Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
File:                     zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft (raw, json)
Hash identifier:          uF0UjJi7fSCmxP6EKPO4pY8oBizbHOJLCL2eRm364TY=
Subject key identifier:   81:B7:C4:4A:96:A7:FF:CF:8C:A7:11:13:8F:5F:18:A4:2D:20:DB:EB
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Certificate issuer:       /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial:       077A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
Manifest number:          0766
Signing time:             Sat 10 May 2025 21:13:08 +0000
Manifest this update:     Sat 10 May 2025 21:13:08 +0000
Manifest next update:     Sat 17 May 2025 21:13:08 +0000
Files and hashes:         1: zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl (hash: 7Ztl+XA9W96AeVgVswaXVkdsyn/3RUPSwl6AE6gtp58=)
                          2: 303C97563EB611EBA4FCB055C4F9AE02.roa (hash: t6Ge3iMSSEepvK+Lc1zDSD/DIuC0nX4IWGHRYnQrK6k=)
                          3: 78AFDDB84A8211EB8760D667C4F9AE02.roa (hash: nsBI5aAcb8LJy1OAbfgsAYYYF1PowIy7VZxwvaix1FI=)
                          4: 0CACB5AC198E11EBBDF60275C4F9AE02.roa (hash: hVGpRvhX5Ju9BqJwvLilMW82myywekIMm4EdIHToKkQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
                          rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 21:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1914 (0x77a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
        Validity
            Not Before: May 10 21:13:08 2025 GMT
            Not After : May 17 21:13:08 2025 GMT
        Subject: CN=681fc164-1958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:24:28:73:e5:17:96:aa:37:4f:12:5f:85:
                    32:f0:58:af:ae:3c:79:7e:6a:43:eb:3d:e2:dc:ef:
                    29:56:72:e4:6e:be:df:56:1f:de:06:85:0c:ab:42:
                    e8:ec:29:90:21:90:4d:63:13:2b:df:1f:ac:12:df:
                    f9:85:42:04:e1:7a:16:23:45:1a:63:01:a6:d1:7b:
                    eb:e0:12:eb:05:f5:18:83:ac:8b:87:b8:60:2a:71:
                    8d:7d:bc:29:d4:f8:9e:10:e7:9a:07:89:ba:aa:35:
                    8f:95:9d:d2:d4:5d:7c:6b:9a:aa:d6:e3:99:61:ba:
                    18:54:26:cf:6e:1c:0b:22:37:bf:5a:10:39:6a:9f:
                    70:0d:15:d0:b7:60:a9:e7:24:58:bf:44:8f:cd:0c:
                    de:df:26:02:7c:5e:e9:72:29:0a:bf:11:80:5e:82:
                    f6:8a:4a:7e:6c:9e:6a:4a:71:92:9e:0a:65:29:f9:
                    86:ed:e6:23:89:d7:94:bb:0b:c0:19:80:55:4a:3b:
                    6e:bb:5c:7e:bf:83:33:7f:b8:2b:0e:7c:99:30:a2:
                    c7:19:b1:e3:4c:52:14:6f:15:07:74:9d:70:52:5e:
                    e5:81:4f:d9:17:d2:b2:bc:74:90:7e:4d:ba:fb:80:
                    42:56:ad:10:56:db:56:b3:a0:a4:89:17:a1:46:87:
                    a5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B7:C4:4A:96:A7:FF:CF:8C:A7:11:13:8F:5F:18:A4:2D:20:DB:EB
            X509v3 Authority Key Identifier:
                keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f8:4b:0e:d6:36:b0:33:22:ce:ca:7a:80:37:dd:49:ad:a4:
         e2:dc:f8:23:79:76:30:ff:03:4f:0a:52:d3:c3:e1:cc:cf:e4:
         32:82:6e:78:82:43:4a:da:9e:e7:6f:bd:a8:a0:f0:d6:ed:d8:
         70:c5:19:55:51:37:f4:27:d1:51:66:3b:45:44:16:66:ca:73:
         e5:ae:be:7e:cc:e1:f6:66:b8:4e:ca:af:05:51:06:e7:10:d7:
         96:c3:dd:39:8a:ea:0a:ed:d7:23:49:17:d1:e2:e4:5f:df:bd:
         79:1b:18:56:2f:4f:50:6e:01:48:a3:ef:38:40:77:0c:d8:1a:
         27:06:08:f9:ba:51:af:7c:5d:89:9c:b0:e1:fd:0b:40:f7:ff:
         54:d7:a0:1d:d3:c4:ee:c7:28:e7:5c:d4:e5:c8:23:12:ba:dd:
         f9:fe:e3:41:53:0b:83:40:51:79:e0:de:39:cc:ad:b8:fb:49:
         d1:c9:8d:dc:de:dc:23:7c:3f:32:4a:32:71:ba:84:f9:99:8e:
         4a:94:c9:2e:6c:f2:bc:b7:bf:8e:30:5f:79:29:7b:0a:18:57:
         aa:33:00:6d:3f:b6:99:ae:84:de:86:0c:9a:18:3a:9f:1a:6c:
         35:08:70:58:e0:8d:53:eb:90:09:76:b3:27:a0:05:53:6a:ca:
         2f:11:44:59
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB3owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODA1NEQxMTAvBgNVBAUTKENEODI3QkY5NjQ1ODM2MUY2MDk4QjIyRjc1ODU0OEQ3
RUFFRkExNjgwHhcNMjUwNTEwMjExMzA4WhcNMjUwNTE3MjExMzA4WjAYMRYwFAYD
VQQDEw02ODFmYzE2NC0xOTU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuh4kKHPlF5aqN08SX4Uy8Fivrjx5fmpD6z3i3O8pVnLkbr7fVh/eBoUMq0Lo
7CmQIZBNYxMr3x+sEt/5hUIE4XoWI0UaYwGm0Xvr4BLrBfUYg6yLh7hgKnGNfbwp
1PieEOeaB4m6qjWPlZ3S1F18a5qq1uOZYboYVCbPbhwLIje/WhA5ap9wDRXQt2Cp
5yRYv0SPzQze3yYCfF7pcikKvxGAXoL2ikp+bJ5qSnGSngplKfmG7eYjideUuwvA
GYBVSjtuu1x+v4Mzf7grDnyZMKLHGbHjTFIUbxUHdJ1wUl7lgU/ZF9KyvHSQfk26
+4BCVq0QVttWs6CkiRehRoel+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIG3xEqW
p//PjKcRE49fGKQtINvrMB8GA1UdIwQYMBaAFM2Ce/lkWDYfYJiyL3WFSNfq76Fo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDU0RC82RTA4MjNCMDE5
OEMxMUVCQUZDQjk0NTlDNEY5QUUwMi96WUo3LVdSWU5oOWdtTEl2ZFlWSTEtcnZv
V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3pZSjctV1JZTmg5Z21MSXZkWVZJMS1ydm9XZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MDU0RC82RTA4MjNCMDE5OEMxMUVCQUZDQjk0NTlDNEY5QUUwMi96WUo3LVdSWU5o
OWdtTEl2ZFlWSTEtcnZvV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBi+EsO1jawMyLOynqAN91JraTi3PgjeXYw/wNPClLTw+HMz+Qygm54
gkNK2p7nb72ooPDW7dhwxRlVUTf0J9FRZjtFRBZmynPlrr5+zOH2ZrhOyq8FUQbn
ENeWw905iuoK7dcjSRfR4uRf3715GxhWL09QbgFIo+84QHcM2BonBgj5ulGvfF2J
nLDh/QtA9/9U16Ad08TuxyjnXNTlyCMSut35/uNBUwuDQFF54N45zK24+0nRyY3c
3twjfD8ySjJxuoT5mY5KlMkubPK8t7+OMF95KXsKGFeqMwBtP7aZroTehgyaGDqf
Gmw1CHBY4I1T65AJdrMnoAVTasovEURZ
-----END CERTIFICATE-----
Generated at Mon May 12 22:39:48 2025 by rpki-client