Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft
File:                     6AKchCosGw6rjSFi239_RN4ccCg.mft (raw, json)
Hash identifier:          HieAp2Z/wAlYO2cEliWCylvK863MsTPhpWOMNb4EBFI=
Subject key identifier:   40:5C:45:74:B2:51:29:C3:0F:08:71:23:5C:9D:9A:D8:36:34:6D:AE
Authority key identifier: E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28
Certificate issuer:       /CN=A919C355/serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft
Manifest number:          014F
Signing time:             Sun 11 May 2025 03:03:56 +0000
Manifest this update:     Sun 11 May 2025 03:03:56 +0000
Manifest next update:     Sun 18 May 2025 03:03:56 +0000
Files and hashes:         1: 6AKchCosGw6rjSFi239_RN4ccCg.crl (hash: 3uLF72dk1OJts3XDvpyUL3JGxJKEMki8pRHNQwf7N7w=)
                          2: 63884D122F5911EE8D896A87C4F9AE02.roa (hash: 4AwkRBSah0q0zkuKlGnrqVF3ZLdqCQgqioJ/w/eqAGc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl
                          rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 03:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C355, serialNumber=E8029C842A2C1B0EAB8D2162DB7F7F44DE1C7028
        Validity
            Not Before: May 11 03:03:56 2025 GMT
            Not After : May 18 03:03:56 2025 GMT
        Subject: CN=6820139c-9a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0e:32:5e:f3:39:ac:e3:e4:c6:5e:9c:52:35:
                    30:74:0b:a6:00:7f:cd:4b:27:0a:09:11:7d:1a:0a:
                    2e:ee:d8:b3:0d:f1:e0:02:8f:1b:05:88:df:01:e8:
                    d0:aa:93:c6:6b:3f:ce:c3:d5:4b:b9:cb:f1:3c:04:
                    21:75:3d:39:50:9c:25:b5:fe:51:62:b9:d8:f6:d8:
                    ae:a0:1b:07:81:33:ea:97:38:12:37:bc:48:b9:14:
                    e9:f7:6c:fb:d6:b3:e7:53:6d:91:1d:30:99:91:a6:
                    16:0e:e6:b3:0b:c5:ec:46:96:58:a5:3e:3e:28:23:
                    10:dc:19:61:99:f9:ac:f2:22:0e:f2:34:a4:68:e7:
                    4c:ee:d5:28:45:84:68:88:ab:be:70:e8:fe:fb:a9:
                    26:e0:4f:5f:63:15:65:4d:8b:1d:d1:85:f3:e4:97:
                    cf:50:60:43:78:47:f3:62:38:35:52:21:ea:1f:35:
                    e0:33:28:a6:1f:35:49:dc:5a:74:3a:96:c0:7a:6d:
                    6c:a5:37:c7:c3:1e:ab:2f:15:23:3e:dd:f9:e7:a5:
                    2f:0e:70:1f:13:b9:4a:22:33:4f:f4:23:c5:9f:dc:
                    14:33:e8:90:d0:cf:27:40:c3:b1:c7:b0:e7:dd:95:
                    28:5c:70:5a:d2:7c:19:d7:20:29:f9:70:4d:a2:d2:
                    90:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5C:45:74:B2:51:29:C3:0F:08:71:23:5C:9D:9A:D8:36:34:6D:AE
            X509v3 Authority Key Identifier:
                keyid:E8:02:9C:84:2A:2C:1B:0E:AB:8D:21:62:DB:7F:7F:44:DE:1C:70:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6AKchCosGw6rjSFi239_RN4ccCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C355/22E76B442F5911EEB957EA72C4F9AE02/6AKchCosGw6rjSFi239_RN4ccCg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:b6:f1:b2:d3:28:10:cd:3a:24:0a:be:45:9a:80:c5:0d:b2:
         3a:af:b9:fa:1f:d5:5b:9a:dc:ce:36:ee:01:18:2c:e7:be:ae:
         bb:83:5a:4c:f5:e7:d2:d9:62:64:2f:6c:f5:ae:7f:80:67:2b:
         6a:3b:ef:8e:f5:8b:b8:2f:06:75:6b:7a:56:6f:56:7c:8f:5c:
         96:3b:23:fc:9d:d6:c6:2f:be:9a:30:c9:21:ea:fa:f7:65:90:
         01:fb:76:01:54:ce:01:a5:27:c5:04:0a:1d:64:1c:12:46:20:
         e5:b2:99:4a:0e:7f:c5:eb:d1:7f:97:e1:83:c7:6e:50:26:50:
         1e:b9:c9:2e:1f:23:7e:e4:47:54:36:ad:8e:ec:f8:d1:92:4c:
         35:b5:1d:e8:17:6b:24:4a:f7:d5:28:1e:01:a3:27:8d:2d:de:
         9e:99:9b:ab:92:a4:e3:f6:dc:84:f5:dd:34:67:e5:c0:b1:5d:
         ed:d8:42:df:ba:0c:f8:5b:13:21:66:fe:0e:75:ed:65:e8:7f:
         46:67:b4:eb:8f:25:a8:81:bd:16:00:a1:64:24:ee:1d:c1:8e:
         8c:02:97:3b:23:f8:ef:74:ac:c7:fa:7f:b0:35:53:0d:0c:a9:
         f9:72:3b:0d:c5:ef:1d:bb:c9:e8:c6:1c:d2:a1:db:dc:16:49:
         ee:96:61:6e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUMzNTUxMTAvBgNVBAUTKEU4MDI5Qzg0MkEyQzFCMEVBQjhEMjE2MkRCN0Y3RjQ0
REUxQzcwMjgwHhcNMjUwNTExMDMwMzU2WhcNMjUwNTE4MDMwMzU2WjAYMRYwFAYD
VQQDEw02ODIwMTM5Yy05YTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsg4yXvM5rOPkxl6cUjUwdAumAH/NSycKCRF9Ggou7tizDfHgAo8bBYjfAejQ
qpPGaz/Ow9VLucvxPAQhdT05UJwltf5RYrnY9tiuoBsHgTPqlzgSN7xIuRTp92z7
1rPnU22RHTCZkaYWDuazC8XsRpZYpT4+KCMQ3Blhmfms8iIO8jSkaOdM7tUoRYRo
iKu+cOj++6km4E9fYxVlTYsd0YXz5JfPUGBDeEfzYjg1UiHqHzXgMyimHzVJ3Fp0
OpbAem1spTfHwx6rLxUjPt3556UvDnAfE7lKIjNP9CPFn9wUM+iQ0M8nQMOxx7Dn
3ZUoXHBa0nwZ1yAp+XBNotKQcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEBcRXSy
USnDDwhxI1ydmtg2NG2uMB8GA1UdIwQYMBaAFOgCnIQqLBsOq40hYtt/f0TeHHAo
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzM1NS8yMkU3NkI0NDJG
NTkxMUVFQjk1N0VBNzJDNEY5QUUwMi82QUtjaENvc0d3NnJqU0ZpMjM5X1JONGNj
Q2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZBS2NoQ29zR3c2cmpTRmkyMzlfUk40Y2NDZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzM1NS8yMkU3NkI0NDJGNTkxMUVFQjk1N0VBNzJDNEY5QUUwMi82QUtjaENvc0d3
NnJqU0ZpMjM5X1JONGNjQ2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB7tvGy0ygQzTokCr5FmoDFDbI6r7n6H9VbmtzONu4BGCznvq67g1pM
9efS2WJkL2z1rn+AZytqO++O9Yu4LwZ1a3pWb1Z8j1yWOyP8ndbGL76aMMkh6vr3
ZZAB+3YBVM4BpSfFBAodZBwSRiDlsplKDn/F69F/l+GDx25QJlAeuckuHyN+5EdU
Nq2O7PjRkkw1tR3oF2skSvfVKB4BoyeNLd6emZurkqTj9tyE9d00Z+XAsV3t2ELf
ugz4WxMhZv4Ode1l6H9GZ7TrjyWogb0WAKFkJO4dwY6MApc7I/jvdKzH+n+wNVMN
DKn5cjsNxe8du8noxhzSodvcFknulmFu
-----END CERTIFICATE-----
Generated at Mon May 12 23:28:30 2025 by rpki-client