Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
File:                     rVa2cYepi6MUCEQFeXvZZW6KyLo.mft (raw, json)
Hash identifier:          jrmHLYQUULPJTMrndtf2v9a/p9yYCxbCGGjQmhKwH9s=
Subject key identifier:   D8:D2:FF:88:42:ED:C7:8C:1F:62:9A:3E:59:0A:EC:11:78:AD:50:9A
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1ED9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
Manifest number:          1C79
Signing time:             Mon 28 Apr 2025 16:24:53 +0000
Manifest this update:     Mon 28 Apr 2025 16:24:52 +0000
Manifest next update:     Mon 05 May 2025 16:24:52 +0000
Files and hashes:         1: rVa2cYepi6MUCEQFeXvZZW6KyLo.crl (hash: woKqyTkeLPyz7b5qLamXfjWdeuLrIVHenX2wsUixWiE=)
                          2: B07E339A257C11E79EE15E3CC4F9AE02.roa (hash: S1wTVe7U18yzyAxSugv98o5psApflxEUWoUWD+4i71s=)
                          3: D7BBF774498911EF9ECB9967C4F9AE02.roa (hash: N/YQwkyrxbXP+sBQ1DsByIHxBpcto8NTgvmeKLdiGzw=)
                          4: D3CE622872D911E9B41E5B11C4F9AE02.roa (hash: 6rI+S51uZYy1BuACuwS5kWXoyg6lf5nMEpRvaBuNroY=)
                          5: 4DFBA2EA066011EEA5F59657C4F9AE02.roa (hash: oCS0QFpM9WGeDXVhJLQGO+CnXgJIvqSKqwsoVw4j+c4=)
                          6: BCBD866404D311E9A6452047C4F9AE02.roa (hash: 6U+FYH3uhC5XKNsaJEb/mfz8usRQjC2dGhhGqPAEIkA=)
                          7: 6136E33A07B511EBBBA2521CC4F9AE02.roa (hash: 8Q+OjzZN/ayMTw7B4asPpBGcZxQq5JGAHygNoU7Le9M=)
                          8: 792BA6283AAC11EF93D3E072C4F9AE02.roa (hash: WX5GBpvWxy43Kfv1yhOKm7/zgRf+4wjOBk2NgjKVRX4=)
                          9: 4BB76870066011EEA5F59657C4F9AE02.roa (hash: BlkP1LYtm3vROhN/faPTD29Zg2+t0xJ6pwNyD9TEZQg=)
                          10: 5B2E8848135111EF9CB17D1DC4F9AE02.roa (hash: gQ5UWx/GomBxN8QjKSCZ9R7140wvnNTsC1Plstdv+8A=)
                          11: 83A8C51804CF11E9BA917C34C4F9AE02.roa (hash: zTeGinlhgBvRCY8VLqWEaBOMi/2mlZzeV05y5KjYq4g=)
                          12: E32743EEBCE711EFA920D83FC4F9AE02.roa (hash: 3F515x6t2ig3N3bKzoVvW6jLDlcDmlvgwRLu3Mtpu64=)
                          13: 4F2C2040066011EEA5F59657C4F9AE02.roa (hash: lhjk5dsFqap680wNoXTnx9Dur4BBQliXjVLuUUi2pb4=)
                          14: B80AFEB204D311E9A6452047C4F9AE02.roa (hash: lcZBJc0SseZ2msItGbn45fGKCw+QLyWMQGHYhse6IS0=)
                          15: 79FAE7BE5BAC11EF95A95882C4F9AE02.roa (hash: dtWxz4J2XjmayBFzETfnk0M/4ccp6teJLls14KkfCHA=)
                          16: 1B1DEA4A04D511E98BFF354BC4F9AE02.roa (hash: TkNn+MTjqvGvnFe4zWqgI2u8ZNVhGw30Qsbe/rkSamA=)
                          17: 0B989CC8BC6711EAA9856B6AC4F9AE02.roa (hash: 5JWbsLN/dW9xbqfNvNx/Ipznac7jWKsUQzc216E28SI=)
                          18: CBAFF664136B11EFB53F2683C4F9AE02.roa (hash: 7C3EpcIViwZAY4nCzCQCDuQQXNlANXEp+HrUlqwDI+0=)
