Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
File:                     s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft (raw, json)
Hash identifier:          j/pZfQID1kkxL9SrpWan7ZBtxHrE8oNmvqnRpctXLrY=
Subject key identifier:   8F:D1:82:5E:5F:AC:77:37:09:78:FF:AF:AA:A8:B8:AF:79:E0:BE:DE
Authority key identifier: B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6
Certificate issuer:       /CN=A9199231/serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6
Certificate serial:       0B1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
Manifest number:          1241
Signing time:             Sat 10 May 2025 18:59:07 +0000
Manifest this update:     Sat 10 May 2025 18:59:07 +0000
Manifest next update:     Sat 17 May 2025 18:59:07 +0000
Files and hashes:         1: s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl (hash: n22gVnScuSar7nkXWeRzvTLKyYz33ZqhOY+uuyM02Ro=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl
                          rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 18:59:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2842 (0xb1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199231, serialNumber=B3E4157DD58D43A7A7D80FF306FBC541544516E6
        Validity
            Not Before: May 10 18:59:07 2025 GMT
            Not After : May 17 18:59:07 2025 GMT
        Subject: CN=681fa1fb-0bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c0:57:01:68:bf:fa:5d:d7:05:96:7c:75:47:
                    db:d6:7d:3e:03:a1:64:e5:24:23:7f:2c:bd:e4:0d:
                    f6:fc:bd:01:47:c3:7f:8f:85:b4:0f:7d:6d:d6:02:
                    64:81:08:3d:7c:7d:c7:bf:3e:1a:04:18:a9:10:f4:
                    93:b3:0a:45:27:c9:42:aa:58:18:32:02:ca:bb:5e:
                    f0:ef:c5:ac:7b:43:5d:1c:03:d8:d5:52:c4:bd:24:
                    ce:34:94:59:6b:0a:5b:b5:45:ef:8f:0a:28:ae:0c:
                    68:a0:f1:2d:55:09:09:97:19:cd:70:7f:ed:fa:31:
                    e6:a7:ab:db:05:bf:ba:c4:bd:e6:29:27:2c:8d:fd:
                    69:37:b1:d9:b4:fd:d6:b6:b2:1a:4c:8a:6f:ec:ac:
                    ed:2d:3b:7b:58:e3:20:4f:a9:20:62:bf:44:ca:bd:
                    f6:35:55:21:7d:0d:01:ef:37:68:18:18:5f:7e:f3:
                    fa:3e:0c:9c:f7:e5:e6:d1:dd:a9:42:e6:15:bb:6d:
                    05:ff:1b:ad:c0:bb:2e:8c:65:44:a4:c5:eb:3e:21:
                    53:df:ac:2b:67:72:75:de:f7:38:73:1b:23:db:13:
                    51:3d:e5:29:fb:1a:38:a8:4c:26:33:88:c3:5f:e1:
                    d6:33:b6:79:47:74:f7:83:5c:05:53:3b:9a:d0:55:
                    1f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D1:82:5E:5F:AC:77:37:09:78:FF:AF:AA:A8:B8:AF:79:E0:BE:DE
            X509v3 Authority Key Identifier:
                keyid:B3:E4:15:7D:D5:8D:43:A7:A7:D8:0F:F3:06:FB:C5:41:54:45:16:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s-QVfdWNQ6en2A_zBvvFQVRFFuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199231/08FDCD503C8111EA820D7F49C4F9AE02/s-QVfdWNQ6en2A_zBvvFQVRFFuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:46:e1:ba:05:cc:02:0c:36:c4:15:66:7f:fa:7c:e5:4c:5a:
         35:e9:16:4d:01:88:48:96:1b:77:be:9c:0f:c3:3a:5f:fd:ee:
         9e:e8:bf:f6:0a:d9:ef:37:8d:db:08:53:ef:0f:2f:83:7d:88:
         46:08:82:1b:db:1f:18:58:85:4e:9d:1e:86:4b:f5:f9:b0:13:
         25:ec:62:d5:6a:f1:6a:17:08:69:5c:c4:d5:47:30:c6:7c:ff:
         bc:a7:6d:56:f2:97:30:2c:c1:ca:a1:e0:f2:f8:8f:8e:f8:06:
         56:4f:c6:c4:b5:55:8f:7b:42:86:da:9b:a1:1a:96:ac:f6:24:
         15:99:10:75:3a:b2:37:18:d2:ed:3b:e1:12:0b:1d:45:39:af:
         19:ae:95:b8:b0:8f:76:6a:5d:65:33:5f:3e:47:0b:06:29:36:
         63:36:9b:95:ba:8d:a5:1d:99:ba:2f:99:74:10:f0:35:41:6f:
         d0:8c:72:d6:b6:a5:f0:c8:36:91:7b:80:76:dd:a2:bf:93:4e:
         29:2e:e0:ae:6f:91:fe:cc:fa:f3:92:9c:c5:ed:f7:b2:50:6c:
         b2:eb:f1:d8:dd:7a:c8:2b:e6:4f:75:6a:7b:11:6e:3f:c6:d7:
         40:e5:b9:53:2d:a8:94:3b:52:57:59:63:a8:06:d0:e1:fe:61:
         23:57:b6:93
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCxowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkyMzExMTAvBgNVBAUTKEIzRTQxNTdERDU4RDQzQTdBN0Q4MEZGMzA2RkJDNTQx
NTQ0NTE2RTYwHhcNMjUwNTEwMTg1OTA3WhcNMjUwNTE3MTg1OTA3WjAYMRYwFAYD
VQQDEw02ODFmYTFmYi0wYmQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA08BXAWi/+l3XBZZ8dUfb1n0+A6Fk5SQjfyy95A32/L0BR8N/j4W0D31t1gJk
gQg9fH3Hvz4aBBipEPSTswpFJ8lCqlgYMgLKu17w78Wse0NdHAPY1VLEvSTONJRZ
awpbtUXvjwoorgxooPEtVQkJlxnNcH/t+jHmp6vbBb+6xL3mKScsjf1pN7HZtP3W
trIaTIpv7KztLTt7WOMgT6kgYr9Eyr32NVUhfQ0B7zdoGBhffvP6Pgyc9+Xm0d2p
QuYVu20F/xutwLsujGVEpMXrPiFT36wrZ3J13vc4cxsj2xNRPeUp+xo4qEwmM4jD
X+HWM7Z5R3T3g1wFUzua0FUfpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI/Rgl5f
rHc3CXj/r6qouK954L7eMB8GA1UdIwQYMBaAFLPkFX3VjUOnp9gP8wb7xUFURRbm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTIzMS8wOEZEQ0Q1MDND
ODExMUVBODIwRDdGNDlDNEY5QUUwMi9zLVFWZmRXTlE2ZW4yQV96QnZ2RlFWUkZG
dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3MtUVZmZFdOUTZlbjJBX3pCdnZGUVZSRkZ1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTIzMS8wOEZEQ0Q1MDNDODExMUVBODIwRDdGNDlDNEY5QUUwMi9zLVFWZmRXTlE2
ZW4yQV96QnZ2RlFWUkZGdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAfRuG6BcwCDDbEFWZ/+nzlTFo16RZNAYhIlht3vpwPwzpf/e6e6L/2
CtnvN43bCFPvDy+DfYhGCIIb2x8YWIVOnR6GS/X5sBMl7GLVavFqFwhpXMTVRzDG
fP+8p21W8pcwLMHKoeDy+I+O+AZWT8bEtVWPe0KG2puhGpas9iQVmRB1OrI3GNLt
O+ESCx1FOa8ZrpW4sI92al1lM18+RwsGKTZjNpuVuo2lHZm6L5l0EPA1QW/QjHLW
tqXwyDaRe4B23aK/k04pLuCub5H+zPrzkpzF7feyUGyy6/HY3XrIK+ZPdWp7EW4/
xtdA5blTLaiUO1JXWWOoBtDh/mEjV7aT
-----END CERTIFICATE-----
Generated at Sun May 11 13:48:02 2025 by rpki-client