Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
File:                     yhXFkI0HLdghcU7GfhF146qREuY.mft (raw, json)
Hash identifier:          hSdUQSWykWJ7dJRDF4HqrBBZ2MwZTa5vEHyqLUgu198=
Subject key identifier:   0F:2C:83:E4:13:26:D5:B6:C2:33:3B:99:B4:BE:AB:C2:2F:30:88:18
Authority key identifier: CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6
Certificate issuer:       /CN=A9146B76/serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
Certificate serial:       078B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
Manifest number:          0784
Signing time:             Sat 26 Apr 2025 21:04:47 +0000
Manifest this update:     Sat 26 Apr 2025 21:04:46 +0000
Manifest next update:     Sat 03 May 2025 21:04:46 +0000
Files and hashes:         1: yhXFkI0HLdghcU7GfhF146qREuY.crl (hash: el3HAd1WllCyluZikn1uj2XgbSrjlKsciFm0VRYwKWM=)
                          2: D6373CB80CD211EFB50E0B5EC4F9AE02.roa (hash: 1KOLf59ICzEoI7M2NmFAlaU/cZ0TLw7hfRN8QYgYxBQ=)
                          3: E4BCDFAE0CD211EFAAF8335EC4F9AE02.roa (hash: d0Xj6/bStnSttx8OgCvX9d1wnUe1SmuLIlk6o50qzOY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl
                          rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1931 (0x78b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146B76, serialNumber=CA15C5908D072DD821714EC67E1175E3AA9112E6
        Validity
            Not Before: Apr 26 21:04:46 2025 GMT
            Not After : May  3 21:04:46 2025 GMT
        Subject: CN=680d4a6f-76cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:df:ee:4a:f2:54:69:92:36:28:d0:71:35:1d:
                    81:90:e3:37:bf:18:40:3e:71:b6:1c:00:86:78:b9:
                    d4:04:f0:0e:a0:b7:4a:c2:bd:d1:20:10:dd:ea:1d:
                    f0:20:1e:4c:59:f1:0d:a3:e6:44:13:03:52:fd:e4:
                    02:99:50:ac:04:2d:90:87:06:0c:ef:10:24:1f:e9:
                    fb:76:ba:d5:6b:40:f8:2f:25:2c:bc:5f:66:eb:89:
                    b7:15:89:9f:5c:23:54:f3:2c:8b:d2:75:92:a2:c0:
                    d5:6f:9d:8b:9b:58:bd:28:4c:c4:78:19:ae:ff:cc:
                    46:84:cd:cc:3b:c2:d9:1d:4e:1c:6a:c6:14:f5:b6:
                    b3:e2:cc:dc:d8:a5:5e:93:f9:6c:a5:40:59:f8:cb:
                    da:7d:09:76:ab:e7:10:3f:fb:a1:6c:dc:d3:9d:2a:
                    14:d2:a0:1f:f3:ef:82:ec:62:fc:66:ad:ac:6b:94:
                    81:7e:c9:8c:72:27:b7:db:87:22:37:f5:7f:eb:a5:
                    b5:35:d0:77:00:ee:a8:c1:fe:94:66:62:49:b8:d4:
                    83:74:71:b1:e2:9b:19:b4:d0:2c:41:ce:52:e9:a8:
                    79:f9:a4:2f:05:ca:46:43:c3:35:cc:69:ea:0f:99:
                    a1:c2:65:c5:d2:dc:a8:b1:5d:29:8b:ea:cd:bd:70:
                    c9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2C:83:E4:13:26:D5:B6:C2:33:3B:99:B4:BE:AB:C2:2F:30:88:18
            X509v3 Authority Key Identifier:
                keyid:CA:15:C5:90:8D:07:2D:D8:21:71:4E:C6:7E:11:75:E3:AA:91:12:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yhXFkI0HLdghcU7GfhF146qREuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146B76/6CA3369C09D611EBB3C3C685C4F9AE02/yhXFkI0HLdghcU7GfhF146qREuY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:f4:67:b1:b4:8e:27:65:3a:16:cc:e9:b0:64:c1:1f:e5:a9:
         30:b0:1a:df:25:5d:51:36:4e:eb:6f:31:b7:40:a8:76:95:4e:
         a0:1f:b5:66:10:c1:2b:e3:bf:b8:bf:88:67:d2:ea:09:d6:a2:
         df:81:41:e3:94:67:4c:e9:60:ca:07:33:e9:f0:c7:4e:a3:08:
         7d:ff:55:7e:0f:3b:34:c0:19:4d:b6:25:96:27:f7:fc:6b:e1:
         d4:fa:45:68:1b:30:68:de:4f:5d:e8:4b:5c:52:27:30:bc:03:
         85:9f:7b:ba:22:06:66:2f:e6:2f:c5:e9:a5:aa:17:ab:20:fc:
         b2:4a:dd:8f:13:7b:0a:5d:62:2a:ba:86:7a:e6:c1:da:e5:16:
         ec:14:3a:8d:2f:7d:e9:15:5d:32:e1:d3:95:1c:86:e7:b0:d5:
         34:5d:61:90:39:bf:e1:b5:a4:0b:ea:4b:59:38:3e:d8:be:27:
         4e:5e:c5:42:77:72:55:1d:af:12:a6:99:ba:50:8c:a6:c7:7c:
         b0:5f:14:49:80:08:dd:d8:96:54:ea:6d:6e:e3:0f:c1:52:0b:
         f9:2f:7e:ec:27:e3:d8:95:06:59:81:1c:a1:cf:cb:fc:fd:12:
         06:2c:16:ec:5e:a6:c2:63:93:00:89:48:81:ab:1f:52:34:9e:
         cc:fc:37:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB4swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDZCNzYxMTAvBgNVBAUTKENBMTVDNTkwOEQwNzJERDgyMTcxNEVDNjdFMTE3NUUz
QUE5MTEyRTYwHhcNMjUwNDI2MjEwNDQ2WhcNMjUwNTAzMjEwNDQ2WjAYMRYwFAYD
VQQDEw02ODBkNGE2Zi03NmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5N/uSvJUaZI2KNBxNR2BkOM3vxhAPnG2HACGeLnUBPAOoLdKwr3RIBDd6h3w
IB5MWfENo+ZEEwNS/eQCmVCsBC2QhwYM7xAkH+n7drrVa0D4LyUsvF9m64m3FYmf
XCNU8yyL0nWSosDVb52Lm1i9KEzEeBmu/8xGhM3MO8LZHU4casYU9baz4szc2KVe
k/lspUBZ+MvafQl2q+cQP/uhbNzTnSoU0qAf8++C7GL8Zq2sa5SBfsmMcie324ci
N/V/66W1NdB3AO6owf6UZmJJuNSDdHGx4psZtNAsQc5S6ah5+aQvBcpGQ8M1zGnq
D5mhwmXF0tyosV0pi+rNvXDJDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA8sg+QT
JtW2wjM7mbS+q8IvMIgYMB8GA1UdIwQYMBaAFMoVxZCNBy3YIXFOxn4RdeOqkRLm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkI3Ni82Q0EzMzY5QzA5
RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExkZ2hjVTdHZmhGMTQ2cVJF
dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3loWEZrSTBITGRnaGNVN0dmaEYxNDZxUkV1WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NkI3Ni82Q0EzMzY5QzA5RDYxMUVCQjNDM0M2ODVDNEY5QUUwMi95aFhGa0kwSExk
Z2hjVTdHZmhGMTQ2cVJFdVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC59GextI4nZToWzOmwZMEf5akwsBrfJV1RNk7rbzG3QKh2lU6gH7Vm
EMEr47+4v4hn0uoJ1qLfgUHjlGdM6WDKBzPp8MdOowh9/1V+Dzs0wBlNtiWWJ/f8
a+HU+kVoGzBo3k9d6EtcUicwvAOFn3u6IgZmL+YvxemlqherIPyySt2PE3sKXWIq
uoZ65sHa5RbsFDqNL33pFV0y4dOVHIbnsNU0XWGQOb/htaQL6ktZOD7YvidOXsVC
d3JVHa8Sppm6UIymx3ywXxRJgAjd2JZU6m1u4w/BUgv5L37sJ+PYlQZZgRyhz8v8
/RIGLBbsXqbCY5MAiUiBqx9SNJ7M/DfZ
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:57 2025 by rpki-client on console.sobornost.net