                          19: 52ABDAEA039D11EF8E96E084C4F9AE02.roa (hash: MzEZo/e2yCoqtrn7oJL68mf+EWYO9suE1RsdjdKFJQ8=)
                          20: ECE5D100BBA411EAB345A780C4F9AE02.roa (hash: bigKPvPIUDwHxONb1Gr8dDYsiNQ0PtvvH9Y2uewhgDg=)
                          21: 52E1349E04D211E9BA47303FC4F9AE02.roa (hash: j5lDrxfBeX2si0djPSCGpgdQ4uiqw+hqr/e7niE8XVQ=)
                          22: 003D986AA88011EFBC843D5CC4F9AE02.roa (hash: w9X0jPubYAYF+2gtS/db1FcAQF5AsCl9iOwbjyacZiw=)
                          23: B9FBA9CE04D311E9A6452047C4F9AE02.roa (hash: rlEGi3xjhJfP2u/ZUHFiWIlVgFz9xogRY/BfK8tfhx4=)
                          24: 4CD2AB2A066011EEA5F59657C4F9AE02.roa (hash: 1/F96Do1ZWp86GNV9DFuCHRPL+Y77dWF42AM+XS1zM0=)
                          25: B33C5F9C05FB11EE9D130335C4F9AE02.roa (hash: fNI06QusL/HQ5dYlBMs9UDIEqjOTE4N+DiowzCmZuiI=)
                          26: E1E1C946E01611ED8385DA62C4F9AE02.roa (hash: o0Ry10/Dwg/gxho42K86zqrhGF78WdELGBJAljFgnsM=)
                          27: 6D4A0AECAAA711EE9614335BC4F9AE02.roa (hash: 7oIA+//D4UsvXgvWc6bf0x5ckX2V4W6yfulU8ujZhtA=)
                          28: C3EFE564C2A311EABB1BA61FC4F9AE02.roa (hash: FoZW+AGU8CXyeV1RdM6UrgzlFyF1dMho749ia7IWur8=)
                          29: B228FE46257C11E79EE15E3CC4F9AE02.roa (hash: gPZrzSM2qFJiDgKYh5xaDFhnq8qXun0G5u3g/ssPKjA=)
                          30: 5233C98A04D211E9BA47303FC4F9AE02.roa (hash: V64V572mDFjUWVtGLtAsBdOHJ3B14FfzspBJ/sNnWww=)
                          31: 84DBC93004CF11E9BA917C34C4F9AE02.roa (hash: zyMk6AWyE6lO87mAudHQsc/HNsX71NVjiloWRnQYhfA=)
                          32: A012C5E0AF7911EA869B4722C4F9AE02.roa (hash: EnrdJ6BB4UUlPJCPrDriY5JkZ6kz6OGJ2NtAj8g8718=)
                          33: F3309B3004D011E994985639C4F9AE02.roa (hash: NSCmZyO6Wz7VpbKV03OOhYeekIbonLkpYtPFZfybQtg=)
                          34: D931AD927E0F11EE97A4761DC4F9AE02.roa (hash: 6fvtI9e9N6u9RrN1YOUrj1fxPuHxvPhgch1yKfydxFo=)
                          35: 36AA48F2D55E11EAB56B562AC4F9AE02.roa (hash: g9KNetV5gZIclIa3Tn5Z//Qo3scBB3j7I2stbX5nfnI=)
                          36: 8278D8E004CF11E9BA917C34C4F9AE02.roa (hash: aizfB1ipwQHn2pfmgojnCTrjx4TiIlWZ3oTA7ibR03Q=)
                          37: F5CC48A804D011E994985639C4F9AE02.roa (hash: VS0VHmkDeDlKunxOHZGj08THbVfcWifqq1DkBVbt3SM=)
                          38: 203A920E9B5511EF93BA272BC4F9AE02.roa (hash: 2cMkxAulRUt+RPZWIL+F0mv8QdjA2rBZuvpPO3wvRlQ=)
                          39: D36286F2D55C11EAA224E026C4F9AE02.roa (hash: tTA+Jj1VE8Mirfwxda9PRkkRRhfGQ+BLffao2HDxah4=)
                          40: 50550748066011EEA5F59657C4F9AE02.roa (hash: lTv1K6i1/5+D8bjoEZFgJKtEtbQMReGPUUpdBqUUWmI=)
                          41: 09E2992EC11711EA98A6A253C4F9AE02.roa (hash: yfr/pkuZjQYrKaaSgTMh31gFUmAyCI82/pd9IQUIs3M=)
