Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
File:                     pu8GtolYGCHHjIgpG731xRKjP0E.mft (raw, json)
Hash identifier:          NLXZQECFJF8ekQl1+pHLdar8BlE1fjj4HZBtXO66NBc=
Subject key identifier:   BE:3A:74:E4:BA:A0:3D:2F:01:23:16:6F:08:FD:25:26:B5:7D:95:3F
Authority key identifier: A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41
Certificate issuer:       /CN=A9198847/serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
Certificate serial:       0D8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
Manifest number:          0D5B
Signing time:             Fri 16 May 2025 18:16:30 +0000
Manifest this update:     Fri 16 May 2025 18:16:29 +0000
Manifest next update:     Fri 23 May 2025 18:16:29 +0000
Files and hashes:         1: pu8GtolYGCHHjIgpG731xRKjP0E.crl (hash: ld6v0h8Rg+FDwp4PfDcyq5CeljpGvCe8Jmu+KM6y2Ks=)
                          2: C40CFBDED7E011EFBC9A924AC4F9AE02.roa (hash: KMP4fS0KJ0rV6tzyJoqXTC8btS2FqftO8fBCSBS+5IE=)
                          3: 6E3B2E4CB7DD11EFADA41824C4F9AE02.roa (hash: RVQKfSvs+RymaMikyvw4Y5AS7WPGj8lGMKZQ0myGItY=)
                          4: 7938B3C66FC111EC91536F62C4F9AE02.roa (hash: eIKfHf/XSmCHqSrtE/mqXSvnhQ2z8uL0Vg+6q1rOPNA=)
                          5: 7F7231ACE18011EF8702D74DC4F9AE02.roa (hash: WZVD3OFnLCd+Z+EztJUmZvetknrgOnaCpDqtEU+1mk0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl
                          rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 23 May 2025 18:16:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3468 (0xd8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198847, serialNumber=A6EF06B689581821C78C88291BBDF5C512A33F41
        Validity
            Not Before: May 16 18:16:29 2025 GMT
            Not After : May 23 18:16:29 2025 GMT
        Subject: CN=682780fe-4be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8d:85:14:db:97:98:0f:ef:4f:f3:88:3f:86:
                    bb:1d:3c:6f:24:4f:6a:d0:b1:55:a9:97:fc:99:1b:
                    6f:39:d1:49:aa:04:c7:fc:4a:b8:c2:92:e5:72:d6:
                    ad:6a:12:d6:de:c6:4c:0a:61:89:64:97:54:9a:43:
                    cb:f1:13:d9:54:16:0d:dd:9b:36:e5:48:49:81:15:
                    5f:1c:11:60:d4:b1:b2:7f:87:2a:81:ae:9e:c3:81:
                    e6:ef:18:f5:81:5d:ce:76:9f:11:e5:e9:32:34:fc:
                    00:c3:6b:07:31:0e:72:75:c9:85:cc:fa:95:d2:d6:
                    f1:74:ae:ca:b4:c3:54:42:84:cd:17:e5:0f:60:16:
                    55:5a:99:0d:ca:96:fa:d4:45:be:5f:8e:1c:ce:11:
                    45:35:9f:7e:b5:b3:08:eb:97:f6:d2:dc:93:19:38:
                    3a:df:f9:6a:a4:0e:19:20:fa:94:6b:42:51:1d:10:
                    22:81:a9:22:31:af:3f:8d:1f:60:44:84:e0:da:ab:
                    9b:bb:2d:e8:50:a3:57:b6:a3:61:d8:e4:85:03:74:
                    e3:1c:f8:b4:d1:22:e7:be:3c:82:16:44:6f:e2:41:
                    0f:87:df:1c:52:35:d0:af:d3:7f:87:81:4f:e3:32:
                    1a:db:21:b9:25:75:64:92:2f:47:03:a0:1d:8e:03:
