Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
File:                     p0zn2tX7UE2xa75wwvnfCqnwBgk.mft (raw, json)
Hash identifier:          Qa4uLdWWE3CGQvkopEq0Movhep7voijMj9dvXVLjVwA=
Subject key identifier:   2B:74:93:92:5E:08:21:A4:AA:2A:85:F3:34:CC:50:ED:C1:3A:EB:09
Authority key identifier: A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09
Certificate issuer:       /CN=A918D699/serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
Certificate serial:       E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
Manifest number:          DA
Signing time:             Thu 03 Jul 2025 05:48:14 +0000
Manifest this update:     Thu 03 Jul 2025 05:48:14 +0000
Manifest next update:     Thu 10 Jul 2025 05:48:14 +0000
Files and hashes:         1: p0zn2tX7UE2xa75wwvnfCqnwBgk.crl (hash: 771pV0eEndHmQhfXYG4jt+a6XyeXtE6zAtQ4MLWAZUQ=)
                          2: C564E80017E911EF9D471E18C4F9AE02.roa (hash: bHWlYJultpd4141lSOHtlDGQNuKfjn0r+UBsEdeuoEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl
                          rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D699, serialNumber=A74CE7DAD5FB504DB16BBE70C2F9DF0AA9F00609
        Validity
            Not Before: Jul  3 05:48:14 2025 GMT
            Not After : Jul 10 05:48:14 2025 GMT
        Subject: CN=6866199e-9633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:53:46:24:7d:5a:df:0f:34:ea:85:e5:2f:9e:
                    68:1f:f3:e8:e1:7e:54:1b:5c:4e:55:3a:ce:d4:33:
                    bb:97:85:9a:ea:3d:d3:8a:cc:58:be:dd:f1:e9:89:
                    d0:0b:df:ac:33:3c:db:67:c1:7f:75:b3:0f:f2:4d:
                    c4:5b:dd:46:fd:90:db:d2:06:d4:d8:91:ad:f5:c7:
                    ca:9e:f8:51:b9:af:d2:66:ee:a8:d6:41:ea:6b:7f:
                    ad:6f:6a:97:ea:a0:99:02:27:4c:f0:70:a0:2b:91:
                    19:b8:91:68:93:6f:96:4a:51:ca:0b:54:54:96:5e:
                    f2:a8:cd:4f:b5:a8:d4:76:cf:a4:f5:26:82:b3:fa:
                    39:39:dc:2d:53:c5:10:56:90:2b:1a:da:62:5f:b8:
                    b0:3a:de:7e:33:d7:51:b8:52:bb:df:b1:86:c9:73:
                    17:88:87:0c:6f:01:af:a7:e9:3b:d4:41:95:69:95:
                    0e:e6:47:b7:33:7f:a1:f7:d6:1b:f3:1e:49:35:59:
                    3a:2b:77:e3:c1:a3:65:d7:9e:35:03:8d:0a:ff:2a:
                    01:78:e2:e6:49:a8:d6:39:8f:d1:9b:53:e3:c2:1a:
                    01:1d:a9:0c:34:3a:d7:dc:83:8c:d5:a4:d7:27:7f:
                    2a:69:9a:9c:e4:98:cc:af:eb:a6:4e:f6:0e:1c:6e:
                    42:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:74:93:92:5E:08:21:A4:AA:2A:85:F3:34:CC:50:ED:C1:3A:EB:09
            X509v3 Authority Key Identifier:
