Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
File:                     4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft (raw, json)
Hash identifier:          d8NXhZ+VealBV5D+KHxSN7qFTiOmdC1DPxGSlz5rnfg=
Subject key identifier:   F9:1B:5E:80:26:62:05:82:38:B0:55:A3:F6:4F:0C:22:09:B5:9C:B2
Authority key identifier: E2:B7:A2:FC:C2:D7:CC:B9:93:D5:32:CF:AB:B2:7F:AD:B2:48:DD:17
Certificate issuer:       /CN=A915C948/serialNumber=E2B7A2FCC2D7CCB993D532CFABB27FADB248DD17
Certificate serial:       0153
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
Manifest number:          0150
Signing time:             Tue 01 Jul 2025 04:39:14 +0000
Manifest this update:     Tue 01 Jul 2025 04:39:14 +0000
Manifest next update:     Tue 08 Jul 2025 04:39:14 +0000
Files and hashes:         1: 4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl (hash: 0yS6PrZQIPqE4ViW5jG/6YdfD4TS5H508op7pXY+90o=)
                          2: BED765785B0411EE94E4143EC4F9AE02.roa (hash: nzuv2qiqFy7RBa+xOMRhwb33N3s9hvdrnFdUnSAlhPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl
                          rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 04:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C948, serialNumber=E2B7A2FCC2D7CCB993D532CFABB27FADB248DD17
        Validity
            Not Before: Jul  1 04:39:14 2025 GMT
            Not After : Jul  8 04:39:14 2025 GMT
        Subject: CN=68636672-4702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ef:14:60:be:05:41:c2:61:db:8d:c0:6a:5d:
                    3e:00:83:60:f2:fc:89:44:ae:7f:e8:a9:1d:5c:a8:
                    d6:48:03:24:5d:73:2a:ed:e8:15:02:15:d2:78:1e:
                    64:b2:78:f3:6a:74:5b:d8:65:a0:29:12:45:9a:5a:
                    f2:38:3d:26:c1:76:7e:cb:4b:ab:3b:1d:d6:48:eb:
                    30:9e:3d:33:7b:54:aa:49:ec:08:a8:9f:70:8a:03:
                    62:10:bf:af:62:6b:33:f4:80:70:e5:c0:e9:df:04:
                    3e:9f:b5:a6:43:77:40:0f:20:26:ab:d5:f6:6c:d4:
                    ec:e4:ab:7c:0f:0e:30:5f:68:4d:54:ce:a7:9a:4e:
                    8a:e8:86:31:ec:6d:2d:74:af:bf:1f:b7:6a:b8:c3:
                    0b:1e:68:be:bd:8e:e5:33:ce:c8:39:20:06:17:b8:
                    fc:7f:1c:28:8e:bd:0c:07:a0:af:2d:52:59:3e:29:
                    c1:34:36:5d:8f:0d:1d:ad:5e:99:57:3b:97:17:0e:
                    55:eb:c1:2f:4b:59:b8:f0:b7:81:d5:e8:6d:f5:4f:
                    51:51:43:f3:2e:e4:c6:3f:f4:4e:16:f9:5b:70:b6:
                    f8:82:7b:08:e1:f1:46:ef:de:73:20:6a:79:28:f3:
                    72:80:3c:ac:9f:57:f6:9a:07:9c:91:b3:da:fe:1b:
                    3b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:1B:5E:80:26:62:05:82:38:B0:55:A3:F6:4F:0C:22:09:B5:9C:B2
            X509v3 Authority Key Identifier:
                keyid:E2:B7:A2:FC:C2:D7:CC:B9:93:D5:32:CF:AB:B2:7F:AD:B2:48:DD:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4rei_MLXzLmT1TLPq7J_rbJI3Rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C948/BB976832552C11EEAB049F69C4F9AE02/4rei_MLXzLmT1TLPq7J_rbJI3Rc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ac:dd:6b:6f:35:12:d9:c0:42:47:10:64:0b:5d:88:ec:ad:
         b9:1d:40:b5:34:25:ae:6b:c9:56:69:ec:3a:b1:ee:9f:6a:32:
         7f:77:fd:7d:8b:ba:2a:b1:68:62:ff:18:8b:05:d6:34:36:71:
         87:9b:30:e2:96:8c:4b:de:ec:59:0f:50:a8:59:67:e3:18:89:
         52:75:b7:a5:22:fc:6a:b9:ab:68:a7:df:6a:ec:d2:c6:78:96:
         bd:05:94:ed:93:40:ed:89:76:92:58:18:b8:62:4c:bf:12:70:
         47:bf:53:55:b2:f1:f8:96:60:a3:ce:d2:22:a4:97:e6:2e:d9:
         46:45:ef:c9:d3:f3:7f:3c:96:eb:65:fd:5d:66:12:c8:6e:86:
         c7:3e:bf:ec:ae:0b:0c:89:0f:a4:f6:92:a2:91:27:bb:a1:b9:
         d9:19:ff:52:8d:0c:07:53:4c:55:92:ba:6c:f5:46:20:15:99:
         7f:0d:c6:a5:db:02:85:20:81:31:d9:a2:e2:df:b8:67:15:21:
         93:fa:48:4c:eb:55:83:d5:4a:6d:e4:22:a3:ae:d3:0c:c1:21:
         1d:37:88:78:bc:c0:d4:51:e9:0d:54:bf:45:91:22:6a:2f:48:
         ff:58:27:0c:03:a2:6e:55:c5:35:1c:9e:b9:f1:09:41:5b:98:
         af:01:3d:0f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM5NDgxMTAvBgNVBAUTKEUyQjdBMkZDQzJEN0NDQjk5M0Q1MzJDRkFCQjI3RkFE
QjI0OEREMTcwHhcNMjUwNzAxMDQzOTE0WhcNMjUwNzA4MDQzOTE0WjAYMRYwFAYD
VQQDEw02ODYzNjY3Mi00NzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0O8UYL4FQcJh243Aal0+AINg8vyJRK5/6KkdXKjWSAMkXXMq7egVAhXSeB5k
snjzanRb2GWgKRJFmlryOD0mwXZ+y0urOx3WSOswnj0ze1SqSewIqJ9wigNiEL+v
Ymsz9IBw5cDp3wQ+n7WmQ3dADyAmq9X2bNTs5Kt8Dw4wX2hNVM6nmk6K6IYx7G0t
dK+/H7dquMMLHmi+vY7lM87IOSAGF7j8fxwojr0MB6CvLVJZPinBNDZdjw0drV6Z
VzuXFw5V68EvS1m48LeB1eht9U9RUUPzLuTGP/ROFvlbcLb4gnsI4fFG795zIGp5
KPNygDysn1f2mgeckbPa/hs7nQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPkbXoAm
YgWCOLBVo/ZPDCIJtZyyMB8GA1UdIwQYMBaAFOK3ovzC18y5k9Uyz6uyf62ySN0X
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Qzk0OC9CQjk3NjgzMjU1
MkMxMUVFQUIwNDlGNjlDNEY5QUUwMi80cmVpX01MWHpMbVQxVExQcTdKX3JiSkkz
UmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRyZWlfTUxYekxtVDFUTFBxN0pfcmJKSTNSYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
Qzk0OC9CQjk3NjgzMjU1MkMxMUVFQUIwNDlGNjlDNEY5QUUwMi80cmVpX01MWHpM
bVQxVExQcTdKX3JiSkkzUmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAyrN1rbzUS2cBCRxBkC12I7K25HUC1NCWua8lWaew6se6fajJ/d/19
i7oqsWhi/xiLBdY0NnGHmzDiloxL3uxZD1CoWWfjGIlSdbelIvxquatop99q7NLG
eJa9BZTtk0DtiXaSWBi4Yky/EnBHv1NVsvH4lmCjztIipJfmLtlGRe/J0/N/PJbr
Zf1dZhLIbobHPr/srgsMiQ+k9pKikSe7obnZGf9SjQwHU0xVkrps9UYgFZl/Dcal
2wKFIIEx2aLi37hnFSGT+khM61WD1Upt5CKjrtMMwSEdN4h4vMDUUekNVL9FkSJq
L0j/WCcMA6JuVcU1HJ658QlBW5ivAT0P
-----END CERTIFICATE-----
Generated at Wed Jul 2 19:15:18 2025 by rpki-client