Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
File:                     lNWHtudb8QivW0JJIsSouqs-6UY.mft (raw, json)
Hash identifier:          gVoUXy+3brqIYgcHAm7kwqSBDggkfH7h1cgNPNEcjOM=
Subject key identifier:   BD:23:7C:16:E8:14:A3:40:42:BC:BC:D8:C5:56:74:0A:83:75:1B:90
Authority key identifier: 94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46
Certificate issuer:       /CN=A919F0DA/serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
Certificate serial:       07DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
Manifest number:          6013
Signing time:             Sat 10 May 2025 14:15:30 +0000
Manifest this update:     Sat 10 May 2025 14:15:29 +0000
Manifest next update:     Sat 17 May 2025 14:15:29 +0000
Files and hashes:         1: lNWHtudb8QivW0JJIsSouqs-6UY.crl (hash: y4rzchd2zhHdcE4v16zivpbE8aZVXX1BvlTVjx2rHFE=)
                          2: 58273588C2BD11EBA13EC07AC4F9AE02.roa (hash: 3mG/DAHD47ieP+pHQ6Ko9KqnRvDpTJqoMQIZjKg03d8=)
                          3: 22EA7FCC21F111EC85C6186EC4F9AE02.roa (hash: B5KSH4tVyudgx/M89rAS977NHCczXltU5o9B12V7IsU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 14:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2010 (0x7da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
        Validity
            Not Before: May 10 14:15:29 2025 GMT
            Not After : May 17 14:15:29 2025 GMT
        Subject: CN=681f5f82-35b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:ab:b1:c1:a8:91:5c:f0:54:5f:18:2b:b6:
                    f2:c2:c5:dd:ea:07:3b:6f:c7:ea:79:98:13:67:af:
                    82:25:2e:46:27:89:ef:52:72:01:8a:0a:80:c4:84:
                    d8:ca:d4:6b:24:68:53:52:b2:b3:93:db:6f:a9:9f:
                    41:fc:17:3b:5c:32:04:48:ef:8d:05:c4:76:d4:9e:
                    0c:1d:fd:48:cc:b1:fa:19:60:80:77:86:60:d3:63:
                    04:05:3d:c5:ea:b6:88:45:6b:91:d8:c9:50:9d:fe:
                    3f:66:fd:ba:f1:3d:e3:ff:bd:d7:a5:46:eb:cf:21:
                    6c:0c:e5:71:38:ba:17:74:64:2c:8a:4b:12:21:6c:
                    4c:12:2f:fe:bb:05:25:56:8e:0e:a1:24:88:b2:02:
                    83:4f:a3:31:e0:7d:30:6b:ea:7f:7a:ae:c5:c9:b5:
                    27:a1:94:b3:2d:35:de:a8:c2:10:0d:2c:2a:ca:6a:
                    f3:8d:61:26:14:42:9f:0a:b8:ca:18:c4:c1:3f:f5:
                    05:64:fe:3b:6d:9b:d1:9f:71:56:3e:ad:48:a0:b4:
                    cc:5c:91:79:51:8c:78:e3:f9:46:43:68:4f:6e:90:
                    30:46:93:9f:c6:21:0f:98:81:6c:30:84:88:86:e0:
                    34:a0:df:e9:c0:c9:af:94:da:82:c7:f2:a6:2b:12:
                    b9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:23:7C:16:E8:14:A3:40:42:BC:BC:D8:C5:56:74:0A:83:75:1B:90
