Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
File:                     526yVsD8sH4pB5eDQ-mtndIf4gY.mft (raw, json)
Hash identifier:          4fdqXsPf9kbLdimE+5RMqAjdEai+qPVbSmFiqg4y2/g=
Subject key identifier:   37:B7:05:7F:6A:B4:26:94:C9:BD:1B:2A:D7:83:09:15:79:52:72:CC
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       37CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
Manifest number:          3604
Signing time:             Mon 28 Apr 2025 14:32:59 +0000
Manifest this update:     Mon 28 Apr 2025 14:32:58 +0000
Manifest next update:     Mon 05 May 2025 14:32:58 +0000
Files and hashes:         1: 526yVsD8sH4pB5eDQ-mtndIf4gY.crl (hash: 5rX6IVGt8tsUh3Jr2W99OVa8AvoUxKoCsFiCCJ2G+7g=)
                          2: 07589CCAC7E911EAB8670A2EC4F9AE02.roa (hash: 1ZXz/NmRoEZuyZlOP3FGVV7SOznT/zqWZB3WVuW/0nw=)
                          3: 2C1ADE1A35C811EEB06D6E4FC4F9AE02.roa (hash: Kb65CgSbpk+g+27O3L9YO/NalEccXczxBWE1egLtaM4=)
                          4: 7CBDCB1E1ACF11F08F1F055CC4F9AE02.roa (hash: r4hi9r8fqg3eM2aWkSOaGIl5XW1mlhpfI43yLoqEhK4=)
                          5: E01731A04A0511EFBE524A77C4F9AE02.roa (hash: ywzvrLxBT/Z7nPd3pBvdmtRanDDISy0oLSGMtPD+fnk=)
                          6: 099E1584054F11F0B404403AC4F9AE02.roa (hash: uJHfY2Mo/VAmZFumvbWbfh7qy6GiNOiT6D2JsQtQntw=)
                          7: 1B8CEF10160F11F0BC8CF16EC4F9AE02.roa (hash: Atw8mYr719QL2buAs4N+u5Fvkp0vLbC2BST8Rr2vnds=)
                          8: 5C696C684ABB11EFB64F1B36C4F9AE02.roa (hash: DpJlRaFGhxdvGqVu7m9VIpzHXrpSWXkrTNeb5efv6ao=)
                          9: 6B9538F223DD11EF81EBB933C4F9AE02.roa (hash: Qqy4u5Du4YJjLwWpq0dlcmlkR6uc3a3M7nv191S71u8=)
                          10: D677B8F8E46B11EFB0037B77C4F9AE02.roa (hash: K4F5g57zFJUCifiiu4f79X8f4i1nu9uazXLtGfM7eKU=)
                          11: 9EA1CDAAFBF611EEAEFDCB0CC4F9AE02.roa (hash: 4ynLb0Ypopkzl8emElYUHjGvnOkE64cL4WqzPSTgtgo=)
                          12: 5FF02C801CEF11F0A7C36C81C4F9AE02.roa (hash: LqKrHgIh84lRBWkncjkIeERvOWofWq7Th58WbRC38Ps=)
                          13: B8F80AE47A7111EFB66E5A5EC4F9AE02.roa (hash: TGyJb3hl/QrckCR9Qj8VxHP6JP5BXsHy9Ho/aKDW5AE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 14:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14284 (0x37cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Apr 28 14:32:58 2025 GMT
            Not After : May  5 14:32:58 2025 GMT
        Subject: CN=680f919a-8c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:da:19:3f:20:2b:2e:d3:76:b4:70:2c:25:
                    4f:d1:6c:22:65:66:73:c5:e7:9a:0c:5d:a2:f7:4e:
                    0d:4b:5c:d9:33:c6:74:29:ee:22:e3:a1:37:52:2d:
                    6a:3e:7d:ac:a0:4d:f9:21:4a:14:f0:cc:0d:84:d6:
                    e9:98:fd:f9:e8:5e:41:ce:e1:70:27:42:bc:99:d2:
                    03:30:eb:45:de:60:b7:76:bf:33:00:b9:48:e9:fe:
                    8d:8a:36:03:21:a8:f4:24:9a:24:0d:2e:4a:ff:11:
                    5b:d8:21:76:b8:40:88:f0:c5:e3:97:2f:05:ad:54:
                    25:e2:13:e9:b7:1f:ae:09:7d:0c:9f:e9:bf:66:04:
                    f1:d6:63:50:b8:72:fd:fb:66:fe:05:2d:40:84:19:
                    9c:66:7d:c5:db:9c:f5:25:ab:48:49:e8:b1:6b:09:
                    2b:00:34:ca:e4:a8:2d:1c:8a:fc:f1:db:36:fd:3a:
                    79:f6:2b:a1:59:13:2d:32:02:53:ff:54:38:50:00:
                    35:53:b4:d5:2e:cd:67:30:44:f7:f7:a0:fa:20:c1:
                    54:12:ac:82:c6:00:42:c5:47:b9:40:58:c8:c6:99:
                    a8:48:bf:59:33:77:02:f9:d9:19:f6:2b:00:1c:29:
                    c0:9d:ab:cd:a3:30:bf:27:1d:d2:61:2f:23:8a:ce:
                    a8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:B7:05:7F:6A:B4:26:94:C9:BD:1B:2A:D7:83:09:15:79:52:72:CC
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:15:bd:1e:64:c5:a0:b2:01:b1:e7:98:67:0c:95:7b:96:fe:
         a6:6f:b5:58:2b:c5:c0:47:9f:08:23:fc:22:b2:c1:b0:a9:7b:
         a2:f9:d4:49:de:a6:19:a3:0e:98:6b:3b:e0:0e:f8:36:30:f7:
         2a:d6:80:bf:64:d1:29:54:6d:f8:86:a0:5f:20:3b:eb:ec:2e:
         72:82:33:7f:fe:98:0d:5c:9b:2e:47:2e:1e:a9:21:81:7e:8e:
         5b:1c:72:8f:bd:26:d7:e6:90:96:10:ee:5e:36:3d:28:6e:33:
         63:db:13:bb:db:c7:fd:43:5b:a4:30:54:a9:06:cd:7d:4f:01:
         58:46:93:f6:2b:0a:34:86:0f:d0:82:56:7e:e2:d4:76:ac:35:
         c4:6c:19:aa:ea:5d:ac:89:2a:1d:53:ee:02:de:5e:06:45:e8:
         9a:78:7a:88:93:53:52:7e:aa:c8:a0:dd:78:d7:86:da:ee:7f:
         16:fb:fb:43:c6:ec:46:3c:6a:b2:84:04:4f:af:d0:05:9f:f1:
         ee:59:b8:0a:11:df:cc:f9:14:7e:6c:40:8d:30:01:7f:83:34:
         d0:96:c6:11:91:a3:ca:41:c7:f4:50:71:b0:e0:b2:a9:4b:d8:
         11:f1:d9:a2:33:ad:df:28:dc:1c:5a:0c:2c:af:c6:1b:0c:99:
         4c:b1:06:d9
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICN8wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkM4M0IxMTAvBgNVBAUTKEU3NkVCMjU2QzBGQ0IwN0UyOTA3OTc4MzQzRTlBRDlE
RDIxRkUyMDYwHhcNMjUwNDI4MTQzMjU4WhcNMjUwNTA1MTQzMjU4WjAYMRYwFAYD
VQQDEw02ODBmOTE5YS04YzQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAphXaGT8gKy7TdrRwLCVP0WwiZWZzxeeaDF2i904NS1zZM8Z0Ke4i46E3Ui1q
Pn2soE35IUoU8MwNhNbpmP356F5BzuFwJ0K8mdIDMOtF3mC3dr8zALlI6f6NijYD
Iaj0JJokDS5K/xFb2CF2uECI8MXjly8FrVQl4hPptx+uCX0Mn+m/ZgTx1mNQuHL9
+2b+BS1AhBmcZn3F25z1JatISeixawkrADTK5KgtHIr88ds2/Tp59iuhWRMtMgJT
/1Q4UAA1U7TVLs1nMET396D6IMFUEqyCxgBCxUe5QFjIxpmoSL9ZM3cC+dkZ9isA
HCnAnavNozC/Jx3SYS8jis6oeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDe3BX9q
tCaUyb0bKteDCRV5UnLMMB8GA1UdIwQYMBaAFOduslbA/LB+KQeXg0PprZ3SH+IG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QzgzQi9FNEUxMEI0QTFE
ODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNINHBCNWVEUS1tdG5kSWY0
Z1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzUyNnlWc0Q4c0g0cEI1ZURRLW10bmRJZjRnWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
QzgzQi9FNEUxMEI0QTFEODgxMUUyQTAxMkNCRTEwOEIwMkNEMi81MjZ5VnNEOHNI
NHBCNWVEUS1tdG5kSWY0Z1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC5Fb0eZMWgsgGx55hnDJV7lv6mb7VYK8XAR58II/wissGwqXui+dRJ
3qYZow6YazvgDvg2MPcq1oC/ZNEpVG34hqBfIDvr7C5ygjN//pgNXJsuRy4eqSGB
fo5bHHKPvSbX5pCWEO5eNj0objNj2xO728f9Q1ukMFSpBs19TwFYRpP2Kwo0hg/Q
glZ+4tR2rDXEbBmq6l2siSodU+4C3l4GReiaeHqIk1NSfqrIoN1414ba7n8W+/tD
xuxGPGqyhARPr9AFn/HuWbgKEd/M+RR+bECNMAF/gzTQlsYRkaPKQcf0UHGw4LKp
S9gR8dmiM63fKNwcWgwsr8YbDJlMsQbZ
-----END CERTIFICATE-----
Generated at Mon Apr 28 17:45:09 2025 by rpki-client on console.sobornost.net