Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
File:                     KFO9oWOMWZqEwwlTEOab_SYKqXg.mft (raw, json)
Hash identifier:          Cuzc7L5vGsPwZriKrQHaeof469eDSygqNoSvyu0Mr+k=
Subject key identifier:   4E:2F:4E:D8:35:18:0C:77:18:86:2D:39:C3:4A:51:C4:7C:45:02:B0
Authority key identifier: 28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78
Certificate issuer:       /CN=A916557B/serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
Certificate serial:       03ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
Manifest number:          0381
Signing time:             Sun 27 Apr 2025 00:45:49 +0000
Manifest this update:     Sun 27 Apr 2025 00:45:49 +0000
Manifest next update:     Sun 04 May 2025 00:45:49 +0000
Files and hashes:         1: KFO9oWOMWZqEwwlTEOab_SYKqXg.crl (hash: s0a0IsAnWoWPnSLrIe9iu6S19XY2Ub4n3R5xsthLGyE=)
                          2: F7D72D3E23E211EFA47D6C68C4F9AE02.roa (hash: e+M4adDsVVtiBfslPnOBJOSyjq+6gRCvAtKsdhjHrg8=)
                          3: 57A7394C4B0E11EE8682CD4CC4F9AE02.roa (hash: j6YHhVIdNkPdVV6kIT6wpzB9Muw42P+/9W2kK5xhqXo=)
                          4: 04AB651469C211EFA06F8562C4F9AE02.roa (hash: YV6zDgOh2QMJi+TbqoW1Wt5O6E3eSYJDwfMJ3aJ2a10=)
                          5: F1930FBAEFE011ED81AE706DC4F9AE02.roa (hash: NP4Z7Tt6CY/HSXNtbW7GXldzu9mQG/LCVCiq7fXDLJ8=)
                          6: 2F24736869C111EF92B54060C4F9AE02.roa (hash: 3Y7RO9a921W0m0+KGz0aqJiJml6RthEQD034mrQPM14=)
                          7: 45BC5258C6F711ED9BD6E476C4F9AE02.roa (hash: wASZh3+a4jtcXdGHzHa3qDgrJcrhUIDBhkIcjHP+VMU=)
                          8: A336FE62609111EFB751B771C4F9AE02.roa (hash: 52bkXRq+LzImcNciZMVc/RbkFDyxds03UT8vcrTtvWc=)
                          9: 13D58140172711ED8E3E8136C4F9AE02.roa (hash: LOrACtpPjzLqnH6mglr8TYVvqw/0+G4Q6Hlw8x23Gz8=)
                          10: 07D38A6669C011EF90EADF5CC4F9AE02.roa (hash: MZXl+TpE4PKXHu+CHp6bbz53wt0k4JzbyBQBboqTIP4=)
                          11: 14000EECD46811EEBDB9C07CC4F9AE02.roa (hash: riBHCo9Gmq1D+0u/pG7iCc4xDo8oVc7na3FG+hNveUk=)
                          12: 79AA61622C8711EFBDD6F672C4F9AE02.roa (hash: 3biVBRmslEYYBK7sgaVOapllwelbsd+exeLENbjHwjc=)
                          13: F83786F4030011F0984B974FC4F9AE02.roa (hash: dZbjlWTe8fWMRR6qgpL+ZoRL9VFsmU1Nz8661bmlCro=)
                          14: 1DBF3F2E69BF11EF9B52775AC4F9AE02.roa (hash: oEcJmw9GBlLPpcX10UQcg9xp3RCQZJ+XOY7mrRgn4Bk=)
                          15: 458AC21A684111EEA6632877C4F9AE02.roa (hash: rQlxlSsLfUnZ/IhD06ff6PZ8dH3kW3qdosnvLtL69I4=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl
                          rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:45:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005 (0x3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916557B, serialNumber=2853BDA1638C599A84C3095310E69BFD260AA978
        Validity
            Not Before: Apr 27 00:45:49 2025 GMT
            Not After : May  4 00:45:49 2025 GMT
        Subject: CN=680d7e3d-80b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:18:82:45:34:b7:17:fa:61:6a:a3:3d:e8:
                    0a:11:61:2c:37:7c:b4:f8:d0:f3:78:52:19:38:de:
                    1b:5d:dc:de:79:90:8f:63:18:91:4e:79:18:6f:47:
                    6d:c6:c8:ec:91:3e:80:81:93:21:24:bf:7f:b3:77:
                    8d:2c:c6:7d:93:a7:64:e8:b0:96:41:11:ea:32:9f:
                    23:a3:2b:87:c0:34:7f:0e:c1:f5:de:0f:b7:73:52:
                    c3:0b:f0:96:f2:d0:37:28:e3:f5:b1:29:83:de:dc:
                    1b:a6:be:b7:c9:1b:df:67:1c:8c:0f:2f:27:59:bb:
                    a3:71:b5:7e:c5:3b:64:6b:7a:d2:a0:99:28:45:f8:
