Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
File:                     Ae4IndSGeyyydlgqqXsxj1Cepu4.mft (raw, json)
Hash identifier:          xafSgV5i0zuvpiyh5j766K3Mps5K5v+tAA/4tPTqL6U=
Subject key identifier:   98:16:BD:12:EC:EF:75:33:59:E5:0A:D3:E4:CA:92:05:8B:AC:1A:B9
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Certificate issuer:       /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial:       0B23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
Manifest number:          0B05
Signing time:             Mon 28 Apr 2025 19:38:18 +0000
Manifest this update:     Mon 28 Apr 2025 19:38:17 +0000
Manifest next update:     Mon 05 May 2025 19:38:17 +0000
Files and hashes:         1: Ae4IndSGeyyydlgqqXsxj1Cepu4.crl (hash: 7RkN2D4/MjYK/+Kh0O2HNZ9AQ1h41nGNMBvoED+77MU=)
                          2: 871196D48AC111EA81A2626EC4F9AE02.roa (hash: j8QejNy6d2T3iItswUdDsobqJc7b/UtqrnyshfiQ4jI=)
                          3: CD87789870C411EF9CC65F6BC4F9AE02.roa (hash: Z8+h4C3SXJhbXUua72HJRAWsoLtqFLLA8RRdoFt4VPk=)
                          4: 12AE33B4419811EAA268D964C4F9AE02.roa (hash: WByJv+/0UWcFSBkuQVt24N8Bh5eeznOvZMkj35xeU8o=)
                          5: CE67353C70C411EF9CC65F6BC4F9AE02.roa (hash: EYu/tMocRs70Hb99NoIzVinC6cgIHyg0wu81VqC7jcU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
                          rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 19:38:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2851 (0xb23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
        Validity
            Not Before: Apr 28 19:38:17 2025 GMT
            Not After : May  5 19:38:17 2025 GMT
        Subject: CN=680fd92a-4dc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:02:37:1a:d6:16:e1:32:f9:93:ec:08:32:
                    8c:a1:6b:df:96:5c:20:fb:76:c1:29:8d:be:00:6a:
                    cf:43:c6:b5:36:57:94:27:a1:ff:1c:dd:6a:17:d0:
                    c9:83:93:79:48:50:f9:d4:a4:0b:34:a2:25:ad:91:
                    3c:f1:8e:65:9d:ea:8c:27:9f:14:17:77:c2:33:d7:
                    22:e7:4b:3c:8a:ef:9b:f0:3b:50:5e:6c:f6:22:92:
                    fa:2b:37:c5:67:18:d0:f9:6c:b8:59:c9:1a:57:59:
                    23:ef:bf:a2:49:77:61:9a:16:cd:0b:58:b8:8b:06:
                    62:15:35:00:90:67:01:3c:2f:61:0e:6b:13:7a:de:
                    2d:ce:98:13:d3:d8:88:30:3c:3d:9b:79:42:dd:34:
                    32:b2:4e:2c:5e:10:9f:0e:4d:a2:3b:9b:b8:33:91:
                    2d:e3:51:9f:bc:b8:a6:c5:73:ae:c7:34:d6:8e:35:
                    90:e7:d0:30:74:73:df:9f:fc:e0:6f:1e:cb:93:8b:
                    84:21:19:82:ec:9b:90:02:ef:8f:33:ae:42:a1:be:
                    43:54:f9:36:9e:d5:d5:28:0f:f3:1f:f7:7d:ee:1e:
                    2f:bb:30:fd:46:28:83:72:41:d6:21:7f:11:11:6f:
                    a1:cc:6f:b1:08:4f:df:77:83:81:3d:26:b1:cc:e1:
