Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
File:                     nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft (raw, json)
Hash identifier:          lOorU01J7GqWBix+gm8iR4LG+EXSykVUocrqqc8FRNE=
Subject key identifier:   3C:1C:5C:F2:93:58:59:1B:4A:5A:99:0D:3F:AE:B1:13:BF:A6:8D:AB
Authority key identifier: 9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99
Certificate issuer:       /CN=A91A4C60/serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
Certificate serial:       0E48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
Manifest number:          0DA0
Signing time:             Mon 28 Apr 2025 18:15:26 +0000
Manifest this update:     Mon 28 Apr 2025 18:15:26 +0000
Manifest next update:     Mon 05 May 2025 18:15:25 +0000
Files and hashes:         1: nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl (hash: v7Mr8HyZ/6nhirPHSpIFQd5L1BgVA9HE9Q/NyQTKVE4=)
                          2: 7072DE7601C911EC9286E827C4F9AE02.roa (hash: 7msEvTLtFsUPExajJssY7rK4WVcg4LZn9GJ36tHnfps=)
                          3: 72EB65AAC96511EDB2A13779C4F9AE02.roa (hash: EKrxivQN/ugEIGuNskep3asGKS1SHAvX1FnHQ+xTspc=)
                          4: 88A00388193111EB9E0A6A49C4F9AE02.roa (hash: u3WzgpaL6M5sXXo26nPKh9UHSPFb46VhuO2Q5Fo8Shs=)
                          5: 81CDB96A53F111EB85FBFA19C4F9AE02.roa (hash: NWo/6+CZ9HQYfqESvTvUnv7ahdvIp39DlAFteKyJz6Y=)
                          6: 0741B84C2FFA11EB9544F785C4F9AE02.roa (hash: mTcIHah4w3Vjv+PUpTnmqnHZ/WWcS1sHh5BVs3GE+UQ=)
                          7: 12F0D72E7BC111EA8503D815C4F9AE02.roa (hash: xGtgEmqtoxW1ZnFqrfdXZFVQbRuwiMqE40Ohns82lks=)
                          8: 0D90C6C899BC11EEBF0F7411C4F9AE02.roa (hash: OqGy61SUyKNWplMZ7rgfQmmSj9+s8efrmcgKdf6cAJk=)
                          9: B6A7D6FCCAEA11EE8E1B2D36C4F9AE02.roa (hash: SXM3r93+JAbfUFOgTJZWpNNuc7IK/ZoNqCIsmPIym1s=)
                          10: 378C18A43D3D11EAA59A8012C4F9AE02.roa (hash: HNDIzi1kzv+rbEdjXVJF19/xDZWlePAah9JkFcYlECE=)
                          11: 9F71391C684F11EAB45B6F4FC4F9AE02.roa (hash: jVu5ZnLYMd3KFvMDPxIr2Kr82SJ5+hpIDGoI5dhGF7o=)
                          12: 60B3CD6EAF2E11EEBF12DF45C4F9AE02.roa (hash: 1e5MpWXXLnucpXgA7+/6NcCslKn9LXNV+RznqlHIuF0=)
                          13: D17A895C0C5D11EAB1A29D67C4F9AE02.roa (hash: EZcxncfNl0zD/tSncvn3SUo/vaEA9kPik+cwYMuomd0=)
                          14: 2152FB1650C511EAB566FE61C4F9AE02.roa (hash: qiruACIeUuWCHVE9fSq/awWWHhKH4G60m/pcIC2u5z8=)
                          15: 915FFF14A5AF11EAB039ED67C4F9AE02.roa (hash: 2jainDeXw/J702lQhxkzNdpAlcOPjELdE2rK7IEazhc=)
                          16: 03774914696211EC8A05D115C4F9AE02.roa (hash: /71jeZ/z/bjdOuocI7pJpODjcutgjWmyBXnbScV8x34=)
                          17: EDE3E1EE306D11EB9AEE3E86C4F9AE02.roa (hash: zfIXPPCdkOaknfqYs53DeFIT3TNh9PqHIQnfhYmK5wM=)
                          18: B07EF7408DDD11EA8B5F824BC4F9AE02.roa (hash: SBkKKnAR6IJ2hBnL0p0PNg19RBJEETP5xc3S8pI7apE=)
                          19: 45F4DDA265CF11EB9E3CFA6FC4F9AE02.roa (hash: IXKoMwA1CHlc+rwm36botjnh/fDCInGR5gYfUdLmCvQ=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl
                          rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 18:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3656 (0xe48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4C60, serialNumber=9EF9E4376E36653275C7963598D6B45B70AF8099
        Validity
            Not Before: Apr 28 18:15:26 2025 GMT
            Not After : May  5 18:15:25 2025 GMT
        Subject: CN=680fc5be-036b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:65:9d:0d:78:fc:e6:a1:4f:88:65:74:78:5a:
                    0b:f9:02:14:4a:8b:52:4d:a3:b0:5e:5c:4b:fa:7e:
                    2d:26:0a:83:24:29:b9:5b:7c:18:a0:a4:fa:90:42:
                    44:08:f2:e2:bf:0b:a7:d2:1b:3d:0f:47:57:2a:a2:
                    77:e8:8d:af:a5:92:1f:e6:89:21:9e:f9:c7:1d:57:
                    97:7a:71:d7:22:15:8c:74:2f:21:65:e2:f2:8d:3d:
                    e8:a7:5a:50:d6:87:72:ec:ef:ac:82:ff:e2:88:d6:
                    b1:b3:8d:17:74:54:81:31:4a:e0:c0:21:35:8b:3f:
                    c0:23:95:92:97:8e:48:57:6b:50:4a:59:09:e4:b4:
                    94:d1:bb:88:71:a5:f3:1a:10:c7:5b:67:50:7d:a4:
                    d8:98:6e:72:fa:bd:02:8e:0b:7a:07:b9:1c:da:2b:
                    e3:48:e9:b6:71:5f:05:c9:ef:71:9c:3c:17:37:2f:
                    8a:d3:88:f6:15:a2:59:66:c5:4d:fb:c9:f8:ec:0f:
                    ed:72:aa:37:8b:19:12:09:15:8f:01:14:52:fa:2c:
                    5c:1c:5b:7c:ed:e2:4b:ce:8e:c6:0c:f5:56:c3:0e:
                    62:0e:22:23:50:e0:9c:69:6a:35:19:61:93:77:be:
                    9e:a6:5a:9a:10:5a:88:e4:73:ce:3f:33:73:04:dd:
                    09:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1C:5C:F2:93:58:59:1B:4A:5A:99:0D:3F:AE:B1:13:BF:A6:8D:AB
            X509v3 Authority Key Identifier:
                keyid:9E:F9:E4:37:6E:36:65:32:75:C7:96:35:98:D6:B4:5B:70:AF:80:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4C60/B526FF74D84111E9A4521413C4F9AE02/nvnkN242ZTJ1x5Y1mNa0W3CvgJk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f8:07:d7:30:f3:3c:e9:f3:5c:b9:3d:76:2e:45:b0:17:d3:
         43:bd:2e:56:2a:21:28:fc:42:7a:d7:6a:65:e7:fe:54:68:99:
         e6:9f:f9:58:be:56:46:0b:42:f1:46:cc:b5:6d:1a:67:41:7c:
         e6:cc:99:c6:95:d0:9a:4a:35:d5:ca:a5:d7:cb:51:f9:8b:a6:
         14:2d:98:7f:52:d9:5b:be:75:42:6c:ed:6b:53:29:20:9f:17:
         a7:89:02:33:53:2e:dd:bd:79:a0:77:9a:28:30:1c:7a:2e:62:
         c0:d0:5a:17:19:08:68:bf:f6:2a:f2:9b:8a:1e:31:8e:a2:8f:
         81:36:66:ab:94:f4:51:4e:18:39:84:91:89:51:cc:e9:b1:06:
         6f:33:4a:a4:0e:54:5a:b6:be:62:07:c9:b5:cd:bb:00:ba:ef:
         d6:86:da:dc:67:bd:d9:61:4a:0e:12:92:52:ee:b9:0b:67:c1:
         6c:f1:91:99:af:74:b1:d8:9b:1d:dd:95:d4:03:2a:41:92:0f:
         e0:e0:98:b3:3a:61:a7:b8:c4:5b:c3:bf:a5:10:ba:54:a2:b2:
         fc:f0:fc:2d:5c:58:74:a6:1f:ec:77:fd:1f:02:f9:58:8c:82:
         40:68:13:d4:0d:e2:4f:66:39:60:08:08:71:ef:9a:49:ef:6b:
         bb:41:fb:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:10:52 2025 by rpki-client on console.sobornost.net