Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
File:                     oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft (raw, json)
Hash identifier:          ANh7decp96pwUAs7Y4xMRlwj9p1c5SUx0FwZceNvRkU=
Subject key identifier:   CC:A9:4A:58:9C:EE:F4:B2:61:0E:35:AF:43:1F:B0:51:9F:01:1B:4C
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Certificate issuer:       /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial:       0189
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
Manifest number:          0160
Signing time:             Sun 27 Apr 2025 03:16:13 +0000
Manifest this update:     Sun 27 Apr 2025 03:16:12 +0000
Manifest next update:     Sun 04 May 2025 03:16:12 +0000
Files and hashes:         1: oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl (hash: +r0dsfjTmkZXI849Od1Z+rBAZrPbQJDqxF8BLmZ6NpM=)
                          2: A1C2C588366311EEB376DC3AC4F9AE02.roa (hash: eMfy7OINYllKPw/hYmLN+RLPDufOse3B1bVnfxelXA4=)
                          3: A14DCC1A366311EEB376DC3AC4F9AE02.roa (hash: uXWLPj49wt34ZFOdgRvzFts1coN6e2ycjWdiQjNmKsk=)
                          4: FAC35354610611EFB6324A30C4F9AE02.roa (hash: 3fkGbyflBIYBaEGX9UwZRIaOP3YpNHP6p1lJeAeN+Pc=)
                          5: 9EBF44EC366311EEB376DC3AC4F9AE02.roa (hash: 2T6E2IzaBIpKo85tSWVvYebgls3pQQ9SNaIoG7eWLz4=)
                          6: AEC0C8428C5811EFA0E8E859C4F9AE02.roa (hash: q1C12AJZxBjIQzqN4k7K7GMZE1FYJg2qefZeo78vHPs=)
                          7: A08711E2366311EEB376DC3AC4F9AE02.roa (hash: ekGkDDIKWLiqVV7h6ESwSg8vnFxwfp+WHxsTHsOalhs=)
                          8: A309A0BA366311EEB376DC3AC4F9AE02.roa (hash: AW+Nxj8w4krax5vO+aa2r3fRVGb6J4InT/gDIakIwPQ=)
                          9: AA36D97EFC7511EE9C9CD67CC4F9AE02.roa (hash: xzZgqMDA4sRVnfCdaLDA6dVoRCpm16rxzJc3wo1vyY4=)
                          10: A22F20AC366311EEB376DC3AC4F9AE02.roa (hash: DKGzaOaDogHp8zZnJNJ8Xu7A6tqaHSnOfSE1S0tRHtw=)
                          11: 9DC673EE366311EEB376DC3AC4F9AE02.roa (hash: 2dWDYylTvBf7qUkUKq2WQpJFP4UJD1LaLQZoGDi+eMQ=)
                          12: 9D563A7A366311EEB376DC3AC4F9AE02.roa (hash: jf5vNKMEs/HYJC+ZfLIR6MHcZqRlwRNx9C1pqFQO2oU=)
                          13: 5B76DF12820611EE8A06123AC4F9AE02.roa (hash: 2F6msvEoxhf3yMkdkG6hwiZZB9ls61DIlAbmxkj7kXQ=)
                          14: 544F13A6B78111EF84611770C4F9AE02.roa (hash: b+cobkm/t+8VplbAM/uAvE/ze4s0B8PJ3bqKjF7kQOA=)
                          15: 9FE1BE90366311EEB376DC3AC4F9AE02.roa (hash: qF8dwyJS0OcLRM+lRZeGO8KZj/gqh2DhUGlNyStGdKM=)
                          16: A37A198A366311EEB376DC3AC4F9AE02.roa (hash: lahqqWdJv5iCoCPv96NgkWAwgDwpfB7aX0xa2UIAojg=)
                          17: CF415DDA520111EEBD942A6FC4F9AE02.roa (hash: sGNeudGsjKQYxdr3S2rAF3HoccrfyBnH+QSvEfzchv8=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
        Validity
            Not Before: Apr 27 03:16:12 2025 GMT
            Not After : May  4 03:16:12 2025 GMT
        Subject: CN=680da17c-a3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:cd:be:0b:12:48:41:f6:59:31:ff:13:be:
                    96:a5:97:0b:4a:e7:c8:6d:ac:17:16:31:52:ee:2e:
                    49:e3:fb:6e:a5:47:e9:9c:70:51:fb:7b:e1:cc:16:
                    80:8f:95:8c:f1:82:27:d6:33:54:19:dd:48:62:8b:
                    e7:6d:09:44:33:0f:65:8b:a1:b7:29:71:75:87:87:
                    61:27:8f:f3:63:3e:f4:39:fd:46:a7:87:4a:4a:b9:
                    9b:91:c6:5a:93:50:37:57:55:25:f3:9e:48:88:e6:
                    4e:b7:4c:c3:6c:79:db:13:51:50:62:b1:3b:f9:9d:
                    03:44:53:2d:c7:d1:98:38:bc:21:85:9e:f0:12:aa:
                    10:ce:c9:06:aa:77:81:aa:0c:3d:8e:73:d0:33:6e:
                    1e:e6:40:df:df:ba:e3:d6:f1:f3:ce:3e:9d:de:04:
                    91:92:18:20:99:12:14:18:cc:5e:d0:8e:67:9c:b1:
                    22:a1:c2:89:49:42:43:22:85:79:c9:fb:83:19:4e:
                    4b:4a:23:d6:d7:0d:48:1f:2f:63:d0:f7:81:9d:15:
                    dd:10:b6:9e:7d:b7:ec:c7:25:84:df:a5:b7:48:90:
                    ea:60:fd:2d:dc:51:86:08:4c:84:af:12:3e:bd:40:
                    5c:c1:f7:38:be:7b:06:be:25:16:22:00:c1:3f:34:
                    b6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A9:4A:58:9C:EE:F4:B2:61:0E:35:AF:43:1F:B0:51:9F:01:1B:4C
            X509v3 Authority Key Identifier:
                keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:36:76:de:60:ea:41:91:ac:9e:24:16:b0:8d:18:67:97:4b:
         7e:0b:14:74:70:b1:a0:0d:ea:0c:85:4b:ad:d5:13:08:ca:7d:
         0a:01:98:02:22:38:d6:08:aa:53:09:41:5c:9e:1e:f5:bb:ad:
         f1:ee:f0:2c:b7:b9:d5:e5:07:8e:e7:20:6c:91:46:d2:bf:02:
         f6:d1:71:1a:82:7c:41:90:e2:3d:76:23:57:6a:da:0d:f4:41:
         96:d9:6c:3a:f9:99:d0:1d:b2:c2:20:39:39:f9:ce:11:fd:93:
         a4:34:49:28:31:96:3b:ce:d5:13:7a:e9:af:3f:3f:8f:7a:17:
         c4:ac:55:6c:56:d4:66:54:f1:9c:59:e8:4e:ed:23:3d:f0:08:
         81:2f:11:98:33:86:0c:f3:f6:8f:83:1a:3a:76:83:8c:e1:b5:
         96:44:91:37:db:ca:1e:ca:17:fc:de:f3:57:5f:d7:71:ad:89:
         b3:81:67:30:58:e8:7f:1d:a6:e1:01:83:f6:00:a0:ab:b7:e5:
         4f:6f:fb:91:36:88:26:8d:50:7f:0b:48:c8:0e:86:91:3b:95:
         03:7c:1a:ea:3f:e3:a4:c6:6b:3b:b5:76:6e:a1:92:54:63:13:
         47:0a:f1:c2:61:30:26:9f:01:45:a0:55:02:12:dd:03:e9:c1:
         61:27:24:7e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTUzNkMxMTAvBgNVBAUTKEEwOTBFNTIwQkY5RDUxRjJGRENFRUQ0MTNBRjI3QUM3
NThGNkFFMUQwHhcNMjUwNDI3MDMxNjEyWhcNMjUwNTA0MDMxNjEyWjAYMRYwFAYD
VQQDEw02ODBkYTE3Yy1hM2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwiHNvgsSSEH2WTH/E76WpZcLSufIbawXFjFS7i5J4/tupUfpnHBR+3vhzBaA
j5WM8YIn1jNUGd1IYovnbQlEMw9li6G3KXF1h4dhJ4/zYz70Of1Gp4dKSrmbkcZa
k1A3V1Ul855IiOZOt0zDbHnbE1FQYrE7+Z0DRFMtx9GYOLwhhZ7wEqoQzskGqneB
qgw9jnPQM24e5kDf37rj1vHzzj6d3gSRkhggmRIUGMxe0I5nnLEiocKJSUJDIoV5
yfuDGU5LSiPW1w1IHy9j0PeBnRXdELaefbfsxyWE36W3SJDqYP0t3FGGCEyErxI+
vUBcwfc4vnsGviUWIgDBPzS2jwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMypSlic
7vSyYQ41r0MfsFGfARtMMB8GA1UdIwQYMBaAFKCQ5SC/nVHy/c7tQTryesdY9q4d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTM2Qy83NUI5OEJGMDM2
NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVmTDl6dTFCT3ZKNngxajJy
aDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL29KRGxJTC1kVWZMOXp1MUJPdko2eDFqMnJoMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NTM2Qy83NUI5OEJGMDM2NjAxMUVFODhFMEY1MzBDNEY5QUUwMi9vSkRsSUwtZFVm
TDl6dTFCT3ZKNngxajJyaDAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBcNnbeYOpBkayeJBawjRhnl0t+CxR0cLGgDeoMhUut1RMIyn0KAZgC
IjjWCKpTCUFcnh71u63x7vAst7nV5QeO5yBskUbSvwL20XEagnxBkOI9diNXatoN
9EGW2Ww6+ZnQHbLCIDk5+c4R/ZOkNEkoMZY7ztUTeumvPz+PehfErFVsVtRmVPGc
WehO7SM98AiBLxGYM4YM8/aPgxo6doOM4bWWRJE328oeyhf83vNXX9dxrYmzgWcw
WOh/HabhAYP2AKCrt+VPb/uRNogmjVB/C0jIDoaRO5UDfBrqP+Okxms7tXZuoZJU
YxNHCvHCYTAmnwFFoFUCEt0D6cFhJyR+
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:00 2025 by rpki-client on console.sobornost.net