            X509v3 Authority Key Identifier:
                keyid:94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e2:97:4a:97:c8:f8:e2:98:e1:5f:b1:f2:e5:2c:4c:6f:cd:
         50:88:e5:8d:17:c4:f5:1f:8d:75:82:31:f0:04:8b:33:57:7b:
         40:00:dd:cc:60:7e:c2:5a:73:75:23:b7:4c:a8:ca:27:2d:8f:
         f8:93:fb:2e:1b:70:0f:6b:3e:35:80:ca:3a:34:df:c3:0b:17:
         02:88:5f:56:f4:7c:7c:8c:c1:f8:5a:c1:4c:ce:16:34:cc:02:
         b9:4d:1b:10:f2:ec:5e:e0:f9:29:cb:fa:2f:fe:e7:3d:ed:75:
         f7:f0:9d:1d:0a:8d:1f:85:3d:43:42:69:32:82:f6:c8:28:b8:
         f9:a2:dd:f7:94:4b:04:63:06:61:23:4e:4e:c7:9e:53:9e:c5:
         f1:eb:0a:25:a2:73:3d:cf:c1:cd:af:13:82:2c:e1:98:18:c1:
         3b:89:f2:f5:17:77:db:14:38:f5:dd:8a:78:0f:c5:3f:c3:90:
         55:c9:56:8d:c4:46:bd:21:0e:80:73:56:aa:88:9a:29:90:c4:
         fd:44:b0:b1:51:59:13:96:ca:e1:a8:82:a9:ac:7e:83:b7:90:
         a9:0c:d6:dc:b4:6a:e4:0b:d4:58:eb:c6:a8:c1:b0:ea:d3:2f:
         74:94:21:f0:5c:0f:4f:c3:00:d2:27:44:a0:26:6d:dc:7e:5c:
         81:8a:7f:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB9owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwREExMTAvBgNVBAUTKDk0RDU4N0I2RTc1QkYxMDhBRjVCNDI0OTIyQzRBOEJB
QUIzRUU5NDYwHhcNMjUwNTEwMTQxNTI5WhcNMjUwNTE3MTQxNTI5WjAYMRYwFAYD
VQQDEw02ODFmNWY4Mi0zNWIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAutmrscGokVzwVF8YK7bywsXd6gc7b8fqeZgTZ6+CJS5GJ4nvUnIBigqAxITY
ytRrJGhTUrKzk9tvqZ9B/Bc7XDIESO+NBcR21J4MHf1IzLH6GWCAd4Zg02MEBT3F
6raIRWuR2MlQnf4/Zv268T3j/73XpUbrzyFsDOVxOLoXdGQsiksSIWxMEi/+uwUl
Vo4OoSSIsgKDT6Mx4H0wa+p/eq7FybUnoZSzLTXeqMIQDSwqymrzjWEmFEKfCrjK
GMTBP/UFZP47bZvRn3FWPq1IoLTMXJF5UYx44/lGQ2hPbpAwRpOfxiEPmIFsMISI
huA0oN/pwMmvlNqCx/KmKxK5cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL0jfBbo
FKNAQry82MVWdAqDdRuQMB8GA1UdIwQYMBaAFJTVh7bnW/EIr1tCSSLEqLqrPulG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS8xNTBEM0VGNDFE
NjgxMUUyOEMxODI4QTQwOEIwMkNEMi9sTldIdHVkYjhRaXZXMEpKSXNTb3Vxcy02
VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xOV0h0dWRiOFFpdlcwSkpJc1NvdXFzLTZVWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjBEQS8xNTBEM0VGNDFENjgxMUUyOEMxODI4QTQwOEIwMkNEMi9sTldIdHVkYjhR
aXZXMEpKSXNTb3Vxcy02VVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCp4pdKl8j44pjhX7Hy5SxMb81QiOWNF8T1H411gjHwBIszV3tAAN3M
YH7CWnN1I7dMqMonLY/4k/suG3APaz41gMo6NN/DCxcCiF9W9Hx8jMH4WsFMzhY0
zAK5TRsQ8uxe4Pkpy/ov/uc97XX38J0dCo0fhT1DQmkygvbIKLj5ot33lEsEYwZh
I05Ox55TnsXx6wolonM9z8HNrxOCLOGYGME7ifL1F3fbFDj13Yp4D8U/w5BVyVaN
xEa9IQ6Ac1aqiJopkMT9RLCxUVkTlsrhqIKprH6Dt5CpDNbctGrkC9RY68aowbDq
0y90lCHwXA9PwwDSJ0SgJm3cflyBin9+
-----END CERTIFICATE-----
Generated at Sun May 11 15:35:33 2025 by rpki-client