Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
File:                     rLLFTvC2TcIQCkhqe49ZMkute0k.mft (raw, json)
Hash identifier:          48zAr+qskJivD8l7YfRfslH8q4/Y+9CkSc89BMefCmk=
Subject key identifier:   A4:1B:B3:45:14:A8:1C:A3:9A:7A:83:56:53:8A:BC:A2:8A:D4:AB:E5
Authority key identifier: AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49
Certificate issuer:       /CN=A9185673/serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
Manifest number:          0153
Signing time:             Tue 13 May 2025 03:25:22 +0000
Manifest this update:     Tue 13 May 2025 03:25:22 +0000
Manifest next update:     Tue 20 May 2025 03:25:22 +0000
Files and hashes:         1: rLLFTvC2TcIQCkhqe49ZMkute0k.crl (hash: A/ifq4sUYj86XNRCq8IoJIttqMQ3aTH0LyT/He3t+AI=)
                          2: B76A1A109B5411EF9756FD79C4F9AE02.roa (hash: knnG12wLuZJ7GEg76U5ILM36lIjx9IdtYM3rUCgaB+w=)
                          3: C4D5BB009B5411EFBBEFF384C4F9AE02.roa (hash: eIIjFxp+ef05O83W47GAbRwK3AECc7ulokZsYTSnHpc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl
                          rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 03:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185673, serialNumber=ACB2C54EF0B64DC2100A486A7B8F59324BAD7B49
        Validity
            Not Before: May 13 03:25:22 2025 GMT
            Not After : May 20 03:25:22 2025 GMT
        Subject: CN=6822bba2-4784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cc:f9:6b:a1:36:98:02:39:84:1b:fb:6b:2f:
                    68:3a:99:47:6d:54:e0:f4:df:35:71:17:a5:b0:9a:
                    66:12:8f:0f:ad:cb:4b:5f:25:2e:0d:3b:99:5d:70:
                    f3:02:eb:2a:10:5a:2f:74:a5:d6:4a:83:06:11:21:
                    b3:0a:c5:ff:61:38:01:fb:14:15:61:f1:d4:cb:cf:
                    c9:01:7c:9c:9b:16:f5:b2:dc:f7:a9:3f:d1:4a:02:
                    bd:0b:37:5a:b8:be:4c:53:45:bb:9c:c2:fc:54:cc:
                    3f:0d:6d:94:44:dd:82:a7:52:96:60:8d:15:1b:29:
                    74:64:f4:c1:a1:66:f8:fe:b6:b5:92:10:95:51:fd:
                    7c:8b:37:07:cd:9f:b8:c6:a5:7e:8e:c6:ea:d7:cf:
                    53:8c:54:f9:9e:b5:c2:2a:23:a0:c7:25:4a:2f:8f:
                    1c:7c:f9:5a:b2:2b:bc:6d:45:8b:de:df:0d:2e:30:
                    7c:3c:fb:55:66:a0:f2:58:05:22:4a:4e:26:1a:8c:
                    90:d7:ad:e0:3f:05:96:58:d2:8d:6a:75:da:0d:c3:
                    4d:62:45:f2:43:9a:cf:08:65:5c:95:c4:00:db:74:
                    06:21:32:12:85:8a:37:9f:2f:66:7c:23:cc:90:22:
                    a8:01:99:0a:94:fd:84:76:7e:61:01:98:ed:72:27:
                    b1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1B:B3:45:14:A8:1C:A3:9A:7A:83:56:53:8A:BC:A2:8A:D4:AB:E5
            X509v3 Authority Key Identifier:
                keyid:AC:B2:C5:4E:F0:B6:4D:C2:10:0A:48:6A:7B:8F:59:32:4B:AD:7B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLLFTvC2TcIQCkhqe49ZMkute0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185673/803ACD2C329211EE986F141FC4F9AE02/rLLFTvC2TcIQCkhqe49ZMkute0k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:95:40:92:c2:dc:9a:9e:c1:84:f9:5d:09:68:fe:03:77:ac:
         b7:50:66:38:79:e9:9e:27:c6:45:ab:eb:db:17:1c:0d:4c:b6:
         e3:90:71:fc:ae:93:5a:3b:47:1a:1e:51:86:11:57:b3:fe:d1:
         56:cb:af:25:f8:54:97:85:93:69:df:48:ed:83:03:36:af:30:
         56:27:9e:6e:3f:48:83:4a:c5:c0:7b:41:0c:b0:e0:c9:96:58:
         ef:c6:49:f7:3a:98:63:68:ee:d4:1b:9f:09:4d:f1:c4:ba:80:
         c4:18:d9:bc:0a:07:08:1c:a2:65:d7:06:e4:a4:cb:8b:ec:63:
         8a:86:3e:c3:6e:b0:70:68:34:ac:49:cf:fb:fd:21:78:61:75:
         31:bf:80:c8:7a:a0:96:be:79:47:3e:75:68:bb:86:05:07:e5:
         fa:94:11:bc:be:9a:af:ca:16:8f:a2:03:11:7b:bb:40:6a:e0:
         3b:95:c1:4b:db:13:3b:3a:24:db:cb:49:91:5a:db:b2:2d:ca:
         b3:6c:92:cf:ec:09:5a:f4:52:9d:3e:19:cb:61:f4:de:ec:a4:
         9d:3e:90:3a:e4:55:bb:4f:e9:0b:6e:e9:ac:59:cc:16:44:dd:
         c5:3d:76:c3:d6:bf:4c:cb:20:3b:09:23:41:49:80:28:5e:a3:
         df:44:17:7b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU2NzMxMTAvBgNVBAUTKEFDQjJDNTRFRjBCNjREQzIxMDBBNDg2QTdCOEY1OTMy
NEJBRDdCNDkwHhcNMjUwNTEzMDMyNTIyWhcNMjUwNTIwMDMyNTIyWjAYMRYwFAYD
VQQDEw02ODIyYmJhMi00Nzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAo8z5a6E2mAI5hBv7ay9oOplHbVTg9N81cRelsJpmEo8PrctLXyUuDTuZXXDz
AusqEFovdKXWSoMGESGzCsX/YTgB+xQVYfHUy8/JAXycmxb1stz3qT/RSgK9Czda
uL5MU0W7nML8VMw/DW2URN2Cp1KWYI0VGyl0ZPTBoWb4/ra1khCVUf18izcHzZ+4
xqV+jsbq189TjFT5nrXCKiOgxyVKL48cfPlasiu8bUWL3t8NLjB8PPtVZqDyWAUi
Sk4mGoyQ163gPwWWWNKNanXaDcNNYkXyQ5rPCGVclcQA23QGITIShYo3ny9mfCPM
kCKoAZkKlP2Edn5hAZjtciex1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQbs0UU
qByjmnqDVlOKvKKK1KvlMB8GA1UdIwQYMBaAFKyyxU7wtk3CEApIanuPWTJLrXtJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTY3My84MDNBQ0QyQzMy
OTIxMUVFOTg2RjE0MUZDNEY5QUUwMi9yTExGVHZDMlRjSVFDa2hxZTQ5Wk1rdXRl
MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JMTEZUdkMyVGNJUUNraHFlNDlaTWt1dGUway5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NTY3My84MDNBQ0QyQzMyOTIxMUVFOTg2RjE0MUZDNEY5QUUwMi9yTExGVHZDMlRj
SVFDa2hxZTQ5Wk1rdXRlMGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBGlUCSwtyansGE+V0JaP4Dd6y3UGY4eemeJ8ZFq+vbFxwNTLbjkHH8
rpNaO0caHlGGEVez/tFWy68l+FSXhZNp30jtgwM2rzBWJ55uP0iDSsXAe0EMsODJ
lljvxkn3OphjaO7UG58JTfHEuoDEGNm8CgcIHKJl1wbkpMuL7GOKhj7DbrBwaDSs
Sc/7/SF4YXUxv4DIeqCWvnlHPnVou4YFB+X6lBG8vpqvyhaPogMRe7tAauA7lcFL
2xM7OiTby0mRWtuyLcqzbJLP7Ala9FKdPhnLYfTe7KSdPpA65FW7T+kLbumsWcwW
RN3FPXbD1r9MyyA7CSNBSYAoXqPfRBd7
-----END CERTIFICATE-----
Generated at Wed May 14 04:56:06 2025 by rpki-client