Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
File:                     hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft (raw, json)
Hash identifier:          LBm8GzIz8piM6F8h5VvXfCZZE9slbUkCE0A7TbvVji4=
Subject key identifier:   AE:F9:7C:CE:A3:B7:BD:6A:E9:AA:86:4A:CB:49:7D:C4:10:F5:BE:51
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       07C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
Manifest number:          067A
Signing time:             Sat 26 Apr 2025 22:55:27 +0000
Manifest this update:     Sat 26 Apr 2025 22:55:26 +0000
Manifest next update:     Sat 03 May 2025 22:55:26 +0000
Files and hashes:         1: hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl (hash: Xt3vbXc5ipZDz47jFZ/jEUzJOXLdNvyOJ+jHdjc1hkk=)
                          2: A37112BA16ED11F0B635C562C4F9AE02.roa (hash: rZFiavbY0PAbr2H7+gTs3U67Eq+r4u4v2zqFhLKgsN8=)
                          3: D36E1CE02A3211EFA7554C59C4F9AE02.roa (hash: +qzxrrbDAbjm5oGRWL2M9bgOfHEjl4iskK+N/J81qak=)
                          4: 7145DE8C69CE11EF9C04450AC4F9AE02.roa (hash: hSCKbETyEcrfwdR62qLCMoskeNw2yhn+vArByqXZY/4=)
                          5: 2C3DCE420F7F11F0B174675DC4F9AE02.roa (hash: JtKKxCXridSwy6SJ7Mx9WW/156HamhanSTK24tMN9c0=)
                          6: 9CDF55D87D6A11EEA59E8C3FC4F9AE02.roa (hash: mDnMAOX1D7nrgDR/qLwtv3995W8fLU9iXorAjw/Tyy8=)
                          7: 918746BAE5E611EF9D35130AC4F9AE02.roa (hash: 5LHlWW/HIHhEuVs7lyfpyvCjCxzDLd5MFI+tQXgroXY=)
                          8: 5DFC320069CD11EFA0E6CC83C4F9AE02.roa (hash: jbI9nyIyGvuuwD7R5pJI5zo/f8yqDWKnyeAgYYtwurY=)
                          9: 2294C59616EE11F09E906E12C4F9AE02.roa (hash: TAFLRnpDkPX0/1thH6OXxUqfDFzb/4YZ/ueijGni7sU=)
                          10: 7CFCD110ECCC11EE8ACC2F26C4F9AE02.roa (hash: /zYRYz7hw59PN1H99rZM8/IUYjLUkVgpuVofdR3Vzlc=)
                          11: 32774EE811D111EF9084EB51C4F9AE02.roa (hash: xP6a2Fm0PA5GcUsRivI8UKiG6GftNlKvei6R3Wuqt8Q=)
                          12: 4A4A33C0661B11EFA314D413C4F9AE02.roa (hash: VNTbmafGr2Ck68du6AOcxR3XdT37BiEBd7yF9e6N088=)
                          13: 2C928134155711F099BFE331C4F9AE02.roa (hash: 47lhJb8uhRs8ieTedrS6V4SnBxu8DNcKDZI2uXa5ZQU=)
                          14: 7E08719E390311EF9DD1A882C4F9AE02.roa (hash: S4VX1CO0OF3+Ep6xnyvx/Uv1NHR9lS+F0nBxbNUE0l8=)
                          15: 83EC44C8134C11EF81B18276C4F9AE02.roa (hash: 4PiyophquWuYIG0+K5ceNOm7ogfnJHTsjtfCsP+bCrw=)
                          16: D55BADE4193911ED82BB7358C4F9AE02.roa (hash: wzpW0H2xl9IMiS2MU8LoO/Pkm6/TTCP+V9WTTRyG49s=)
                          17: DC5ECE1816EE11F097A64F85C4F9AE02.roa (hash: 3I5NuV8UPYvfsF04ShxS5VeyRR5Sv1yc4MFcSv253Dw=)
                          18: 9EB8A27A675C11EE81835581C4F9AE02.roa (hash: OEqTkDyc1rPh8C5CXLgkDLbM+SU7rHYFTB3EDRvvg8I=)
                          19: 2A3B0CECF89E11EFBEB09C18C4F9AE02.roa (hash: WvwQUH+4dWCkhf9AYHECGHhhbwO1gaxV2Z7Th1HDWV0=)
                          20: 48BA598A180611EF8A144756C4F9AE02.roa (hash: v5rCwgyqRx5u8KidQnrhF0Q+fjIuGy77dHFgS6yCLVM=)
                          21: 738CDD3E2C8A11EF93B8A709C4F9AE02.roa (hash: KJYfbg4zrYKKjLKtGx8UXjsE8IdRp8mbqGUvHKp23l4=)
