Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
File:                     1j3oKnWfllf48HOyUSUarme6S6Y.mft (raw, json)
Hash identifier:          N7zYkKoXwG8LLvFn2UN5/bz+nkbq0hjLYCODNmpZhXM=
Subject key identifier:   2F:46:34:DD:45:93:C3:78:6D:95:4C:17:4B:24:64:E4:46:CE:7C:48
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       0446
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
Manifest number:          03F1
Signing time:             Sun 27 Apr 2025 00:20:25 +0000
Manifest this update:     Sun 27 Apr 2025 00:20:24 +0000
Manifest next update:     Sun 04 May 2025 00:20:24 +0000
Files and hashes:         1: 1j3oKnWfllf48HOyUSUarme6S6Y.crl (hash: uXh2woJPY4ixztZEeNC3orS9VHIrOB0gTwoRDv3FIkc=)
                          2: ABE3468CBB5611EE936F4785C4F9AE02.roa (hash: 85cGKhcFvfLsa3fKkS4OSkRQ0VqdCtjeFSWGED/065w=)
                          3: A15115E6DF3E11EC83CCFE1EC4F9AE02.roa (hash: AFhkaTS9H9SYq32LCGLZ0ybHnkII09gZHj0VVB5f314=)
                          4: 9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (hash: cotJkdbyDdnoqnW03wwLgBND9x/lhPuMs/gJ3BCR7lI=)
                          5: A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (hash: 1tRgJ3aPzibyR+z50Gw9nZnYt8M73G+bJYsVfkg2zT8=)
                          6: F563D916248D11EF93237035C4F9AE02.roa (hash: B9+ujxo3UgWLMG+B0g5KGVMUgAJmIzvebILB++raaNc=)
                          7: 9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa (hash: K8HM6DIcOQOpn7mr5HRxJGQ+LZPGnSM+a9C5ehvgnkk=)
                          8: 86C8EBA2B12A11EF985A2D32C4F9AE02.roa (hash: 7nV+jajMliwqjNqYG+S6G7SOAx0aeStohPloUPjdM80=)
                          9: 9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa (hash: ML8bUrH07kWDsJzW00Kjv/Bk94cyav3h3f9sQ1/S5a0=)
                          10: 9D13F282DF3E11EC83CCFE1EC4F9AE02.roa (hash: 4TUF4fCsd6U4sl8CKjbb5lEPYX8IdLYlZccOBdKP5o0=)
                          11: 56EC4CB4927911EFABEC2D46C4F9AE02.roa (hash: 5jFOXz91ZZ50fpVnfRxRJl436xHddATVpaygKT2CLho=)
                          12: A1FED136DF3E11EC83CCFE1EC4F9AE02.roa (hash: gOJa8cYlazWQ7UQ+EjuycM05p/sMIN86mUAHCGBMKow=)
                          13: 05163DEADD8711EC9BF56E5BC4F9AE02.roa (hash: zGN2nOJQWd9Hxkuu+Xvwm7K9HCh0xLUXhnRjE+idexs=)
                          14: 9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa (hash: BczitAlbCQvjk6wnUERPJgdefO0W2XIU7kagZ/uo8Uo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1094 (0x446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Apr 27 00:20:24 2025 GMT
            Not After : May  4 00:20:24 2025 GMT
        Subject: CN=680d7848-7af2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:07:74:df:6c:36:47:26:40:30:15:7e:ae:ad:
                    05:9c:bd:62:13:8e:6f:78:ec:bf:40:7b:0d:4e:9b:
                    19:f0:f6:bf:cd:e7:06:c4:69:d6:32:18:5d:90:e2:
                    7f:30:81:b0:c9:8f:0f:89:8e:1a:9e:41:de:97:d4:
                    39:fb:ec:90:d7:3c:38:de:2d:73:cb:9d:2f:9a:3a:
                    cc:64:39:60:c2:49:7b:df:a1:ed:59:0b:57:88:63:
                    9d:e2:1e:ec:cc:22:70:53:04:20:c4:6b:33:21:87:
                    f6:21:02:91:a7:07:e1:ce:51:05:94:a7:08:b9:c9:
                    f0:61:23:de:a5:e4:bb:f2:e3:fd:ba:9a:a7:e4:69:
                    a8:6a:3e:d1:1f:94:4a:a4:b0:30:7a:f6:60:47:69:
                    8f:38:9a:8f:c6:a8:ba:0b:d9:f4:dd:23:ef:5e:34:
                    01:10:77:bd:2d:5e:0d:bd:c9:b7:70:18:42:01:5f:
                    69:95:95:49:60:45:ac:f2:5d:ba:a9:3a:d9:3e:c1:
                    37:0f:12:b6:55:ab:e5:73:9e:46:14:01:09:94:65:
                    84:af:f2:f8:0f:ac:88:da:a9:c3:0f:f4:dc:61:51:
                    91:83:66:dc:48:ac:37:62:70:d0:9f:1f:65:93:9d:
                    e2:3f:8d:b2:38:7a:41:45:68:33:c3:c4:53:eb:ca:
                    5f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:46:34:DD:45:93:C3:78:6D:95:4C:17:4B:24:64:E4:46:CE:7C:48
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:5f:ba:2f:38:51:0a:14:d6:dc:80:a9:2f:15:94:21:6a:79:
         bf:74:13:fb:f0:c1:05:09:a9:cf:64:4a:73:1f:93:c4:bb:73:
         94:22:31:8a:1c:d2:1e:b7:60:9f:de:50:f4:7e:57:23:dd:bd:
         6a:d0:0d:00:d0:c2:dc:30:d1:ce:aa:76:24:cb:c9:88:fb:b2:
         ed:89:9d:39:cd:ef:ea:a8:e2:59:dd:fa:ed:d6:13:5f:47:52:
         0a:ec:8f:46:bd:0d:38:59:4b:94:1d:e8:2c:cc:a2:31:eb:7d:
         8f:09:18:58:e5:dc:e0:9d:4a:2a:82:78:c5:63:16:af:7b:21:
         b1:0b:b6:b3:86:ab:9a:26:88:4b:08:cb:9c:bf:8b:18:2f:25:
         d0:5e:51:4b:40:73:e9:17:59:4e:70:61:d0:22:2d:0a:5b:28:
         74:b5:75:c2:d8:70:5b:a3:ba:47:95:40:cd:ec:54:0b:96:2d:
         40:36:81:27:b4:35:f8:f1:95:6e:9e:f5:93:4e:06:34:af:d0:
         de:c3:2f:eb:6a:d9:0c:af:f3:cf:45:87:41:56:96:6a:c3:56:
         83:62:5c:49:73:f5:94:e5:ce:4a:36:85:51:e6:7d:d4:51:33:
         03:cf:c0:9b:8e:4d:19:e9:48:d3:99:c6:b3:de:63:fe:2d:e3:
         86:04:3e:1e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBEYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQ0ExMTAvBgNVBAUTKEQ2M0RFODJBNzU5Rjk2NTdGOEYwNzNCMjUxMjUxQUFF
NjdCQTRCQTYwHhcNMjUwNDI3MDAyMDI0WhcNMjUwNTA0MDAyMDI0WjAYMRYwFAYD
VQQDEw02ODBkNzg0OC03YWYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAugd032w2RyZAMBV+rq0FnL1iE45veOy/QHsNTpsZ8Pa/zecGxGnWMhhdkOJ/
MIGwyY8PiY4ankHel9Q5++yQ1zw43i1zy50vmjrMZDlgwkl736HtWQtXiGOd4h7s
zCJwUwQgxGszIYf2IQKRpwfhzlEFlKcIucnwYSPepeS78uP9upqn5Gmoaj7RH5RK
pLAwevZgR2mPOJqPxqi6C9n03SPvXjQBEHe9LV4Nvcm3cBhCAV9plZVJYEWs8l26
qTrZPsE3DxK2Vavlc55GFAEJlGWEr/L4D6yI2qnDD/TcYVGRg2bcSKw3YnDQnx9l
k53iP42yOHpBRWgzw8RT68pfGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC9GNN1F
k8N4bZVMF0skZORGznxIMB8GA1UdIwQYMBaAFNY96Cp1n5ZX+PBzslElGq5nukum
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJDQS9FQzFFRTY1MjhB
NTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxsZjQ4SE95VVNVYXJtZTZT
NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzFqM29LbldmbGxmNDhIT3lVU1Vhcm1lNlM2WS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjJDQS9FQzFFRTY1MjhBNTcxMUVDOTZFQkMwMTRDNEY5QUUwMi8xajNvS25XZmxs
ZjQ4SE95VVNVYXJtZTZTNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBAX7ovOFEKFNbcgKkvFZQhanm/dBP78MEFCanPZEpzH5PEu3OUIjGK
HNIet2Cf3lD0flcj3b1q0A0A0MLcMNHOqnYky8mI+7LtiZ05ze/qqOJZ3frt1hNf
R1IK7I9GvQ04WUuUHegszKIx632PCRhY5dzgnUoqgnjFYxaveyGxC7azhquaJohL
CMucv4sYLyXQXlFLQHPpF1lOcGHQIi0KWyh0tXXC2HBbo7pHlUDN7FQLli1ANoEn
tDX48ZVunvWTTgY0r9Dewy/ratkMr/PPRYdBVpZqw1aDYlxJc/WU5c5KNoVR5n3U
UTMDz8Cbjk0Z6UjTmcaz3mP+LeOGBD4e
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:19 2025 by rpki-client on console.sobornost.net