Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
File:                     6zifszmzkI1UmmU5DJLhX533xUs.mft (raw, json)
Hash identifier:          df0MnOGSQoS93KQVyMpweHwDApgGpk5/vbhuBeCy+LE=
Subject key identifier:   AF:4F:9D:8A:46:6B:78:FD:AA:25:5D:20:B9:57:A0:DF:D7:17:A2:A8
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3772
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
Manifest number:          3638
Signing time:             Thu 24 Apr 2025 14:21:49 +0000
Manifest this update:     Thu 24 Apr 2025 14:21:48 +0000
Manifest next update:     Thu 01 May 2025 14:21:48 +0000
Files and hashes:         1: 6zifszmzkI1UmmU5DJLhX533xUs.crl (hash: DnBnCxEA1IYLjKc+GCvLXZBwTvINDDwwKIVKM4rdqsc=)
                          2: 5E035B480E8C11F0AD0C273AC4F9AE02.roa (hash: Wnu/A0yUx+4HqrhfwfUPaml1HEg9mGCN1YlC1GXeGvE=)
                          3: FAF6D732CD3811EDBD37B674C4F9AE02.roa (hash: 55hbp1lHPqWHR3myIKlQM0s8jhZDD5OMMu+AbqKM2eA=)
                          4: FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa (hash: zSVDYqkWgkMa+aLsCRgndkcVWEmWW6zKnoCgA3mt+Jw=)
                          5: 8470E428A2E711EFA6A5B91AC4F9AE02.roa (hash: bilCUgSIj9s8wLUUu7RqA7j0fFrI4Jp6Y1RNZuTJV4U=)
                          6: 2C7A8F5C8CE511EF96182462C4F9AE02.roa (hash: r8mRla4ImwWo0lgNeUmnO3kOlV4nEe25jvh9hbpe+Fk=)
                          7: 4F698B525F5011EFA66ADA2CC4F9AE02.roa (hash: 8GbrS0gq/4FKKxyxJysMwR58UCfWTju+CTTJl3NXjn0=)
                          8: 6D84D2D05DE911EF84282B80C4F9AE02.roa (hash: KsCi1gL5ON0tQo5f7o3JyChb4Z5sQOoFZgnSirCcEPY=)
                          9: FEDF0BA43E5111EF86CB780AC4F9AE02.roa (hash: PWMfy2tZO4LynO8829Wa3U1BjwaomWWdkKuhbM2n6Oo=)
                          10: 27E277D891AA11EF9DBFF265C4F9AE02.roa (hash: wM/PYE311nfiNvAglY7ipodnf85Ls8RUKyhtAudMyfk=)
                          11: 3BCB61DA01D411EFB260D83DC4F9AE02.roa (hash: ntg1Sa5uJDmNLEQGDT84VTtiG25Hye7r/1zWkL8hIks=)
                          12: 4E211A5C408A11EE91A09746C4F9AE02.roa (hash: kxKdU/JmPTZM9krhUbKPrtFUj5nm0D45xWRYs28QjJs=)
                          13: 02414522C98A11EBAF4F9280C4F9AE02.roa (hash: z8UqZ1TUZs5SLFZVPrNthZ359PD6ZBuIMRCgzq/pldM=)
                          14: 862D18003A1011EDB5225E73C4F9AE02.roa (hash: v4HK4sfgYsSfASOHkvKK7CKePuHBgJRykt1ECioRpqY=)
                          15: CDCC902E170811EFB6DE866CC4F9AE02.roa (hash: Qr52xk5Cmr7B9ojqij9Sa1V9McPqDHOMkRtq3w6aXoE=)
                          16: EEF771D4FED311EF8B263515C4F9AE02.roa (hash: rr3u+Bx1b760tre72Vw4KB1M7DRa2l8Cfnx2i0/N2Nw=)
                          17: A59A5B6641F611ECB1465157C4F9AE02.roa (hash: s/2XE3OKwLRXbsetwS9Ty1/cmYjDSHV9UY8kueVDyls=)
                          18: BF6649687AC811EDAE44E656C4F9AE02.roa (hash: uz8YE3l0+kEpuATJJmDK6S+3VDMiAYafPM++93yW36M=)
                          19: 76FA132A8B0511EC993E2B20C4F9AE02.roa (hash: oXtJ7h6IXN/s5X0HBvpSdD6OMPpNlMkXnfhubhmUTqA=)
