Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft
File:                     Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft (raw, json)
Hash identifier:          drY09IsjCUOjHl8/pqsODw2Qx+01TudRm07lJkhE7r0=
Subject key identifier:   88:8A:E9:F7:9B:ED:C8:4E:45:F2:52:FA:87:8E:81:2F:1A:D2:C7:93
Authority key identifier: 46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45
Certificate issuer:       /CN=A9188F45/serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45
Certificate serial:       FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft
Manifest number:          F8
Signing time:             Sun 11 May 2025 04:04:31 +0000
Manifest this update:     Sun 11 May 2025 04:04:31 +0000
Manifest next update:     Sun 18 May 2025 04:04:31 +0000
Files and hashes:         1: Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl (hash: NmiDTSvao7Da2PEZ99b9sY1bGUvR+dAzOr1gZ0hknd8=)
                          2: 8A574D9AB8AB11EEA866EB27C4F9AE02.roa (hash: B74l8KAcZzTJjTG0Mnc+WUicHwzuFyRpUWB92X31DmU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl
                          rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 04:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188F45, serialNumber=46EF04BF1198BE0E2A313AA7AD0AB0FC7E081C45
        Validity
            Not Before: May 11 04:04:31 2025 GMT
            Not After : May 18 04:04:31 2025 GMT
        Subject: CN=682021cf-10df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:ee:ff:ef:24:0c:67:19:a9:84:1c:ec:87:
                    fc:c3:26:07:f0:7d:c8:06:36:81:c8:69:fd:20:4a:
                    50:e5:77:d6:6f:70:a5:85:34:dc:8a:59:45:e7:30:
                    0d:fe:5d:f8:12:00:06:3a:c6:ec:fd:31:fa:24:fd:
                    2d:f1:44:57:51:cd:7b:73:91:66:9b:d5:8e:53:2a:
                    56:c4:62:96:bb:a9:96:df:1f:45:fe:41:bd:d3:d9:
                    28:5d:7a:f5:6f:d8:95:f0:27:9b:2e:89:d9:65:d2:
                    d6:57:2f:6a:12:d5:1b:d1:b4:cd:63:88:27:e2:bb:
                    3f:ba:af:de:24:85:45:af:5a:52:50:f3:98:73:94:
                    c1:ad:1d:13:e9:69:09:36:65:b3:02:3b:18:a9:72:
                    5e:c2:c6:59:6f:e7:29:07:ee:fe:a9:bf:9a:d2:76:
                    68:f0:dd:87:22:b5:3e:af:84:df:4a:23:03:c4:a2:
                    34:58:b5:d1:9a:64:a6:6b:4a:2c:cd:c0:d6:57:03:
                    7b:cd:86:ea:d2:48:f8:6a:28:da:0e:1e:c8:0f:4a:
                    22:67:d1:d0:c4:d9:20:ef:f5:76:eb:b5:c2:0f:58:
                    0f:1c:f8:9e:67:42:f9:37:7b:41:0d:52:0b:a0:fd:
                    9e:1f:40:fb:54:05:c8:bb:5b:fb:6c:1c:6a:96:56:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8A:E9:F7:9B:ED:C8:4E:45:F2:52:FA:87:8E:81:2F:1A:D2:C7:93
            X509v3 Authority Key Identifier:
                keyid:46:EF:04:BF:11:98:BE:0E:2A:31:3A:A7:AD:0A:B0:FC:7E:08:1C:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F45/FD996514B8AA11EE99D6C81BC4F9AE02/Ru8EvxGYvg4qMTqnrQqw_H4IHEU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:46:08:7c:e9:7f:a4:18:6f:60:b8:25:8b:46:11:82:64:78:
         2c:6d:f3:9e:b9:6b:31:73:63:45:9e:99:6d:42:1a:59:ca:8d:
         92:5e:38:dc:e7:10:97:d5:29:c0:0a:5b:4b:06:67:90:cf:16:
         5a:27:27:0b:35:ae:ce:c6:2f:f9:f1:54:88:59:49:5b:05:73:
         2b:f7:3c:00:97:90:6f:ce:06:22:6b:ef:35:f1:8d:fe:f4:9f:
         90:dc:39:12:5f:60:d7:ba:20:2a:6c:4c:17:07:73:eb:84:2f:
         b2:21:67:b3:37:9d:9e:5f:76:08:14:4e:60:47:53:8f:ed:ab:
         5c:e0:e4:c0:be:f5:3b:22:0d:1d:94:66:62:4b:93:ed:ea:8c:
         87:d1:86:d6:d1:97:bb:dc:16:ef:fe:5b:88:66:0a:0c:d6:c9:
         9d:a1:a2:2c:72:5e:6e:44:f5:f8:f6:24:aa:7d:15:87:44:40:
         27:54:54:35:d7:37:0b:2c:85:8c:2e:5d:5b:54:60:3b:bb:1a:
         3f:e7:ce:02:3e:b4:22:df:07:e9:ba:c6:87:dd:5e:69:14:29:
         78:bd:d6:85:a7:42:4b:91:6b:a3:58:cb:f9:e8:e8:4b:1a:f6:
         10:4b:2f:b5:59:f0:90:c0:6f:04:5d:f5:24:28:f4:08:65:92:
         3d:1f:a2:4b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODhGNDUxMTAvBgNVBAUTKDQ2RUYwNEJGMTE5OEJFMEUyQTMxM0FBN0FEMEFCMEZD
N0UwODFDNDUwHhcNMjUwNTExMDQwNDMxWhcNMjUwNTE4MDQwNDMxWjAYMRYwFAYD
VQQDEw02ODIwMjFjZi0xMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAruDu/+8kDGcZqYQc7If8wyYH8H3IBjaByGn9IEpQ5XfWb3ClhTTcillF5zAN
/l34EgAGOsbs/TH6JP0t8URXUc17c5Fmm9WOUypWxGKWu6mW3x9F/kG909koXXr1
b9iV8CebLonZZdLWVy9qEtUb0bTNY4gn4rs/uq/eJIVFr1pSUPOYc5TBrR0T6WkJ
NmWzAjsYqXJewsZZb+cpB+7+qb+a0nZo8N2HIrU+r4TfSiMDxKI0WLXRmmSma0os
zcDWVwN7zYbq0kj4aijaDh7ID0oiZ9HQxNkg7/V267XCD1gPHPieZ0L5N3tBDVIL
oP2eH0D7VAXIu1v7bBxqllaOxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIiK6feb
7chORfJS+oeOgS8a0seTMB8GA1UdIwQYMBaAFEbvBL8RmL4OKjE6p60KsPx+CBxF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OEY0NS9GRDk5NjUxNEI4
QUExMUVFOTlENkM4MUJDNEY5QUUwMi9SdThFdnhHWXZnNHFNVHFuclFxd19INElI
RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1J1OEV2eEdZdmc0cU1UcW5yUXF3X0g0SUhFVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
OEY0NS9GRDk5NjUxNEI4QUExMUVFOTlENkM4MUJDNEY5QUUwMi9SdThFdnhHWXZn
NHFNVHFuclFxd19INElIRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQATRgh86X+kGG9guCWLRhGCZHgsbfOeuWsxc2NFnpltQhpZyo2SXjjc
5xCX1SnACltLBmeQzxZaJycLNa7Oxi/58VSIWUlbBXMr9zwAl5BvzgYia+818Y3+
9J+Q3DkSX2DXuiAqbEwXB3PrhC+yIWezN52eX3YIFE5gR1OP7atc4OTAvvU7Ig0d
lGZiS5Pt6oyH0YbW0Ze73Bbv/luIZgoM1smdoaIscl5uRPX49iSqfRWHREAnVFQ1
1zcLLIWMLl1bVGA7uxo/584CPrQi3wfpusaH3V5pFCl4vdaFp0JLkWujWMv56OhL
GvYQSy+1WfCQwG8EXfUkKPQIZZI9H6JL
-----END CERTIFICATE-----
Generated at Tue May 13 03:55:48 2025 by rpki-client