Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
File:                     r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft (raw, json)
Hash identifier:          3cdBbUMUqRbE9zTnKtYqXVbi1uwNpAhGhppP4JN5DKg=
Subject key identifier:   30:A6:42:D3:64:10:97:D4:CA:6D:89:76:16:3E:4E:99:7F:E5:B4:4C
Authority key identifier: AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D
Certificate issuer:       /CN=A917414E/serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
Certificate serial:       0306
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
Manifest number:          02F9
Signing time:             Tue 01 Jul 2025 01:55:42 +0000
Manifest this update:     Tue 01 Jul 2025 01:55:41 +0000
Manifest next update:     Tue 08 Jul 2025 01:55:41 +0000
Files and hashes:         1: r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl (hash: 4EPrzy8z8zfYGn77wKJ7wW+Zv6L5QjrPLcJiRQvtLmQ=)
                          2: 41C460BE1BE911ED81DB667EC4F9AE02.roa (hash: F2rD9DTyJO/8KZY6J1+Hne/amu0UrQKM61Lrb0l7cz8=)
                          3: 67E15AC4E40611EC8410A53CC4F9AE02.roa (hash: VQEy4E57oyCsilPS/N4eVIUrZJ0xe1SQnIjV1RgzS+k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl
                          rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 01:55:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 774 (0x306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917414E, serialNumber=AF67132D837D576FFF777227A3725D601ED9105D
        Validity
            Not Before: Jul  1 01:55:41 2025 GMT
            Not After : Jul  8 01:55:41 2025 GMT
        Subject: CN=6863401d-65e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:b3:ca:03:86:9e:b9:9c:b2:20:db:38:8c:
                    cb:b1:31:f9:92:59:99:e5:2d:eb:4d:9f:07:8d:be:
                    23:19:74:47:ff:56:2f:cb:91:1c:09:bc:9e:11:30:
                    95:a4:f6:77:4e:c4:c3:43:79:03:d7:be:c2:96:53:
                    1a:b3:b7:74:5b:37:cb:9f:ef:b9:77:76:98:3c:4f:
                    96:06:e5:09:64:0a:3d:21:0e:45:a6:1e:b0:ca:47:
                    1c:0d:13:94:2e:11:73:d0:dc:72:7b:6c:03:3e:b0:
                    a3:e6:d4:af:12:75:e6:5a:97:d3:44:43:76:fe:7b:
                    1d:f8:38:67:42:eb:81:55:96:46:7f:1d:cf:42:49:
                    c9:17:7c:80:8d:ca:d7:94:d7:cb:0c:2d:b1:85:a3:
                    f5:79:c1:15:95:67:09:84:ca:7f:26:9c:a2:8e:6d:
                    3f:ec:aa:91:25:06:cd:cc:1a:eb:5c:ff:c0:b1:02:
                    2b:cf:8e:1b:c9:d3:8f:a5:e9:92:77:8e:2d:2b:4c:
                    5e:6a:6d:af:e2:e7:b7:11:39:05:69:08:de:1b:7f:
                    15:e3:96:d7:4b:f8:87:f2:40:c6:34:ec:0b:10:ca:
                    e3:c4:4b:0b:b4:a6:4b:a6:73:87:97:2c:f2:10:44:
                    f7:82:79:c8:71:97:64:20:7c:46:a4:8b:cf:6b:2a:
                    f6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A6:42:D3:64:10:97:D4:CA:6D:89:76:16:3E:4E:99:7F:E5:B4:4C
