Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
File:                     SC5abgiWomapGkBmwG9LTtmEZJ0.mft (raw, json)
Hash identifier:          rgsJVivEF275RxExrdnSpLjOAQkOSYF0Vk8IVxxK0e8=
Subject key identifier:   0E:65:1C:70:16:D7:78:79:AA:59:39:2F:BC:5B:A4:E4:1F:B3:7B:37
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       0475
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
Manifest number:          03BE
Signing time:             Wed 07 May 2025 01:23:26 +0000
Manifest this update:     Wed 07 May 2025 01:23:25 +0000
Manifest next update:     Wed 14 May 2025 01:23:25 +0000
Files and hashes:         1: SC5abgiWomapGkBmwG9LTtmEZJ0.crl (hash: S28ZbUn5dWPwsphUoNKbTD+rYLJx8GyuN0PA/EImUO8=)
                          2: B351D67E295D11F0B6373D85C4F9AE02.roa (hash: LMZSncn5KcKiXB9BoiKq+GoPRqc8Buz4PyILGEY3TGg=)
                          3: 235C33AA841511EEB8881E26C4F9AE02.roa (hash: +YRAKRYqk613xfLgB0zdZc+SXbgEgwFsbZ4MAXHqfD4=)
                          4: 91F6CB78CC8411EFB64BE274C4F9AE02.roa (hash: Lyqkbw8kpDEXFRP3wM9V8TcwvtVc37CFnp2p01EAY4g=)
                          5: FC458FFABD2F11EFACAEDF48C4F9AE02.roa (hash: JhXAK3rvu+eA5A55zrWLUy9P2VWJ9TdInDYIPpvwJmg=)
                          6: 340E5DD0141B11F0922B6344C4F9AE02.roa (hash: /TmCm+1t1YPk+UGCkNyTLyr0vk3D0SFXpKZxvuA+ssc=)
                          7: 212DD5DEEFCB11EFBA51D367C4F9AE02.roa (hash: j9uwlF1XU1bhm01I4UfNei0qn7GHjRRQXfewbREQbL0=)
                          8: 70970B107C9811EEA876DA2DC4F9AE02.roa (hash: aHmcIpJIE1GcUyI4Yny/qSd6Or3byAxj4bJ8cE5T4kk=)
                          9: D97AC950ABDD11EDAE837666C4F9AE02.roa (hash: tdnv3yegEbxd1X05RwDaloSoRTHWIFMLf521OQY7jzA=)
                          10: 15E5E344239111EF96EC1C11C4F9AE02.roa (hash: aqom3HQAn6x60ccWSgWXEn4twflM44rVgDlrpW0nn+w=)
                          11: CF6343DE295D11F0B3C33614C4F9AE02.roa (hash: u4HP0rAc9OJ4yrGzZJUJfmamAqusvJcVWc3Rh5qqJHA=)
                          12: 423DBDA2BD3011EFBEFB5F49C4F9AE02.roa (hash: CYb1AUfDdwBmZIiw43Uzz4pNurCcroPrczZ8tZZSS/s=)
                          13: B6E083D46E2F11EEB9C12A34C4F9AE02.roa (hash: VWNAPC6UIfMVQch4vSc+1QxFpjuFdCFpkSLGoYnJWLQ=)
                          14: DD12F48AEC2611EF94F85F09C4F9AE02.roa (hash: STez8mDGGIo+dLC131vZHCpo98lp6VAK6pump85Nkmo=)
                          15: D3A8EA649F0911EE98065E23C4F9AE02.roa (hash: jy6vuCkSSKn5jRqSlZSZkzcBPcsjCkh7JsvXNhpfjoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 May 2025 01:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1141 (0x475)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: May  7 01:23:25 2025 GMT
            Not After : May 14 01:23:25 2025 GMT
        Subject: CN=681ab60d-70c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:95:05:b8:c0:69:3d:07:4b:59:35:b6:22:cf:
                    1b:3e:82:b2:db:bc:ae:d5:0b:58:3e:89:c0:eb:17:
                    67:98:8e:33:53:c6:ce:7f:12:9a:93:d1:a9:55:dd:
                    01:d9:a0:9f:41:21:f1:bc:19:35:50:37:98:9c:39:
                    83:c8:5b:30:97:1f:fd:cd:a4:9a:08:29:90:79:cd:
                    df:aa:b1:9a:f4:e6:70:f5:51:5c:f3:a4:01:45:33:
                    52:da:12:83:a2:68:a3:0f:b6:0c:79:7a:e6:81:a3:
                    63:b3:1d:27:25:ea:4b:f9:c4:08:1d:b6:c3:a6:11:
                    e6:05:5c:e7:0c:6e:13:96:3c:3b:a7:01:e8:54:ce:
