Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
File:                     DS1vMynFa_bo-UG9_adJbb4lMOU.mft (raw, json)
Hash identifier:          TjfT3rRbWFuelzNNBbqK9qUkSAXgUgkuPS88PbcNfwI=
Subject key identifier:   CD:72:73:ED:3D:D8:AC:39:00:F6:65:EF:C5:A0:F8:5A:8B:B9:D2:B6
Authority key identifier: 0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5
Certificate issuer:       /CN=A915479A/serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5
Certificate serial:       4D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
Manifest number:          4C
Signing time:             Thu 03 Jul 2025 07:32:29 +0000
Manifest this update:     Thu 03 Jul 2025 07:32:29 +0000
Manifest next update:     Thu 10 Jul 2025 07:32:29 +0000
Files and hashes:         1: DS1vMynFa_bo-UG9_adJbb4lMOU.crl (hash: ZJLJTVcCmwZklvvaGGUSTXEGcr2VJ7T51NndabGih0w=)
                          2: 8836D872E37B11EFB4D75458C4F9AE02.roa (hash: SXO1+0APe7z5DY3Hw4Iwvndpe+8U4RSEIeHcUiLcev8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl
                          rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915479A, serialNumber=0D2D6F3329C56BF6E8F941BDFDA7496DBE2530E5
        Validity
            Not Before: Jul  3 07:32:29 2025 GMT
            Not After : Jul 10 07:32:29 2025 GMT
        Subject: CN=6866320d-a18c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4e:46:37:0f:5e:26:b8:2a:6e:d6:17:dc:a3:
                    61:62:73:a8:e5:3b:80:1b:2d:fa:24:72:df:96:16:
                    b5:2c:48:86:4b:93:03:b6:3d:7c:02:ca:b7:72:3c:
                    2e:cd:80:24:15:03:56:bf:04:81:72:c9:7c:66:2a:
                    78:b5:45:5b:6e:c3:b3:fc:e7:35:ce:96:5b:68:81:
                    b1:16:59:eb:32:a0:39:9c:8a:b9:4b:22:3b:0f:a8:
                    7f:94:d6:94:f7:ee:0c:14:0f:8f:5f:72:6d:e0:d3:
                    40:8c:3c:b0:6d:be:28:9b:47:e7:f3:c4:6b:1f:86:
                    b3:92:77:b9:3f:0c:6a:1a:54:ac:04:8e:89:ff:f9:
                    44:a5:ca:3e:41:ac:dc:44:ae:be:64:fb:0b:02:37:
                    95:08:5b:b5:1f:2d:67:36:8a:50:4f:47:e2:78:94:
                    99:31:bb:cd:cd:52:0b:ad:12:b7:d0:3b:54:06:ce:
                    3e:6e:e2:b2:88:6f:cf:83:20:f5:bb:dd:6e:11:ae:
                    ec:86:c3:ff:f0:42:eb:68:5e:56:9f:a6:43:7c:9a:
                    73:a0:fa:99:67:f5:1b:83:21:e7:da:6d:2b:7b:9e:
                    79:31:4e:4f:c9:46:e4:46:18:11:cb:31:6b:e8:14:
                    d7:95:cc:0e:58:31:09:a9:67:c2:77:46:21:4e:2f:
                    56:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:72:73:ED:3D:D8:AC:39:00:F6:65:EF:C5:A0:F8:5A:8B:B9:D2:B6
            X509v3 Authority Key Identifier:
                keyid:0D:2D:6F:33:29:C5:6B:F6:E8:F9:41:BD:FD:A7:49:6D:BE:25:30:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DS1vMynFa_bo-UG9_adJbb4lMOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915479A/24A48388E37911EFB4666B31C4F9AE02/DS1vMynFa_bo-UG9_adJbb4lMOU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:23:27:d5:cd:2e:ef:4b:09:ff:af:0e:30:52:07:bc:dd:67:
         82:bd:82:d2:ad:63:87:98:13:73:5d:ad:cf:4a:37:0e:07:77:
         1d:d2:c7:c1:96:4d:12:99:e4:b8:3b:85:0f:2c:27:f2:87:ad:
         82:25:b4:45:33:35:8d:14:82:d7:25:d9:d7:37:2f:62:4f:e9:
         80:fe:a2:8d:28:28:c8:c6:06:72:12:60:96:12:d5:42:11:e4:
         ed:7c:ba:06:08:cd:e7:38:a1:69:9f:88:71:43:6d:7f:a0:83:
         fe:75:ff:e5:fb:ec:5b:09:de:55:a0:db:31:2c:79:4c:62:53:
         7f:53:2f:6d:d6:96:f3:46:f4:b0:30:ad:aa:65:56:f9:b2:a5:
         15:e2:ef:31:4a:84:29:58:40:2b:f7:0c:0d:3f:5b:82:79:45:
         5a:35:87:88:dd:37:fe:c2:f1:70:af:59:00:e1:6c:e8:00:fb:
         32:97:b8:a7:12:34:1a:89:56:37:4f:c9:a8:33:2c:5d:3e:21:
         f3:4e:b5:53:14:a3:a4:59:94:39:99:65:6e:af:c6:77:b8:5e:
         fc:b9:ba:30:85:92:c1:d2:2c:0f:9f:d2:8a:22:a0:6e:bb:ed:
         47:e8:cb:2b:3f:07:bf:20:2c:c7:59:c0:1f:d1:9a:f2:2a:e5:
         98:c7:e9:76
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBTTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
NDc5QTExMC8GA1UEBRMoMEQyRDZGMzMyOUM1NkJGNkU4Rjk0MUJERkRBNzQ5NkRC
RTI1MzBFNTAeFw0yNTA3MDMwNzMyMjlaFw0yNTA3MTAwNzMyMjlaMBgxFjAUBgNV
BAMTDTY4NjYzMjBkLWExOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDATkY3D14muCpu1hfco2Fic6jlO4AbLfokct+WFrUsSIZLkwO2PXwCyrdyPC7N
gCQVA1a/BIFyyXxmKni1RVtuw7P85zXOlltogbEWWesyoDmcirlLIjsPqH+U1pT3
7gwUD49fcm3g00CMPLBtviibR+fzxGsfhrOSd7k/DGoaVKwEjon/+USlyj5BrNxE
rr5k+wsCN5UIW7UfLWc2ilBPR+J4lJkxu83NUgutErfQO1QGzj5u4rKIb8+DIPW7
3W4RruyGw//wQutoXlafpkN8mnOg+pln9RuDIefabSt7nnkxTk/JRuRGGBHLMWvo
FNeVzA5YMQmpZ8J3RiFOL1btAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzXJz7T3Y
rDkA9mXvxaD4Wou50rYwHwYDVR0jBBgwFoAUDS1vMynFa/bo+UG9/adJbb4lMOUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0NzlBLzI0QTQ4Mzg4RTM3
OTExRUZCNDY2NkIzMUM0RjlBRTAyL0RTMXZNeW5GYV9iby1VRzlfYWRKYmI0bE1P
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvRFMxdk15bkZhX2JvLVVHOV9hZEpiYjRsTU9VLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0
NzlBLzI0QTQ4Mzg4RTM3OTExRUZCNDY2NkIzMUM0RjlBRTAyL0RTMXZNeW5GYV9i
by1VRzlfYWRKYmI0bE1PVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABwjJ9XNLu9LCf+vDjBSB7zdZ4K9gtKtY4eYE3Ndrc9KNw4Hdx3Sx8GW
TRKZ5Lg7hQ8sJ/KHrYIltEUzNY0Ugtcl2dc3L2JP6YD+oo0oKMjGBnISYJYS1UIR
5O18ugYIzec4oWmfiHFDbX+gg/51/+X77FsJ3lWg2zEseUxiU39TL23WlvNG9LAw
raplVvmypRXi7zFKhClYQCv3DA0/W4J5RVo1h4jdN/7C8XCvWQDhbOgA+zKXuKcS
NBqJVjdPyagzLF0+IfNOtVMUo6RZlDmZZW6vxne4Xvy5ujCFksHSLA+f0ooioG67
7Ufoyys/B78gLMdZwB/RmvIq5ZjH6XY=
-----END CERTIFICATE-----
Generated at Thu Jul 3 22:58:56 2025 by rpki-client