                    25:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3A:74:E4:BA:A0:3D:2F:01:23:16:6F:08:FD:25:26:B5:7D:95:3F
            X509v3 Authority Key Identifier:
                keyid:A6:EF:06:B6:89:58:18:21:C7:8C:88:29:1B:BD:F5:C5:12:A3:3F:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pu8GtolYGCHHjIgpG731xRKjP0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198847/DDFBB0B8D78111E9B423AC4BC4F9AE02/pu8GtolYGCHHjIgpG731xRKjP0E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:37:95:bc:fa:56:49:04:26:5d:36:1a:3d:d7:74:2a:64:f8:
         84:a5:f8:1e:4a:65:2b:be:27:54:10:18:2b:9b:da:e2:f9:97:
         97:d3:64:81:a2:9f:df:c0:90:6f:7a:ec:73:1c:17:37:55:ad:
         f3:36:32:0e:69:5a:53:0c:44:21:62:15:c2:e6:e1:24:c2:df:
         88:8c:38:bd:c4:a3:e4:cc:f9:64:6c:95:5e:09:35:3f:9c:fa:
         b5:2e:0f:0b:e8:a3:e8:be:d1:f8:93:65:a1:f2:de:ff:02:90:
         c7:74:27:7d:52:d0:ea:06:5d:20:f3:bc:12:03:00:ce:5f:7c:
         ed:66:bf:34:b6:cc:15:3f:75:d5:39:13:5e:e4:b2:23:11:40:
         2d:4a:a9:4c:09:6a:59:7e:45:3e:75:47:e9:f4:db:b4:42:dd:
         c6:ec:c9:59:4f:30:a4:a5:bc:77:50:22:e8:3b:fd:90:df:11:
         59:13:8f:34:16:1d:5a:2a:99:8d:8e:8f:03:1d:e8:95:0c:68:
         51:2a:34:3c:39:c3:b0:b0:11:e0:16:ef:1e:62:0e:75:62:0d:
         1b:c3:7a:3e:20:91:7a:6f:42:56:3d:d2:35:5a:60:fd:e6:e4:
         5a:82:f7:8b:c5:47:f5:9b:17:ae:03:ec:30:1f:82:cc:06:a3:
         86:86:be:1f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg4NDcxMTAvBgNVBAUTKEE2RUYwNkI2ODk1ODE4MjFDNzhDODgyOTFCQkRGNUM1
MTJBMzNGNDEwHhcNMjUwNTE2MTgxNjI5WhcNMjUwNTIzMTgxNjI5WjAYMRYwFAYD
VQQDEw02ODI3ODBmZS00YmU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5o2FFNuXmA/vT/OIP4a7HTxvJE9q0LFVqZf8mRtvOdFJqgTH/Eq4wpLlctat
ahLW3sZMCmGJZJdUmkPL8RPZVBYN3Zs25UhJgRVfHBFg1LGyf4cqga6ew4Hm7xj1
gV3Odp8R5ekyNPwAw2sHMQ5ydcmFzPqV0tbxdK7KtMNUQoTNF+UPYBZVWpkNypb6
1EW+X44czhFFNZ9+tbMI65f20tyTGTg63/lqpA4ZIPqUa0JRHRAigakiMa8/jR9g
RITg2qubuy3oUKNXtqNh2OSFA3TjHPi00SLnvjyCFkRv4kEPh98cUjXQr9N/h4FP
4zIa2yG5JXVkki9HA6AdjgMlTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL46dOS6
oD0vASMWbwj9JSa1fZU/MB8GA1UdIwQYMBaAFKbvBraJWBghx4yIKRu99cUSoz9B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg0Ny9EREZCQjBCOEQ3
ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdDSEhqSWdwRzczMXhSS2pQ
MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3B1OEd0b2xZR0NISGpJZ3BHNzMxeFJLalAwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
ODg0Ny9EREZCQjBCOEQ3ODExMUU5QjQyM0FDNEJDNEY5QUUwMi9wdThHdG9sWUdD
SEhqSWdwRzczMXhSS2pQMEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBvN5W8+lZJBCZdNho913QqZPiEpfgeSmUrvidUEBgrm9ri+ZeX02SB
op/fwJBveuxzHBc3Va3zNjIOaVpTDEQhYhXC5uEkwt+IjDi9xKPkzPlkbJVeCTU/
nPq1Lg8L6KPovtH4k2Wh8t7/ApDHdCd9UtDqBl0g87wSAwDOX3ztZr80tswVP3XV
ORNe5LIjEUAtSqlMCWpZfkU+dUfp9Nu0Qt3G7MlZTzCkpbx3UCLoO/2Q3xFZE480
Fh1aKpmNjo8DHeiVDGhRKjQ8OcOwsBHgFu8eYg51Yg0bw3o+IJF6b0JWPdI1WmD9
5uRagveLxUf1mxeuA+wwH4LMBqOGhr4f
-----END CERTIFICATE-----
Generated at Sat May 17 17:24:20 2025 by rpki-client