                keyid:A7:4C:E7:DA:D5:FB:50:4D:B1:6B:BE:70:C2:F9:DF:0A:A9:F0:06:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0zn2tX7UE2xa75wwvnfCqnwBgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D699/5586EF6A17E911EFA2CD5017C4F9AE02/p0zn2tX7UE2xa75wwvnfCqnwBgk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:46:88:de:a2:d1:23:44:70:1d:0b:5c:8e:28:57:8b:e7:73:
         e0:98:ac:70:df:c1:08:9d:68:4d:9d:f5:7d:c5:3e:42:41:0f:
         0a:c5:c4:2c:0c:32:26:79:5a:b6:60:80:38:eb:23:31:6e:4a:
         0d:d4:ca:5d:2c:e8:b7:a6:32:72:1a:4f:d0:37:a1:e7:59:59:
         91:76:fe:fb:d1:a2:7c:d1:82:aa:3e:63:23:c0:95:ad:45:5e:
         3b:4b:e1:95:bb:cd:49:86:61:0b:de:43:72:f3:fa:19:60:58:
         37:b9:40:ca:6c:86:59:24:16:ac:f7:84:c9:b8:97:2e:2c:98:
         29:7c:33:ea:a3:06:65:3c:9c:9c:f7:cd:73:0c:91:00:95:d1:
         52:bc:4d:16:53:ef:7f:d4:88:72:4d:a1:f8:85:56:8c:57:25:
         b7:2e:8d:d4:9c:d5:82:56:83:6a:cd:e9:3c:14:bf:5e:ea:a4:
         60:77:67:f4:d4:4e:75:75:35:b3:d2:3e:f1:cd:88:4d:46:26:
         e9:62:98:09:6b:8c:ae:8b:6d:32:3e:64:ad:65:2d:63:28:3f:
         8b:7b:df:84:dd:7b:bf:8e:c1:55:94:3f:11:57:27:3f:0d:c8:
         3a:c4:3b:33:43:85:17:60:0a:64:ec:b5:84:dd:23:4f:ef:fc:
         6b:6e:10:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEQ2OTkxMTAvBgNVBAUTKEE3NENFN0RBRDVGQjUwNERCMTZCQkU3MEMyRjlERjBB
QTlGMDA2MDkwHhcNMjUwNzAzMDU0ODE0WhcNMjUwNzEwMDU0ODE0WjAYMRYwFAYD
VQQDEw02ODY2MTk5ZS05NjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2lNGJH1a3w806oXlL55oH/Po4X5UG1xOVTrO1DO7l4Wa6j3TisxYvt3x6YnQ
C9+sMzzbZ8F/dbMP8k3EW91G/ZDb0gbU2JGt9cfKnvhRua/SZu6o1kHqa3+tb2qX
6qCZAidM8HCgK5EZuJFok2+WSlHKC1RUll7yqM1PtajUds+k9SaCs/o5OdwtU8UQ
VpArGtpiX7iwOt5+M9dRuFK737GGyXMXiIcMbwGvp+k71EGVaZUO5ke3M3+h99Yb
8x5JNVk6K3fjwaNl1541A40K/yoBeOLmSajWOY/Rm1PjwhoBHakMNDrX3IOM1aTX
J38qaZqc5JjMr+umTvYOHG5CiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCt0k5Je
CCGkqiqF8zTMUO3BOusJMB8GA1UdIwQYMBaAFKdM59rV+1BNsWu+cML53wqp8AYJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RDY5OS81NTg2RUY2QTE3
RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VFMnhhNzV3d3ZuZkNxbndC
Z2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Awem4ydFg3VUUyeGE3NXd3dm5mQ3Fud0Jnay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RDY5OS81NTg2RUY2QTE3RTkxMUVGQTJDRDUwMTdDNEY5QUUwMi9wMHpuMnRYN1VF
MnhhNzV3d3ZuZkNxbndCZ2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAxRojeotEjRHAdC1yOKFeL53PgmKxw38EInWhNnfV9xT5CQQ8KxcQs
DDImeVq2YIA46yMxbkoN1MpdLOi3pjJyGk/QN6HnWVmRdv770aJ80YKqPmMjwJWt
RV47S+GVu81JhmEL3kNy8/oZYFg3uUDKbIZZJBas94TJuJcuLJgpfDPqowZlPJyc
981zDJEAldFSvE0WU+9/1IhyTaH4hVaMVyW3Lo3UnNWCVoNqzek8FL9e6qRgd2f0
1E51dTWz0j7xzYhNRibpYpgJa4yui20yPmStZS1jKD+Le9+E3Xu/jsFVlD8RVyc/
Dcg6xDszQ4UXYApk7LWE3SNP7/xrbhDf
-----END CERTIFICATE-----
Generated at Thu Jul 3 19:16:18 2025 by rpki-client