:01:d7:aa:50:3f:00:c2:62:83:36:12:0c:a8:38:a5:28:
         fc:ef:7f:08:88:93:21:83:f3:ed:97:e4:85:1e:c9:66:38:10:
         ea:ad:95:ce:54:2f:2f:95:fe:65:75:5d:46:ac:f3:9f:3c:8e:
         62:57:8d:e2:4d:df:fb:50:34:37:4d:ba:03:8f:c0:5c:a3:e0:
         46:ba:56:e7:c1:a0:2e:bd:b4:25:0f:20:6e:5e:09:52:1f:e0:
         59:4b:a4:82:fb:34:8c:91:0d:4b:0f:2b:c8:18:0b:b1:11:d9:
         f1:83:e5:fa:67:01:0c:48:3f:32:34:3d:15:c9:0f:e9:37:76:
         de:ae:b0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 02:18:33 2025 by rpki-client