                          20: 412F31BCF4A711EFB38B1B47C4F9AE02.roa (hash: OIBBqvU4440LAKaD6UEi68lBgIwwmcry+iUxR8onN5g=)
                          21: 000724C6F7D511EE8C03CA65C4F9AE02.roa (hash: 1z8tUQ/CHsf4H426+WAtbF/ySyewhGPCiiHEe/tPLy0=)
                          22: 3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa (hash: UvtmvVRc2Z0q+CfMe7UUrx6gOQJL+ahTUjM/dtEauJg=)
                          23: B6D40A18822F11EFA848053BC4F9AE02.roa (hash: qTT7XzpkLtDQdKGn2G66fy/McFFpsOFRvnIb+qAvaRw=)
                          24: 52850542A60811EF91FB1113C4F9AE02.roa (hash: kowmpjbS8K8YRAisMY96jcR4JecyVpMM9JfAm+PJPWk=)
                          25: 2622AA12010511EE8C750D39C4F9AE02.roa (hash: mf2Qk+w1NRlp24Ok2PsGfSzQRhYbIagpibh1QaUmo/0=)
                          26: 9D8E6D02C2A511EBB2025B36C4F9AE02.roa (hash: cx0K0bJRQz5Nmb2d76mnGIN2Xr+QPD7Bio7ZlcQXgU0=)
                          27: 26C39BB6010511EE8C750D39C4F9AE02.roa (hash: PrIFv9vXjUSJQadCTa4FhOnCYA1U2rLRvK5pclzfjFs=)
                          28: CAD5365E090C11EBA5412411C4F9AE02.roa (hash: 1/UnllgrY9TLTTDeiVVZgSkXNLQXVP9JfAc/UDXvF4Q=)
                          29: 4D4EE370408A11EE91A09746C4F9AE02.roa (hash: a0UD+/qG4UMDv/2WmEJk9pk9QhXhkwYYYzMZ4c/XI1s=)
                          30: D34236BE7D0511EEB381D02CC4F9AE02.roa (hash: MXoyWFgv72XpKm4iYapo+Jr79E2SzPPDsg5QxMhWUpU=)
                          31: 46186F4EC6E711EDA2FCBA34C4F9AE02.roa (hash: XzgXWY7//UVaNEuQIopWxPc37VBbWxsWdMNjr7wRlfY=)
                          32: 5B7026601E4E11EFB78F797EC4F9AE02.roa (hash: WClEiucs5BiIQI6sFOvNSCglsXZtV1kMtll1iGeYhjk=)
                          33: 0BD5724C3A3211EDA1B7D863C4F9AE02.roa (hash: UguBw1sfiBAtlSn78NzpSBwxKrJvm/pM/IYVtzEhGVk=)
                          34: E614D0A2CD5011EF863CDE64C4F9AE02.roa (hash: VRsqFBw6W6srpeBDnBHvB0NtD3V0u3PzUnUHEjXNhCA=)
                          35: 83F06CF2DF1211EDB91D5C61C4F9AE02.roa (hash: 8EbAPbXfSh68G52OBPln229w9SwdjrHKzeWsW0yhIOI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 13:59:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14194 (0x3772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Apr 24 14:21:48 2025 GMT
            Not After : May  1 14:21:48 2025 GMT
        Subject: CN=680a48fd-85b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b3:29:3c:c1:2d:be:30:a7:44:7b:9b:3c:94:
                    a6:fc:45:18:62:fd:f2:b5:6f:52:1c:54:b9:49:2d:
                    42:93:54:11:49:e5:5b:d9:25:59:53:34:a1:a4:e0:
                    b8:5a:48:ad:6b:db:88:59:52:c4:31:11:b8:af:2c:
                    17:41:60:3f:07:e1:1d:8a:72:69:48:0b:df:01:36:
                    7b:29:28:f5:ec:b2:5d:00:5c:72:fa:e7:5e:5d:03:
                    d0:b4:dd:98:b5:95:14:61:a4:37:3a:11:f0:27:e8:
                    8b:1e:f5:8e:27:77:11:d7:7b:c1:25:ef:2e:af:c3:
                    97:27:dc:a7:ae:88:e5:37:08:22:da:da:27:40:28:
                    dc:9b:9c:35:d9:e4:2e:63:f3:6c:89:a8:17:4a:5b:
                    29:c7:c5:1b:59:c2:89:19:d1:0c:13:e7:68:8f:41:
                    dc:95:a9:bc:00:37:25:3a:31:93:45:95:4a:9c:53:
                    26:78:39:3f:be:54:b5:2a:f8:98:5f:d1:c0:c8:09:
                    95:36:2d:15:93:2d:92:d1:0e:b9:2f:a7:2c:d7:8f:
                    5b:6b:c2:97:51:f7:05:0c:a8:43:fe:cf:a5:4b:d8:
                    7e:2d:bb:e2:b9:b7:c4:e8:f1:69:10:83:10:60:8b:
                    56:a0:a8:d2:8a:30:a2:8e:8e:23:40:1b:17:11:c4:
                    64:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:4F:9D:8A:46:6B:78:FD:AA:25:5D:20:B9:57:A0:DF:D7:17:A2:A8
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:b3:19:5d:ed:b4:d4:10:f4:42:f0:39:a7:90:49:4f:1b:31:
         33:0d:09:92:34:d9:60:5c:68:26:6b:2d:da:b2:3f:e6:54:e3:
         e1:5f:af:ec:21:58:16:30:8d:13:cc:bc:cf:c5:b2:d7:2c:75:
         83:c2:18:7c:70:0f:a9:d4:f7:e1:00:22:59:59:a1:a8:18:dc:
         08:9e:24:89:62:9f:7a:f3:35:a3:4e:b1:30:84:77:a8:67:62:
         08:45:1f:ad:5d:1e:e7:57:8b:44:b2:dc:e1:8a:ac:06:f1:8a:
         85:b2:7e:82:a6:bc:4f:ae:5a:5a:81:f7:3f:2e:ca:e8:69:e6:
         f3:47:6b:91:f8:80:b9:19:1d:5a:24:d2:3a:c5:06:c9:80:89:
         29:57:78:a6:dc:7b:9d:39:02:02:09:63:a5:67:21:57:1c:95:
         c4:38:b5:a9:ce:44:50:35:ed:70:02:75:f8:64:86:1b:15:ee:
         4d:f3:4b:3d:50:8b:15:a0:b7:dd:10:d8:f2:db:f9:21:98:9b:
         a1:28:5f:2b:8b:74:03:44:54:69:2f:2d:4e:a9:74:f8:f5:55:
         77:b1:77:ea:0a:3d:67:dc:a5:1d:4c:1e:85:d5:72:81:03:63:
         50:bc:b8:45:b9:6b:95:6b:56:cf:a7:1c:fa:2f:83:6d:3f:ae:
         3e:eb:34:f3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICN3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjUwNDI0MTQyMTQ4WhcNMjUwNTAxMTQyMTQ4WjAYMRYwFAYD
VQQDEw02ODBhNDhmZC04NWIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzrMpPMEtvjCnRHubPJSm/EUYYv3ytW9SHFS5SS1Ck1QRSeVb2SVZUzShpOC4
Wkita9uIWVLEMRG4rywXQWA/B+EdinJpSAvfATZ7KSj17LJdAFxy+udeXQPQtN2Y
tZUUYaQ3OhHwJ+iLHvWOJ3cR13vBJe8ur8OXJ9ynrojlNwgi2tonQCjcm5w12eQu
Y/NsiagXSlspx8UbWcKJGdEME+doj0Hclam8ADclOjGTRZVKnFMmeDk/vlS1KviY
X9HAyAmVNi0Vky2S0Q65L6cs149ba8KXUfcFDKhD/s+lS9h+LbviubfE6PFpEIMQ
YItWoKjSijCijo4jQBsXEcRkkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9PnYpG
a3j9qiVdILlXoN/XF6KoMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUYzRS9BQzUyQjc0ODFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJ
MVVtbVU1REpMaFg1MzN4VXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDOsxld7bTUEPRC8DmnkElPGzEzDQmSNNlgXGgmay3asj/mVOPhX6/s
IVgWMI0TzLzPxbLXLHWDwhh8cA+p1PfhACJZWaGoGNwIniSJYp968zWjTrEwhHeo
Z2IIRR+tXR7nV4tEstzhiqwG8YqFsn6CprxPrlpagfc/LsroaebzR2uR+IC5GR1a
JNI6xQbJgIkpV3im3HudOQICCWOlZyFXHJXEOLWpzkRQNe1wAnX4ZIYbFe5N80s9
UIsVoLfdENjy2/khmJuhKF8ri3QDRFRpLy1OqXT49VV3sXfqCj1n3KUdTB6F1XKB
A2NQvLhFuWuVa1bPpxz6L4NtP64+6zTz
-----END CERTIFICATE-----
Generated at Thu Apr 24 15:52:12 2025 by rpki-client on console.sobornost.net