Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
File:                     6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json)
Hash identifier:          8+JzP7s9tysVyy0Ip2Wy6LGqrcl4QA3AwlplJuh/JMY=
Subject key identifier:   59:EF:9C:00:66:CC:93:73:EC:B7:69:9C:89:E5:73:F1:3F:5A:14:A8
Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD
Certificate issuer:       /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
Certificate serial:       0105
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
Manifest number:          FE
Signing time:             Thu 15 May 2025 04:33:40 +0000
Manifest this update:     Thu 15 May 2025 04:33:40 +0000
Manifest next update:     Thu 22 May 2025 04:33:40 +0000
Files and hashes:         1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: srwtoRZKK6KQA4xoNG7EfOheapUcB9w4OiNCa2+XWfk=)
                          2: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: 4+NB3j+Ku9z9DW7nQRzRq87llzJ2sOudlesGDx2vWI8=)
                          3: BD1A38D4984B11EFB342C220C4F9AE02.roa (hash: EIknsqOvV+3/e4OowMHbRVdsbkd9a/wu1lD+d08gIWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl
                          rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 04:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 261 (0x105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918ACB2, serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD
        Validity
            Not Before: May 15 04:33:40 2025 GMT
            Not After : May 22 04:33:40 2025 GMT
        Subject: CN=68256ea4-0501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:35:5d:92:e8:40:2a:f3:6e:77:2f:22:45:70:
                    c5:b1:23:bf:f8:19:11:00:30:5f:22:bd:37:d0:94:
                    ba:a5:6b:ca:62:e1:d8:b8:bc:dd:85:33:53:a8:e5:
                    2a:bb:7f:5d:ac:4a:3f:cb:ec:1c:4c:ae:0e:3a:fb:
                    e8:0d:bc:1e:c8:87:f5:d6:59:0d:7e:7d:7e:19:4a:
                    9b:f8:e9:bf:8e:a9:0b:db:ee:b1:81:09:58:8d:c5:
                    c3:2d:28:35:24:88:25:fa:12:8c:ff:69:1c:92:41:
                    2e:7f:31:d5:97:d2:14:7d:2d:55:11:85:21:45:3b:
                    f4:b6:a2:29:28:21:b2:6a:14:01:3c:97:e6:cb:12:
                    64:01:6f:94:1c:5e:56:e7:4a:7d:bd:49:ac:26:66:
                    d4:e2:7b:87:0b:ae:e7:1b:a9:5c:c2:26:af:c2:b4:
                    2f:bf:1d:07:b3:6f:b4:76:c2:1e:50:09:c9:7b:38:
                    f3:55:d8:e4:7f:58:33:b3:3c:65:f3:77:86:ef:0f:
                    cf:b0:fe:c0:a7:46:d7:63:c9:1c:01:9d:a8:91:45:
                    86:e8:ef:63:a7:52:cc:ff:a4:0d:0e:fb:d9:84:28:
                    f0:04:d3:42:50:17:d3:15:06:73:6d:69:28:4a:22:
                    c1:54:0b:62:a3:02:53:c1:8c:77:2d:7f:4d:01:56:
                    0b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:EF:9C:00:66:CC:93:73:EC:B7:69:9C:89:E5:73:F1:3F:5A:14:A8
            X509v3 Authority Key Identifier:
                keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:57:5f:cb:07:16:4d:e1:60:70:3f:46:c1:d6:54:a8:3a:e8:
         1e:93:46:6f:50:70:44:91:e4:3c:03:98:aa:7c:3e:3c:fa:7a:
         e4:46:a6:06:30:e2:b9:b4:fe:51:52:24:7f:17:c5:49:ad:97:
         e2:d9:30:f9:bd:e9:d7:8b:e1:ef:a1:a9:97:86:1a:75:b4:b9:
         7a:01:da:0e:be:31:d3:18:2b:4c:3a:be:29:b1:5c:93:4c:79:
         fa:9d:c4:fd:55:20:2e:94:f7:46:a8:66:73:af:17:d4:49:29:
         8e:19:71:2f:21:45:44:9e:f4:75:a6:58:3b:2d:12:a6:29:7a:
         4c:01:9b:5f:52:7b:a6:36:b2:3c:b4:cb:dc:01:0f:cd:e1:00:
         d5:4e:fe:a5:93:a3:bf:bd:75:b1:80:74:95:f3:cf:9c:2b:ea:
         51:e5:d0:8d:06:90:20:b7:ff:6f:2e:a7:41:aa:a6:c5:f2:ec:
         09:98:bc:ee:ca:14:4e:7c:fd:63:b9:82:43:b2:58:75:d8:87:
         af:e6:c8:03:46:1a:89:5e:d1:09:17:09:31:b5:19:13:da:26:
         cf:aa:20:e8:18:0d:19:95:35:51:4b:5f:70:12:8b:df:96:ba:
         a6:83:7b:ac:a5:69:36:53:71:34:56:62:c8:ed:24:c3:88:67:
         e4:75:e4:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFDQjIxMTAvBgNVBAUTKEU4ODg2MUZGNEE0NTM4MDI2N0E4MUI1OEZBOTlFNDg5
QUQwMDFCQkQwHhcNMjUwNTE1MDQzMzQwWhcNMjUwNTIyMDQzMzQwWjAYMRYwFAYD
VQQDEw02ODI1NmVhNC0wNTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0jVdkuhAKvNudy8iRXDFsSO/+BkRADBfIr030JS6pWvKYuHYuLzdhTNTqOUq
u39drEo/y+wcTK4OOvvoDbweyIf11lkNfn1+GUqb+Om/jqkL2+6xgQlYjcXDLSg1
JIgl+hKM/2kckkEufzHVl9IUfS1VEYUhRTv0tqIpKCGyahQBPJfmyxJkAW+UHF5W
50p9vUmsJmbU4nuHC67nG6lcwiavwrQvvx0Hs2+0dsIeUAnJezjzVdjkf1gzszxl
83eG7w/PsP7Ap0bXY8kcAZ2okUWG6O9jp1LM/6QNDvvZhCjwBNNCUBfTFQZzbWko
SiLBVAtiowJTwYx3LX9NAVYLwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnvnABm
zJNz7LdpnInlc/E/WhSoMB8GA1UdIwQYMBaAFOiIYf9KRTgCZ6gbWPqZ5ImtABu9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNCMi85RkU3NjBBNkI4
M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9BSm5xQnRZLXBua2lhMEFH
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZJaGhfMHBGT0FKbnFCdFktcG5raWEwQUc3MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QUNCMi85RkU3NjBBNkI4M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9B
Sm5xQnRZLXBua2lhMEFHNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAkV1/LBxZN4WBwP0bB1lSoOugek0ZvUHBEkeQ8A5iqfD48+nrkRqYG
MOK5tP5RUiR/F8VJrZfi2TD5venXi+HvoamXhhp1tLl6AdoOvjHTGCtMOr4psVyT
THn6ncT9VSAulPdGqGZzrxfUSSmOGXEvIUVEnvR1plg7LRKmKXpMAZtfUnumNrI8
tMvcAQ/N4QDVTv6lk6O/vXWxgHSV88+cK+pR5dCNBpAgt/9vLqdBqqbF8uwJmLzu
yhROfP1juYJDslh12Iev5sgDRhqJXtEJFwkxtRkT2ibPqiDoGA0ZlTVRS19wEovf
lrqmg3uspWk2U3E0VmLI7STDiGfkdeSb
-----END CERTIFICATE-----
Generated at Sat May 17 03:41:40 2025 by rpki-client