Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
File:                     yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft (raw, json)
Hash identifier:          j8TBwQpZRZR5zQRmCQb0nLyuYapdnECAFDiatdyUAeE=
Subject key identifier:   8E:D6:9F:1F:0A:54:84:B5:92:6D:5B:FF:0F:34:00:87:A2:B2:48:9A
Authority key identifier: C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E
Certificate issuer:       /CN=A915547C/serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E
Certificate serial:       0281
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
Manifest number:          027A
Signing time:             Thu 15 May 2025 01:41:36 +0000
Manifest this update:     Thu 15 May 2025 01:41:35 +0000
Manifest next update:     Thu 22 May 2025 01:41:35 +0000
Files and hashes:         1: yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl (hash: 55FaOFhlAfKgL5v12Ta0ijb4SHxDU18VTQCyNubSEDk=)
                          2: 80C08414A45B11EDA610F30BC4F9AE02.roa (hash: FjhqaYSiBCUDBbMEgbA2g2o60t2rFoI+M1oEk+41mT4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl
                          rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 01:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915547C, serialNumber=C9360EC91EEC14B07ED792FD3B0FBAB7FF9F642E
        Validity
            Not Before: May 15 01:41:35 2025 GMT
            Not After : May 22 01:41:35 2025 GMT
        Subject: CN=68254650-b83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:96:e5:b1:e7:03:5b:41:5f:a8:fc:f1:07:96:
                    24:6f:0e:a2:e8:e1:f2:61:d8:b5:8b:c9:bb:2b:56:
                    56:52:2f:26:d1:43:2e:e8:87:b9:eb:04:b4:f3:fd:
                    6e:ea:29:74:ea:68:0c:45:37:9a:e7:a1:a0:f1:1d:
                    81:c7:56:c3:ff:84:41:c3:a0:79:ed:b8:ad:eb:7f:
                    6a:84:96:2e:b2:2f:32:48:5d:21:29:16:a7:0d:b0:
                    ac:a3:44:f9:59:33:74:3a:50:a1:36:3b:c0:98:86:
                    7e:fc:35:c4:22:61:31:5b:63:3e:21:e0:ac:c1:57:
                    7b:5a:d3:e8:0c:87:09:27:f4:01:9a:fb:f9:8a:e2:
                    a3:e1:a5:4b:3d:8a:d5:01:45:ca:0f:0d:bd:ce:6f:
                    02:84:3a:68:df:33:48:9a:b2:23:83:c2:90:b3:f3:
                    51:ac:b1:de:6d:df:b8:9f:ec:22:c8:00:08:f6:e9:
                    ce:41:4b:e5:aa:5b:00:45:0d:4b:af:90:60:10:f0:
                    58:c6:7a:07:c8:61:0f:0e:c2:a7:be:08:f1:11:c5:
                    78:d4:c6:ff:17:ab:2d:82:98:fa:5d:e3:ba:17:f4:
                    f1:93:aa:a8:bf:cd:48:68:ca:05:88:a0:ea:4a:3f:
                    50:b5:d1:8c:09:f5:76:8b:30:13:be:87:6c:0b:8f:
                    6b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D6:9F:1F:0A:54:84:B5:92:6D:5B:FF:0F:34:00:87:A2:B2:48:9A
            X509v3 Authority Key Identifier:
                keyid:C9:36:0E:C9:1E:EC:14:B0:7E:D7:92:FD:3B:0F:BA:B7:FF:9F:64:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yTYOyR7sFLB-15L9Ow-6t_-fZC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915547C/576CCD2A0C5311ED8327470AC4F9AE02/yTYOyR7sFLB-15L9Ow-6t_-fZC4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:bb:9d:96:2c:9c:5c:3b:67:99:4d:1e:f2:19:e0:54:9d:3c:
         a8:e7:00:d9:a4:b9:5a:76:11:80:e3:78:73:79:64:9d:0b:38:
         15:9f:05:d7:38:0a:dc:da:96:25:18:df:68:58:b4:fe:6f:2b:
         bf:df:cc:9a:ef:23:f3:6e:08:35:a4:54:85:e2:25:c7:46:85:
         e5:60:27:95:84:aa:25:6f:0f:74:a7:2f:58:a0:7d:2f:5c:67:
         5f:06:46:0e:b7:a4:b4:f4:ce:a8:a0:8d:db:47:e6:be:45:ad:
         b8:6c:53:87:c2:4a:40:5c:17:1f:4a:53:ed:2c:9b:7b:d9:58:
         57:54:8d:ca:7a:20:25:3c:07:af:72:dd:b4:7e:ee:01:fe:61:
         00:54:15:e5:23:e2:fb:99:3b:e4:a0:32:00:ab:11:97:aa:ae:
         9d:2d:7b:45:ec:00:16:56:e0:44:3b:77:33:dd:07:21:65:48:
         57:31:80:74:4b:7e:ff:fa:fc:e5:be:b9:b8:ee:93:f0:49:2e:
         23:d1:c5:ad:ab:59:7a:55:78:e5:19:70:c8:03:39:c2:25:db:
         be:6a:d6:26:eb:54:21:25:68:37:45:aa:4f:ea:53:f7:b7:c3:
         89:89:e3:f7:9d:f1:7d:ee:2f:8d:7b:88:af:74:92:f3:05:1e:
         53:8a:af:16
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTU0N0MxMTAvBgNVBAUTKEM5MzYwRUM5MUVFQzE0QjA3RUQ3OTJGRDNCMEZCQUI3
RkY5RjY0MkUwHhcNMjUwNTE1MDE0MTM1WhcNMjUwNTIyMDE0MTM1WjAYMRYwFAYD
VQQDEw02ODI1NDY1MC1iODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmpblsecDW0FfqPzxB5Ykbw6i6OHyYdi1i8m7K1ZWUi8m0UMu6Ie56wS08/1u
6il06mgMRTea56Gg8R2Bx1bD/4RBw6B57bit639qhJYusi8ySF0hKRanDbCso0T5
WTN0OlChNjvAmIZ+/DXEImExW2M+IeCswVd7WtPoDIcJJ/QBmvv5iuKj4aVLPYrV
AUXKDw29zm8ChDpo3zNImrIjg8KQs/NRrLHebd+4n+wiyAAI9unOQUvlqlsARQ1L
r5BgEPBYxnoHyGEPDsKnvgjxEcV41Mb/F6stgpj6XeO6F/Txk6qov81IaMoFiKDq
Sj9QtdGMCfV2izATvodsC49rLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7Wnx8K
VIS1km1b/w80AIeiskiaMB8GA1UdIwQYMBaAFMk2Dske7BSwfteS/TsPurf/n2Qu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTQ3Qy81NzZDQ0QyQTBD
NTMxMUVEODMyNzQ3MEFDNEY5QUUwMi95VFlPeVI3c0ZMQi0xNUw5T3ctNnRfLWZa
QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lUWU95UjdzRkxCLTE1TDlPdy02dF8tZlpDNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NTQ3Qy81NzZDQ0QyQTBDNTMxMUVEODMyNzQ3MEFDNEY5QUUwMi95VFlPeVI3c0ZM
Qi0xNUw5T3ctNnRfLWZaQzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAsu52WLJxcO2eZTR7yGeBUnTyo5wDZpLladhGA43hzeWSdCzgVnwXX
OArc2pYlGN9oWLT+byu/38ya7yPzbgg1pFSF4iXHRoXlYCeVhKolbw90py9YoH0v
XGdfBkYOt6S09M6ooI3bR+a+Ra24bFOHwkpAXBcfSlPtLJt72VhXVI3KeiAlPAev
ct20fu4B/mEAVBXlI+L7mTvkoDIAqxGXqq6dLXtF7AAWVuBEO3cz3QchZUhXMYB0
S37/+vzlvrm47pPwSS4j0cWtq1l6VXjlGXDIAznCJdu+atYm61QhJWg3RapP6lP3
t8OJieP3nfF97i+Ne4ivdJLzBR5Tiq8W
-----END CERTIFICATE-----
Generated at Fri May 16 18:00:39 2025 by rpki-client