                          22: 2BB36B4E0F7F11F0B174675DC4F9AE02.roa (hash: B3UEiEYw2WKPOdrQO2wqkgon16D3Efz81MuIIEKCBB8=)
                          23: 222E2FAC16EE11F09E906E12C4F9AE02.roa (hash: DoFm6RaZkUNcJGWZuZ/N3Vw0x/Ki25o4uY7ZTpQ6Svw=)
                          24: 8FC3656CCE6B11EF90AD9413C4F9AE02.roa (hash: gZtWAKAUMwr/x0EQVymUoJL6ChkEmm3s+W09M5NLn7E=)
                          25: 3DC39FDAE82D11EF86C76B75C4F9AE02.roa (hash: CB42rPIllKFi14OnASR8kG8ELcV0c2sBojJ+pQ7hSCE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:55:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1988 (0x7c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Apr 26 22:55:26 2025 GMT
            Not After : May  3 22:55:26 2025 GMT
        Subject: CN=680d645e-7053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:ee:5e:e0:d7:8b:49:0c:6a:d6:e9:29:14:
                    3d:6b:22:23:37:13:4a:c2:c2:a8:92:10:4c:71:c2:
                    3e:f3:a2:d7:c6:90:2f:ad:1c:ae:36:97:e1:f4:ea:
                    ad:5b:17:2c:94:89:3a:95:7a:5a:35:61:20:3a:86:
                    de:1f:06:f5:7e:7b:fa:b6:86:d0:55:76:83:c6:5a:
                    75:e5:ea:f8:e8:98:6b:88:6d:1c:e0:70:90:c2:1a:
                    44:26:79:61:24:08:95:d4:89:85:cf:e4:73:37:1a:
                    44:de:45:75:c7:56:db:8b:6f:02:b4:03:56:d7:44:
                    1d:09:63:a6:0a:38:b5:14:66:93:1b:36:6d:48:76:
                    b7:d4:b2:e6:47:ea:bd:61:36:78:ef:10:a9:03:7a:
                    37:9c:24:40:94:3f:81:07:28:62:cf:56:e6:f2:54:
                    1d:48:c1:72:22:8f:25:55:18:51:a8:ef:ea:cb:f5:
                    57:77:70:0e:3a:eb:67:11:49:14:47:1f:7a:fa:e8:
                    56:48:2a:23:03:96:3b:21:28:f8:e3:2c:62:c4:20:
                    7d:18:44:c3:1f:8d:3d:4b:12:4c:0b:a5:4f:ce:22:
                    e0:81:3e:e9:b8:12:fd:41:aa:7b:dc:85:d5:00:22:
                    46:26:ea:35:c4:6a:66:0a:cf:b0:41:d8:77:7a:88:
                    73:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F9:7C:CE:A3:B7:BD:6A:E9:AA:86:4A:CB:49:7D:C4:10:F5:BE:51
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7c:76:70:3c:01:ff:2f:59:f7:12:1a:24:a0:ec:ba:0e:c3:
         3e:e6:b2:de:98:01:41:01:9a:e9:0d:bd:5a:87:83:98:fe:59:
         23:ca:43:32:05:a5:34:a9:ae:2c:80:c2:6a:8c:6e:4f:26:12:
         ed:ae:e1:7c:5e:b8:94:2b:7b:c6:ae:c3:91:9e:b3:4e:1d:9d:
         41:e9:62:50:8c:72:e0:01:b5:08:54:5e:5f:d6:56:49:f2:a1:
         b6:c5:0c:23:68:5d:b5:cd:5a:19:de:54:32:a1:72:48:0a:37:
         e9:01:d6:48:4e:7f:97:9b:63:30:33:55:db:97:f6:ff:82:e8:
         2a:6b:ee:a4:ae:2b:56:c9:5e:ec:f4:54:b6:f5:de:31:04:0a:
         79:f8:02:6b:85:10:a4:e6:a8:c0:4f:bd:4c:cc:68:1b:1d:af:
         76:51:3d:75:00:e1:a4:09:5b:d5:07:09:34:c9:c9:dc:f3:03:
         bf:9b:88:84:e6:51:a7:d5:75:3f:98:06:69:8b:0f:14:66:af:
         c1:ca:82:d1:ad:88:42:86:c5:6e:73:0e:bd:9b:19:98:e6:d4:
         9b:63:94:60:6b:e6:a4:a1:30:73:bf:0c:09:15:77:93:44:3d:
         e8:14:e9:58:98:79:cd:e7:e5:67:0e:e3:55:29:13:b6:cc:da:
         fe:ef:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:16 2025 by rpki-client on console.sobornost.net