Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft
File:                     jDgUcj_HVempuhvDNWZKUZu8HO4.mft (raw, json)
Hash identifier:          dFoDTSVEZFpiL+Lo+UzA6Gtt4gaRcTvlOhlxRLTdSD4=
Subject key identifier:   4F:34:87:66:7A:8D:78:73:0A:3B:28:9C:AC:D0:BE:AF:B2:A2:0A:83
Authority key identifier: 8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE
Certificate issuer:       /CN=A913C40D/serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE
Certificate serial:       0497
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft
Manifest number:          0483
Signing time:             Sat 26 Apr 2025 23:43:07 +0000
Manifest this update:     Sat 26 Apr 2025 23:43:06 +0000
Manifest next update:     Sat 03 May 2025 23:43:06 +0000
Files and hashes:         1: jDgUcj_HVempuhvDNWZKUZu8HO4.crl (hash: FHtwlE1sAKJNOB2fPFlE4sEsnVfw6fXUyum1cAGT/ng=)
                          2: 4AB7A910321C11EF9E87D582C4F9AE02.roa (hash: IWsNQTcMNZCIYRCXuETJFZmlLwkTa3oCDru3o4pBSFg=)
                          3: 46493600A91511ED9E2AC948C4F9AE02.roa (hash: Cvm3jGgtG/IO+qWj8hVQiUBhVroPBRD0seW7V/cVRpo=)
                          4: 45835FFCA91511ED9E2AC948C4F9AE02.roa (hash: ec1O1GTZ4dz+0/pZQ1zL6I07kP1Ns22R8lDvYSkImuM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl
                          rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 23:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1175 (0x497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C40D, serialNumber=8C3814723FC755E9A9BA1BC335664A519BBC1CEE
        Validity
            Not Before: Apr 26 23:43:06 2025 GMT
            Not After : May  3 23:43:06 2025 GMT
        Subject: CN=680d6f8b-5bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:27:a6:cf:68:99:6c:36:81:92:31:c2:a4:
                    44:0a:8e:04:06:0f:76:6b:38:70:fc:bf:f2:06:0b:
                    f2:8a:3d:dc:0b:ec:19:1a:38:90:b1:9a:e5:ea:0d:
                    d1:bc:04:97:69:09:49:a7:38:2f:04:12:a2:82:f8:
                    c6:d4:88:15:24:1f:80:0b:54:64:d4:45:17:65:f0:
                    4c:66:53:ec:d9:d7:21:ea:1d:22:50:92:3b:62:72:
                    6a:6a:25:eb:3f:79:41:f5:f6:58:d2:3c:e6:e0:ed:
                    b8:f1:83:aa:61:2e:cb:3f:77:b7:53:53:a3:21:65:
                    63:6b:2d:9d:70:22:7c:d4:f7:ce:03:ac:2d:9b:2d:
                    de:e2:95:0a:8e:c3:46:4f:7a:41:9c:56:94:05:30:
                    c9:d0:2a:80:a2:a7:42:ad:ba:1f:f2:ea:2c:ed:8e:
                    3f:8b:1a:26:18:50:91:1e:c0:d0:47:0c:71:51:69:
                    5c:57:ba:d9:00:2b:c3:0f:71:38:39:01:05:b7:50:
                    d1:4b:4d:3f:da:a2:87:d6:ae:26:3e:77:0f:4c:05:
                    be:97:8f:7c:4a:f6:15:f6:01:f5:b7:7d:02:a7:a2:
                    40:70:1b:8c:63:2f:79:3e:e0:5a:81:5d:eb:86:e8:
                    4f:72:f6:22:4e:2d:6d:94:1b:31:aa:6a:f5:1c:2c:
                    44:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:34:87:66:7A:8D:78:73:0A:3B:28:9C:AC:D0:BE:AF:B2:A2:0A:83
