Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
File:                     cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft (raw, json)
Hash identifier:          RJY3uQ0sjmmamj2dLzgUi5QD5naU8JE3Djf7wKieouM=
Subject key identifier:   EA:08:2C:2E:F2:DC:1F:F4:92:6B:8E:46:EB:4F:11:8F:6F:59:41:F1
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       0187
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
Manifest number:          015B
Signing time:             Sun 27 Apr 2025 03:16:08 +0000
Manifest this update:     Sun 27 Apr 2025 03:16:07 +0000
Manifest next update:     Sun 04 May 2025 03:16:07 +0000
Files and hashes:         1: cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl (hash: SpqT9UtXZvyBDfmMeGTt+WBV/dRLzGnuNCj+df6KIIk=)
                          2: 9DB1FB565EA511EFBA70FD68C4F9AE02.roa (hash: 4Ah/QLfJHlIj6dW20RpkEQlUiHl1IpCVTVGIN9SKd94=)
                          3: 9AADC284366311EEB376DC3AC4F9AE02.roa (hash: 7n+dP3DomtnmMtbxA80Fq/rZrQRw0nuu83uCWiKsr0A=)
                          4: 986FD2A0366311EEB376DC3AC4F9AE02.roa (hash: GhhggZHcmG8xazItX7R9+gh23ZMJG7qSLYcPNvSJFoE=)
                          5: 9767C3CC366311EEB376DC3AC4F9AE02.roa (hash: /kzB6t0e2pIjrtu3XsEpKLUUcDNjuBfLcGgruTa29yo=)
                          6: 75A05C926E8211EFA843807EC4F9AE02.roa (hash: MjTh8AW1DZ7u20XYuEekJB2oVk8O+HGzspm35tkqSi4=)
                          7: 97F664EC366311EEB376DC3AC4F9AE02.roa (hash: jVgsFzrdDjMbKaPnRbnUFCbiiTiaCFys2RcAiFEFE1Y=)
                          8: 9663A3B0366311EEB376DC3AC4F9AE02.roa (hash: wnmUO76JZp85+6TihvqjqAM1N82zX1eYSMWfhDXNXJY=)
                          9: 6BA10D8EAD9511EFAA7B4C1AC4F9AE02.roa (hash: uNH21LRQ+JewOtlVWuPyuyGaCSI3PGZenOSMtffk8oE=)
                          10: BFDC8CE68AAB11EF93DB792CC4F9AE02.roa (hash: sVEWr8cHjR39v6HfMG/t80nfPCrUOYbbrrhYH6aQohw=)
                          11: 99B68AAA366311EEB376DC3AC4F9AE02.roa (hash: HqHx/0ENjdkTLzMg3QNvatBgii/b6Dv1FTm2YDg1foE=)
                          12: 96EE3F5C366311EEB376DC3AC4F9AE02.roa (hash: iqhmC9coSd2mzPbX3c1Fi/SFAwy7h2jkexQ+YuDufDA=)
                          13: DC25866C6E6011EF830E7360C4F9AE02.roa (hash: OxiDT0SIFYyQoxxlhldZuYHR+pzMlUPJXfn9ZyBjWvM=)
                          14: 95EA48DA366311EEB376DC3AC4F9AE02.roa (hash: C4dhE2J+JR7WSKraMxcvR+Zja04JWKmYhWbZTHMV9AY=)
                          15: 993E65A2366311EEB376DC3AC4F9AE02.roa (hash: fVieB3CbqkvA15ScxDkYzRN045+h0GFMVwnZjL5ZWgk=)
                          16: 957D5E14366311EEB376DC3AC4F9AE02.roa (hash: pgOaeP/yDCO2Cd6nEAR34lCV049Kw8nNm7xRomHrUYU=)
                          17: 9B616A50366311EEB376DC3AC4F9AE02.roa (hash: uBzB0Mx36ap5dWU5XV4Be+Yi0frCuCO0c0j3Jvjl9Eo=)
                          18: 9C62F7D4366311EEB376DC3AC4F9AE02.roa (hash: 9g3C+nEwKUK4F3WWkxyvzCO8aTpUHXvcIzgpC5OoQrM=)