                    99:92:96:c6:93:a0:9d:b7:af:a1:9d:dc:86:fd:ef:
                    89:13:17:4f:74:10:72:b3:47:50:83:f6:16:84:50:
                    d9:9a:2a:6b:4e:d2:20:14:ed:3c:66:67:bd:f6:aa:
                    06:48:52:51:7d:b6:0f:f7:10:fc:ab:33:73:bb:bc:
                    d0:74:16:fd:74:eb:1a:ba:71:81:6b:0c:1a:2d:93:
                    4f:ab:7b:3e:89:15:c7:19:c5:3e:08:52:1d:51:77:
                    1f:0e:79:11:4a:8c:ae:b0:0c:d8:19:36:b1:6f:20:
                    db:ab:6a:e8:59:e4:39:68:a9:0f:e1:94:de:a5:87:
                    0c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2F:4E:D8:35:18:0C:77:18:86:2D:39:C3:4A:51:C4:7C:45:02:B0
            X509v3 Authority Key Identifier:
                keyid:28:53:BD:A1:63:8C:59:9A:84:C3:09:53:10:E6:9B:FD:26:0A:A9:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KFO9oWOMWZqEwwlTEOab_SYKqXg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916557B/8DA72640C1FA11ECB30EE21AC4F9AE02/KFO9oWOMWZqEwwlTEOab_SYKqXg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:11:06:e7:8a:4c:c1:8a:db:e0:40:4c:f7:ed:ff:06:da:c2:
         24:a5:6c:09:62:6c:39:83:c9:7f:fb:53:f5:f0:3d:d8:a2:35:
         d7:fa:80:9b:20:9a:3f:9e:8e:85:fe:02:22:19:27:e0:60:a6:
         14:c3:c1:32:16:fb:c2:b4:54:4c:30:fb:b3:fd:5c:ad:db:53:
         ea:36:0b:a8:e4:0e:45:85:f0:16:9a:ee:18:bd:46:b5:fc:81:
         3c:07:ac:3d:76:f3:42:41:27:be:ad:37:2f:cd:a7:a3:f5:9e:
         c2:16:4f:de:49:0f:0f:8d:ee:97:a3:20:0a:da:77:ad:68:73:
         e3:97:4a:7b:b8:de:ee:ec:fa:52:77:ce:46:81:24:41:9e:89:
         df:6c:74:80:a1:b7:27:3e:58:03:6d:c3:a5:9a:a4:0f:7e:c6:
         53:77:9c:13:5b:8f:0e:db:64:1b:e0:66:54:3b:f6:5a:76:28:
         1d:64:5e:2e:83:e1:4f:75:6c:1e:15:76:1c:c0:44:9d:e5:7e:
         f5:c5:ee:96:db:fd:9e:a9:64:b3:c8:44:5b:b1:6d:d1:16:e5:
         d0:d3:c2:49:eb:bd:c3:ce:18:9f:c9:55:3f:72:b5:e2:d2:32:
         4d:37:7f:71:6c:ed:f7:cb:bf:ed:98:27:80:c6:8b:84:b5:08:
         5d:e7:07:aa
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA+0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjU1N0IxMTAvBgNVBAUTKDI4NTNCREExNjM4QzU5OUE4NEMzMDk1MzEwRTY5QkZE
MjYwQUE5NzgwHhcNMjUwNDI3MDA0NTQ5WhcNMjUwNTA0MDA0NTQ5WjAYMRYwFAYD
VQQDEw02ODBkN2UzZC04MGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzhIYgkU0txf6YWqjPegKEWEsN3y0+NDzeFIZON4bXdzeeZCPYxiRTnkYb0dt
xsjskT6AgZMhJL9/s3eNLMZ9k6dk6LCWQRHqMp8joyuHwDR/DsH13g+3c1LDC/CW
8tA3KOP1sSmD3twbpr63yRvfZxyMDy8nWbujcbV+xTtka3rSoJkoRfiZkpbGk6Cd
t6+hndyG/e+JExdPdBBys0dQg/YWhFDZmiprTtIgFO08Zme99qoGSFJRfbYP9xD8
qzNzu7zQdBb9dOsaunGBawwaLZNPq3s+iRXHGcU+CFIdUXcfDnkRSoyusAzYGTax
byDbq2roWeQ5aKkP4ZTepYcMpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE4vTtg1
GAx3GIYtOcNKUcR8RQKwMB8GA1UdIwQYMBaAFChTvaFjjFmahMMJUxDmm/0mCql4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTU3Qi84REE3MjY0MEMx
RkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVdacUV3d2xURU9hYl9TWUtx
WGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0tGTzlvV09NV1pxRXd3bFRFT2FiX1NZS3FYZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NTU3Qi84REE3MjY0MEMxRkExMUVDQjMwRUUyMUFDNEY5QUUwMi9LRk85b1dPTVda
cUV3d2xURU9hYl9TWUtxWGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQASEQbnikzBitvgQEz37f8G2sIkpWwJYmw5g8l/+1P18D3YojXX+oCb
IJo/no6F/gIiGSfgYKYUw8EyFvvCtFRMMPuz/Vyt21PqNguo5A5FhfAWmu4YvUa1
/IE8B6w9dvNCQSe+rTcvzaej9Z7CFk/eSQ8Pje6XoyAK2netaHPjl0p7uN7u7PpS
d85GgSRBnonfbHSAobcnPlgDbcOlmqQPfsZTd5wTW48O22Qb4GZUO/ZadigdZF4u
g+FPdWweFXYcwESd5X71xe6W2/2eqWSzyERbsW3RFuXQ08JJ673DzhifyVU/crXi
0jJNN39xbO33y7/tmCeAxouEtQhd5weq
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:56 2025 by rpki-client on console.sobornost.net