Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
File:                     h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json)
Hash identifier:          fJTElpFrcnJVHUqambu6dvvz5HGXQnBiiSn1Bz1pZGk=
Subject key identifier:   97:C3:08:DA:E7:BE:78:25:FD:E7:7C:3C:F2:53:0A:31:C3:6F:F0:7F
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Certificate issuer:       /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial:       01EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
Manifest number:          01D0
Signing time:             Sun 27 Apr 2025 02:03:18 +0000
Manifest this update:     Sun 27 Apr 2025 02:03:18 +0000
Manifest next update:     Sun 04 May 2025 02:03:18 +0000
Files and hashes:         1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: 714oLlGqUq3+KZjmXumXLFiasRz0jdVE4uBUMq3iaMU=)
                          2: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: kCFs9nmPiAnIcv8oJpJvtJLqB5yozfBXxDX1yoHDz3Q=)
                          3: 7D7547C48D6611EDB7F20B1FC4F9AE02.roa (hash: 15pVERijhw/wdJE16SjLjUvjRTutNcev/TWYcbcb+WY=)
                          4: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: qXl8VijXeUBq5YZGQbPFuyGm9qVJaEd0Hn4beaPuvSE=)
                          5: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: SS3DT3rVQ2RIIspyHG3PNw/Nkcbg7KmAnjQNkHYA/tU=)
                          6: 319543069BBF11EDBFB6EE5DC4F9AE02.roa (hash: cfEKqO3Kkr1IOuK1m9tr5GbLcR8ThlytGN+8R5F5cKc=)
                          7: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: 5xN+Wv93iJltArr43SjcRaq1i5ZKH/wlPD32n7ycLFk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:03:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
        Validity
            Not Before: Apr 27 02:03:18 2025 GMT
            Not After : May  4 02:03:18 2025 GMT
        Subject: CN=680d9066-ff10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:4e:a3:e6:d0:b5:f1:9e:9c:db:76:56:26:cd:
                    66:d9:93:10:2f:f4:69:d1:f7:46:b2:f0:4a:02:47:
                    6f:a8:ff:4b:68:10:d1:0d:ea:37:db:65:4b:ff:0e:
                    bb:68:2f:ae:23:25:8a:f8:89:e6:21:c4:38:98:09:
                    79:a2:d1:22:cf:57:b4:47:04:56:96:cb:7a:b7:3b:
                    ef:e2:0c:54:de:82:19:de:9c:a3:c8:73:82:27:4e:
                    87:ea:0d:70:e8:a7:d7:8f:c2:4c:91:83:db:a4:06:
                    a1:bd:a1:57:2a:52:a9:9d:e5:40:d8:a2:9d:a9:38:
                    0e:92:79:4b:81:d2:a9:02:73:94:77:62:49:f0:1a:
                    03:0c:12:80:2e:33:c4:bd:6d:1e:90:98:d4:a1:c4:
                    d3:9e:d3:f2:66:0c:37:20:6d:8f:62:06:b0:af:18:
                    a0:d4:45:d5:54:f2:ff:d1:f1:76:a5:7d:d9:a6:e1:
                    c0:8a:c6:4e:1b:54:15:ff:2e:31:7c:e8:a5:b5:51:
                    fe:51:37:24:16:f3:56:7e:64:cd:d3:fc:98:26:f1:
                    42:71:57:cb:49:49:24:2c:49:25:01:b0:ec:f5:d4:
                    d1:9a:42:b9:1e:b9:26:9b:70:4c:f5:48:a2:ea:f3:
                    37:93:24:0c:97:71:1b:77:9f:54:4c:99:72:ff:b6:
                    8f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C3:08:DA:E7:BE:78:25:FD:E7:7C:3C:F2:53:0A:31:C3:6F:F0:7F
            X509v3 Authority Key Identifier:
                keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:1d:fb:53:cd:34:9f:58:ff:75:4e:c3:8d:e1:00:49:18:df:
         ca:c3:21:03:97:92:74:ec:b4:01:68:44:16:7f:c0:53:e6:b2:
         3c:15:20:1a:80:ae:96:1d:d8:a3:d4:81:31:b5:99:d7:96:90:
         d9:db:e8:8d:6f:4c:33:6e:b2:0e:e9:6b:b0:42:41:01:d1:23:
         13:fc:35:3d:39:5a:ab:f1:b2:14:d6:5c:4b:5b:aa:4e:b0:40:
         41:f0:b3:d3:71:a2:ce:b5:9d:e2:a4:cd:2e:48:0b:d4:27:04:
         67:72:8b:a8:ce:11:8b:b8:0a:09:fe:79:1a:24:8c:fc:7e:ae:
         e5:f9:2f:5e:06:fe:72:7d:ee:00:22:01:85:90:ff:09:1b:a5:
         3d:e5:ca:11:c5:e2:25:6c:35:30:a2:54:c6:46:31:56:0b:c4:
         b8:c8:e5:c7:29:ca:94:8a:88:65:10:67:11:a4:4f:a1:81:5c:
         3e:21:38:43:96:b3:3d:cc:52:0b:53:43:56:cf:b7:a0:b8:9b:
         30:eb:a9:06:5a:b2:70:70:51:99:51:3c:f2:af:83:df:bb:07:
         a9:0d:2b:ea:2d:46:a9:a5:71:2e:25:5d:d5:c3:c0:23:60:7f:
         df:ec:b7:3d:a0:0e:3f:d6:5e:71:d2:e4:4d:79:c4:bb:42:18:
         fe:4a:b2:1c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAe4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0
ODJDNkY5QjQwHhcNMjUwNDI3MDIwMzE4WhcNMjUwNTA0MDIwMzE4WjAYMRYwFAYD
VQQDEw02ODBkOTA2Ni1mZjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3E6j5tC18Z6c23ZWJs1m2ZMQL/Rp0fdGsvBKAkdvqP9LaBDRDeo322VL/w67
aC+uIyWK+InmIcQ4mAl5otEiz1e0RwRWlst6tzvv4gxU3oIZ3pyjyHOCJ06H6g1w
6KfXj8JMkYPbpAahvaFXKlKpneVA2KKdqTgOknlLgdKpAnOUd2JJ8BoDDBKALjPE
vW0ekJjUocTTntPyZgw3IG2PYgawrxig1EXVVPL/0fF2pX3ZpuHAisZOG1QV/y4x
fOiltVH+UTckFvNWfmTN0/yYJvFCcVfLSUkkLEklAbDs9dTRmkK5Hrkmm3BM9Uii
6vM3kyQMl3Ebd59UTJly/7aPiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJfDCNrn
vngl/ed8PPJTCjHDb/B/MB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0
MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzYyMS9GN0QwMEJFRTc0MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZD
ZzV3VE0xSGFKUkZJTEctYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAyHftTzTSfWP91TsON4QBJGN/KwyEDl5J07LQBaEQWf8BT5rI8FSAa
gK6WHdij1IExtZnXlpDZ2+iNb0wzbrIO6WuwQkEB0SMT/DU9OVqr8bIU1lxLW6pO
sEBB8LPTcaLOtZ3ipM0uSAvUJwRncouozhGLuAoJ/nkaJIz8fq7l+S9eBv5yfe4A
IgGFkP8JG6U95coRxeIlbDUwolTGRjFWC8S4yOXHKcqUiohlEGcRpE+hgVw+IThD
lrM9zFILU0NWz7eguJsw66kGWrJwcFGZUTzyr4PfuwepDSvqLUappXEuJV3Vw8Aj
YH/f7Lc9oA4/1l5x0uRNecS7Qhj+SrIc
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:16 2025 by rpki-client on console.sobornost.net