Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
File:                     h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft (raw, json)
Hash identifier:          SgCKTo6Vq5yQUaxnocQGTZ6R2BiBWxqZTHhv9x6NtPE=
Subject key identifier:   E4:45:E5:8B:C9:18:19:F2:47:21:A1:6C:FA:35:13:5A:DE:28:5C:B1
Authority key identifier: 87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04
Certificate issuer:       /CN=A912A294/serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
Certificate serial:       016A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
Manifest number:          0155
Signing time:             Sun 27 Apr 2025 03:23:41 +0000
Manifest this update:     Sun 27 Apr 2025 03:23:41 +0000
Manifest next update:     Sun 04 May 2025 03:23:40 +0000
Files and hashes:         1: h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl (hash: mWI9LN+Fqy5tg6f3spSHNZXT9oWOdl+EHFOBTvkfg+E=)
                          2: 60C72042052911F0A2361C50C4F9AE02.roa (hash: eoqR2rI7tCJcx2sHbbxw1cinGXO6kmie9biadQvkvGU=)
                          3: 64B5B49A052C11F0AFEC0478C4F9AE02.roa (hash: osIylBmoiOl0hS+6q4jLTN9ELMVNH7Z3hIxqCI6TGCM=)
                          4: 24661146FA7311EFB58C366CC4F9AE02.roa (hash: vJ/paOcsiCM0y/LcDeCNMcXQ0i9PBxkDy6/mQy96vcg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl
                          rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A294, serialNumber=87B5D853F6425215ADA7822F02A57483EE267C04
        Validity
            Not Before: Apr 27 03:23:41 2025 GMT
            Not After : May  4 03:23:40 2025 GMT
        Subject: CN=680da33d-3ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:14:dd:32:79:5c:a0:08:60:25:b3:71:63:ca:
                    ed:1a:1f:64:b2:3d:21:53:8b:ea:00:e7:d6:44:04:
                    74:e5:29:ae:a0:fc:45:75:81:9f:55:3c:da:7a:8a:
                    33:f9:8c:36:9f:01:84:66:b6:ec:3e:79:7b:35:ae:
                    b2:2f:98:87:31:10:37:3f:6e:85:e0:fb:9b:ee:08:
                    c4:05:df:21:60:f8:5a:2a:76:4b:c0:47:43:08:51:
                    1d:95:e7:8c:1e:f2:42:4c:2e:e1:9d:48:9d:40:7c:
                    75:f6:09:ee:f5:78:b4:24:71:d4:4e:5f:ed:75:e2:
                    8f:49:67:59:d9:18:27:0c:6f:b0:3a:e9:76:0b:c4:
                    cc:8c:94:94:c0:01:c6:4a:52:40:19:50:ef:19:4f:
                    74:06:43:1f:24:92:c3:47:af:ec:ec:38:10:f5:87:
                    b2:8f:99:81:45:16:28:67:c9:00:c6:59:ef:20:52:
                    dc:fa:cd:17:e3:22:8f:2e:29:39:3b:94:ee:bc:cf:
                    e9:88:9b:53:e8:56:c0:f5:9d:36:93:ad:ef:e3:96:
                    bd:11:bc:c0:48:4f:f5:7d:6e:d0:be:1b:00:ce:93:
                    50:8a:0f:29:7f:a6:ae:40:1d:d0:b6:77:97:1d:05:
                    91:76:1a:98:f6:19:69:0c:28:be:d8:04:ab:d0:8a:
                    ba:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:45:E5:8B:C9:18:19:F2:47:21:A1:6C:FA:35:13:5A:DE:28:5C:B1
