Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
File:                     BXOVtIePsaZ_y61YJhe3uq8sMf8.mft (raw, json)
Hash identifier:          R4HfxQdJbTSfsIBMeByhqAob+95C3vf8zHqSm8fEOMA=
Subject key identifier:   07:49:C8:A1:BF:FB:00:0C:6E:E9:48:E5:5E:96:EE:B0:57:63:39:04
Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF
Certificate issuer:       /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
Certificate serial:       B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
Manifest number:          A4
Signing time:             Tue 13 May 2025 05:49:24 +0000
Manifest this update:     Tue 13 May 2025 05:49:23 +0000
Manifest next update:     Tue 20 May 2025 05:49:23 +0000
Files and hashes:         1: BXOVtIePsaZ_y61YJhe3uq8sMf8.crl (hash: ScvoEfoRppllizlLa2+TJVoQxRLbdEYW4uwGAxmAtGo=)
                          2: 7EFD7D08A10211EFBF75467FC4F9AE02.roa (hash: mGmTdvdeQ6LXmazTZifM5k7qicxGPPhPxrXFLCv01wE=)
                          3: A8F83B2E202911F08EABDC87C4F9AE02.roa (hash: au4wObG66n+FNIJhrBPi+a9u77dosecOMM31PZwhHNs=)
                          4: B0D3DA64107B11F097717C77C4F9AE02.roa (hash: mF2pS0ZKhuR3W1Ye5LyjmzgePNi2be1ALq5lkAuFFWM=)
                          5: FA414880107B11F09A6AF277C4F9AE02.roa (hash: BsQbSnrdZpeuIwgJSimif1Dp6ijeFhRf56GJivVGuBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl
                          rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 05:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
        Validity
            Not Before: May 13 05:49:23 2025 GMT
            Not After : May 20 05:49:23 2025 GMT
        Subject: CN=6822dd63-e1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:15:7e:ee:3e:8f:60:bf:fa:0b:76:d5:bf:
                    eb:22:a0:72:5f:21:7a:2a:18:77:60:89:0d:fa:6e:
                    70:d4:b5:b5:78:26:da:50:5f:c5:16:41:a7:56:6e:
                    37:86:a3:e9:91:69:2a:34:a8:c6:80:c6:32:2f:83:
                    88:ac:d7:b0:97:28:0c:57:9a:4b:6d:8b:06:73:76:
                    35:1e:e3:9a:a0:73:2d:4a:30:56:1b:14:58:b9:d5:
                    af:52:e4:6b:4a:6a:bf:55:d3:1e:04:c0:35:2c:30:
                    d9:20:9e:64:78:a8:40:db:37:18:44:00:4f:85:5d:
                    b1:4a:21:ab:95:e3:91:50:5b:7c:a5:4b:38:19:15:
                    51:4e:a4:f1:2c:91:6a:45:eb:83:a6:49:8b:12:fc:
                    4c:b7:f2:c5:53:f8:c7:5a:cd:e9:89:c1:83:4e:b8:
                    30:08:dd:79:df:ad:f7:ce:a8:86:c9:8a:d7:86:64:
                    fa:1a:6b:2f:36:4a:10:cd:ce:fd:47:1e:28:28:fa:
                    da:68:9f:35:65:2a:52:72:3b:93:34:5d:43:a1:67:
                    3c:89:2b:9e:05:ba:de:87:43:4a:d8:a7:3b:dd:42:
                    1b:47:48:a0:d6:89:f6:1e:50:e0:c3:a3:7f:f3:76:
                    69:3c:92:a4:2c:64:4e:4a:a2:37:7a:76:87:74:8b:
                    5f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:49:C8:A1:BF:FB:00:0C:6E:E9:48:E5:5E:96:EE:B0:57:63:39:04
            X509v3 Authority Key Identifier:
                keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:85:b9:7f:b9:68:0c:c9:54:22:e9:17:d6:db:c1:86:bc:03:
         2e:d7:8a:96:74:d1:99:d4:14:90:5f:9f:df:b7:a2:78:33:5a:
         e1:d3:76:76:c5:f7:13:6d:ba:03:4a:03:b0:06:60:a6:8d:90:
         96:ae:2c:93:5d:1c:00:f7:29:b5:cb:22:d9:7f:92:f0:81:5c:
         5d:95:74:4d:03:af:f7:43:68:a1:8c:43:32:13:d6:d1:06:ed:
         e2:e9:ad:83:4a:11:0c:a3:8c:09:31:05:22:8f:be:3f:6c:dc:
         52:3f:b1:94:0c:a5:db:02:81:35:08:f6:3c:34:45:2f:bf:9a:
         c7:d3:43:bd:bc:e0:de:cd:7f:7e:ea:f1:1e:08:89:2a:2a:4c:
         0e:9e:0d:bf:71:22:71:7b:5d:06:46:73:ef:82:72:f3:d1:31:
         af:96:98:4a:a3:96:b7:25:7e:db:f9:2c:cb:dc:34:b2:5a:3c:
         11:ac:41:0e:bd:97:0e:84:fb:9c:4d:07:93:b4:11:28:8f:5f:
         04:45:51:c4:11:37:18:01:43:dd:d3:01:91:c6:37:28:a7:2f:
         70:3a:46:ef:1c:f0:d0:df:ab:74:f3:b1:37:5a:e6:80:d7:f7:
         85:30:e3:5d:da:20:26:9d:55:b2:e4:6e:32:23:00:07:21:2a:
         3a:59:e8:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzZDOEYxMTAvBgNVBAUTKDA1NzM5NUI0ODc4RkIxQTY3RkNCQUQ1ODI2MTdCN0JB
QUYyQzMxRkYwHhcNMjUwNTEzMDU0OTIzWhcNMjUwNTIwMDU0OTIzWjAYMRYwFAYD
VQQDEw02ODIyZGQ2My1lMWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzlcVfu4+j2C/+gt21b/rIqByXyF6Khh3YIkN+m5w1LW1eCbaUF/FFkGnVm43
hqPpkWkqNKjGgMYyL4OIrNewlygMV5pLbYsGc3Y1HuOaoHMtSjBWGxRYudWvUuRr
Smq/VdMeBMA1LDDZIJ5keKhA2zcYRABPhV2xSiGrleORUFt8pUs4GRVRTqTxLJFq
ReuDpkmLEvxMt/LFU/jHWs3picGDTrgwCN153633zqiGyYrXhmT6GmsvNkoQzc79
Rx4oKPraaJ81ZSpScjuTNF1DoWc8iSueBbreh0NK2Kc73UIbR0ig1on2HlDgw6N/
83ZpPJKkLGROSqI3enaHdItfVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdJyKG/
+wAMbulI5V6W7rBXYzkEMB8GA1UdIwQYMBaAFAVzlbSHj7Gmf8utWCYXt7qvLDH/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NkM4Ri9GQTBFMDVBNDZC
NUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNhWl95NjFZSmhlM3VxOHNN
ZjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0JYT1Z0SWVQc2FaX3k2MVlKaGUzdXE4c01mOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NkM4Ri9GQTBFMDVBNDZCNUExMUVGQkM5OTkyNUNDNEY5QUUwMi9CWE9WdEllUHNh
Wl95NjFZSmhlM3VxOHNNZjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7hbl/uWgMyVQi6RfW28GGvAMu14qWdNGZ1BSQX5/ft6J4M1rh03Z2
xfcTbboDSgOwBmCmjZCWriyTXRwA9ym1yyLZf5LwgVxdlXRNA6/3Q2ihjEMyE9bR
Bu3i6a2DShEMo4wJMQUij74/bNxSP7GUDKXbAoE1CPY8NEUvv5rH00O9vODezX9+
6vEeCIkqKkwOng2/cSJxe10GRnPvgnLz0TGvlphKo5a3JX7b+SzL3DSyWjwRrEEO
vZcOhPucTQeTtBEoj18ERVHEETcYAUPd0wGRxjcopy9wOkbvHPDQ36t087E3WuaA
1/eFMONd2iAmnVWy5G4yIwAHISo6Weis
-----END CERTIFICATE-----
Generated at Wed May 14 08:14:41 2025 by rpki-client