                          19: 9BDF5D70366311EEB376DC3AC4F9AE02.roa (hash: uTpk1PzmtkDm1Pw1+mRz53sS8x0F8j3TW2RqmuyIpuA=)
                          20: 6A32721CAD9511EFAA7B4C1AC4F9AE02.roa (hash: 5EuaV2pKmfgRERw28f/5Lxl1VQWoTEyn2eDoW1PwmPM=)
                          21: 9A3920B4366311EEB376DC3AC4F9AE02.roa (hash: O/ffCsKG2xasRSJeYinW7rjVtt6bLKUgyWdrzBes+/k=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Apr 27 03:16:07 2025 GMT
            Not After : May  4 03:16:07 2025 GMT
        Subject: CN=680da178-8986
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:d6:b4:54:93:01:07:22:b3:81:19:90:0c:
                    88:3c:ad:34:66:70:26:14:c1:74:5a:41:d7:e9:cf:
                    98:e6:7c:77:f6:56:c5:45:20:71:e9:e2:6d:d6:c6:
                    5d:a5:a1:f9:8d:9f:5e:5f:69:32:2c:a7:3f:1d:ca:
                    21:8b:a2:8f:a5:a1:6b:64:da:08:3d:7b:83:c6:7a:
                    69:7e:37:cb:30:ee:6c:02:38:87:91:94:ff:83:92:
                    f7:5a:a7:00:7c:d4:93:d3:58:70:ba:10:24:57:5c:
                    10:03:c2:70:68:ac:23:b7:6c:86:2b:cf:37:c9:2d:
                    4f:65:2a:87:62:39:c1:6c:3b:2f:a7:5d:88:31:7c:
                    94:23:50:34:f9:9b:af:66:0f:f3:81:49:62:59:24:
                    03:b1:92:43:c5:13:31:9b:c1:e0:46:3d:2c:dd:f4:
                    05:7b:1c:e6:31:c9:17:43:2c:16:d1:16:c6:76:e0:
                    98:c4:ad:d4:ee:84:d1:21:ec:ed:96:b7:43:8f:35:
                    f2:4a:e9:52:bb:f3:85:d2:3e:33:01:0a:f2:de:ad:
                    3d:fb:7c:2b:94:51:61:8a:15:07:a1:9d:0b:61:4c:
                    3c:2c:4c:b1:03:23:d5:95:f3:28:c0:c0:3c:ca:06:
                    ff:19:b9:59:52:a3:1f:73:fc:53:06:9d:75:54:49:
                    3d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:08:2C:2E:F2:DC:1F:F4:92:6B:8E:46:EB:4F:11:8F:6F:59:41:F1
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:4b:75:83:cd:79:d0:6d:32:c2:a9:b1:65:d0:68:de:0e:a6:
         41:ea:a0:67:4a:cc:4b:40:c8:ef:80:ba:05:ac:11:de:c1:41:
         25:65:76:57:17:8e:b4:25:ba:a6:df:40:1b:1c:33:57:c5:5e:
         d9:fb:bc:c4:61:9f:63:83:97:0c:a9:73:2f:fe:78:9b:3e:07:
         5c:2c:85:59:2b:d5:e9:82:48:6f:10:7f:6b:58:b1:6d:00:e7:
         24:78:d3:8f:4f:b0:f5:89:c3:d6:40:b8:f4:0c:b5:99:03:cb:
         85:39:91:c3:82:ad:be:cb:b8:46:eb:92:da:ff:02:16:2a:b8:
         84:10:7a:79:97:e1:a7:a5:5b:cf:16:12:1d:a0:04:ba:05:d8:
         ea:47:ef:37:50:65:85:22:41:ec:c3:c5:c1:bf:3f:ee:cd:2a:
         52:4a:d7:24:3f:56:10:fc:e5:04:ce:04:0e:dd:ae:7b:2d:91:
         85:db:10:ad:af:f8:ea:14:b5:51:0c:52:ce:70:a9:e9:8b:47:
         6b:b4:33:7a:9b:c3:62:9d:28:4e:c4:bf:db:db:4a:fa:34:cb:
         36:03:f2:7f:fa:b9:ac:8b:e6:94:ee:8a:0c:ad:a0:5d:98:20:
         d2:20:6d:d6:9b:a8:38:2d:20:9f:af:41:59:ba:ec:cf:7b:e2:
         bf:76:07:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net