Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
File:                     SYklN9iywDJbe-CB_ZKGx5vqaoU.mft (raw, json)
Hash identifier:          WIkLTOK57CLS62le3KKUBM0LxsFiRH58q7Y3W5iauUE=
Subject key identifier:   CF:87:53:5A:33:2A:3B:A2:AC:AD:98:9A:44:8B:19:5D:6F:80:B0:E4
Authority key identifier: 49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85
Certificate issuer:       /CN=A914CE75/serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
Certificate serial:       31D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
Manifest number:          30E4
Signing time:             Mon 28 Apr 2025 15:32:51 +0000
Manifest this update:     Mon 28 Apr 2025 15:32:50 +0000
Manifest next update:     Mon 05 May 2025 15:32:50 +0000
Files and hashes:         1: SYklN9iywDJbe-CB_ZKGx5vqaoU.crl (hash: WkknFgJTlloV+8amgue7eckMqFcrrF7byADoae31Rps=)
                          2: 4B7DDB34F78E11EAB64C8E81C4F9AE02.roa (hash: qfmqTirp8Zad7k+qaey18cYG4f26i7cc95OJ7RN7ki0=)
                          3: 9C58363E8F2811ECA311FF19C4F9AE02.roa (hash: N5j7WOPf8R/W04K/g7J6exFJHjLoUKmGax2m8ylN8D4=)
                          4: B4D9927A014E11EB9E13483FC4F9AE02.roa (hash: QBgYyEawhn1JXFywm9CFNs+9U5jAgMIpTHNoQrJwCB0=)
                          5: B059C44831AB11ECAB908E42C4F9AE02.roa (hash: jpqfykEtXXmj6Mk5ax89hq50WV+obiHvLv4IGmQnups=)
                          6: 9CE444808F2811ECA311FF19C4F9AE02.roa (hash: s74RqywlkpPNZd/k54OkOPZY0zBYS0LcSwqRFyhZCaQ=)
                          7: 3E745A08803611ECB2187650C4F9AE02.roa (hash: cUFz8UfvDLExFmEMk60M+pc6mMkgOxhkE3VX2EzmxPo=)
                          8: FBD80F88F92111EAABA5882BC4F9AE02.roa (hash: egxIsRPVPwb7u+XM60U1FKVzWzmGVCY2CjPdVmSsIoo=)
                          9: 200B2C4804AB11EB8AAF5923C4F9AE02.roa (hash: IzTsla0zxZKnGyuuEHhfVJkqXYrhwIme1eXrBSLQ8hE=)
                          10: 0E95C2D8F14211EAA4333775C4F9AE02.roa (hash: v7dpF7DEHY5W9PehrFLFcsUWT8Jk0m5IH4U++CpJtnc=)
                          11: BE430FFA699011EE96387F19C4F9AE02.roa (hash: xQ1dIyyEBpGErrvo04MIQpHGcqYJjtLBlN+w8G4Dch8=)
                          12: D26B4EE8070A11EB90C85C2BC4F9AE02.roa (hash: T2It2LjErftea3TIF7gsdKaDme/4oTA0DOzxS3/YKlg=)
                          13: 6A721236977E11EBB7908378C4F9AE02.roa (hash: 4iGJOzeOe32jX6RwP3qwklB/DkGUI9G1IaXHJLvho9Q=)
                          14: 3F6A8A20953911EF9AAE0D26C4F9AE02.roa (hash: ptr+6IoKfbuMLa2Wb6o/y2TkLt4X6htHzWyXaFYZeYE=)
                          15: D1AEBE18070A11EB90C85C2BC4F9AE02.roa (hash: H0AaPyuEvO3VdNV9Lebtrz3gKClkKQyMQL7FYI1zL1o=)
                          16: D4002378F15211EAA1BAB944C4F9AE02.roa (hash: liXETAeyiiRJUr4HKvyxOrH1rZms2Fhza+VaF2FQeog=)
                          17: F311F68E01C311EB898F2D52C4F9AE02.roa (hash: VaB6pOWiJQ57BWYYsujqoAwA2X29FFnQlwvyPnBs8I8=)
                          18: 997B7CFADEA011ED84E5D17BC4F9AE02.roa (hash: n6J3lFAaIJdatXxciP20VhkBJmk/cgEYdscJZnx5wj8=)
                          19: 2687563AFA8E11EB8B0FCD39C4F9AE02.roa (hash: uw4pwsuMVlOdst39HyvHTeiUfKLIfoUwRmRV8OdgqkI=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl
                          rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 15:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12754 (0x31d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CE75, serialNumber=49892537D8B2C0325B7BE081FD9286C79BEA6A85
        Validity
            Not Before: Apr 28 15:32:50 2025 GMT
            Not After : May  5 15:32:50 2025 GMT
        Subject: CN=680f9fa2-3c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fb:e9:c0:07:b3:69:69:d6:c4:d0:2c:73:e3:
                    e0:8b:e1:4b:82:30:64:bd:8b:f9:c3:4a:99:3d:a0:
                    ea:bd:15:d5:1c:97:b4:8e:f9:9b:20:52:c2:fd:de:
                    5d:04:8f:6d:cd:73:13:78:dc:a6:05:55:57:0c:6d:
                    ab:95:e1:df:5b:81:ac:e4:6a:36:94:e3:65:b4:dd:
                    13:d2:75:79:03:e4:ae:5f:eb:05:a3:99:5a:33:98:
                    34:71:4b:d4:d5:8e:9f:5b:19:36:66:5d:1d:69:7c:
                    35:a0:32:69:8c:28:b2:61:71:c3:79:8d:e2:44:f5:
                    e0:5f:92:96:1f:d8:7e:18:a6:81:cb:ba:68:2a:6d:
                    b0:85:7a:b8:d3:b2:d7:93:28:f2:50:96:72:08:07:
                    55:d7:17:a7:78:07:04:89:16:ca:9f:cb:b3:a2:33:
                    c7:f1:d5:21:91:46:89:2a:c8:9c:5a:2e:23:11:13:
                    27:4d:1e:6a:6d:4c:d2:43:f1:45:49:e1:3b:2d:43:
                    c3:70:36:32:a3:5b:80:ba:9e:35:88:6c:80:58:fe:
                    c4:eb:4e:35:37:bc:dd:0c:8d:b1:d6:09:3d:3d:4c:
                    14:0e:85:21:5c:10:2a:56:0d:a9:c1:38:86:75:a4:
                    30:0b:e8:d8:9f:36:bb:e4:93:65:a4:2f:23:09:56:
                    0a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:87:53:5A:33:2A:3B:A2:AC:AD:98:9A:44:8B:19:5D:6F:80:B0:E4
            X509v3 Authority Key Identifier:
                keyid:49:89:25:37:D8:B2:C0:32:5B:7B:E0:81:FD:92:86:C7:9B:EA:6A:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYklN9iywDJbe-CB_ZKGx5vqaoU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CE75/D22EF3D6FF4B11E281BE06625911EA32/SYklN9iywDJbe-CB_ZKGx5vqaoU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:ad:23:96:62:d6:ca:3d:cc:47:26:b6:e3:cc:f4:70:6e:db:
         4f:f2:d2:d1:6b:01:50:f7:d4:08:64:4a:d5:2c:19:3a:ef:df:
         74:d6:e3:3e:7b:86:ea:47:21:c9:a3:93:df:1a:43:b2:9b:9c:
         b5:1f:7f:aa:47:a1:04:7e:32:14:2f:34:75:09:4f:0c:51:46:
         eb:ec:57:dd:48:c0:42:a4:18:bd:cb:44:de:c4:70:bc:09:c3:
         18:1e:33:e3:05:6b:5d:b6:5a:48:52:14:36:5b:f7:19:40:f3:
         dc:b2:f7:e6:a2:20:94:6b:2a:4b:64:ac:3d:b7:11:5d:31:a9:
         47:ae:10:b7:2e:22:6e:6b:f6:92:a8:8d:3c:38:1a:26:58:99:
         b1:ed:6f:3f:38:e8:ab:6a:c7:0b:68:e9:09:6a:1e:c5:f8:6e:
         31:0d:21:e7:0c:2a:30:58:a9:c0:66:ba:d6:ec:53:05:8f:1d:
         ea:57:ad:20:f5:ef:89:88:90:37:2d:65:8d:ac:6f:dc:fb:a3:
         78:f7:d2:4a:c9:59:9c:fc:3f:6b:a3:26:02:38:cd:a9:22:5d:
         b0:95:a3:31:4e:f7:be:76:c6:c3:2e:c3:9e:4d:5a:65:8b:98:
         ff:6d:b1:19:e7:8e:53:27:56:81:30:af:45:2b:9c:96:d3:71:
         67:1f:bb:95
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICMdIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NENFNzUxMTAvBgNVBAUTKDQ5ODkyNTM3RDhCMkMwMzI1QjdCRTA4MUZEOTI4NkM3
OUJFQTZBODUwHhcNMjUwNDI4MTUzMjUwWhcNMjUwNTA1MTUzMjUwWjAYMRYwFAYD
VQQDEw02ODBmOWZhMi0zYzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1PvpwAezaWnWxNAsc+Pgi+FLgjBkvYv5w0qZPaDqvRXVHJe0jvmbIFLC/d5d
BI9tzXMTeNymBVVXDG2rleHfW4Gs5Go2lONltN0T0nV5A+SuX+sFo5laM5g0cUvU
1Y6fWxk2Zl0daXw1oDJpjCiyYXHDeY3iRPXgX5KWH9h+GKaBy7poKm2whXq407LX
kyjyUJZyCAdV1xeneAcEiRbKn8uzojPH8dUhkUaJKsicWi4jERMnTR5qbUzSQ/FF
SeE7LUPDcDYyo1uAup41iGyAWP7E6041N7zdDI2x1gk9PUwUDoUhXBAqVg2pwTiG
daQwC+jYnza75JNlpC8jCVYKWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM+HU1oz
KjuirK2YmkSLGV1vgLDkMB8GA1UdIwQYMBaAFEmJJTfYssAyW3vggf2Shseb6mqF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0U3NS9EMjJFRjNENkZG
NEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdESmJlLUNCX1pLR3g1dnFh
b1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NZa2xOOWl5d0RKYmUtQ0JfWktHeDV2cWFvVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Q0U3NS9EMjJFRjNENkZGNEIxMUUyODFCRTA2NjI1OTExRUEzMi9TWWtsTjlpeXdE
SmJlLUNCX1pLR3g1dnFhb1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBErSOWYtbKPcxHJrbjzPRwbttP8tLRawFQ99QIZErVLBk679901uM+
e4bqRyHJo5PfGkOym5y1H3+qR6EEfjIULzR1CU8MUUbr7FfdSMBCpBi9y0TexHC8
CcMYHjPjBWtdtlpIUhQ2W/cZQPPcsvfmoiCUaypLZKw9txFdMalHrhC3LiJua/aS
qI08OBomWJmx7W8/OOirascLaOkJah7F+G4xDSHnDCowWKnAZrrW7FMFjx3qV60g
9e+JiJA3LWWNrG/c+6N499JKyVmc/D9royYCOM2pIl2wlaMxTve+dsbDLsOeTVpl
i5j/bbEZ545TJ1aBMK9FK5yW03FnH7uV
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:44:51 2025 by rpki-client on console.sobornost.net