            X509v3 Authority Key Identifier:
                keyid:8C:38:14:72:3F:C7:55:E9:A9:BA:1B:C3:35:66:4A:51:9B:BC:1C:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDgUcj_HVempuhvDNWZKUZu8HO4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C40D/50F775A63BCC11ECA791F25DC4F9AE02/jDgUcj_HVempuhvDNWZKUZu8HO4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:36:c4:f4:1e:88:1f:4a:76:4c:7b:4c:f7:06:ba:03:8e:fc:
         b3:cb:77:4e:c4:5e:30:33:fa:8f:b8:31:75:de:2c:d4:cd:a1:
         d5:1f:c2:07:46:d1:9c:a5:e0:9a:7f:cf:ec:e0:a3:fd:73:55:
         66:8d:b8:a6:3f:4f:ba:91:51:97:d6:10:ad:7c:00:92:7a:9a:
         ed:78:e3:c8:fd:a0:78:fb:ac:09:69:6c:b0:52:12:e7:c6:bd:
         02:5c:f8:a8:fe:2e:24:05:99:b6:95:34:f6:c7:47:3a:84:cd:
         f2:b8:31:af:5a:c6:30:96:fe:22:c1:84:e3:0f:04:bf:77:98:
         ba:2c:7a:48:0f:e3:69:09:af:64:54:e6:65:86:66:fc:79:68:
         bf:9e:d7:7e:35:55:4b:b0:6f:52:0b:c9:70:e0:3b:98:25:32:
         3f:d2:3d:e3:3b:5f:2f:00:6e:ff:85:2c:c4:f3:28:78:31:1c:
         fa:8c:ae:53:0d:ad:29:b8:2f:f3:eb:6f:ab:27:c2:e6:9a:1c:
         fe:b9:41:4e:b5:2f:c7:0c:84:cb:7d:57:18:65:03:d8:86:03:
         77:7b:7b:3e:48:33:81:56:a4:91:36:e6:99:0d:2f:7e:99:e6:
         39:04:47:40:f5:96:4e:b3:c4:ff:ab:67:64:fe:49:ae:7a:23:
         63:4b:aa:6d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M0MEQxMTAvBgNVBAUTKDhDMzgxNDcyM0ZDNzU1RTlBOUJBMUJDMzM1NjY0QTUx
OUJCQzFDRUUwHhcNMjUwNDI2MjM0MzA2WhcNMjUwNTAzMjM0MzA2WjAYMRYwFAYD
VQQDEw02ODBkNmY4Yi01YmM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0KYnps9omWw2gZIxwqRECo4EBg92azhw/L/yBgvyij3cC+wZGjiQsZrl6g3R
vASXaQlJpzgvBBKigvjG1IgVJB+AC1Rk1EUXZfBMZlPs2dch6h0iUJI7YnJqaiXr
P3lB9fZY0jzm4O248YOqYS7LP3e3U1OjIWVjay2dcCJ81PfOA6wtmy3e4pUKjsNG
T3pBnFaUBTDJ0CqAoqdCrbof8uos7Y4/ixomGFCRHsDQRwxxUWlcV7rZACvDD3E4
OQEFt1DRS00/2qKH1q4mPncPTAW+l498SvYV9gH1t30Cp6JAcBuMYy95PuBagV3r
huhPcvYiTi1tlBsxqmr1HCxEXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE80h2Z6
jXhzCjsonKzQvq+yogqDMB8GA1UdIwQYMBaAFIw4FHI/x1XpqbobwzVmSlGbvBzu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQwRC81MEY3NzVBNjNC
Q0MxMUVDQTc5MUYyNURDNEY5QUUwMi9qRGdVY2pfSFZlbXB1aHZETldaS1VadThI
TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pEZ1Vjal9IVmVtcHVodkROV1pLVVp1OEhPNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzQwRC81MEY3NzVBNjNCQ0MxMUVDQTc5MUYyNURDNEY5QUUwMi9qRGdVY2pfSFZl
bXB1aHZETldaS1VadThITzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB5NsT0HogfSnZMe0z3BroDjvyzy3dOxF4wM/qPuDF13izUzaHVH8IH
RtGcpeCaf8/s4KP9c1VmjbimP0+6kVGX1hCtfACSeprteOPI/aB4+6wJaWywUhLn
xr0CXPio/i4kBZm2lTT2x0c6hM3yuDGvWsYwlv4iwYTjDwS/d5i6LHpID+NpCa9k
VOZlhmb8eWi/ntd+NVVLsG9SC8lw4DuYJTI/0j3jO18vAG7/hSzE8yh4MRz6jK5T
Da0puC/z62+rJ8Lmmhz+uUFOtS/HDITLfVcYZQPYhgN3e3s+SDOBVqSRNuaZDS9+
meY5BEdA9ZZOs8T/q2dk/kmueiNjS6pt
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:33 2025 by rpki-client on console.sobornost.net