                          42: BD58F50404D311E9A6452047C4F9AE02.roa (hash: TWEksEuTvHoK1jEg5swQTgTY9Ej5RxanBDxFGSVO0Rk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 16:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7897 (0x1ed9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Apr 28 16:24:52 2025 GMT
            Not After : May  5 16:24:52 2025 GMT
        Subject: CN=680fabd4-60cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:e5:c5:65:3b:28:ce:87:1c:16:f8:4f:c0:
                    97:68:d3:0a:6b:8e:0a:bf:8f:73:1c:29:0b:93:04:
                    07:6b:8f:01:63:2c:d8:2b:ce:7c:2b:ae:3f:76:df:
                    2c:eb:ad:5a:0e:a2:14:9f:70:9d:05:0f:2f:cf:9e:
                    ae:ee:31:73:b1:fe:3b:43:ec:3f:83:a8:84:61:b3:
                    17:99:20:bb:68:17:da:aa:17:b5:49:12:ab:57:66:
                    71:13:bc:b5:8b:20:2e:5f:6b:02:3f:da:e1:6e:de:
                    7a:3f:33:4a:6d:f2:1b:51:44:50:b1:3a:31:54:d1:
                    18:0f:99:26:f3:57:ca:11:97:6c:50:f9:b4:97:1a:
                    22:c4:e6:75:b6:52:cb:3e:97:8c:37:cb:ce:5d:a7:
                    df:4e:9b:b7:7a:98:19:84:20:f8:f7:62:a4:e8:d3:
                    e4:ca:2b:94:fc:12:dc:b1:ec:ce:81:46:91:ce:37:
                    bf:50:05:05:90:08:c6:c4:c7:0b:0b:58:bd:e6:96:
                    25:a1:7b:c0:f6:68:dc:ac:06:d3:21:85:1b:4f:a2:
                    e8:d4:ec:f8:d5:ae:52:3e:0e:7a:6a:f7:7d:83:78:
                    83:2b:0f:4d:d2:af:5f:10:56:d9:dd:c2:ed:27:70:
                    9e:d9:f9:0f:30:a0:1e:cf:94:b0:14:29:b7:a5:3c:
                    1d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D2:FF:88:42:ED:C7:8C:1F:62:9A:3E:59:0A:EC:11:78:AD:50:9A
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:26:e1:7d:c5:26:4f:56:0a:f6:87:fb:48:55:5a:8b:e2:f8:
         46:fa:fc:17:7d:3b:6b:a8:68:06:e6:0a:33:21:aa:19:83:31:
         cc:75:6d:39:8f:8b:ed:59:77:a7:35:96:c1:b9:18:cc:3a:e0:
         37:2c:1e:24:9a:2e:43:47:08:30:1c:58:30:3d:87:48:22:ab:
         7f:db:e9:05:a6:88:54:92:5f:ed:67:bf:00:b9:87:8c:09:e8:
         0a:a3:2d:84:d8:86:a9:e1:e9:09:9d:20:81:69:11:ee:6f:7d:
         6c:fc:d6:94:9d:0e:54:82:7a:55:84:10:4a:c1:fa:76:3f:43:
         e7:6e:67:70:74:be:24:f8:22:23:25:1b:bd:11:92:b2:8b:e2:
         38:51:db:4d:74:c7:dd:b9:5e:fc:15:fc:5f:53:ae:dc:5a:63:
         d1:31:25:7d:cb:ca:23:76:ec:42:a5:ef:65:63:49:4e:81:b9:
         aa:01:f1:f2:dd:7a:21:96:93:33:83:e6:47:fb:71:1f:02:61:
         5e:d7:49:3f:50:2e:c4:52:23:fe:01:62:83:5f:92:7d:4d:3a:
         13:2e:91:43:5c:29:b6:4c:18:e7:c0:ab:a4:47:25:fe:9c:9c:
         c2:af:cc:59:84:d4:6f:2a:11:1e:05:16:6c:a6:94:27:66:23:
         68:9c:e4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:34 2025 by rpki-client on console.sobornost.net