Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
File:                     2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft (raw, json)
Hash identifier:          TJ8T92uONmOGwVjvQDYc5js1JlMtb/wQawj4m67CHo8=
Subject key identifier:   C1:36:69:5A:90:D3:F0:58:2D:E7:AC:F6:DD:7C:32:83:A4:53:8C:85
Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
Certificate issuer:       /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
Manifest number:          014E
Signing time:             Thu 03 Jul 2025 04:18:52 +0000
Manifest this update:     Thu 03 Jul 2025 04:18:51 +0000
Manifest next update:     Thu 10 Jul 2025 04:18:51 +0000
Files and hashes:         1: 2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl (hash: +qSLXMCIr5vZjd4ME/ZlFx0oz9Hp53h/bqJpSv0uu4I=)
                          2: DAB789C65B6D11EEA95BF025C4F9AE02.roa (hash: hNwMkMdjh5wXeGCbclXCuLBfGgwTuq5lN97tlwCY1b4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
                          rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
        Validity
            Not Before: Jul  3 04:18:51 2025 GMT
            Not After : Jul 10 04:18:51 2025 GMT
        Subject: CN=686604ac-841a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ba:e8:85:a5:df:1b:fa:c1:dc:8b:a1:bf:5c:
                    02:24:fa:c2:53:d5:d4:f7:f8:b8:99:62:a4:d3:62:
                    17:75:8d:b6:97:cb:08:34:cf:c0:21:0d:56:2a:e3:
                    e2:2a:72:a8:94:54:41:d8:25:ef:96:74:51:7d:10:
                    8b:11:db:dd:59:2b:a6:af:7c:ea:cc:77:b4:6f:9f:
                    f1:f2:ce:66:fc:dd:9e:bb:1f:e6:8a:7c:2e:ca:ab:
                    9c:bb:8f:c6:93:43:9a:3d:1a:75:0c:31:49:31:04:
                    74:fa:50:2b:34:3c:e9:e9:b5:7a:45:00:2b:73:97:
                    c3:3e:ee:eb:bc:93:3d:2c:d1:aa:f9:42:33:d5:83:
                    36:8f:8c:50:96:e9:72:02:94:d2:c9:cb:39:7e:89:
                    ff:79:c2:eb:19:21:cf:79:f2:7b:66:9e:14:04:68:
                    d4:3d:38:81:2e:11:30:43:21:87:1e:8d:8e:cc:15:
                    36:28:52:24:2c:03:60:94:52:02:31:1c:fb:1c:4a:
                    4d:a4:1e:a6:d9:35:d5:44:db:70:9c:8e:82:82:26:
                    02:56:84:e5:c5:6e:6d:9c:37:72:42:e8:6f:e2:a4:
                    bb:fd:db:e6:fc:50:b9:1f:6a:3d:33:f6:1f:80:b6:
                    ae:7e:4d:22:5f:f4:9e:2b:6c:1b:d0:c8:24:af:80:
                    df:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:36:69:5A:90:D3:F0:58:2D:E7:AC:F6:DD:7C:32:83:A4:53:8C:85
            X509v3 Authority Key Identifier:
                keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:dc:0a:04:52:ca:df:33:96:44:25:df:0d:6c:6f:5e:c5:f6:
         60:25:49:ef:66:9e:e7:80:21:dc:8d:c7:81:02:d0:ac:bd:8c:
         3f:e9:f5:84:f6:e6:f2:d9:40:98:33:65:1d:21:f9:a6:c0:2e:
         3f:29:1b:c8:82:4c:e2:fd:6c:62:66:c4:86:1a:2d:0a:97:dd:
         39:70:0e:e9:92:62:60:a7:3b:9d:45:3a:24:aa:b4:a8:c5:48:
         50:4d:f1:96:9a:c7:d9:50:d3:a8:56:9a:6a:00:57:e6:19:41:
         15:95:c9:a9:5a:8b:d9:76:81:87:35:f0:93:cf:6d:1a:44:ad:
         3b:42:27:64:46:4e:09:79:17:4a:94:aa:d7:13:3f:b0:33:f2:
         b3:b0:ac:e6:f1:68:0c:ac:88:a7:79:88:93:9a:7b:7a:94:32:
         85:90:7c:0c:14:90:6f:eb:88:a5:84:64:69:d9:c4:23:6a:c7:
         3f:4c:24:a2:9c:cc:3a:52:9c:21:cd:4c:43:52:e7:51:da:a5:
         7c:4e:d8:fe:05:f1:b3:f3:a1:95:9e:d5:07:f9:92:df:59:06:
         bc:60:95:80:a7:72:ed:d2:0c:8e:33:c7:0f:0f:98:d3:b6:86:
         ef:75:54:a4:6a:46:52:f4:d9:fa:56:65:03:aa:6c:af:0e:bc:
         b0:39:56:cf
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTA3NTMxMTAvBgNVBAUTKERBRDc4Q0FDMzZEMTQzRjE3NEFCRTExMkQ0OTVFRDVB
MDZFQ0E3NDAwHhcNMjUwNzAzMDQxODUxWhcNMjUwNzEwMDQxODUxWjAYMRYwFAYD
VQQDEw02ODY2MDRhYy04NDFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA47rohaXfG/rB3Iuhv1wCJPrCU9XU9/i4mWKk02IXdY22l8sINM/AIQ1WKuPi
KnKolFRB2CXvlnRRfRCLEdvdWSumr3zqzHe0b5/x8s5m/N2eux/minwuyqucu4/G
k0OaPRp1DDFJMQR0+lArNDzp6bV6RQArc5fDPu7rvJM9LNGq+UIz1YM2j4xQluly
ApTSycs5fon/ecLrGSHPefJ7Zp4UBGjUPTiBLhEwQyGHHo2OzBU2KFIkLANglFIC
MRz7HEpNpB6m2TXVRNtwnI6CgiYCVoTlxW5tnDdyQuhv4qS7/dvm/FC5H2o9M/Yf
gLaufk0iX/SeK2wb0Mgkr4DfbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFME2aVqQ
0/BYLees9t18MoOkU4yFMB8GA1UdIwQYMBaAFNrXjKw20UPxdKvhEtSV7VoG7KdA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDc1My84RUYyNEExMjVC
NkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFfRjBxLUVTMUpYdFdnYnNw
MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzJ0ZU1yRGJSUV9GMHEtRVMxSlh0V2dic3AwQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MDc1My84RUYyNEExMjVCNkQxMUVFQkM3OTYzMjVDNEY5QUUwMi8ydGVNckRiUlFf
RjBxLUVTMUpYdFdnYnNwMEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBg3AoEUsrfM5ZEJd8NbG9exfZgJUnvZp7ngCHcjceBAtCsvYw/6fWE
9uby2UCYM2UdIfmmwC4/KRvIgkzi/WxiZsSGGi0Kl905cA7pkmJgpzudRTokqrSo
xUhQTfGWmsfZUNOoVppqAFfmGUEVlcmpWovZdoGHNfCTz20aRK07QidkRk4JeRdK
lKrXEz+wM/KzsKzm8WgMrIineYiTmnt6lDKFkHwMFJBv64ilhGRp2cQjasc/TCSi
nMw6UpwhzUxDUudR2qV8Ttj+BfGz86GVntUH+ZLfWQa8YJWAp3Lt0gyOM8cPD5jT
tobvdVSkakZS9Nn6VmUDqmyvDrywOVbP
-----END CERTIFICATE-----
Generated at Thu Jul 3 18:06:37 2025 by rpki-client