            X509v3 Authority Key Identifier:
                keyid:87:B5:D8:53:F6:42:52:15:AD:A7:82:2F:02:A5:74:83:EE:26:7C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A294/992F1D0E4AD611EE97B53F72C4F9AE02/h7XYU_ZCUhWtp4IvAqV0g-4mfAQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b4:53:d1:26:f1:a0:45:1e:65:b7:23:a6:08:d3:86:58:d5:
         dd:73:43:71:ec:30:86:b6:07:ad:da:42:a2:15:70:b4:fe:dd:
         41:3a:04:12:fa:0b:4f:48:9c:49:5c:45:76:17:c0:ff:70:48:
         b7:24:4e:62:93:57:e5:be:b3:cc:04:6e:c5:f8:1c:6f:54:45:
         fe:5d:12:b6:ae:a4:6c:31:f7:95:c9:a8:87:f8:c6:1a:35:f6:
         11:c8:59:cc:88:31:3d:99:7c:b9:ef:5c:0c:9e:c5:2d:93:ba:
         c5:84:c9:35:15:f2:16:fc:8c:74:bf:5b:56:86:4b:7c:d6:91:
         ae:27:a0:53:3d:27:87:44:d8:32:5f:7c:00:61:bf:0b:08:17:
         27:f6:01:04:d2:2b:d2:6e:66:77:b6:43:67:66:ee:82:ef:42:
         9c:d7:3b:56:24:2d:94:33:06:e3:9a:75:58:94:8b:72:f3:12:
         e7:3e:e1:bd:60:53:a2:b5:49:21:29:55:9f:d6:e9:c9:87:4d:
         e5:26:0e:e2:e8:f8:e3:a4:ed:e2:df:c6:4c:69:e9:a7:36:b3:
         51:94:ca:f0:35:c9:82:52:40:7d:35:ba:af:a5:22:c5:f6:f8:
         2c:31:10:a9:51:ae:73:03:a3:96:5e:ff:c9:e7:eb:42:67:b8:
         47:49:c2:9e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkEyOTQxMTAvBgNVBAUTKDg3QjVEODUzRjY0MjUyMTVBREE3ODIyRjAyQTU3NDgz
RUUyNjdDMDQwHhcNMjUwNDI3MDMyMzQxWhcNMjUwNTA0MDMyMzQwWjAYMRYwFAYD
VQQDEw02ODBkYTMzZC0zZWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwBTdMnlcoAhgJbNxY8rtGh9ksj0hU4vqAOfWRAR05SmuoPxFdYGfVTzaeooz
+Yw2nwGEZrbsPnl7Na6yL5iHMRA3P26F4Pub7gjEBd8hYPhaKnZLwEdDCFEdleeM
HvJCTC7hnUidQHx19gnu9Xi0JHHUTl/tdeKPSWdZ2RgnDG+wOul2C8TMjJSUwAHG
SlJAGVDvGU90BkMfJJLDR6/s7DgQ9Yeyj5mBRRYoZ8kAxlnvIFLc+s0X4yKPLik5
O5TuvM/piJtT6FbA9Z02k63v45a9EbzASE/1fW7QvhsAzpNQig8pf6auQB3QtneX
HQWRdhqY9hlpDCi+2ASr0Iq6VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFORF5YvJ
GBnyRyGhbPo1E1reKFyxMB8GA1UdIwQYMBaAFIe12FP2QlIVraeCLwKldIPuJnwE
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTI5NC85OTJGMUQwRTRB
RDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1VoV3RwNEl2QXFWMGctNG1m
QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g3WFlVX1pDVWhXdHA0SXZBcVYwZy00bWZBUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
QTI5NC85OTJGMUQwRTRBRDYxMUVFOTdCNTNGNzJDNEY5QUUwMi9oN1hZVV9aQ1Vo
V3RwNEl2QXFWMGctNG1mQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBPtFPRJvGgRR5ltyOmCNOGWNXdc0Nx7DCGtget2kKiFXC0/t1BOgQS
+gtPSJxJXEV2F8D/cEi3JE5ik1flvrPMBG7F+BxvVEX+XRK2rqRsMfeVyaiH+MYa
NfYRyFnMiDE9mXy571wMnsUtk7rFhMk1FfIW/Ix0v1tWhkt81pGuJ6BTPSeHRNgy
X3wAYb8LCBcn9gEE0ivSbmZ3tkNnZu6C70Kc1ztWJC2UMwbjmnVYlIty8xLnPuG9
YFOitUkhKVWf1unJh03lJg7i6PjjpO3i38ZMaemnNrNRlMrwNcmCUkB9NbqvpSLF
9vgsMRCpUa5zA6OWXv/J5+tCZ7hHScKe
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:23 2025 by rpki-client on console.sobornost.net