Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
File:                     Y04osQAuVW6OsU-VPq1jttZ3WAk.mft (raw, json)
Hash identifier:          ry1KWHiRt00yRd6/XppqKaA0T7A/6cjRQ8cjkcFoS6U=
Subject key identifier:   93:F2:F9:F0:3B:01:75:01:15:0C:A3:9C:19:12:30:F5:E9:F5:FB:8C
Authority key identifier: 63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09
Certificate issuer:       /CN=A9194C0D/serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
Certificate serial:       0168
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
Manifest number:          0155
Signing time:             Sun 11 May 2025 03:21:16 +0000
Manifest this update:     Sun 11 May 2025 03:21:15 +0000
Manifest next update:     Sun 18 May 2025 03:21:15 +0000
Files and hashes:         1: Y04osQAuVW6OsU-VPq1jttZ3WAk.crl (hash: Kl60crO5mr+ZW5Prj7P4wG8hcuF0QEFYjzoEdVoErIk=)
                          2: F6FAEC5CCB0411EEAB05F93CC4F9AE02.roa (hash: 0UB6vf7tsJ4/eqdU0xPwdgNnTiXM+SW0/ez8sQsDOEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl
                          rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 03:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194C0D, serialNumber=634E28B1002E556E8EB14F953EAD63B6D6775809
        Validity
            Not Before: May 11 03:21:15 2025 GMT
            Not After : May 18 03:21:15 2025 GMT
        Subject: CN=682017ab-6290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8a:9e:08:a2:ca:2f:8a:3a:72:c8:7f:da:da:
                    66:a8:dd:ae:32:6a:38:70:a9:fd:4b:23:b3:ec:24:
                    ba:b9:6e:8c:ae:cb:af:8d:ed:b1:96:13:6e:f1:59:
                    75:40:e3:2f:65:d3:29:92:c7:bd:47:b6:1b:da:af:
                    a6:6d:09:8b:27:f3:f8:b1:dd:93:98:75:c3:02:f5:
                    22:7d:55:cb:a3:8d:16:46:8a:00:3d:ad:74:eb:0a:
                    11:d7:44:e1:27:52:38:ea:c9:2f:34:28:db:9d:c5:
                    86:18:1d:a3:4a:ef:1e:c2:a4:81:dd:89:d9:7d:5b:
                    8d:fa:ff:50:b6:e1:1a:2c:6a:b6:35:8d:a8:57:3b:
                    42:16:17:a9:1f:77:c9:cd:31:37:d5:16:92:d8:40:
                    8d:60:a2:46:92:b7:0b:95:31:51:f7:1b:7a:0f:51:
                    89:d8:17:68:06:b0:d9:9b:48:6c:c0:07:37:cd:fe:
                    2c:3d:83:d6:e1:77:fa:0b:4c:c3:94:bf:8d:25:24:
                    63:10:aa:44:27:ef:5e:8d:29:c9:15:8b:5c:8d:79:
                    8b:e4:36:94:d3:48:92:dc:db:15:cd:1c:b1:88:3d:
                    10:4e:03:3c:31:35:e7:75:94:17:80:6c:f9:7b:7c:
                    b7:82:a5:b4:2a:26:bb:25:f1:84:b8:73:36:69:a5:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F2:F9:F0:3B:01:75:01:15:0C:A3:9C:19:12:30:F5:E9:F5:FB:8C
            X509v3 Authority Key Identifier:
                keyid:63:4E:28:B1:00:2E:55:6E:8E:B1:4F:95:3E:AD:63:B6:D6:77:58:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y04osQAuVW6OsU-VPq1jttZ3WAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194C0D/AD258890575411EE940CD954C4F9AE02/Y04osQAuVW6OsU-VPq1jttZ3WAk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:0f:94:e3:46:b5:5a:5f:f3:32:75:17:60:45:2f:a7:57:3d:
         eb:83:65:c3:d7:4c:8c:c5:e9:c0:e4:f2:47:92:b5:2e:fd:7d:
         6e:87:af:e8:51:f3:f3:36:83:4a:b1:c6:22:fe:43:40:ad:11:
         15:ab:1e:4a:e4:61:a8:8f:d1:4e:6b:f2:42:28:5a:4d:4c:a9:
         d3:6a:75:79:e5:76:2a:01:98:5e:4d:d9:d3:55:3f:4b:68:c8:
         95:3d:b1:17:6e:2a:3e:30:8e:09:d5:97:43:a2:84:4f:54:38:
         bc:6b:41:a8:de:58:9f:45:5c:95:e8:9c:ff:60:13:6b:28:71:
         fb:aa:a6:64:d0:bb:0a:96:31:43:84:d2:2c:3c:0d:12:88:fc:
         cc:e6:6e:89:e3:4a:c6:cd:28:63:c1:97:73:14:12:3f:e0:6c:
         b1:3e:21:d2:a2:7d:ea:f7:c0:f7:6d:ea:bc:9c:b7:1e:0f:6c:
         67:74:0e:9d:a6:9b:85:81:bb:08:f7:13:35:df:59:b6:9b:43:
         e6:14:44:3a:58:42:12:5a:1f:9e:64:e7:af:4c:8f:54:aa:c1:
         b3:36:91:03:d4:3f:cb:ac:4c:a7:24:5f:0d:d9:54:dd:44:53:
         9d:68:ae:70:97:6a:e4:ef:a0:76:82:22:72:e2:b6:a6:74:a3:
         fe:dd:b6:6a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTRDMEQxMTAvBgNVBAUTKDYzNEUyOEIxMDAyRTU1NkU4RUIxNEY5NTNFQUQ2M0I2
RDY3NzU4MDkwHhcNMjUwNTExMDMyMTE1WhcNMjUwNTE4MDMyMTE1WjAYMRYwFAYD
VQQDEw02ODIwMTdhYi02MjkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2YqeCKLKL4o6csh/2tpmqN2uMmo4cKn9SyOz7CS6uW6Mrsuvje2xlhNu8Vl1
QOMvZdMpkse9R7Yb2q+mbQmLJ/P4sd2TmHXDAvUifVXLo40WRooAPa106woR10Th
J1I46skvNCjbncWGGB2jSu8ewqSB3YnZfVuN+v9QtuEaLGq2NY2oVztCFhepH3fJ
zTE31RaS2ECNYKJGkrcLlTFR9xt6D1GJ2BdoBrDZm0hswAc3zf4sPYPW4Xf6C0zD
lL+NJSRjEKpEJ+9ejSnJFYtcjXmL5DaU00iS3NsVzRyxiD0QTgM8MTXndZQXgGz5
e3y3gqW0Kia7JfGEuHM2aaUrbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJPy+fA7
AXUBFQyjnBkSMPXp9fuMMB8GA1UdIwQYMBaAFGNOKLEALlVujrFPlT6tY7bWd1gJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEMwRC9BRDI1ODg5MDU3
NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZXNk9zVS1WUHExanR0WjNX
QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1kwNG9zUUF1Vlc2T3NVLVZQcTFqdHRaM1dBay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NEMwRC9BRDI1ODg5MDU3NTQxMUVFOTQwQ0Q5NTRDNEY5QUUwMi9ZMDRvc1FBdVZX
Nk9zVS1WUHExanR0WjNXQWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA7D5TjRrVaX/MydRdgRS+nVz3rg2XD10yMxenA5PJHkrUu/X1uh6/o
UfPzNoNKscYi/kNArREVqx5K5GGoj9FOa/JCKFpNTKnTanV55XYqAZheTdnTVT9L
aMiVPbEXbio+MI4J1ZdDooRPVDi8a0Go3lifRVyV6Jz/YBNrKHH7qqZk0LsKljFD
hNIsPA0SiPzM5m6J40rGzShjwZdzFBI/4GyxPiHSon3q98D3beq8nLceD2xndA6d
ppuFgbsI9xM131m2m0PmFEQ6WEISWh+eZOevTI9UqsGzNpED1D/LrEynJF8N2VTd
RFOdaK5wl2rk76B2giJy4ramdKP+3bZq
-----END CERTIFICATE-----
Generated at Tue May 13 02:27:29 2025 by rpki-client