Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
File:                     4bgHrCt0Vfux4xYGjR0BcSYLscc.mft (raw, json)
Hash identifier:          qSRT/ZEOSx0FJa4mNEdjnp8fZu/XTl8n/U8qat/BTLY=
Subject key identifier:   B9:25:F3:EB:23:5A:A0:FA:F2:42:F6:C7:13:1A:67:80:FD:F8:24:DF
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Certificate issuer:       /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial:       1303
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
Manifest number:          1285
Signing time:             Sat 26 Apr 2025 17:03:38 +0000
Manifest this update:     Sat 26 Apr 2025 17:03:37 +0000
Manifest next update:     Sat 03 May 2025 17:03:37 +0000
Files and hashes:         1: 4bgHrCt0Vfux4xYGjR0BcSYLscc.crl (hash: Qi1arbjfyV36PE+ocetVnAVaYTpwN1tkkZ2bjxnDtbg=)
                          2: A6A4A20E89B911EC8FDB572DC4F9AE02.roa (hash: jk5NfHi6Ak10G3qvwwRLBuA+9+MuEQTJVNCIOpp4ijc=)
                          3: A8949F64D86E11E982BA0712C4F9AE02.roa (hash: o0TBqHxczgW2iXEBGTx5nw86Q8zs7jfB/2ZiH2tcXBM=)
                          4: 1F8378E6BCBD11EBAC9A4744C4F9AE02.roa (hash: J5LxjosxnnfdXaMAoaZ/PL1BfkizkN1e40crDyxzXgM=)
                          5: 9EE31802996B11E9B3FEED46C4F9AE02.roa (hash: GdNQEvmzlHfA6Ec8mmP8z6x+jIWG7iAnHlvJMuf8oD8=)
                          6: F6EBC724B24211EF99C46E64C4F9AE02.roa (hash: q2Nqb/hrcV90WNVexwR/NHfj/Q0Tv7rC0yL9DHC6X3M=)
                          7: D17E9426B24211EFBBDC2164C4F9AE02.roa (hash: 08uSCXwlwYJnGMem9e+DAMnS4EN8A9/G3dvb9XlzVbk=)
                          8: 161983C2B9EB11EDB53AC21BC4F9AE02.roa (hash: 21MmIK/xKiS7JETWE4m4JFsmki6dx7l2EGE0grkpOo4=)
                          9: C2E189AC7F8C11EF94FCB676C4F9AE02.roa (hash: RAc63GKSag+ebIvPIiKjuswG8wAgmCrcqifdzue1EA8=)
                          10: FDB29514452511E98F23AE4FC4F9AE02.roa (hash: pyXuQQMaaHpRKrd64JzrpDvcZINK8BGOr87BtX8mKCw=)
                          11: 8E6CF9C8E59911E98D355932C4F9AE02.roa (hash: duhPOulpnnqLJOw021zARLEkW5qMCDlozjaUuWOU1CE=)
                          12: F99AFAFE1D5411EA921E0351C4F9AE02.roa (hash: RBZSewamTngEQkgjLa0OkH4nQrMAppxSjX91nS2Wpzo=)
                          13: C21FA1CE080511EAA9457C67C4F9AE02.roa (hash: PiSgVIn+A3YVcVJ8J1LY1Q9+m55+zt9vsCjTvJtZIKc=)
                          14: 0038D872072E11EB8914E540C4F9AE02.roa (hash: bM9HkA9Kov8pVlsp7/+B8Lhib1zUTj1baRTYw1iNq78=)
                          15: D8E0EC82927711E985E0423AC4F9AE02.roa (hash: +fJoTern1FEL3hWeQl1ij5UIzJGzXQGhkR014UlHjWU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
                          rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 17:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4867 (0x1303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
        Validity
            Not Before: Apr 26 17:03:37 2025 GMT
            Not After : May  3 17:03:37 2025 GMT
        Subject: CN=680d11e9-f0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:81:7b:18:af:c1:35:b7:6b:9e:dd:00:21:f5:
                    c0:6f:d4:de:1a:62:d1:b1:5f:73:92:15:84:36:6f:
                    83:ac:eb:61:de:8f:36:21:45:05:fd:56:89:ea:d2:
                    8d:3c:98:36:2b:29:1d:1e:4d:31:39:a1:43:b9:47:
                    87:68:76:99:e0:13:79:6b:67:1e:51:1f:8a:a4:45:
                    2a:d2:1e:bc:80:81:db:a1:36:68:71:39:a4:bf:bc:
                    08:26:01:42:ee:67:71:10:71:c9:ec:a6:1c:4d:58:
                    3e:8d:56:79:19:7a:cf:69:c2:59:a8:6a:9e:22:b9:
                    32:1c:9b:55:d4:9c:ac:25:ad:51:56:af:37:7f:9b:
                    48:a3:b1:0e:90:9f:3c:c3:38:d7:a0:65:84:db:3e:
                    d0:94:dc:fc:98:68:d3:45:ed:a7:3b:ee:17:44:81:
                    69:82:b3:ea:39:d5:f7:65:ac:68:e2:d0:2b:cc:ed:
                    d5:26:6a:2a:5c:8b:6a:6e:93:ac:9d:74:2b:7a:12:
                    9c:ce:55:9d:3f:99:df:e0:ca:2a:f8:e1:41:5d:e8:
                    63:df:8c:ee:83:be:3b:2a:cb:22:79:ca:93:53:41:
                    9d:f6:26:c8:68:76:0a:da:14:da:18:2a:16:0c:bc:
                    21:66:cc:82:76:c2:a6:78:41:68:58:5f:67:32:29:
                    97:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:25:F3:EB:23:5A:A0:FA:F2:42:F6:C7:13:1A:67:80:FD:F8:24:DF
            X509v3 Authority Key Identifier:
                keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:eb:ff:61:b7:37:82:e7:42:87:08:b6:70:9f:fa:73:e5:eb:
         aa:93:78:87:7f:cc:b7:fc:ba:0b:77:70:74:7f:2a:68:ac:6f:
         c8:21:5c:de:08:c8:36:17:39:bb:1f:06:ec:4d:85:11:8b:17:
         48:df:55:61:9e:55:ea:f5:d7:0d:08:6a:e2:5b:28:b8:38:a6:
         32:30:09:f4:fd:27:ec:0a:95:f1:3d:9a:0d:7d:2d:00:f7:05:
         32:3c:90:26:b6:cd:f9:4f:a4:15:d7:ba:19:b7:6e:9e:3b:c3:
         e8:ff:62:c0:5a:ca:d4:4f:32:90:0e:e3:1a:c9:23:a2:54:ee:
         ca:d1:67:0b:8d:d2:7c:a8:7d:bc:10:92:34:18:8f:0f:3c:f1:
         c3:8a:f7:50:36:49:cb:7f:4c:75:cf:5d:3f:bf:0f:f2:44:1e:
         3f:b3:6c:1b:b2:e7:52:12:c0:68:ef:e4:6d:a6:f9:1a:b0:c6:
         5f:59:f2:2a:a1:b2:a3:f1:d3:25:9b:c6:5f:b9:bb:d7:cb:7e:
         02:60:d7:57:29:e9:29:fc:27:1f:53:0b:3a:47:1e:21:a8:4b:
         6d:6f:54:56:5c:8f:a4:ab:19:b7:37:af:cf:c5:be:61:b8:86:
         de:6a:72:51:83:fa:a0:0a:9f:05:3b:e5:a2:bc:16:6b:f8:35:
         8a:a2:40:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:01:53 2025 by rpki-client on console.sobornost.net