Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
File:                     rYW34Ys6FvU-kpOKM07Guz64tjA.mft (raw, json)
Hash identifier:          MQF7J/82QX7WXDBr8gSBDYOzpdTikA3h0O7upT6n2Jo=
Subject key identifier:   66:62:3F:0C:66:14:D6:C7:9A:E7:E2:7B:B1:64:33:57:9D:A9:E4:F2
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
Manifest number:          0158
Signing time:             Sun 27 Apr 2025 03:03:44 +0000
Manifest this update:     Sun 27 Apr 2025 03:03:43 +0000
Manifest next update:     Sun 04 May 2025 03:03:43 +0000
Files and hashes:         1: rYW34Ys6FvU-kpOKM07Guz64tjA.crl (hash: L7HR1JNkrIiGPSGMpssxydU3spn2on/8zD70EIfkoaw=)
                          2: A9321C0A1B2A11EE84F40B3AC4F9AE02.roa (hash: p81EH8N+mq+tuXFMTqadpbhtGnx8x8sovmy9swXxzCM=)
                          3: A8C501F61B2A11EE84F40B3AC4F9AE02.roa (hash: GGQZQXITbCi35kDi1cszvpoNDF4GQHNFV1AYsPL4NFA=)
                          4: B97D647C1A8811EEB5AE963CC4F9AE02.roa (hash: NMwwqT5E6qjLfBlg6rE6vavEzETFOwEvTWR7gAiqQV8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Apr 27 03:03:43 2025 GMT
            Not After : May  4 03:03:43 2025 GMT
        Subject: CN=680d9e90-5879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6f:b9:ce:17:94:00:5d:a0:92:72:73:50:ce:
                    78:ec:c9:e8:96:b5:ed:58:14:fb:98:2f:8d:8c:d4:
                    b7:b1:7b:f6:05:40:e0:2e:2b:59:b4:bc:c8:ac:78:
                    c5:97:c1:91:60:3f:49:d4:a7:19:09:96:2e:b0:39:
                    b7:91:55:60:ac:76:6e:92:b7:19:14:d3:6f:9f:40:
                    63:b4:ba:8d:77:00:ea:af:23:89:e6:3e:c9:14:73:
                    bd:82:31:a3:a0:a1:25:fe:bc:5d:31:de:77:2c:0c:
                    08:83:79:d7:4e:1e:5d:5d:a1:da:86:ad:7d:03:fe:
                    ab:b8:71:f0:ea:35:d3:d6:ba:56:01:28:0c:30:94:
                    21:70:aa:41:a9:a9:75:b3:c7:46:4e:f2:86:77:cb:
                    1a:71:51:7a:dd:73:9b:fb:e1:41:80:03:c8:d2:3a:
                    dc:73:e8:3b:de:5d:d2:b1:27:0a:cb:e1:29:e9:45:
                    f6:50:c5:04:5d:3d:e1:c4:ea:be:9c:e1:04:ef:d6:
                    3f:38:c9:72:42:0b:34:f2:44:6b:50:58:91:dd:58:
                    0e:c9:f0:02:cb:df:96:3a:fe:e4:fa:e2:6e:bf:c5:
                    99:d0:0b:b4:35:10:6d:f6:fb:66:1b:1c:58:27:0e:
                    8c:d1:75:c4:18:4d:f1:38:e9:79:8a:4c:2b:c8:70:
                    4f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:62:3F:0C:66:14:D6:C7:9A:E7:E2:7B:B1:64:33:57:9D:A9:E4:F2
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:22:0b:e0:d9:a8:46:ba:11:9f:d9:f2:9c:25:38:94:ce:ae:
         60:46:a5:f9:57:02:90:6d:9f:3f:83:09:75:4f:da:f6:97:1f:
         1d:cb:77:1a:a8:40:4f:b7:76:65:af:39:6d:56:e9:a8:a3:1c:
         f9:47:09:b6:93:64:d3:b9:44:01:b3:eb:f4:89:7d:3b:89:f0:
         27:c5:a6:69:3d:9e:a4:d5:8b:c4:b2:69:e1:70:a7:bf:f4:ba:
         9d:43:71:52:fe:61:34:34:b8:de:b0:04:45:49:33:61:be:22:
         1a:d2:21:e9:a6:82:fb:08:09:36:00:f3:43:00:d8:53:16:e1:
         3d:f3:72:4a:9b:7e:a3:28:25:46:de:c7:0c:35:2a:f6:07:1e:
         45:46:60:6d:49:16:7d:5c:f7:fd:92:45:a6:7b:bb:7c:1a:3e:
         79:8b:3c:3d:1a:36:72:a1:2e:d5:ac:2b:e9:c8:1f:28:74:f0:
         27:d0:4c:20:1d:1f:de:5b:46:06:3c:81:61:79:31:7b:f4:b0:
         ab:1e:73:a8:ff:61:74:60:98:a2:8f:fa:46:1c:b4:e9:cd:b8:
         b2:af:3f:33:81:0d:3a:0a:e1:3d:88:e7:4e:ee:95:f3:4b:df:
         14:e3:87:bb:8d:20:3c:37:a4:ed:3d:b0:1f:db:62:dc:43:bc:
         36:49:da:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZCQjIxMTAvBgNVBAUTKEFEODVCN0UxOEIzQTE2RjUzRTkyOTM4QTMzNEVDNkJC
M0VCOEI2MzAwHhcNMjUwNDI3MDMwMzQzWhcNMjUwNTA0MDMwMzQzWjAYMRYwFAYD
VQQDEw02ODBkOWU5MC01ODc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzW+5zheUAF2gknJzUM547MnolrXtWBT7mC+NjNS3sXv2BUDgLitZtLzIrHjF
l8GRYD9J1KcZCZYusDm3kVVgrHZukrcZFNNvn0BjtLqNdwDqryOJ5j7JFHO9gjGj
oKEl/rxdMd53LAwIg3nXTh5dXaHahq19A/6ruHHw6jXT1rpWASgMMJQhcKpBqal1
s8dGTvKGd8sacVF63XOb++FBgAPI0jrcc+g73l3SsScKy+Ep6UX2UMUEXT3hxOq+
nOEE79Y/OMlyQgs08kRrUFiR3VgOyfACy9+WOv7k+uJuv8WZ0Au0NRBt9vtmGxxY
Jw6M0XXEGE3xOOl5ikwryHBPpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZiPwxm
FNbHmufie7FkM1edqeTyMB8GA1UdIwQYMBaAFK2Ft+GLOhb1PpKTijNOxrs+uLYw
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkJCMi8wRTI3MDU0NDFB
ODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2VS1rcE9LTTA3R3V6NjR0
akEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JZVzM0WXM2RnZVLWtwT0tNMDdHdXo2NHRqQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RkJCMi8wRTI3MDU0NDFBODYxMUVFQTBBQTg3MTZDNEY5QUUwMi9yWVczNFlzNkZ2
VS1rcE9LTTA3R3V6NjR0akEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBpIgvg2ahGuhGf2fKcJTiUzq5gRqX5VwKQbZ8/gwl1T9r2lx8dy3ca
qEBPt3ZlrzltVumooxz5Rwm2k2TTuUQBs+v0iX07ifAnxaZpPZ6k1YvEsmnhcKe/
9LqdQ3FS/mE0NLjesARFSTNhviIa0iHppoL7CAk2APNDANhTFuE983JKm36jKCVG
3scMNSr2Bx5FRmBtSRZ9XPf9kkWme7t8Gj55izw9GjZyoS7VrCvpyB8odPAn0Ewg
HR/eW0YGPIFheTF79LCrHnOo/2F0YJiij/pGHLTpzbiyrz8zgQ06CuE9iOdO7pXz
S98U44e7jSA8N6TtPbAf22LcQ7w2SdpM
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:35 2025 by rpki-client on console.sobornost.net