Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
File:                     18TeE2hvQ1WFNoORXlQd7XU66zo.mft (raw, json)
Hash identifier:          5N+THRVz7jEBTcREop/UOSHyVv2pGqI7Ew9kpUvgOc0=
Subject key identifier:   A2:24:64:F6:4C:7B:C3:6A:99:30:EA:31:FF:03:64:F3:0A:5D:7D:97
Authority key identifier: D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A
Certificate issuer:       /CN=A919C776/serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
Certificate serial:       BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
Manifest number:          BB
Signing time:             Sun 27 Apr 2025 04:47:53 +0000
Manifest this update:     Sun 27 Apr 2025 04:47:53 +0000
Manifest next update:     Sun 04 May 2025 04:47:53 +0000
Files and hashes:         1: 18TeE2hvQ1WFNoORXlQd7XU66zo.crl (hash: 17UCqJywSm/DtjFvqIUWzAE5lnCOws/0IJMtkOPL8Q8=)
                          2: 13294E34F1F411EFA2B4CF73C4F9AE02.roa (hash: DAtInmCwbWzQcrNZi58XkRTqQ2PUuny0QfI6d1fbYeI=)
                          3: 35A11C66086C11EFB8BD7815C4F9AE02.roa (hash: jx27R9R8a3ve62AOIqb5E0ou30ap1JUun3eJwYMuDqE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl
                          rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C776, serialNumber=D7C4DE13686F4355853683915E541DED753AEB3A
        Validity
            Not Before: Apr 27 04:47:53 2025 GMT
            Not After : May  4 04:47:53 2025 GMT
        Subject: CN=680db6f9-ba05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:e5:9e:16:67:39:ac:7f:14:91:f7:62:d9:87:
                    2b:c5:a6:e0:9b:5a:79:be:b8:de:e3:fa:eb:57:e7:
                    bb:f0:a6:f8:d6:5e:86:86:5c:7c:36:e4:06:5c:5b:
                    14:fa:c1:9f:e6:15:9e:b3:9e:0e:b7:48:7b:19:99:
                    79:df:90:2c:fa:71:aa:ae:4b:fc:d3:a0:df:ae:e0:
                    09:12:57:92:19:a1:19:88:6f:e2:9c:af:97:cc:f8:
                    7c:c1:89:3b:4e:3c:14:9f:da:11:a3:6d:0c:99:3e:
                    68:7c:d4:56:ab:68:75:b4:96:5d:e1:06:7c:2a:c8:
                    5a:31:3b:e6:35:1d:33:08:3f:49:85:a5:63:9f:db:
                    15:a7:3d:6e:59:9e:cf:6c:61:55:dd:92:9a:ba:bc:
                    77:2d:b6:25:6c:0d:0a:a6:e2:ce:c4:5e:91:20:23:
                    2a:1e:a1:fe:20:30:89:2a:ea:0c:3e:e4:c9:18:95:
                    d8:dd:04:ea:ac:49:78:49:01:8f:c7:ff:b6:5f:92:
                    2f:a2:a3:f2:ef:c0:ae:05:91:51:05:e8:99:e8:3a:
                    c8:6d:2e:0a:ad:eb:4c:83:d5:4f:4c:b7:b8:76:30:
                    0e:46:97:91:c4:5a:be:86:ab:67:15:30:4f:45:6d:
                    b9:11:c1:6e:c2:20:ae:3c:5c:16:f6:f4:32:5e:ba:
                    56:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:24:64:F6:4C:7B:C3:6A:99:30:EA:31:FF:03:64:F3:0A:5D:7D:97
            X509v3 Authority Key Identifier:
                keyid:D7:C4:DE:13:68:6F:43:55:85:36:83:91:5E:54:1D:ED:75:3A:EB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/18TeE2hvQ1WFNoORXlQd7XU66zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C776/9297C452086B11EF826D3B14C4F9AE02/18TeE2hvQ1WFNoORXlQd7XU66zo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:04:30:47:cd:09:51:a9:37:93:fc:71:ef:4d:a1:2c:76:97:
         d1:2c:e1:9f:71:35:38:f8:96:08:bc:54:45:e7:39:c9:98:ca:
         c0:34:56:ea:ec:1c:0c:1c:17:10:bb:87:74:37:88:e7:27:61:
         d9:74:77:b2:c6:d0:ff:6a:14:1a:9b:46:10:f9:8d:3a:3b:d3:
         f6:0a:1f:10:90:5a:f4:f6:0f:56:e2:02:fd:de:47:b9:89:8b:
         f1:1b:06:08:00:5f:3c:9a:fa:d9:35:57:c6:9b:72:59:16:27:
         44:93:8d:35:34:00:89:ac:5c:d8:76:75:e1:55:2c:0a:be:68:
         7d:96:dd:e3:f4:a7:74:ae:20:e8:0d:8b:0f:90:5c:87:1a:f4:
         6c:3b:3a:68:d8:2b:05:78:50:7e:80:ae:f3:8a:c4:6b:ab:23:
         7d:2e:b0:f0:6a:f8:37:1b:eb:4c:de:3f:55:af:8a:a3:7d:4e:
         56:99:06:32:ff:59:f1:b4:be:70:d6:62:9d:ad:06:53:b3:ce:
         d2:91:4c:0e:f4:44:c3:1c:de:b3:6f:70:17:f3:99:1a:e2:6d:
         44:25:9b:43:bd:ac:a9:73:81:0f:14:34:10:ea:6e:e0:b7:3a:
         b6:d2:cb:f8:e4:64:0e:84:f8:c5:9c:37:21:5b:ad:d0:20:5e:
         7b:46:f4:f8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM3NzYxMTAvBgNVBAUTKEQ3QzRERTEzNjg2RjQzNTU4NTM2ODM5MTVFNTQxREVE
NzUzQUVCM0EwHhcNMjUwNDI3MDQ0NzUzWhcNMjUwNTA0MDQ0NzUzWjAYMRYwFAYD
VQQDEw02ODBkYjZmOS1iYTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9OWeFmc5rH8Ukfdi2Ycrxabgm1p5vrje4/rrV+e78Kb41l6Ghlx8NuQGXFsU
+sGf5hWes54Ot0h7GZl535As+nGqrkv806DfruAJEleSGaEZiG/inK+XzPh8wYk7
TjwUn9oRo20MmT5ofNRWq2h1tJZd4QZ8KshaMTvmNR0zCD9JhaVjn9sVpz1uWZ7P
bGFV3ZKaurx3LbYlbA0KpuLOxF6RICMqHqH+IDCJKuoMPuTJGJXY3QTqrEl4SQGP
x/+2X5IvoqPy78CuBZFRBeiZ6DrIbS4KretMg9VPTLe4djAORpeRxFq+hqtnFTBP
RW25EcFuwiCuPFwW9vQyXrpWXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIkZPZM
e8NqmTDqMf8DZPMKXX2XMB8GA1UdIwQYMBaAFNfE3hNob0NVhTaDkV5UHe11Ous6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5Qzc3Ni85Mjk3QzQ1MjA4
NkIxMUVGODI2RDNCMTRDNEY5QUUwMi8xOFRlRTJodlExV0ZOb09SWGxRZDdYVTY2
em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzE4VGVFMmh2UTFXRk5vT1JYbFFkN1hVNjZ6by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
Qzc3Ni85Mjk3QzQ1MjA4NkIxMUVGODI2RDNCMTRDNEY5QUUwMi8xOFRlRTJodlEx
V0ZOb09SWGxRZDdYVTY2em8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA2BDBHzQlRqTeT/HHvTaEsdpfRLOGfcTU4+JYIvFRF5znJmMrANFbq
7BwMHBcQu4d0N4jnJ2HZdHeyxtD/ahQam0YQ+Y06O9P2Ch8QkFr09g9W4gL93ke5
iYvxGwYIAF88mvrZNVfGm3JZFidEk401NACJrFzYdnXhVSwKvmh9lt3j9Kd0riDo
DYsPkFyHGvRsOzpo2CsFeFB+gK7zisRrqyN9LrDwavg3G+tM3j9Vr4qjfU5WmQYy
/1nxtL5w1mKdrQZTs87SkUwO9ETDHN6zb3AX85ka4m1EJZtDvaypc4EPFDQQ6m7g
tzq20sv45GQOhPjFnDchW63QIF57RvT4
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:52 2025 by rpki-client on console.sobornost.net