Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft
File:                     uWfS7oK3russVByppRA7Wgym5xI.mft (raw, json)
Hash identifier:          wroPVYKRjHiXaLcqoMeuxE2AvaH1KJPIX5t+lfAkGtg=
Subject key identifier:   D0:7F:ED:0C:8F:7F:2E:CA:49:C0:6A:D7:E4:82:23:71:14:5D:85:83
Authority key identifier: B9:67:D2:EE:82:B7:AE:EB:2C:54:1C:A9:A5:10:3B:5A:0C:A6:E7:12
Certificate issuer:       /CN=A9166E07/serialNumber=B967D2EE82B7AEEB2C541CA9A5103B5A0CA6E712
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft
Manifest number:          0D
Signing time:             Thu 15 May 2025 07:25:22 +0000
Manifest this update:     Thu 15 May 2025 07:25:22 +0000
Manifest next update:     Thu 22 May 2025 07:25:22 +0000
Files and hashes:         1: uWfS7oK3russVByppRA7Wgym5xI.crl (hash: v2jIUlFvzSDNp77t9WNhDfasAKUdqrVxri8jsv8MJhQ=)
                          2: D7D79C92241A11F0A9D27045C4F9AE02.roa (hash: //G4AwnQA0nMb3DeflcQ+SQx5LkYQDI/08bvYQspQs0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.crl
                          rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 07:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166E07, serialNumber=B967D2EE82B7AEEB2C541CA9A5103B5A0CA6E712
        Validity
            Not Before: May 15 07:25:22 2025 GMT
            Not After : May 22 07:25:22 2025 GMT
        Subject: CN=682596e2-bff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:c1:18:aa:b7:82:72:07:d4:74:de:c4:ad:
                    86:ae:17:19:b0:46:cf:95:66:ae:62:24:62:12:f0:
                    bc:d1:1e:ab:10:86:eb:a7:e5:e9:91:83:2e:e7:44:
                    33:7e:d1:7d:5c:da:0e:4a:c3:23:ec:84:ad:24:89:
                    f3:db:17:62:66:db:3c:31:4c:50:3e:b8:20:1c:23:
                    ac:56:da:7a:86:fa:6e:b4:70:bf:8f:33:49:55:55:
                    00:7b:3d:0b:05:34:53:bb:15:1f:4a:3c:f6:dc:c8:
                    28:d1:0a:1f:63:71:db:89:a5:f2:a8:38:af:25:3b:
                    72:f3:b4:b7:5f:82:88:a3:15:ed:6f:05:c6:75:6b:
                    76:11:c3:1c:3b:28:11:28:3c:0c:49:bf:af:54:ca:
                    02:ee:5d:f5:a2:46:3a:8d:14:ac:1b:70:51:57:1d:
                    aa:d0:e1:66:92:ce:7d:53:12:ef:f5:41:59:72:91:
                    0a:29:1a:c8:9b:75:56:b4:7f:2c:b1:08:f7:a0:38:
                    99:34:5a:ac:e6:24:15:2a:d0:5e:d3:06:31:f1:c7:
                    99:5b:99:e4:5d:0c:ac:54:09:c0:68:a3:08:6c:b4:
                    2f:6e:c9:5f:10:79:42:2b:e1:e1:4f:9b:e6:e0:e7:
                    36:88:68:11:cb:53:89:3f:27:55:0a:43:29:7d:4e:
                    ac:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7F:ED:0C:8F:7F:2E:CA:49:C0:6A:D7:E4:82:23:71:14:5D:85:83
            X509v3 Authority Key Identifier:
                keyid:B9:67:D2:EE:82:B7:AE:EB:2C:54:1C:A9:A5:10:3B:5A:0C:A6:E7:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uWfS7oK3russVByppRA7Wgym5xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166E07/6B56D1FA241A11F08F04BE44C4F9AE02/uWfS7oK3russVByppRA7Wgym5xI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:b9:4c:85:36:c0:cb:e8:2d:ce:f5:c1:02:4a:58:68:4e:60:
         50:53:14:68:e9:f1:53:42:ba:1d:27:a1:13:df:12:56:2e:5c:
         d7:0f:04:2f:64:2e:9e:e6:30:50:a7:38:f5:96:a5:4d:64:cb:
         bd:8e:78:25:24:8a:06:0d:f6:b1:e2:20:74:08:8f:1d:3f:02:
         40:41:84:69:1c:b0:6d:64:65:79:04:3f:ac:cb:5a:fc:9a:bf:
         e2:8e:08:be:ca:5a:34:7d:c1:fb:48:49:17:b0:df:ab:fe:e9:
         d1:b9:3e:b0:51:d4:ce:63:0a:77:66:c0:ad:53:70:c8:2b:91:
         d2:1c:21:02:5d:ee:a2:0b:c0:85:4c:a4:2d:fc:bd:a4:a4:c3:
         5d:fd:c4:03:b8:66:13:5a:2f:e8:b2:3e:2d:2b:99:c3:79:15:
         29:8c:36:39:19:f4:1f:7f:69:2c:79:9c:e0:38:8f:7e:fd:4a:
         b3:cd:2b:52:28:9a:ee:a7:33:00:d1:e2:0b:34:37:2d:ad:8b:
         6c:23:eb:45:6f:34:8b:63:18:57:81:77:b8:a1:59:79:2c:64:
         ad:4d:29:6d:e0:cb:27:30:8a:43:cc:32:85:7d:5d:81:71:77:
         33:fa:11:e5:47:e0:e3:cd:bf:41:8a:f4:b0:e7:2e:f2:6b:d8:
         3b:14:53:0e
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NkUwNzExMC8GA1UEBRMoQjk2N0QyRUU4MkI3QUVFQjJDNTQxQ0E5QTUxMDNCNUEw
Q0E2RTcxMjAeFw0yNTA1MTUwNzI1MjJaFw0yNTA1MjIwNzI1MjJaMBgxFjAUBgNV
BAMTDTY4MjU5NmUyLWJmZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2PcEYqreCcgfUdN7ErYauFxmwRs+VZq5iJGIS8LzRHqsQhuun5emRgy7nRDN+
0X1c2g5KwyPshK0kifPbF2Jm2zwxTFA+uCAcI6xW2nqG+m60cL+PM0lVVQB7PQsF
NFO7FR9KPPbcyCjRCh9jcduJpfKoOK8lO3LztLdfgoijFe1vBcZ1a3YRwxw7KBEo
PAxJv69UygLuXfWiRjqNFKwbcFFXHarQ4WaSzn1TEu/1QVlykQopGsibdVa0fyyx
CPegOJk0WqzmJBUq0F7TBjHxx5lbmeRdDKxUCcBoowhstC9uyV8QeUIr4eFPm+bg
5zaIaBHLU4k/J1UKQyl9Tqx1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0H/tDI9/
LspJwGrX5IIjcRRdhYMwHwYDVR0jBBgwFoAUuWfS7oK3russVByppRA7Wgym5xIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2RTA3LzZCNTZEMUZBMjQx
QTExRjA4RjA0QkU0NEM0RjlBRTAyL3VXZlM3b0szcnVzc1ZCeXBwUkE3V2d5bTV4
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvdVdmUzdvSzNydXNzVkJ5cHBSQTdXZ3ltNXhJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY2
RTA3LzZCNTZEMUZBMjQxQTExRjA4RjA0QkU0NEM0RjlBRTAyL3VXZlM3b0szcnVz
c1ZCeXBwUkE3V2d5bTV4SS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAKq5TIU2wMvoLc71wQJKWGhOYFBTFGjp8VNCuh0noRPfElYuXNcPBC9k
Lp7mMFCnOPWWpU1ky72OeCUkigYN9rHiIHQIjx0/AkBBhGkcsG1kZXkEP6zLWvya
v+KOCL7KWjR9wftISRew36v+6dG5PrBR1M5jCndmwK1TcMgrkdIcIQJd7qILwIVM
pC38vaSkw139xAO4ZhNaL+iyPi0rmcN5FSmMNjkZ9B9/aSx5nOA4j379SrPNK1Io
mu6nMwDR4gs0Ny2ti2wj60VvNItjGFeBd7ihWXksZK1NKW3gyycwikPMMoV9XYFx
dzP6EeVH4OPNv0GK9LDnLvJr2DsUUw4=
-----END CERTIFICATE-----
Generated at Fri May 16 09:22:30 2025 by rpki-client