Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
File:                     RwHPLSggCdbG6vRVb7DcGw1VV-8.mft (raw, json)
Hash identifier:          emKk0utoChfa7Pn43AkbqlDBgpCtEsdOQf205nSBJ/o=
Subject key identifier:   B1:A0:B7:64:75:FB:10:A9:F4:7B:97:C6:45:6C:C3:49:DB:55:40:89
Authority key identifier: 47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF
Certificate issuer:       /CN=A918DAC5/serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
Certificate serial:       58
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
Manifest number:          57
Signing time:             Sun 11 May 2025 05:56:19 +0000
Manifest this update:     Sun 11 May 2025 05:56:18 +0000
Manifest next update:     Sun 18 May 2025 05:56:18 +0000
Files and hashes:         1: RwHPLSggCdbG6vRVb7DcGw1VV-8.crl (hash: O0/9Htsqzo1u6w7vHYsCbWp5tCf9LuxdFpyaQb4tF70=)
                          2: 3C7C5FF8ABDE11EF8DBC8E15C4F9AE02.roa (hash: ewpedKUZb61m1VLcsAn7GYfV7OReNryZEeFprMQVt3Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl
                          rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 02:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918DAC5, serialNumber=4701CF2D282009D6C6EAF4556FB0DC1B0D5557EF
        Validity
            Not Before: May 11 05:56:18 2025 GMT
            Not After : May 18 05:56:18 2025 GMT
        Subject: CN=68203c02-c0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:a6:0d:ac:9e:bb:66:48:9c:45:c4:c2:b1:
                    94:1c:4c:2e:74:99:52:d2:1d:05:86:70:d0:26:53:
                    5b:9a:08:cb:ce:6e:9a:f0:cd:1d:09:26:87:b0:5e:
                    1b:98:46:fc:d2:4a:52:03:8b:66:79:81:e9:16:6f:
                    46:a0:ac:68:4a:7f:13:db:c6:95:ef:2e:00:86:c8:
                    c4:dd:4d:d5:71:cd:ca:a8:8f:f0:17:04:b0:7f:4c:
                    37:fb:44:21:ef:76:91:41:c3:c8:43:a6:36:e2:8c:
                    43:b2:c1:8e:73:91:d9:5b:cd:78:bb:6e:bb:ec:dd:
                    a1:8f:46:e4:a0:c7:23:66:f4:64:5e:74:39:35:b1:
                    27:2f:dc:35:43:f9:b8:d5:4e:12:d7:5d:77:75:48:
                    f4:8b:b6:a3:37:4f:9d:cc:09:1b:43:db:4e:33:cf:
                    36:c9:ac:51:73:5f:43:f7:8f:55:39:c4:81:90:3b:
                    f9:f3:ed:b6:f3:10:d6:c6:9a:fd:07:2e:5c:6a:76:
                    a2:3f:10:53:2b:b3:c1:e4:45:ab:f1:d2:2c:84:ef:
                    93:4b:3d:d9:aa:34:a9:b2:98:9b:db:68:a4:cf:14:
                    11:f1:76:40:11:0c:d2:24:a9:8d:08:54:4e:51:89:
                    3b:d4:f1:40:fd:25:f3:cd:4e:49:f5:ed:45:22:f5:
                    9b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A0:B7:64:75:FB:10:A9:F4:7B:97:C6:45:6C:C3:49:DB:55:40:89
            X509v3 Authority Key Identifier:
                keyid:47:01:CF:2D:28:20:09:D6:C6:EA:F4:55:6F:B0:DC:1B:0D:55:57:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RwHPLSggCdbG6vRVb7DcGw1VV-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DAC5/C39582C0ABDA11EFA1C14E76C4F9AE02/RwHPLSggCdbG6vRVb7DcGw1VV-8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:8a:e9:fe:c3:89:83:05:11:77:68:bf:3d:89:d4:f6:0a:2f:
         6c:b2:9d:cd:9a:83:90:82:cb:96:05:eb:19:a1:74:0d:cb:f3:
         3b:b9:34:97:db:a5:b6:09:ad:ec:8b:83:6d:9f:43:57:5a:cc:
         ed:4c:41:9a:0e:ca:46:54:24:be:30:6c:00:f5:50:55:b9:c5:
         a7:4a:43:f9:67:be:98:bd:8d:b2:5a:bf:72:84:ea:47:66:3f:
         9e:55:3d:3c:fa:0f:99:11:53:6a:65:41:f9:33:91:37:02:39:
         78:b3:a8:fc:a1:cb:10:13:81:53:2c:3a:98:d6:31:44:14:88:
         25:18:67:82:04:c0:1e:2d:7e:aa:9f:5a:f2:bf:7d:c2:15:25:
         28:83:08:b0:09:30:a5:db:96:7f:03:59:26:b2:bd:4b:d4:78:
         11:f5:3c:88:66:7a:b0:16:b9:cd:87:76:ca:9d:4d:f8:be:07:
         a5:07:3e:b5:ad:a8:a8:ed:97:44:61:b0:27:7e:db:b9:d6:38:
         8e:11:6d:db:b0:e7:85:d2:5f:74:ff:9d:d3:57:eb:ee:87:be:
         ea:68:72:88:ed:62:33:ef:a9:8e:7f:79:78:59:ac:86:67:bd:
         9b:ab:e7:23:02:56:f8:b5:98:82:f9:d9:00:7a:04:d1:bc:01:
         37:09:91:27
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4
REFDNTExMC8GA1UEBRMoNDcwMUNGMkQyODIwMDlENkM2RUFGNDU1NkZCMERDMUIw
RDU1NTdFRjAeFw0yNTA1MTEwNTU2MThaFw0yNTA1MTgwNTU2MThaMBgxFjAUBgNV
BAMTDTY4MjAzYzAyLWMwZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDp6YNrJ67ZkicRcTCsZQcTC50mVLSHQWGcNAmU1uaCMvObprwzR0JJoewXhuY
RvzSSlIDi2Z5gekWb0agrGhKfxPbxpXvLgCGyMTdTdVxzcqoj/AXBLB/TDf7RCHv
dpFBw8hDpjbijEOywY5zkdlbzXi7brvs3aGPRuSgxyNm9GRedDk1sScv3DVD+bjV
ThLXXXd1SPSLtqM3T53MCRtD204zzzbJrFFzX0P3j1U5xIGQO/nz7bbzENbGmv0H
LlxqdqI/EFMrs8HkRavx0iyE75NLPdmqNKmymJvbaKTPFBHxdkARDNIkqY0IVE5R
iTvU8UD9JfPNTkn17UUi9ZujAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsaC3ZHX7
EKn0e5fGRWzDSdtVQIkwHwYDVR0jBBgwFoAURwHPLSggCdbG6vRVb7DcGw1VV+8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThEQUM1L0MzOTU4MkMwQUJE
QTExRUZBMUMxNEU3NkM0RjlBRTAyL1J3SFBMU2dnQ2RiRzZ2UlZiN0RjR3cxVlYt
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvUndIUExTZ2dDZGJHNnZSVmI3RGNHdzFWVi04LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE
QUM1L0MzOTU4MkMwQUJEQTExRUZBMUMxNEU3NkM0RjlBRTAyL1J3SFBMU2dnQ2Ri
RzZ2UlZiN0RjR3cxVlYtOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBABqK6f7DiYMFEXdovz2J1PYKL2yync2ag5CCy5YF6xmhdA3L8zu5NJfb
pbYJreyLg22fQ1dazO1MQZoOykZUJL4wbAD1UFW5xadKQ/lnvpi9jbJav3KE6kdm
P55VPTz6D5kRU2plQfkzkTcCOXizqPyhyxATgVMsOpjWMUQUiCUYZ4IEwB4tfqqf
WvK/fcIVJSiDCLAJMKXbln8DWSayvUvUeBH1PIhmerAWuc2HdsqdTfi+B6UHPrWt
qKjtl0RhsCd+27nWOI4Rbduw54XSX3T/ndNX6+6HvupocojtYjPvqY5/eXhZrIZn
vZur5yMCVvi1mIL52QB6BNG8ATcJkSc=
-----END CERTIFICATE-----
Generated at Sun May 11 13:27:39 2025 by rpki-client