Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
File:                     tNb_1d_56sQTq0QI4JY3sJSU28g.mft (raw, json)
Hash identifier:          r1G49OkowBIlu/jIjTpz1v19oZt7cJwoG41NYYDiyB0=
Subject key identifier:   B6:CF:D2:37:A3:BD:39:18:97:3B:5C:B0:64:8E:88:33:7A:9D:7B:B6
Authority key identifier: B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8
Certificate issuer:       /CN=A917DEA4/serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
Certificate serial:       06D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
Manifest number:          0681
Signing time:             Sat 26 Apr 2025 22:26:37 +0000
Manifest this update:     Sat 26 Apr 2025 22:26:37 +0000
Manifest next update:     Sat 03 May 2025 22:26:37 +0000
Files and hashes:         1: tNb_1d_56sQTq0QI4JY3sJSU28g.crl (hash: NtVDwXiOa4j0BT5BA5EapV6jFWHZia7GGIoOoT9/Iao=)
                          2: C7764CC6FCA311EEACCA2B5CC4F9AE02.roa (hash: w9hh7nGa+IzYQq91+LbOOZ2ZnQW7jBprbMIRTAiArhU=)
                          3: FFFBCAEE9A9511EBB49D7E1AC4F9AE02.roa (hash: 2PtEBSXuAKl4QFaMfqrCf9uckFYxie6P+46y94SOfxs=)
                          4: DEB93E12828F11EF9E87BB73C4F9AE02.roa (hash: qBSyYm549iy+a8EDu2vFxovVCFdMyyd8KGEsIOlUYDI=)
                          5: EE2DC576942811EEAA69EB54C4F9AE02.roa (hash: GOKQjlSRbohhc3e25wKXwO0I9oCyjdoNjW5acBKmw0A=)
                          6: A716CA94954611EC9B320352C4F9AE02.roa (hash: yGZXLSerRpm90Yyxw95Zu4C3ZsLldwZ4vNYM7yjrqLo=)
                          7: DF7AF1FC42D811EF8EEF4E51C4F9AE02.roa (hash: /Fi2NyP9RW+oE4JZ2QosLJgdN+J2La4mxZzLwfkB21c=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl
                          rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 22:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1752 (0x6d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917DEA4, serialNumber=B4D6FFD5DFF9EAC413AB4408E09637B09494DBC8
        Validity
            Not Before: Apr 26 22:26:37 2025 GMT
            Not After : May  3 22:26:37 2025 GMT
        Subject: CN=680d5d9d-26e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:49:4d:08:b1:fe:c4:b9:10:69:03:ae:3c:77:
                    e7:21:ef:a1:91:47:0b:27:ab:26:8f:17:67:55:84:
                    14:3e:e5:71:da:d1:86:70:fb:77:b1:bb:24:35:7e:
                    2f:75:62:4f:90:a6:77:ab:bb:81:71:8d:43:b5:47:
                    01:9d:e4:0e:c5:c5:8b:ee:b3:8b:8e:5b:84:4d:af:
                    bd:20:0f:61:0e:20:e9:f7:47:48:b4:7b:b7:9d:12:
                    85:ed:5e:47:6c:4a:d3:84:c1:c3:e8:d2:c7:c6:4e:
                    ef:55:42:8a:5a:9a:8a:1b:25:0f:07:b2:c7:52:fd:
                    f9:cf:08:fb:50:6e:52:78:2d:25:5e:ed:eb:2a:1c:
                    47:e9:af:83:dd:11:2f:10:cf:7f:c7:b7:d6:64:26:
                    2a:e6:5e:3c:17:74:ba:7f:aa:18:f1:65:d8:28:1b:
                    b2:dc:64:c5:e0:7b:32:0d:76:b9:d1:e8:85:34:4c:
                    8b:cd:cc:ff:e5:4b:14:85:14:3f:6e:f0:62:e2:69:
                    06:7d:1d:5f:b1:d9:27:88:c8:85:46:32:46:0b:ec:
                    4c:d2:19:40:12:bb:03:00:17:66:aa:b7:b6:2f:0e:
                    1c:d6:51:47:46:f0:3c:33:e8:5f:0c:1c:69:91:52:
                    02:cd:ef:4a:c7:95:26:eb:c5:c6:ff:95:14:6d:4b:
                    11:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CF:D2:37:A3:BD:39:18:97:3B:5C:B0:64:8E:88:33:7A:9D:7B:B6
            X509v3 Authority Key Identifier:
                keyid:B4:D6:FF:D5:DF:F9:EA:C4:13:AB:44:08:E0:96:37:B0:94:94:DB:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tNb_1d_56sQTq0QI4JY3sJSU28g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917DEA4/A2426B60982911EBB7882081C4F9AE02/tNb_1d_56sQTq0QI4JY3sJSU28g.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:78:dc:d5:38:16:0a:0e:66:5b:69:ae:fa:4b:a3:19:70:86:
         d5:92:75:18:8a:87:4d:fc:75:fa:2a:a3:58:68:73:69:0b:8f:
         80:18:4a:8c:1d:65:80:10:cf:02:55:c5:fd:a0:33:ba:f9:4e:
         7e:cf:6c:28:d1:09:7a:15:6b:e0:43:ad:a6:61:65:11:a8:b3:
         30:ad:98:ee:b4:6f:90:21:04:af:ff:e6:b0:93:b9:36:bd:d8:
         00:a8:99:83:bc:20:86:8d:6f:d6:24:22:54:6a:3f:64:d8:81:
         77:e8:ae:fa:38:a6:76:0c:bc:11:b3:03:3e:0a:f4:36:d1:f9:
         c1:c4:36:47:f9:11:6f:05:10:6b:0e:4d:42:61:96:de:87:75:
         b2:00:c3:28:61:67:76:d5:07:f1:1e:b4:1c:ab:d0:c6:b1:43:
         5d:9a:52:20:eb:13:82:fb:ca:77:6d:63:14:0d:ac:bd:9a:7c:
         05:e6:37:c2:87:79:b8:93:a9:26:be:88:e3:00:d2:1c:b2:4b:
         32:e1:db:ec:b7:1e:4f:79:04:a6:87:3a:6e:28:ec:ed:a2:94:
         76:31:51:c3:23:f7:e0:16:73:a0:ee:93:97:43:bc:e4:43:99:
         8e:11:4c:73:99:cf:36:cc:07:6e:05:6b:b4:35:e2:98:46:74:
         4a:79:89:09
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0RFQTQxMTAvBgNVBAUTKEI0RDZGRkQ1REZGOUVBQzQxM0FCNDQwOEUwOTYzN0Iw
OTQ5NERCQzgwHhcNMjUwNDI2MjIyNjM3WhcNMjUwNTAzMjIyNjM3WjAYMRYwFAYD
VQQDEw02ODBkNWQ5ZC0yNmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2UlNCLH+xLkQaQOuPHfnIe+hkUcLJ6smjxdnVYQUPuVx2tGGcPt3sbskNX4v
dWJPkKZ3q7uBcY1DtUcBneQOxcWL7rOLjluETa+9IA9hDiDp90dItHu3nRKF7V5H
bErThMHD6NLHxk7vVUKKWpqKGyUPB7LHUv35zwj7UG5SeC0lXu3rKhxH6a+D3REv
EM9/x7fWZCYq5l48F3S6f6oY8WXYKBuy3GTF4HsyDXa50eiFNEyLzcz/5UsUhRQ/
bvBi4mkGfR1fsdkniMiFRjJGC+xM0hlAErsDABdmqre2Lw4c1lFHRvA8M+hfDBxp
kVICze9Kx5Um68XG/5UUbUsR1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbP0jej
vTkYlztcsGSOiDN6nXu2MB8GA1UdIwQYMBaAFLTW/9Xf+erEE6tECOCWN7CUlNvI
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3REVBNC9BMjQyNkI2MDk4
MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZzUVRxMFFJNEpZM3NKU1Uy
OGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ROYl8xZF81NnNRVHEwUUk0Slkzc0pTVTI4Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
REVBNC9BMjQyNkI2MDk4MjkxMUVCQjc4ODIwODFDNEY5QUUwMi90TmJfMWRfNTZz
UVRxMFFJNEpZM3NKU1UyOGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAteNzVOBYKDmZbaa76S6MZcIbVknUYiodN/HX6KqNYaHNpC4+AGEqM
HWWAEM8CVcX9oDO6+U5+z2wo0Ql6FWvgQ62mYWURqLMwrZjutG+QIQSv/+awk7k2
vdgAqJmDvCCGjW/WJCJUaj9k2IF36K76OKZ2DLwRswM+CvQ20fnBxDZH+RFvBRBr
Dk1CYZbeh3WyAMMoYWd21QfxHrQcq9DGsUNdmlIg6xOC+8p3bWMUDay9mnwF5jfC
h3m4k6kmvojjANIcsksy4dvstx5PeQSmhzpuKOztopR2MVHDI/fgFnOg7pOXQ7zk
Q5mOEUxzmc82zAduBWu0NeKYRnRKeYkJ
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:42:10 2025 by rpki-client on console.sobornost.net