            X509v3 Authority Key Identifier:
                keyid:AF:67:13:2D:83:7D:57:6F:FF:77:72:27:A3:72:5D:60:1E:D9:10:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r2cTLYN9V2__d3Ino3JdYB7ZEF0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917414E/4C5E2FB8E3FF11ECAC210572C4F9AE02/r2cTLYN9V2__d3Ino3JdYB7ZEF0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:47:86:e6:44:63:44:d7:7b:b6:ba:4d:91:94:fd:68:26:67:
         e8:f3:f8:b4:03:1a:c5:68:b2:50:9a:a4:c0:c9:cc:1b:d4:46:
         82:53:ff:14:fc:e2:3f:20:15:b3:50:0d:08:e2:63:ff:c9:54:
         ae:bb:e0:ac:7b:40:d8:68:4b:41:ec:f7:b9:3c:a9:0d:9c:90:
         f8:f2:7e:02:a2:aa:9f:f5:b1:24:64:9e:83:2d:b0:6d:7e:1e:
         87:73:de:8d:3b:b1:b7:ce:95:09:1b:68:41:65:6f:9f:d4:1d:
         d4:20:1f:57:22:af:f8:69:39:01:ce:cc:e8:3d:4a:38:ea:9a:
         f3:d0:0b:f0:f7:d7:a6:e3:38:ad:26:88:ba:6e:00:e1:e3:66:
         3c:45:4a:78:3f:f8:21:47:45:45:41:b0:88:fa:bb:9e:b5:67:
         d1:2e:e5:a3:3a:7b:4a:b2:ea:7f:dd:c9:6b:ac:8a:20:48:3a:
         1b:09:35:20:d0:3f:8e:2c:ea:76:52:3e:5c:25:e8:79:5e:6a:
         9d:08:80:d3:bf:a8:38:1c:21:2a:41:6c:75:8b:48:73:d5:b3:
         39:6e:e5:2e:3f:c4:32:23:fb:8d:0b:83:13:e5:89:d0:ec:40:
         97:dc:7c:3a:de:f5:0b:3d:0f:d2:02:54:15:ce:34:4f:a4:3a:
         33:9a:13:8f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzQxNEUxMTAvBgNVBAUTKEFGNjcxMzJEODM3RDU3NkZGRjc3NzIyN0EzNzI1RDYw
MUVEOTEwNUQwHhcNMjUwNzAxMDE1NTQxWhcNMjUwNzA4MDE1NTQxWjAYMRYwFAYD
VQQDEw02ODYzNDAxZC02NWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtbSzygOGnrmcsiDbOIzLsTH5klmZ5S3rTZ8Hjb4jGXRH/1Yvy5EcCbyeETCV
pPZ3TsTDQ3kD177CllMas7d0WzfLn++5d3aYPE+WBuUJZAo9IQ5Fph6wykccDROU
LhFz0Nxye2wDPrCj5tSvEnXmWpfTREN2/nsd+DhnQuuBVZZGfx3PQknJF3yAjcrX
lNfLDC2xhaP1ecEVlWcJhMp/Jpyijm0/7KqRJQbNzBrrXP/AsQIrz44bydOPpemS
d44tK0xeam2v4ue3ETkFaQjeG38V45bXS/iH8kDGNOwLEMrjxEsLtKZLpnOHlyzy
EET3gnnIcZdkIHxGpIvPayr2QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDCmQtNk
EJfUym2JdhY+Tpl/5bRMMB8GA1UdIwQYMBaAFK9nEy2DfVdv/3dyJ6NyXWAe2RBd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NDE0RS80QzVFMkZCOEUz
RkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYyX19kM0lubzNKZFlCN1pF
RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3IyY1RMWU45VjJfX2QzSW5vM0pkWUI3WkVGMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NDE0RS80QzVFMkZCOEUzRkYxMUVDQUMyMTA1NzJDNEY5QUUwMi9yMmNUTFlOOVYy
X19kM0lubzNKZFlCN1pFRjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBtR4bmRGNE13u2uk2RlP1oJmfo8/i0AxrFaLJQmqTAycwb1EaCU/8U
/OI/IBWzUA0I4mP/yVSuu+Cse0DYaEtB7Pe5PKkNnJD48n4Coqqf9bEkZJ6DLbBt
fh6Hc96NO7G3zpUJG2hBZW+f1B3UIB9XIq/4aTkBzszoPUo46prz0Avw99em4zit
Joi6bgDh42Y8RUp4P/ghR0VFQbCI+ruetWfRLuWjOntKsup/3clrrIogSDobCTUg
0D+OLOp2Uj5cJeh5XmqdCIDTv6g4HCEqQWx1i0hz1bM5buUuP8QyI/uNC4MT5YnQ
7ECX3Hw63vULPQ/SAlQVzjRPpDozmhOP
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:50:37 2025 by rpki-client