Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft
File:                     C6dUacYtJZIFuou2XbmdAze6130.mft (raw, json)
Hash identifier:          s5gjwVA3PIjFMi3dZRwkAHiB1pSW32g39m7kkQ6YHtA=
Subject key identifier:   35:87:EA:6A:1F:80:A4:97:C7:1B:C3:1C:51:EF:09:C9:6C:EA:C2:BA
Authority key identifier: 0B:A7:54:69:C6:2D:25:92:05:BA:8B:B6:5D:B9:9D:03:37:BA:D7:7D
Certificate issuer:       /CN=A915C532/serialNumber=0BA75469C62D259205BA8BB65DB99D0337BAD77D
Certificate serial:       0DEC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft
Manifest number:          0DE3
Signing time:             Fri 16 May 2025 18:07:28 +0000
Manifest this update:     Fri 16 May 2025 18:07:28 +0000
Manifest next update:     Fri 23 May 2025 18:07:28 +0000
Files and hashes:         1: C6dUacYtJZIFuou2XbmdAze6130.crl (hash: pUOT7YxoES+ZX0rNRu2ye5ibnf6/RvEKXwI/wYEt75Y=)
                          2: ACE45EC4C5AE11E998CC136CC4F9AE02.roa (hash: Kzik/mEOxMnkFUJ+qgd/pL/HBPAnoQURi3fpQC5rQoQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.crl
                          rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 18:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3564 (0xdec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C532, serialNumber=0BA75469C62D259205BA8BB65DB99D0337BAD77D
        Validity
            Not Before: May 16 18:07:28 2025 GMT
            Not After : May 23 18:07:28 2025 GMT
        Subject: CN=68277ee0-39f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0f:31:55:53:7a:cc:2e:ab:c2:7d:2b:e9:2d:
                    f7:64:36:fd:cd:b5:8c:a0:6c:88:28:0b:ac:11:26:
                    31:ff:a3:f4:47:a5:fd:39:5a:5f:67:ce:29:e2:af:
                    17:2c:3e:9c:1a:61:a7:38:d7:14:a4:87:ea:74:b0:
                    64:f7:2b:bd:a7:f3:15:da:9f:8a:1d:c6:f2:b4:e5:
                    7b:64:06:90:2d:eb:0b:f5:5a:91:f0:fc:72:f0:ce:
                    eb:27:1b:08:7c:15:b8:1b:85:2c:3c:ac:05:f5:e2:
                    bc:f4:92:a0:f7:d4:5b:a9:2e:0e:87:5b:3b:d2:a1:
                    29:a6:79:37:9c:f0:a1:9c:f3:2e:51:cc:56:0c:f3:
                    1b:39:8a:29:6c:86:44:77:7a:84:c1:ca:ec:e6:6b:
                    7d:28:49:c7:9d:b5:c6:84:be:d7:2a:70:57:15:88:
                    1b:14:6a:c2:41:9d:a0:94:58:e3:6a:ae:75:e4:a3:
                    57:c8:57:27:19:00:94:8a:b6:7b:cd:8f:28:2f:04:
                    03:56:d3:43:44:7f:65:b0:26:62:c4:23:01:11:76:
                    3f:c9:6f:b0:0f:94:b6:a7:01:b8:a0:0e:51:c7:d7:
                    c5:ce:61:0a:be:14:e1:f0:c7:52:df:b4:00:da:5d:
                    19:0e:56:0f:5e:4b:92:91:df:cc:43:c6:34:00:9b:
                    40:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:87:EA:6A:1F:80:A4:97:C7:1B:C3:1C:51:EF:09:C9:6C:EA:C2:BA
            X509v3 Authority Key Identifier:
                keyid:0B:A7:54:69:C6:2D:25:92:05:BA:8B:B6:5D:B9:9D:03:37:BA:D7:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6dUacYtJZIFuou2XbmdAze6130.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C532/B42B7D22B21011E9AD7E0F79C4F9AE02/C6dUacYtJZIFuou2XbmdAze6130.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:fc:42:1a:26:84:ae:a1:5c:3e:1d:bc:f2:6c:a9:66:3e:07:
         3f:b6:4e:87:0f:9b:f3:5b:17:2a:2f:34:11:c0:45:31:50:e3:
         13:2b:cf:98:56:92:50:0f:27:07:8d:f1:52:47:93:6b:4d:84:
         57:a4:7d:66:93:39:da:01:0b:7b:ef:de:11:4d:19:9e:de:01:
         7e:08:f7:e0:86:58:d3:5d:f9:c6:95:94:a8:67:a9:0f:1e:b6:
         16:8a:2f:c9:cd:e3:58:69:e0:7b:b7:04:b7:0f:a5:ff:41:f6:
         29:49:1e:f0:4d:00:d9:ee:ec:ad:d6:c4:22:62:a1:03:34:5f:
         3a:ad:4d:8e:74:03:ea:a9:c4:a9:92:f2:9a:44:14:f9:06:5a:
         67:3e:b9:ca:19:e1:1b:cc:3b:55:fa:bf:e8:77:c3:b6:83:4a:
         b4:1e:c1:b8:0f:9e:31:f9:d9:af:bd:54:3e:6d:1d:6f:5c:5e:
         97:f8:1f:76:e3:34:20:45:2e:9a:a1:b6:68:1e:05:e0:81:f2:
         d1:94:b3:5c:ae:12:73:83:a2:6a:b8:82:f1:61:2f:8b:a5:bb:
         53:57:96:2b:7b:f6:45:c4:b9:8a:5d:8f:82:26:3b:53:1c:78:
         74:e0:38:2c:54:33:1d:ed:81:ce:98:e6:3d:92:de:11:d9:74:
         8d:a4:4d:c6
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDewwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM1MzIxMTAvBgNVBAUTKDBCQTc1NDY5QzYyRDI1OTIwNUJBOEJCNjVEQjk5RDAz
MzdCQUQ3N0QwHhcNMjUwNTE2MTgwNzI4WhcNMjUwNTIzMTgwNzI4WjAYMRYwFAYD
VQQDEw02ODI3N2VlMC0zOWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtA8xVVN6zC6rwn0r6S33ZDb9zbWMoGyIKAusESYx/6P0R6X9OVpfZ84p4q8X
LD6cGmGnONcUpIfqdLBk9yu9p/MV2p+KHcbytOV7ZAaQLesL9VqR8Pxy8M7rJxsI
fBW4G4UsPKwF9eK89JKg99RbqS4Oh1s70qEppnk3nPChnPMuUcxWDPMbOYopbIZE
d3qEwcrs5mt9KEnHnbXGhL7XKnBXFYgbFGrCQZ2glFjjaq515KNXyFcnGQCUirZ7
zY8oLwQDVtNDRH9lsCZixCMBEXY/yW+wD5S2pwG4oA5Rx9fFzmEKvhTh8MdS37QA
2l0ZDlYPXkuSkd/MQ8Y0AJtAuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDWH6mof
gKSXxxvDHFHvCcls6sK6MB8GA1UdIwQYMBaAFAunVGnGLSWSBbqLtl25nQM3utd9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzUzMi9CNDJCN0QyMkIy
MTAxMUU5QUQ3RTBGNzlDNEY5QUUwMi9DNmRVYWNZdEpaSUZ1b3UyWGJtZEF6ZTYx
MzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0M2ZFVhY1l0SlpJRnVvdTJYYm1kQXplNjEzMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QzUzMi9CNDJCN0QyMkIyMTAxMUU5QUQ3RTBGNzlDNEY5QUUwMi9DNmRVYWNZdEpa
SUZ1b3UyWGJtZEF6ZTYxMzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCD/EIaJoSuoVw+HbzybKlmPgc/tk6HD5vzWxcqLzQRwEUxUOMTK8+Y
VpJQDycHjfFSR5NrTYRXpH1mkznaAQt7794RTRme3gF+CPfghljTXfnGlZSoZ6kP
HrYWii/JzeNYaeB7twS3D6X/QfYpSR7wTQDZ7uyt1sQiYqEDNF86rU2OdAPqqcSp
kvKaRBT5BlpnPrnKGeEbzDtV+r/od8O2g0q0HsG4D54x+dmvvVQ+bR1vXF6X+B92
4zQgRS6aobZoHgXggfLRlLNcrhJzg6JquILxYS+LpbtTV5Yre/ZFxLmKXY+CJjtT
HHh04DgsVDMd7YHOmOY9kt4R2XSNpE3G
-----END CERTIFICATE-----
Generated at Fri May 16 21:45:43 2025 by rpki-client