Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
File:                     2L7paV1DsznnVj8kE7cjGdFndLE.mft (raw, json)
Hash identifier:          ++s1KBlHGBwi6Nb6KpS1zEcnuCUvyb6Lt4IJEODfRL8=
Subject key identifier:   3C:EA:AB:5E:AB:DB:54:56:24:CC:E8:2F:6A:E6:C8:FA:01:A7:2F:79
Authority key identifier: D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1
Certificate issuer:       /CN=A918B6BC/serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
Certificate serial:       0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
Manifest number:          0E
Signing time:             Thu 15 May 2025 07:24:14 +0000
Manifest this update:     Thu 15 May 2025 07:24:14 +0000
Manifest next update:     Thu 22 May 2025 07:24:14 +0000
Files and hashes:         1: 2L7paV1DsznnVj8kE7cjGdFndLE.crl (hash: KGzZe8KllYDGDb9NdyNysaMAU8josPT+48kU8L6ahbk=)
                          2: E8644F16207711F09583A554C4F9AE02.roa (hash: PDtJst+AnPZjsbJWkn1AwaUp7gnuDYtMmF28Aj2EOy8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl
                          rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 07:24:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B6BC, serialNumber=D8BEE9695D43B339E7563F2413B72319D16774B1
        Validity
            Not Before: May 15 07:24:14 2025 GMT
            Not After : May 22 07:24:14 2025 GMT
        Subject: CN=6825969e-4270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:2c:34:16:79:0d:7f:97:26:b0:53:58:b3:
                    16:50:71:08:d0:ef:94:3a:4b:02:65:74:3f:77:8c:
                    1d:d3:bf:1c:93:5c:51:c7:9a:a5:f3:ca:9e:04:a0:
                    ac:f3:06:82:98:92:21:4d:e8:2f:e7:27:92:00:c2:
                    cb:97:76:f9:3d:dd:ab:8d:54:87:e6:75:d7:e3:9c:
                    c2:9e:74:0d:ab:07:bb:67:fb:58:49:eb:7d:65:0c:
                    16:0f:22:b2:13:7f:b9:8d:21:e7:12:d3:53:55:b8:
                    e0:4e:28:ef:97:9b:84:be:f0:c2:1a:7d:5c:0f:94:
                    b3:99:65:4f:47:6f:ba:e4:28:0e:f6:2c:5e:4c:c8:
                    93:f1:39:e4:29:fa:bf:11:de:5e:7f:17:af:64:f8:
                    94:2d:62:da:23:c6:31:b3:85:aa:85:bc:be:dd:35:
                    86:c1:b6:74:69:2a:28:13:de:43:37:0b:88:aa:dd:
                    c2:e6:09:80:7b:33:25:12:5f:5c:1e:ba:be:f7:99:
                    6d:f2:4a:9f:06:02:c7:0b:31:09:b9:7d:ba:83:07:
                    48:4a:d7:64:20:4d:bc:d7:cd:ed:25:e0:7a:dc:60:
                    46:4e:fa:b0:cb:0d:13:4c:df:00:92:9c:e9:ef:ff:
                    01:a0:16:3d:b6:d4:1c:3f:ec:40:17:7a:d5:7f:11:
                    59:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:EA:AB:5E:AB:DB:54:56:24:CC:E8:2F:6A:E6:C8:FA:01:A7:2F:79
            X509v3 Authority Key Identifier:
                keyid:D8:BE:E9:69:5D:43:B3:39:E7:56:3F:24:13:B7:23:19:D1:67:74:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2L7paV1DsznnVj8kE7cjGdFndLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B6BC/A030CD30204C11F0963EB575C4F9AE02/2L7paV1DsznnVj8kE7cjGdFndLE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:86:ff:6a:96:c1:f3:85:56:bc:da:b6:28:42:e2:bc:83:bd:
         91:d3:f7:73:db:a4:d7:8c:48:1d:b8:6f:bb:89:f8:e8:b9:13:
         9f:aa:bc:9d:11:5d:30:a7:6e:9b:5f:f9:c8:aa:d1:cd:dd:8e:
         57:57:b2:43:df:f1:49:aa:4e:15:d3:8c:6f:38:8f:59:d9:a8:
         f7:ea:ff:be:52:3b:2c:c0:58:83:d5:55:6e:eb:5b:77:0f:91:
         9b:e5:23:a9:d7:31:c9:34:ad:10:e2:13:11:52:c1:11:dc:37:
         2e:3f:e8:b3:cb:25:88:69:7e:d7:06:55:d1:b6:da:12:4d:fd:
         80:68:ee:d7:18:71:f7:c1:aa:ba:84:e6:eb:9f:f4:49:3e:61:
         46:81:46:b3:e1:3d:3d:a7:fc:c1:cc:c3:38:17:a1:b8:32:b2:
         f7:f8:0c:a2:8e:60:df:eb:fb:c8:08:63:c9:64:9a:e6:ee:22:
         14:ac:31:28:6f:b5:06:cc:cd:fa:4b:8d:b2:28:c9:5d:8f:6b:
         d3:31:b5:49:97:93:df:7b:ab:89:f5:f4:07:b6:bb:59:72:52:
         8b:43:6d:8d:8d:a5:70:f4:45:95:bc:a0:e8:02:2f:3c:7a:80:
         f3:f3:40:8a:01:dc:37:bd:76:f5:9f:97:a9:2b:2d:03:c3:36:
         2a:5f:f0:ca
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
QjZCQzExMC8GA1UEBRMoRDhCRUU5Njk1RDQzQjMzOUU3NTYzRjI0MTNCNzIzMTlE
MTY3NzRCMTAeFw0yNTA1MTUwNzI0MTRaFw0yNTA1MjIwNzI0MTRaMBgxFjAUBgNV
BAMTDTY4MjU5NjllLTQyNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDNIiw0FnkNf5cmsFNYsxZQcQjQ75Q6SwJldD93jB3TvxyTXFHHmqXzyp4EoKzz
BoKYkiFN6C/nJ5IAwsuXdvk93auNVIfmddfjnMKedA2rB7tn+1hJ631lDBYPIrIT
f7mNIecS01NVuOBOKO+Xm4S+8MIafVwPlLOZZU9Hb7rkKA72LF5MyJPxOeQp+r8R
3l5/F69k+JQtYtojxjGzhaqFvL7dNYbBtnRpKigT3kM3C4iq3cLmCYB7MyUSX1we
ur73mW3ySp8GAscLMQm5fbqDB0hK12QgTbzXze0l4HrcYEZO+rDLDRNM3wCSnOnv
/wGgFj221Bw/7EAXetV/EVkVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPOqrXqvb
VFYkzOgvaubI+gGnL3kwHwYDVR0jBBgwFoAU2L7paV1DsznnVj8kE7cjGdFndLEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThCNkJDL0EwMzBDRDMwMjA0
QzExRjA5NjNFQjU3NUM0RjlBRTAyLzJMN3BhVjFEc3publZqOGtFN2NqR2RGbmRM
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMkw3cGFWMURzem5uVmo4a0U3Y2pHZEZuZExFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThC
NkJDL0EwMzBDRDMwMjA0QzExRjA5NjNFQjU3NUM0RjlBRTAyLzJMN3BhVjFEc3pu
blZqOGtFN2NqR2RGbmRMRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAHmG/2qWwfOFVrzatihC4ryDvZHT93PbpNeMSB24b7uJ+Oi5E5+qvJ0R
XTCnbptf+ciq0c3djldXskPf8UmqThXTjG84j1nZqPfq/75SOyzAWIPVVW7rW3cP
kZvlI6nXMck0rRDiExFSwRHcNy4/6LPLJYhpftcGVdG22hJN/YBo7tcYcffBqrqE
5uuf9Ek+YUaBRrPhPT2n/MHMwzgXobgysvf4DKKOYN/r+8gIY8lkmubuIhSsMShv
tQbMzfpLjbIoyV2Pa9MxtUmXk997q4n19Ae2u1lyUotDbY2NpXD0RZW8oOgCLzx6
gPPzQIoB3De9dvWfl6krLQPDNipf8Mo=
-----END CERTIFICATE-----
Generated at Fri May 16 03:16:09 2025 by rpki-client