Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
File:                     Mu8k27J0cpaQRU_8KxGThFGcavo.mft (raw, json)
Hash identifier:          jCWh9DS8q8yE6VII/vqtZQvNUey8812n/53h5lZhpt8=
Subject key identifier:   8D:92:D1:53:87:02:47:A4:51:12:CF:9A:8F:56:42:9D:BC:BF:B5:9B
Authority key identifier: 32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA
Certificate issuer:       /CN=A9181477/serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
Manifest number:          5B
Signing time:             Thu 15 May 2025 06:28:40 +0000
Manifest this update:     Thu 15 May 2025 06:28:40 +0000
Manifest next update:     Thu 22 May 2025 06:28:40 +0000
Files and hashes:         1: Mu8k27J0cpaQRU_8KxGThFGcavo.crl (hash: 4w6BAckCayqrWFbsq3fEi/tV8xVwJj56igpVZd6TtCU=)
                          2: 6ABF1108DD0C11EFBD619B85C4F9AE02.roa (hash: 9pqV/7wKXCq4SdHaR69xHgTpPRKIF3LpqAqexsGPQg8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl
                          rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 06:28:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181477, serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
        Validity
            Not Before: May 15 06:28:40 2025 GMT
            Not After : May 22 06:28:40 2025 GMT
        Subject: CN=68258998-569a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4f:d6:77:4e:c9:5a:0f:00:d6:0f:42:f5:bd:
                    d9:85:25:50:a9:c7:c4:7f:d9:b7:b5:04:52:8a:e2:
                    5e:dd:70:6c:be:89:6b:77:63:c1:07:d2:36:f8:07:
                    eb:90:ca:30:5f:ad:15:c5:71:2b:7a:97:ff:83:c2:
                    ee:f8:d0:40:f6:e8:da:57:81:67:f7:77:c6:39:1a:
                    76:75:29:fc:1b:0b:16:74:77:56:c8:22:b6:30:23:
                    5d:56:01:ec:dd:95:dc:6a:b4:2f:c0:0f:32:3e:04:
                    f7:b9:3e:e3:56:91:16:2d:06:49:75:6a:0d:b2:4d:
                    1c:0d:8b:85:19:5d:51:66:b9:e6:0d:9b:bb:90:78:
                    a4:ba:d7:9a:5e:14:eb:4b:78:71:d5:8d:c8:6f:e6:
                    e3:b4:40:24:b8:15:26:83:d6:38:2b:b0:cf:ba:f4:
                    61:77:b0:82:f1:f6:dc:7e:0d:82:dc:0d:f8:d5:af:
                    ef:67:81:62:fb:d9:ec:27:00:b2:4e:b4:ad:08:b4:
                    78:f9:9b:2f:f1:3c:35:6b:70:bc:03:c6:90:54:b7:
                    e0:47:3b:ce:47:2c:3e:44:86:d7:f2:fd:af:52:33:
                    21:95:66:06:0a:92:0d:f2:67:33:42:da:0f:fb:1d:
                    b5:47:02:c3:5c:1e:49:60:79:d1:8c:d7:8d:0d:ff:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:92:D1:53:87:02:47:A4:51:12:CF:9A:8F:56:42:9D:BC:BF:B5:9B
            X509v3 Authority Key Identifier:
                keyid:32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:40:89:8a:34:3d:d9:9f:34:ce:ec:62:57:65:31:47:e3:ec:
         56:e3:32:41:c4:93:70:65:c7:b6:fc:83:14:9f:81:2f:90:1e:
         fa:4e:cf:0f:8d:24:68:45:1e:07:80:fa:ba:57:18:e2:cd:53:
         8d:1b:59:4e:2f:38:95:14:92:37:7c:dd:4f:a9:c2:7c:8a:e1:
         c6:63:d9:bf:cf:8c:b8:20:87:3a:a1:52:77:00:19:76:0c:68:
         bd:1e:a2:66:1a:0c:cb:ca:fa:af:2e:a0:83:b9:ed:92:92:d5:
         00:da:f9:f5:a6:0f:32:94:a2:f0:3c:4b:b7:0b:a0:55:87:dd:
         6d:64:fa:67:e5:38:29:af:bc:7d:89:41:86:ff:46:e7:46:ea:
         e1:69:74:c5:94:8d:ee:58:93:8f:f0:90:d5:14:c8:54:f8:d9:
         d9:08:f4:da:e4:bf:66:2b:5c:70:c6:ff:2f:00:a2:fa:6b:49:
         8d:bf:c3:ea:5f:8c:88:b1:99:fe:e1:41:2d:51:5b:89:3c:96:
         f2:a4:ca:60:9a:71:2f:7c:cd:95:b5:33:0f:f9:41:68:60:38:
         15:6b:5a:22:71:9f:b7:c7:2c:c6:f7:8b:0f:4e:00:37:ab:9e:
         ea:46:65:68:9d:81:a4:00:b8:c8:50:81:9a:7f:aa:cb:e8:3c:
         f7:11:04:77
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBXTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
MTQ3NzExMC8GA1UEBRMoMzJFRjI0REJCMjc0NzI5NjkwNDU0RkZDMkIxMTkzODQ1
MTlDNkFGQTAeFw0yNTA1MTUwNjI4NDBaFw0yNTA1MjIwNjI4NDBaMBgxFjAUBgNV
BAMTDTY4MjU4OTk4LTU2OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDhT9Z3TslaDwDWD0L1vdmFJVCpx8R/2be1BFKK4l7dcGy+iWt3Y8EH0jb4B+uQ
yjBfrRXFcSt6l/+Dwu740ED26NpXgWf3d8Y5GnZ1KfwbCxZ0d1bIIrYwI11WAezd
ldxqtC/ADzI+BPe5PuNWkRYtBkl1ag2yTRwNi4UZXVFmueYNm7uQeKS615peFOtL
eHHVjchv5uO0QCS4FSaD1jgrsM+69GF3sILx9tx+DYLcDfjVr+9ngWL72ewnALJO
tK0ItHj5my/xPDVrcLwDxpBUt+BHO85HLD5Ehtfy/a9SMyGVZgYKkg3yZzNC2g/7
HbVHAsNcHklgedGM140N/3BRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjZLRU4cC
R6RREs+aj1ZCnby/tZswHwYDVR0jBBgwFoAUMu8k27J0cpaQRU/8KxGThFGcavow
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgxNDc3LzEwRjk2RTUyQUQy
ODExRUY5OUUzOTQyMkM0RjlBRTAyL011OGsyN0owY3BhUVJVXzhLeEdUaEZHY2F2
by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvTXU4azI3SjBjcGFRUlVfOEt4R1RoRkdjYXZvLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTgx
NDc3LzEwRjk2RTUyQUQyODExRUY5OUUzOTQyMkM0RjlBRTAyL011OGsyN0owY3Bh
UVJVXzhLeEdUaEZHY2F2by5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAMxAiYo0PdmfNM7sYldlMUfj7FbjMkHEk3Blx7b8gxSfgS+QHvpOzw+N
JGhFHgeA+rpXGOLNU40bWU4vOJUUkjd83U+pwnyK4cZj2b/PjLgghzqhUncAGXYM
aL0eomYaDMvK+q8uoIO57ZKS1QDa+fWmDzKUovA8S7cLoFWH3W1k+mflOCmvvH2J
QYb/RudG6uFpdMWUje5Yk4/wkNUUyFT42dkI9Nrkv2YrXHDG/y8AovprSY2/w+pf
jIixmf7hQS1RW4k8lvKkymCacS98zZW1Mw/5QWhgOBVrWiJxn7fHLMb3iw9OADer
nupGZWidgaQAuMhQgZp/qsvoPPcRBHc=
-----END CERTIFICATE-----
Generated at Sat May 17 08:03:00 2025 by rpki-client