Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
File:                     L1nO2mFIFfRjLznVoxwqUUjGtPo.mft (raw, json)
Hash identifier:          eT04y6XTeAxWPsD7OZ24TakGcHKVtKGzap1n518IXj0=
Subject key identifier:   5A:05:9F:28:CC:7F:58:9A:49:A5:B0:42:56:30:D0:31:62:03:F8:B5
Authority key identifier: 2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA
Certificate issuer:       /CN=A911BD54/serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
Certificate serial:       2547
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
Manifest number:          24E0
Signing time:             Mon 28 Apr 2025 15:49:12 +0000
Manifest this update:     Mon 28 Apr 2025 15:49:12 +0000
Manifest next update:     Mon 05 May 2025 15:49:12 +0000
Files and hashes:         1: L1nO2mFIFfRjLznVoxwqUUjGtPo.crl (hash: X9xW1pYAllGazzuhz028inEZQyojEE/TDmhf1jACFKo=)
                          2: 6A4C0AE89B1111EEADD68539C4F9AE02.roa (hash: 2DQNtDG5SlXbYPNKHWvlCf1LoqXbXRDiCCKULGtJnHM=)
                          3: 7135F534A05E11EDAC005F21C4F9AE02.roa (hash: BPqGgTO/FXgmhll9acyqoVIwbgNH2EbF72C/59rTKAs=)
                          4: 6CD99EF455C911E78F401587C4F9AE02.roa (hash: W5BOpPvdDaVJRiPCvQRJeUEXAu9OuHFa28A+g1a29VM=)
                          5: 407F0056629711EEB706DD75C4F9AE02.roa (hash: PPHYcuwo/hi+gWIj/jwhtP8TpkDUisIVIpssgpxO+Uk=)
                          6: 50A7914A5B9011EE82A2243AC4F9AE02.roa (hash: ssVkoQGU9abtVaOJ8QQiFzJ2u/KxDVyiUSGDeDLOq7k=)
                          7: 260428EC312211EEAF54935BC4F9AE02.roa (hash: rs1BLbvYE3DjY31zt5pMsjMWm6NZ1lEGyNnSPudZWnw=)
                          8: B77A93FE852411EFA67F8144C4F9AE02.roa (hash: card7JNSXN/xmFN4DueLt9CEoLfIixAjl6O1VFSsoLU=)
                          9: B6B65E76852411EFA67F8144C4F9AE02.roa (hash: ZjX79axkNC/VnRSkKPjshmIjcGsGG06UJjQxdQstgRg=)
                          10: 8659FCFEB12811EE98786F82C4F9AE02.roa (hash: uTcSN/s3jafNB4/D11q5q+/m0pypV3YLg7hL+NBlIuc=)
                          11: AE5BAB8CA05B11ED9406DE26C4F9AE02.roa (hash: bI6DNZ+SMQoiH31SjdXczk0YB7z1qgZ9bG+qqRhYG1Q=)
                          12: EAF1B720D85A11E9B476E954C4F9AE02.roa (hash: tGAr+6Zn60awTp8cl05laafAibPgTaCeJzxGTywN05I=)
                          13: 18D20D12852511EFBE3D6E47C4F9AE02.roa (hash: Xf4WUlVOVXX5jFG9PvkmpeYeh0+vfoKZddXectuS1PA=)
                          14: E0CD5510BE6111ED88CAF164C4F9AE02.roa (hash: DZxtCrPx9nVC06xsT0giYHAu0uYg4D08gJHGXJpz69w=)
                          15: 71D21A40A05E11EDAC005F21C4F9AE02.roa (hash: wWAuh5kIJNSIRZFUI/17Ka/eUztNPx+QrG0g1L0q+HM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl
                          rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 14:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9543 (0x2547)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD54, serialNumber=2F59CEDA614815F4632F39D5A31C2A5148C6B4FA
        Validity
            Not Before: Apr 28 15:49:12 2025 GMT
            Not After : May  5 15:49:12 2025 GMT
        Subject: CN=680fa378-0fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:68:48:d3:9e:67:a3:af:71:d0:12:14:66:3a:
                    ee:28:8a:ac:b2:a3:4d:89:36:c8:31:49:b6:72:dc:
                    70:8a:f9:87:6f:cc:9b:8d:db:e1:e5:a3:20:04:eb:
                    57:e4:4c:4e:58:84:6b:16:f2:d7:b9:c1:9e:00:8d:
                    73:37:5c:fc:c8:93:d9:bc:78:bb:c8:c1:c9:f7:f1:
                    28:27:4c:3b:89:23:98:55:8d:13:8f:63:a2:0f:df:
                    6b:6d:7d:6b:1b:2b:55:d8:e4:c7:f3:3d:e6:05:bf:
                    4a:34:75:73:5d:4c:a2:85:12:26:0a:9f:9e:bd:01:
                    b5:b2:a0:26:be:75:6f:5d:1f:4f:66:b7:fe:72:07:
                    16:92:f4:b2:1d:37:25:a7:cb:41:2e:b3:93:ed:cb:
                    c2:0f:74:f7:06:df:70:1d:a6:6a:2f:02:31:24:56:
                    78:30:3d:df:15:ab:dd:6c:71:98:fd:04:30:56:f0:
                    a8:3f:78:85:2f:f2:ff:fc:ff:1f:d2:f4:8f:47:cf:
                    30:e4:22:c8:ab:bd:df:a7:64:ef:52:46:42:1a:57:
                    9d:dc:1f:38:8d:7b:f4:67:84:31:13:6a:62:9f:c6:
                    0e:2f:51:4a:08:a8:ed:6c:66:26:6a:5d:f0:06:b6:
                    56:27:3d:0e:00:3a:2b:6b:23:36:3d:fd:18:f3:8d:
                    bb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:05:9F:28:CC:7F:58:9A:49:A5:B0:42:56:30:D0:31:62:03:F8:B5
            X509v3 Authority Key Identifier:
                keyid:2F:59:CE:DA:61:48:15:F4:63:2F:39:D5:A3:1C:2A:51:48:C6:B4:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L1nO2mFIFfRjLznVoxwqUUjGtPo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/D90112843F4F11E59512E04CC4F9AE02/L1nO2mFIFfRjLznVoxwqUUjGtPo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:99:f8:eb:6b:f4:b0:a0:38:6f:1a:7e:2b:a1:77:b0:41:2b:
         0f:fe:51:10:c6:ee:5e:a0:bb:c3:21:90:ad:55:43:e9:2c:a8:
         03:8b:82:8e:59:64:d5:1d:e7:1e:5f:84:37:18:df:59:f5:4f:
         15:24:c7:f6:d6:b5:30:4b:13:77:c2:fe:8a:0a:2d:4a:07:6c:
         5a:9e:a2:e9:8d:cc:ac:cb:00:bd:50:24:08:bb:0b:6b:12:c9:
         70:48:a4:a1:6a:eb:0e:3f:4d:1e:75:15:a5:14:1c:4d:97:a5:
         4b:2e:c9:36:d8:8d:15:5c:d0:22:10:b4:c4:6a:54:fc:24:0a:
         84:52:ad:41:6c:47:a4:15:49:5e:7c:a5:62:49:0b:05:b4:91:
         30:cb:cd:55:5a:32:2b:ce:29:9b:fe:5b:e5:ef:bd:83:cb:e1:
         a1:14:e7:ac:04:0b:b4:0c:96:ae:0b:86:96:5c:4e:ea:1d:d0:
         74:18:d1:e0:b2:03:e7:2e:fa:ba:e1:1e:dc:08:2b:a1:ca:04:
         72:ff:84:dd:0f:11:7b:88:c1:86:37:42:b1:74:21:4a:ba:3b:
         ac:49:c5:a9:2e:0f:56:d0:a4:38:5b:6a:5b:d6:94:25:78:ef:
         cb:9c:16:1e:39:b9:79:10:0b:8a:c4:d0:22:5c:60:ce:3b:a5:
         81:c5:9f:be
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICJUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUJENTQxMTAvBgNVBAUTKDJGNTlDRURBNjE0ODE1RjQ2MzJGMzlENUEzMUMyQTUx
NDhDNkI0RkEwHhcNMjUwNDI4MTU0OTEyWhcNMjUwNTA1MTU0OTEyWjAYMRYwFAYD
VQQDEw02ODBmYTM3OC0wZmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA/WhI055no69x0BIUZjruKIqssqNNiTbIMUm2ctxwivmHb8ybjdvh5aMgBOtX
5ExOWIRrFvLXucGeAI1zN1z8yJPZvHi7yMHJ9/EoJ0w7iSOYVY0Tj2OiD99rbX1r
GytV2OTH8z3mBb9KNHVzXUyihRImCp+evQG1sqAmvnVvXR9PZrf+cgcWkvSyHTcl
p8tBLrOT7cvCD3T3Bt9wHaZqLwIxJFZ4MD3fFavdbHGY/QQwVvCoP3iFL/L//P8f
0vSPR88w5CLIq73fp2TvUkZCGled3B84jXv0Z4QxE2pin8YOL1FKCKjtbGYmal3w
BrZWJz0OADorayM2Pf0Y84275QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoFnyjM
f1iaSaWwQlYw0DFiA/i1MB8GA1UdIwQYMBaAFC9ZztphSBX0Yy851aMcKlFIxrT6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkQ1NC9EOTAxMTI4NDNG
NEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZmUmpMem5Wb3h3cVVVakd0
UG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0wxbk8ybUZJRmZSakx6blZveHdxVVVqR3RQby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QkQ1NC9EOTAxMTI4NDNGNEYxMUU1OTUxMkUwNENDNEY5QUUwMi9MMW5PMm1GSUZm
UmpMem5Wb3h3cVVVakd0UG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBrmfjra/SwoDhvGn4roXewQSsP/lEQxu5eoLvDIZCtVUPpLKgDi4KO
WWTVHeceX4Q3GN9Z9U8VJMf21rUwSxN3wv6KCi1KB2xanqLpjcysywC9UCQIuwtr
EslwSKShausOP00edRWlFBxNl6VLLsk22I0VXNAiELTEalT8JAqEUq1BbEekFUle
fKViSQsFtJEwy81VWjIrzimb/lvl772Dy+GhFOesBAu0DJauC4aWXE7qHdB0GNHg
sgPnLvq64R7cCCuhygRy/4TdDxF7iMGGN0KxdCFKujusScWpLg9W0KQ4W2pb1pQl
eO/LnBYeObl5EAuKxNAiXGDOO6WBxZ++
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:44:44 2025 by rpki-client on console.sobornost.net