                    a2:b7:5a:28:04:20:04:fd:80:df:e4:0f:59:3d:19:
                    ff:44:e4:a7:4c:50:ef:b4:36:89:db:43:07:07:97:
                    ce:0a:48:7b:10:2c:58:46:5f:8f:bf:e7:57:fd:66:
                    93:3a:3f:a6:45:24:d2:61:20:9d:17:44:ba:08:27:
                    71:7e:71:c7:7b:f2:22:8c:cc:71:3c:ca:e6:36:b4:
                    22:2d:f2:45:5d:c9:77:9a:21:ad:a3:50:0d:87:99:
                    c6:d5:11:17:ac:cc:f0:80:ec:69:79:cd:19:7a:56:
                    cc:cb:d0:3d:ea:b2:af:b4:47:51:45:d4:b9:22:8e:
                    43:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:65:1C:70:16:D7:78:79:AA:59:39:2F:BC:5B:A4:E4:1F:B3:7B:37
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:ca:6c:81:42:9a:ca:1d:08:f1:81:55:13:cc:01:41:a1:20:
         0b:83:26:49:59:a7:c7:5d:db:28:2d:68:72:66:08:24:38:eb:
         88:13:69:fc:7f:94:63:24:11:24:e1:18:31:a5:70:56:cd:1c:
         77:bc:f1:07:03:1e:36:f8:67:3c:fc:37:63:d6:4d:db:5e:98:
         e7:a0:24:a6:68:8c:6c:a8:ce:30:0e:a8:7c:50:32:44:8b:82:
         4f:09:bd:6a:2e:ba:f8:45:93:d3:36:bc:8a:27:d3:f0:c2:37:
         81:e2:9e:c2:e7:29:f8:57:ad:c2:1b:47:19:c6:39:32:89:0f:
         c0:8d:81:ae:92:63:a7:1c:5b:c8:56:18:53:0e:6f:64:03:03:
         86:fb:2a:f6:e3:01:5e:65:08:31:ec:96:ac:1a:5d:86:52:fa:
         b4:87:c7:a8:c2:06:8c:44:a8:bb:44:6b:f6:1d:63:6d:4d:32:
         b8:cf:1d:d0:4d:b1:85:f9:3b:38:1c:04:be:7b:b9:64:8b:83:
         c5:be:6b:93:da:98:dc:24:df:30:23:e8:a4:f3:94:fd:fb:af:
         ee:cc:49:55:e0:21:92:73:10:02:0a:e8:f3:64:f7:a9:d3:8b:
         8d:83:13:02:49:a5:f3:f1:01:58:29:8d:6d:fc:4f:8c:0f:b1:
         78:55:fd:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBHUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDNzUxMTAvBgNVBAUTKDQ4MkU1QTZFMDg5NkEyNjZBOTFBNDA2NkMwNkY0QjRF
RDk4NDY0OUQwHhcNMjUwNTA3MDEyMzI1WhcNMjUwNTE0MDEyMzI1WjAYMRYwFAYD
VQQDEw02ODFhYjYwZC03MGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA6pUFuMBpPQdLWTW2Is8bPoKy27yu1QtYPonA6xdnmI4zU8bOfxKak9GpVd0B
2aCfQSHxvBk1UDeYnDmDyFswlx/9zaSaCCmQec3fqrGa9OZw9VFc86QBRTNS2hKD
omijD7YMeXrmgaNjsx0nJepL+cQIHbbDphHmBVznDG4Tljw7pwHoVM6it1ooBCAE
/YDf5A9ZPRn/ROSnTFDvtDaJ20MHB5fOCkh7ECxYRl+Pv+dX/WaTOj+mRSTSYSCd
F0S6CCdxfnHHe/IijMxxPMrmNrQiLfJFXcl3miGto1ANh5nG1REXrMzwgOxpec0Z
elbMy9A96rKvtEdRRdS5Io5DSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA5lHHAW
13h5qlk5L7xbpOQfs3s3MB8GA1UdIwQYMBaAFEguWm4IlqJmqRpAZsBvS07ZhGSd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkM3NS8zQUE1REVFMERE
NTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29tYXBHa0Jtd0c5TFR0bUVa
SjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NDNWFiZ2lXb21hcEdrQm13RzlMVHRtRVpKMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkM3NS8zQUE1REVFMERENTgxMUVDODcwRkMyMERDNEY5QUUwMi9TQzVhYmdpV29t
YXBHa0Jtd0c5TFR0bUVaSjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBAymyBQprKHQjxgVUTzAFBoSALgyZJWafHXdsoLWhyZggkOOuIE2n8
f5RjJBEk4RgxpXBWzRx3vPEHAx42+Gc8/Ddj1k3bXpjnoCSmaIxsqM4wDqh8UDJE
i4JPCb1qLrr4RZPTNryKJ9PwwjeB4p7C5yn4V63CG0cZxjkyiQ/AjYGukmOnHFvI
VhhTDm9kAwOG+yr24wFeZQgx7JasGl2GUvq0h8eowgaMRKi7RGv2HWNtTTK4zx3Q
TbGF+Ts4HAS+e7lki4PFvmuT2pjcJN8wI+ik85T9+6/uzElV4CGScxACCujzZPep
04uNgxMCSaXz8QFYKY1t/E+MD7F4Vf2V
-----END CERTIFICATE-----
Generated at Thu May 8 17:14:30 2025 by rpki-client