                    e6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:16:BD:12:EC:EF:75:33:59:E5:0A:D3:E4:CA:92:05:8B:AC:1A:B9
            X509v3 Authority Key Identifier:
                keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e8:f2:c5:42:3c:42:39:f4:28:91:de:54:b6:e1:d1:ca:78:
         86:a4:e5:e3:49:28:0a:09:bc:97:9e:57:5f:45:0f:4c:2a:db:
         32:a4:71:77:98:d7:18:35:68:17:e8:e3:fc:e4:3d:5f:32:ee:
         60:2b:3c:3a:c3:f9:f0:fc:80:99:a3:5b:f9:61:65:7e:f2:e3:
         6f:ff:d3:e1:8b:18:83:b0:97:f7:d3:b1:2b:73:6f:13:38:e9:
         0f:86:cd:d6:ec:d2:7b:a5:c3:3e:48:cf:2c:8f:bd:af:24:52:
         a1:59:e8:64:69:4e:b7:b8:d9:0e:ab:48:9d:16:e7:d4:8b:29:
         8f:c0:d8:8c:da:17:34:5f:9a:80:99:0f:3b:51:65:e1:29:a7:
         6c:a3:e8:90:f9:84:00:8f:f0:e1:06:f6:b6:c8:24:5f:d1:b9:
         8d:a2:05:38:4d:c0:2b:b1:db:bd:0b:03:3e:a1:b0:c9:44:d4:
         00:9d:95:f9:ca:db:d2:db:e3:43:1c:63:ca:88:11:dd:bc:c0:
         98:8a:dc:4e:cd:69:84:5f:c2:4d:d4:46:86:c7:73:f4:26:26:
         db:d7:a8:c1:2e:5c:ec:85:1e:60:93:3c:5f:3e:e4:ad:62:18:
         b5:78:7a:08:94:4b:75:5f:26:60:44:4d:ba:df:85:93:41:ad:
         9c:d8:01:92
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjNEMzAxMTAvBgNVBAUTKDAxRUUwODlERDQ4NjdCMkNCMjc2NTgyQUE5N0IzMThG
NTA5RUE2RUUwHhcNMjUwNDI4MTkzODE3WhcNMjUwNTA1MTkzODE3WjAYMRYwFAYD
VQQDEw02ODBmZDkyYS00ZGMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzQkCNxrWFuEy+ZPsCDKMoWvfllwg+3bBKY2+AGrPQ8a1NleUJ6H/HN1qF9DJ
g5N5SFD51KQLNKIlrZE88Y5lneqMJ58UF3fCM9ci50s8iu+b8DtQXmz2IpL6KzfF
ZxjQ+Wy4WckaV1kj77+iSXdhmhbNC1i4iwZiFTUAkGcBPC9hDmsTet4tzpgT09iI
MDw9m3lC3TQysk4sXhCfDk2iO5u4M5Et41GfvLimxXOuxzTWjjWQ59AwdHPfn/zg
bx7Lk4uEIRmC7JuQAu+PM65Cob5DVPk2ntXVKA/zH/d97h4vuzD9RiiDckHWIX8R
EW+hzG+xCE/fd4OBPSaxzOHmDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJgWvRLs
73UzWeUK0+TKkgWLrBq5MB8GA1UdIwQYMBaAFAHuCJ3UhnsssnZYKql7MY9Qnqbu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0QzMC9FM0RGNDY5QzQx
NjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5eXlkbGdxcVhzeGoxQ2Vw
dTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FlNEluZFNHZXl5eWRsZ3FxWHN4ajFDZXB1NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
M0QzMC9FM0RGNDY5QzQxNjgxMUVBQUU4QTc3NTBDNEY5QUUwMi9BZTRJbmRTR2V5
eXlkbGdxcVhzeGoxQ2VwdTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCQ6PLFQjxCOfQokd5UtuHRyniGpOXjSSgKCbyXnldfRQ9MKtsypHF3
mNcYNWgX6OP85D1fMu5gKzw6w/nw/ICZo1v5YWV+8uNv/9PhixiDsJf307Erc28T
OOkPhs3W7NJ7pcM+SM8sj72vJFKhWehkaU63uNkOq0idFufUiymPwNiM2hc0X5qA
mQ87UWXhKadso+iQ+YQAj/DhBva2yCRf0bmNogU4TcArsdu9CwM+obDJRNQAnZX5
ytvS2+NDHGPKiBHdvMCYitxOzWmEX8JN1EaGx3P0Jibb16jBLlzshR5gkzxfPuSt
Yhi1eHoIlEt1XyZgRE2634WTQa2c2AGS
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:49 2025 by rpki-client on console.sobornost.net