Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
File:                     cV0939fSp5kTexOT1KjPorHU02Q.mft (raw, json)
Hash identifier:          8dy/msbot9gI7QCJTe8pEKxlRzUt78Ll0JUBiF35fU0=
Subject key identifier:   CB:37:6E:0F:52:7B:E0:C8:3C:42:7B:CB:0E:5A:32:7F:03:72:52:88
Authority key identifier: 71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64
Certificate issuer:       /CN=A918A695/serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
Manifest number:          83
Signing time:             Tue 13 May 2025 05:47:44 +0000
Manifest this update:     Tue 13 May 2025 05:47:43 +0000
Manifest next update:     Tue 20 May 2025 05:47:43 +0000
Files and hashes:         1: cV0939fSp5kTexOT1KjPorHU02Q.crl (hash: GJy1sjdW2l+j1x6riSwZJC9xhFReJZFw35v9XFGy+KM=)
                          2: 8BAFDC4C691E11EF9AC4F168C4F9AE02.roa (hash: ho9e+hBvfRrUv61HQybAcXR0qZ4hUME6WoyxclRolHQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl
                          rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 05:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A695, serialNumber=715D3DDFD7D2A799137B1393D4A8CFA2B1D4D364
        Validity
            Not Before: May 13 05:47:43 2025 GMT
            Not After : May 20 05:47:43 2025 GMT
        Subject: CN=6822dcff-7393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f4:f0:02:c2:90:89:02:7d:0e:f8:c9:f4:7b:
                    bf:61:31:6b:96:f4:fa:78:32:e6:0d:36:1c:15:b0:
                    cd:09:b5:05:04:4b:2d:2c:39:83:4f:3e:c2:1a:4c:
                    38:0d:ed:84:27:90:47:72:42:7e:b9:2e:72:bc:8a:
                    18:18:cd:03:29:1b:12:7d:35:6f:8f:33:8c:ce:2a:
                    f3:96:e6:62:a4:dd:d8:4c:c4:f2:83:9d:df:80:19:
                    d6:83:53:20:5b:bb:53:d9:aa:29:54:2d:d6:80:38:
                    a8:66:11:fd:19:ae:ef:fc:fe:6d:85:6b:5d:83:63:
                    ec:0f:f2:29:a6:f3:59:a2:17:a1:44:ee:34:dd:6f:
                    b7:62:d4:10:06:2d:19:e5:47:e5:9a:06:52:65:16:
                    d2:06:da:2a:13:ba:7c:2c:69:8a:2e:fd:8c:8c:f5:
                    87:57:09:1d:8c:45:81:17:3f:d0:15:41:c2:e1:10:
                    83:40:77:76:69:2f:aa:28:5d:c9:4e:79:39:25:51:
                    fd:5e:e8:77:b1:b6:b0:dc:81:23:b1:a0:bc:b1:17:
                    43:70:4d:5a:4c:01:94:09:3e:f7:37:a1:48:33:8e:
                    1d:6c:c2:9f:2c:b0:78:51:fa:6e:7c:47:06:ad:40:
                    13:d2:62:80:e7:5d:d4:80:6c:79:47:ca:29:89:89:
                    62:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:37:6E:0F:52:7B:E0:C8:3C:42:7B:CB:0E:5A:32:7F:03:72:52:88
            X509v3 Authority Key Identifier:
                keyid:71:5D:3D:DF:D7:D2:A7:99:13:7B:13:93:D4:A8:CF:A2:B1:D4:D3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cV0939fSp5kTexOT1KjPorHU02Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A695/96BDF34A691D11EFB8FD1E64C4F9AE02/cV0939fSp5kTexOT1KjPorHU02Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ac:ea:5a:d4:ac:bb:14:96:24:82:0b:d3:98:5a:29:e4:cd:
         8b:bc:47:21:50:08:2f:c5:26:4c:84:a1:ca:a2:07:ca:ad:90:
         57:c7:30:bb:c3:22:54:25:67:b9:d1:db:7e:47:0f:eb:fe:bc:
         42:95:67:b8:1f:50:c1:e1:99:7d:c5:43:22:7b:e7:f0:b6:c8:
         ec:55:c9:53:8c:36:d0:d0:bc:73:ef:26:4e:f9:90:b6:b7:49:
         91:6a:28:20:dc:0f:8d:5a:9a:26:73:4f:24:8a:c9:d3:e5:bf:
         68:57:c4:64:b4:41:05:30:1c:51:e5:94:2b:44:00:ce:41:6e:
         fd:e5:ae:2f:55:f4:cb:41:7f:eb:7b:f0:cb:88:d6:c1:b1:e1:
         23:92:10:d6:56:f7:bf:17:bc:b1:ae:a5:d3:8c:ee:30:a1:cc:
         10:14:57:65:c5:1a:bf:28:82:e2:1e:0b:a7:08:62:b4:10:41:
         94:45:40:4b:80:86:e5:43:4e:f4:e4:31:65:f6:92:3f:34:86:
         0e:c0:d5:64:4d:24:26:55:f8:76:40:94:7f:65:69:58:5a:f7:
         58:6b:db:63:87:64:4c:26:40:ce:05:9a:f5:c3:99:3f:a5:8b:
         5d:b9:4a:db:88:a1:a3:48:0e:0f:7c:2d:82:f3:03:1a:47:4b:
         63:c7:5c:37
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEE2OTUxMTAvBgNVBAUTKDcxNUQzRERGRDdEMkE3OTkxMzdCMTM5M0Q0QThDRkEy
QjFENEQzNjQwHhcNMjUwNTEzMDU0NzQzWhcNMjUwNTIwMDU0NzQzWjAYMRYwFAYD
VQQDEw02ODIyZGNmZi03MzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9vTwAsKQiQJ9DvjJ9Hu/YTFrlvT6eDLmDTYcFbDNCbUFBEstLDmDTz7CGkw4
De2EJ5BHckJ+uS5yvIoYGM0DKRsSfTVvjzOMzirzluZipN3YTMTyg53fgBnWg1Mg
W7tT2aopVC3WgDioZhH9Ga7v/P5thWtdg2PsD/IppvNZohehRO403W+3YtQQBi0Z
5UflmgZSZRbSBtoqE7p8LGmKLv2MjPWHVwkdjEWBFz/QFUHC4RCDQHd2aS+qKF3J
Tnk5JVH9Xuh3sbaw3IEjsaC8sRdDcE1aTAGUCT73N6FIM44dbMKfLLB4UfpufEcG
rUAT0mKA513UgGx5R8opiYlipQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMs3bg9S
e+DIPEJ7yw5aMn8DclKIMB8GA1UdIwQYMBaAFHFdPd/X0qeZE3sTk9Soz6Kx1NNk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QTY5NS85NkJERjM0QTY5
MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi9jVjA5MzlmU3A1a1RleE9UMUtqUG9ySFUw
MlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NWMDkzOWZTcDVrVGV4T1QxS2pQb3JIVTAyUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QTY5NS85NkJERjM0QTY5MUQxMUVGQjhGRDFFNjRDNEY5QUUwMi9jVjA5MzlmU3A1
a1RleE9UMUtqUG9ySFUwMlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBsrOpa1Ky7FJYkggvTmFop5M2LvEchUAgvxSZMhKHKogfKrZBXxzC7
wyJUJWe50dt+Rw/r/rxClWe4H1DB4Zl9xUMie+fwtsjsVclTjDbQ0Lxz7yZO+ZC2
t0mRaigg3A+NWpomc08kisnT5b9oV8RktEEFMBxR5ZQrRADOQW795a4vVfTLQX/r
e/DLiNbBseEjkhDWVve/F7yxrqXTjO4wocwQFFdlxRq/KILiHgunCGK0EEGURUBL
gIblQ0705DFl9pI/NIYOwNVkTSQmVfh2QJR/ZWlYWvdYa9tjh2RMJkDOBZr1w5k/
pYtduUrbiKGjSA4PfC2C8wMaR0tjx1w3
-----END CERTIFICATE-----
Generated at Tue May 13 07:29:26 2025 by rpki-client