Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
File:                     -unC9P4gRTvpL8qxgsCVgcgTLfE.mft (raw, json)
Hash identifier:          t6AbVUBmFtM27RbRDxKUs9wmTI9l2tBhLa1G1K2GEq4=
Subject key identifier:   79:72:F5:73:E3:50:E1:9D:CE:B7:92:8A:0A:85:1C:9C:CD:35:71:7A
Authority key identifier: FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1
Certificate issuer:       /CN=A919103F/serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
Certificate serial:       02CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
Manifest number:          02C8
Signing time:             Tue 13 May 2025 01:14:00 +0000
Manifest this update:     Tue 13 May 2025 01:13:59 +0000
Manifest next update:     Tue 20 May 2025 01:13:59 +0000
Files and hashes:         1: -unC9P4gRTvpL8qxgsCVgcgTLfE.crl (hash: cvqUl0WgDIzrbB4hK7qp6IznhQhgefHXi23URUSaOgE=)
                          2: E75A8B8095D011EFA2CE197BC4F9AE02.roa (hash: E8vwAczjvQJXB4RuH83+id/dNjBD9Eo3yf3KRRas1Z8=)
                          3: C4928820F06C11EC91459B5CC4F9AE02.roa (hash: WQFtk3qXnJIT7imtWpujgi7DyXBepTQ3l980J2HR9zk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl
                          rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 01:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919103F, serialNumber=FAE9C2F4FE20453BE92FCAB182C09581C8132DF1
        Validity
            Not Before: May 13 01:13:59 2025 GMT
            Not After : May 20 01:13:59 2025 GMT
        Subject: CN=68229cd8-5d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ae:00:11:be:1b:76:00:df:f3:9f:9c:24:bd:
                    d4:1a:77:0c:c6:59:5d:84:fd:6e:53:93:ed:86:c1:
                    f0:c6:0e:d8:a5:6c:ce:a7:1b:7b:8b:7c:7b:c6:3f:
                    ff:a5:a3:c8:c4:e1:b6:46:7d:d9:05:d6:17:57:15:
                    30:c0:03:f9:e1:aa:da:11:72:c2:bc:4f:9a:40:42:
                    e6:30:3d:d0:1c:3c:3b:4d:8c:e0:be:24:a1:b7:29:
                    f4:b9:90:51:56:fd:fe:96:0d:05:f5:80:27:2f:6c:
                    ca:11:92:32:61:b2:fe:e4:5e:27:16:e9:c8:f1:26:
                    d0:c4:7d:d8:e6:63:48:53:da:82:b2:e2:df:50:66:
                    ff:93:01:61:8b:f3:eb:df:28:8d:d3:ec:88:79:1a:
                    4c:c0:e1:ed:f6:c9:f9:c0:c8:5b:b3:7d:35:16:64:
                    e2:2f:3d:aa:75:79:ed:2e:41:58:9a:78:dd:05:70:
                    91:7f:99:ae:f7:ba:48:9f:54:48:42:27:24:a3:9e:
                    56:bb:f1:9b:ad:7d:00:65:05:00:ec:2d:1d:ba:6e:
                    0d:77:68:8f:fd:4d:45:b2:0c:7f:b4:99:a0:05:f5:
                    a4:19:39:67:99:1e:4e:7a:69:41:26:92:4c:e9:bf:
                    4d:d8:98:c9:d2:b8:94:af:d4:57:05:82:7b:24:da:
                    d7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:72:F5:73:E3:50:E1:9D:CE:B7:92:8A:0A:85:1C:9C:CD:35:71:7A
            X509v3 Authority Key Identifier:
                keyid:FA:E9:C2:F4:FE:20:45:3B:E9:2F:CA:B1:82:C0:95:81:C8:13:2D:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-unC9P4gRTvpL8qxgsCVgcgTLfE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919103F/F8B4BCDCF06611ECA54C3742C4F9AE02/-unC9P4gRTvpL8qxgsCVgcgTLfE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:1b:b0:74:d5:29:6b:b0:ed:64:8a:02:88:4e:6b:68:65:b9:
         aa:ac:77:5a:30:84:3b:da:a1:8e:17:dd:31:24:f8:fa:ed:34:
         dd:b4:e6:1f:4e:4e:3d:37:8c:5e:d0:4f:ab:a3:ff:81:1d:b6:
         15:15:f0:8b:8e:c8:e3:a0:0a:e9:c1:7d:b6:c3:32:63:77:3c:
         62:f0:66:2f:a2:3f:d1:16:a9:ea:04:b4:dd:77:0f:49:a2:a5:
         7c:6c:7e:54:73:50:ad:db:c8:01:e0:11:d9:12:76:85:5c:a1:
         d2:34:2c:28:5a:25:17:12:da:c5:91:a0:b5:81:6c:f2:48:80:
         e2:d9:a5:08:b9:f7:8c:71:73:42:1a:97:48:a0:16:13:d8:f7:
         1d:b9:5a:61:c1:68:80:a1:7a:e6:85:60:ab:04:24:39:a8:3a:
         6d:00:c3:de:d0:be:be:d9:22:7f:7a:6d:a6:43:4d:6b:62:4b:
         fd:0b:8f:3e:44:4f:49:f2:9c:95:fd:6b:d1:d0:40:8a:38:46:
         ac:c5:d9:2d:6e:42:dc:bc:95:40:8e:d0:bf:29:74:a5:67:3a:
         c7:66:14:f1:0d:7c:d0:72:c5:98:9b:ea:2f:28:1d:a9:3a:97:
         65:d2:d9:ce:44:6a:be:d1:0c:fb:51:97:0c:d5:99:6c:97:58:
         ad:ab:de:ce
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTEwM0YxMTAvBgNVBAUTKEZBRTlDMkY0RkUyMDQ1M0JFOTJGQ0FCMTgyQzA5NTgx
QzgxMzJERjEwHhcNMjUwNTEzMDExMzU5WhcNMjUwNTIwMDExMzU5WjAYMRYwFAYD
VQQDEw02ODIyOWNkOC01ZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAya4AEb4bdgDf85+cJL3UGncMxlldhP1uU5PthsHwxg7YpWzOpxt7i3x7xj//
paPIxOG2Rn3ZBdYXVxUwwAP54araEXLCvE+aQELmMD3QHDw7TYzgviShtyn0uZBR
Vv3+lg0F9YAnL2zKEZIyYbL+5F4nFunI8SbQxH3Y5mNIU9qCsuLfUGb/kwFhi/Pr
3yiN0+yIeRpMwOHt9sn5wMhbs301FmTiLz2qdXntLkFYmnjdBXCRf5mu97pIn1RI
Qicko55Wu/GbrX0AZQUA7C0dum4Nd2iP/U1Fsgx/tJmgBfWkGTlnmR5OemlBJpJM
6b9N2JjJ0riUr9RXBYJ7JNrXQwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHly9XPj
UOGdzreSigqFHJzNNXF6MB8GA1UdIwQYMBaAFPrpwvT+IEU76S/KsYLAlYHIEy3x
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MTAzRi9GOEI0QkNEQ0Yw
NjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JUdnBMOHF4Z3NDVmdjZ1RM
ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy11bkM5UDRnUlR2cEw4cXhnc0NWZ2NnVExmRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MTAzRi9GOEI0QkNEQ0YwNjYxMUVDQTU0QzM3NDJDNEY5QUUwMi8tdW5DOVA0Z1JU
dnBMOHF4Z3NDVmdjZ1RMZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBOG7B01SlrsO1kigKITmtoZbmqrHdaMIQ72qGOF90xJPj67TTdtOYf
Tk49N4xe0E+ro/+BHbYVFfCLjsjjoArpwX22wzJjdzxi8GYvoj/RFqnqBLTddw9J
oqV8bH5Uc1Ct28gB4BHZEnaFXKHSNCwoWiUXEtrFkaC1gWzySIDi2aUIufeMcXNC
GpdIoBYT2PcduVphwWiAoXrmhWCrBCQ5qDptAMPe0L6+2SJ/em2mQ01rYkv9C48+
RE9J8pyV/WvR0ECKOEasxdktbkLcvJVAjtC/KXSlZzrHZhTxDXzQcsWYm+ovKB2p
Opdl0tnORGq+0Qz7UZcM1Zlsl1itq97O
-----END CERTIFICATE-----
Generated at Wed May 14 10:37:41 2025 by rpki-client