Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
File:                     4VZP2lztXK5pQVMJftGUJVEgkiM.mft (raw, json)
Hash identifier:          hmR+X1YLhti0KH6xAWqEXMhiMSP4v0bI63s3ivaW6Mw=
Subject key identifier:   2F:19:31:A6:03:9A:B3:36:E2:E5:B6:B7:65:C0:3A:23:C4:C8:76:9E
Authority key identifier: E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23
Certificate issuer:       /CN=A915A300/serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
Certificate serial:       3586
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
Manifest number:          350F
Signing time:             Mon 28 Apr 2025 14:32:51 +0000
Manifest this update:     Mon 28 Apr 2025 14:32:51 +0000
Manifest next update:     Mon 05 May 2025 14:32:51 +0000
Files and hashes:         1: 4VZP2lztXK5pQVMJftGUJVEgkiM.crl (hash: /OwHAxY4hC/fhzMkpzDTA0/hdE4vvx9g5u4OB7FLO2c=)
                          2: F33B0916E75611EFA2A35C73C4F9AE02.roa (hash: OpsjHp/vGysxlU1F4bwOY7eYj+17+oUTjlbccNSDCHo=)
                          3: 165CEF66E60911EB950D930DC4F9AE02.roa (hash: GQiRmYNBeSXKrpj5tl9WCP7+ZUXAlVJOpyyBRx0JAi4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl
                          rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 14:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13702 (0x3586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A300, serialNumber=E1564FDA5CED5CAE694153097ED1942551209223
        Validity
            Not Before: Apr 28 14:32:51 2025 GMT
            Not After : May  5 14:32:51 2025 GMT
        Subject: CN=680f9193-05b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:b3:3f:ab:b6:f0:2c:3d:46:10:7a:92:5b:
                    d7:4d:e9:dc:69:1a:59:47:5d:83:6b:68:da:16:40:
                    f0:87:74:e4:7b:c5:06:07:ed:37:67:64:61:cd:be:
                    70:52:14:af:d8:dd:d2:69:eb:ce:73:e9:61:f6:16:
                    7e:15:54:98:0f:d2:1c:17:4c:a7:cd:d8:02:6d:5c:
                    0c:07:39:5a:41:6b:e1:19:10:ce:c0:06:16:0f:67:
                    d7:1c:d8:ed:cb:a3:1c:d3:95:83:cf:cc:45:15:9f:
                    1b:d8:93:7e:df:0d:fb:a1:3e:4c:97:1c:5b:c5:05:
                    ef:5a:98:f1:73:aa:79:06:50:d8:bd:02:ae:8c:1b:
                    1e:b7:ee:b7:be:23:99:73:b7:64:60:b1:54:f2:57:
                    ec:73:a1:25:9a:cd:be:c2:70:e0:3f:43:af:a3:ca:
                    90:ac:3e:cd:79:c0:76:92:8c:90:1a:bf:7b:f9:32:
                    44:8a:27:52:2b:66:64:3e:c2:b5:df:bc:b4:17:eb:
                    09:04:25:91:df:69:94:b0:6e:39:cf:a6:b0:9f:b2:
                    26:19:67:06:2c:8d:19:86:80:96:ad:13:1e:0e:98:
                    94:ac:8e:fd:c9:fd:5e:4c:5e:1b:10:f3:6b:e8:7e:
                    c1:af:22:9b:be:f1:3c:3c:73:81:d1:22:93:8e:a7:
                    d4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:19:31:A6:03:9A:B3:36:E2:E5:B6:B7:65:C0:3A:23:C4:C8:76:9E
            X509v3 Authority Key Identifier:
                keyid:E1:56:4F:DA:5C:ED:5C:AE:69:41:53:09:7E:D1:94:25:51:20:92:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VZP2lztXK5pQVMJftGUJVEgkiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A300/CD2037E21D8811E28A11A0E108B02CD2/4VZP2lztXK5pQVMJftGUJVEgkiM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:13:e2:94:57:b8:0f:53:0f:88:05:15:aa:3c:63:7f:10:e0:
         74:00:dc:f6:94:b8:cc:6a:a5:9d:23:39:76:0c:61:b5:d9:17:
         30:6f:f2:a7:d2:0d:81:8e:d3:44:d8:eb:46:69:a4:64:c2:96:
         ed:06:9e:dc:db:ef:f8:82:3b:2f:35:8a:6d:3c:fd:8f:53:da:
         9f:f6:22:dd:5b:63:22:8e:96:81:23:cb:f2:58:26:90:28:d0:
         d2:83:cf:68:64:d8:a2:fb:65:8c:67:05:0f:ac:6b:1e:af:dd:
         7b:cb:1d:ff:30:4b:6f:c4:8f:f3:4d:ec:84:e3:34:a0:6f:3a:
         b2:66:88:82:96:06:d0:ce:66:e0:b8:17:85:47:03:b0:6d:e9:
         91:8b:d6:0a:45:d7:0d:94:66:50:73:03:3f:91:15:9a:71:65:
         89:43:7d:97:06:01:50:55:52:06:4a:a7:94:10:6b:02:e4:8c:
         69:61:74:b1:b0:25:60:97:cf:31:94:db:4c:98:5b:fe:2d:2d:
         cb:98:82:50:f6:ea:53:29:4e:66:4d:3e:f3:0c:03:a9:e1:12:
         e2:1c:ba:11:cb:03:90:26:e1:71:49:e6:31:d9:7c:41:37:d2:
         ab:37:47:a6:dc:2f:85:33:4a:e5:28:9e:a7:f9:89:eb:88:23:
         49:d3:78:df
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNYYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEzMDAxMTAvBgNVBAUTKEUxNTY0RkRBNUNFRDVDQUU2OTQxNTMwOTdFRDE5NDI1
NTEyMDkyMjMwHhcNMjUwNDI4MTQzMjUxWhcNMjUwNTA1MTQzMjUxWjAYMRYwFAYD
VQQDEw02ODBmOTE5My0wNWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzsCzP6u28Cw9RhB6klvXTencaRpZR12Da2jaFkDwh3Tke8UGB+03Z2Rhzb5w
UhSv2N3SaevOc+lh9hZ+FVSYD9IcF0ynzdgCbVwMBzlaQWvhGRDOwAYWD2fXHNjt
y6Mc05WDz8xFFZ8b2JN+3w37oT5MlxxbxQXvWpjxc6p5BlDYvQKujBset+63viOZ
c7dkYLFU8lfsc6Elms2+wnDgP0Ovo8qQrD7NecB2koyQGr97+TJEiidSK2ZkPsK1
37y0F+sJBCWR32mUsG45z6awn7ImGWcGLI0ZhoCWrRMeDpiUrI79yf1eTF4bEPNr
6H7BryKbvvE8PHOB0SKTjqfUGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC8ZMaYD
mrM24uW2t2XAOiPEyHaeMB8GA1UdIwQYMBaAFOFWT9pc7VyuaUFTCX7RlCVRIJIj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTMwMC9DRDIwMzdFMjFE
ODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhLNXBRVk1KZnRHVUpWRWdr
aU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRWWlAybHp0WEs1cFFWTUpmdEdVSlZFZ2tpTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTMwMC9DRDIwMzdFMjFEODgxMUUyOEExMUEwRTEwOEIwMkNEMi80VlpQMmx6dFhL
NXBRVk1KZnRHVUpWRWdraU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAME+KUV7gPUw+IBRWqPGN/EOB0ANz2lLjMaqWdIzl2DGG12Rcwb/Kn
0g2BjtNE2OtGaaRkwpbtBp7c2+/4gjsvNYptPP2PU9qf9iLdW2MijpaBI8vyWCaQ
KNDSg89oZNii+2WMZwUPrGser917yx3/MEtvxI/zTeyE4zSgbzqyZoiClgbQzmbg
uBeFRwOwbemRi9YKRdcNlGZQcwM/kRWacWWJQ32XBgFQVVIGSqeUEGsC5IxpYXSx
sCVgl88xlNtMmFv+LS3LmIJQ9upTKU5mTT7zDAOp4RLiHLoRywOQJuFxSeYx2XxB
N9KrN0em3C+FM0rlKJ6n+YnriCNJ03jf
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:45:06 2025 by rpki-client on console.sobornost.net