Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
File:                     EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft (raw, json)
Hash identifier:          yL7NcJzwBVD6lqTE7upy0ZmDL1KrhCZQTR/uDxqg09o=
Subject key identifier:   2B:A6:3B:C0:2C:7C:B7:10:7A:9A:E4:2F:6A:F1:C8:7D:85:3B:59:30
Authority key identifier: 11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
Certificate issuer:       /CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
Manifest number:          015D
Signing time:             Sun 27 Apr 2025 03:02:31 +0000
Manifest this update:     Sun 27 Apr 2025 03:02:31 +0000
Manifest next update:     Sun 04 May 2025 03:02:31 +0000
Files and hashes:         1: EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl (hash: imIgJmsGK/BD0KIMC7jVqx9jC7zJdLsn1E0+yfCsvRo=)
                          2: 32D39C06224511EE81776175C4F9AE02.roa (hash: 1b01HrQ984mzb/02NyzWUFZzcTsdrWy3Ymvx1U4TcOM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD844, serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
        Validity
            Not Before: Apr 27 03:02:31 2025 GMT
            Not After : May  4 03:02:31 2025 GMT
        Subject: CN=680d9e47-695b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a2:82:32:bd:d8:19:cd:e8:e1:9a:e2:03:a5:
                    b5:db:ca:0f:93:e9:62:4b:92:8c:46:52:1a:9c:70:
                    c3:ef:b0:c2:9d:37:21:a0:a5:7f:6b:63:3e:e3:74:
                    96:85:f9:e8:fe:2a:11:2d:a8:93:43:e1:67:33:44:
                    47:92:06:46:9d:b8:aa:be:17:c4:fd:96:a5:db:d2:
                    24:0a:1c:54:a6:ca:75:d9:89:70:e5:35:13:60:7b:
                    1e:83:60:53:bd:10:d2:ed:aa:fd:d6:04:22:5a:39:
                    f4:21:61:a4:4e:bd:e0:af:2d:83:87:80:1d:a0:66:
                    dc:72:93:34:68:34:96:c9:92:1c:58:5f:01:98:fc:
                    ae:6b:d6:24:a4:c6:ff:d2:fe:33:8c:5b:f6:f4:e9:
                    f0:ae:8e:bd:75:d5:b1:37:b0:6a:18:cf:4e:be:8b:
                    fa:e3:75:2b:5c:01:e3:90:1e:3d:f5:fe:b5:ad:24:
                    bc:43:9b:f6:b4:50:7d:55:ff:95:36:64:3a:1c:67:
                    77:26:53:2b:48:ff:67:3a:74:1d:17:ed:43:dc:1d:
                    66:f1:ed:47:31:79:c7:ef:08:85:51:73:1f:c8:a3:
                    0c:28:b9:29:09:92:1e:45:b2:b2:33:07:62:e6:e3:
                    98:fd:5b:57:8b:73:32:65:e8:21:8c:eb:1f:ff:d3:
                    f5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A6:3B:C0:2C:7C:B7:10:7A:9A:E4:2F:6A:F1:C8:7D:85:3B:59:30
            X509v3 Authority Key Identifier:
                keyid:11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:8c:98:85:0f:36:ba:15:a3:3d:e5:7e:fa:f8:68:0b:7b:34:
         77:78:0c:0e:d3:7e:b8:92:0a:2f:fa:e6:63:73:08:e9:ff:0a:
         d7:29:64:f3:47:fc:0d:93:b6:7a:fd:5a:13:4d:77:c5:74:84:
         e0:ec:37:8e:f7:6d:59:8f:41:99:eb:7b:0b:95:f1:9b:47:1b:
         c4:32:ca:52:5a:5f:e2:6c:f3:5e:71:b6:57:29:b0:e2:22:2f:
         85:8f:ab:d3:44:25:b7:22:52:24:dc:9c:60:2a:ab:f7:c2:30:
         af:00:ee:fc:a5:df:9e:b2:67:c6:fe:c0:75:20:04:58:fa:53:
         eb:5e:29:db:2a:62:07:29:91:91:40:b0:ac:e5:48:93:03:b2:
         b3:da:a5:6e:31:d1:ca:c1:93:b4:cb:87:c3:a0:f6:ce:a3:9e:
         32:86:86:21:3f:21:67:59:0a:4c:63:a1:bc:0e:d4:48:ea:31:
         97:59:b4:52:a4:67:e9:b4:6f:ee:d2:b0:10:e0:e8:4f:1f:34:
         c6:89:1b:fb:00:3e:9b:d7:7b:1b:c8:ee:57:45:4c:f1:f8:7c:
         7d:11:ba:ff:e4:8c:40:81:3c:c9:51:7e:64:1e:65:87:89:15:
         dd:f4:cf:f7:a6:42:00:a7:c1:de:90:30:89:2a:c1:bd:a0:a2:
         dd:ad:cb:2a
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAWQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkQ4NDQxMTAvBgNVBAUTKDExNjREQTYwNDM0REVFNUVCMTRCQjUzRDRCNTk0RTY2
NURGMjZGRjYwHhcNMjUwNDI3MDMwMjMxWhcNMjUwNTA0MDMwMjMxWjAYMRYwFAYD
VQQDEw02ODBkOWU0Ny02OTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy6KCMr3YGc3o4ZriA6W128oPk+liS5KMRlIanHDD77DCnTchoKV/a2M+43SW
hfno/ioRLaiTQ+FnM0RHkgZGnbiqvhfE/Zal29IkChxUpsp12Ylw5TUTYHseg2BT
vRDS7ar91gQiWjn0IWGkTr3gry2Dh4AdoGbccpM0aDSWyZIcWF8BmPyua9YkpMb/
0v4zjFv29Onwro69ddWxN7BqGM9Ovov643UrXAHjkB499f61rSS8Q5v2tFB9Vf+V
NmQ6HGd3JlMrSP9nOnQdF+1D3B1m8e1HMXnH7wiFUXMfyKMMKLkpCZIeRbKyMwdi
5uOY/VtXi3MyZeghjOsf/9P1fwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCumO8As
fLcQeprkL2rxyH2FO1kwMB8GA1UdIwQYMBaAFBFk2mBDTe5esUu1PUtZTmZd8m/2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRDg0NC83ODc2OTQ3NDE2
NTIxMUVFOTE0QjdCNTZDNEY5QUUwMi9FV1RhWUVOTjdsNnhTN1U5UzFsT1psM3li
X1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0VXVGFZRU5ON2w2eFM3VTlTMWxPWmwzeWJfWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RDg0NC83ODc2OTQ3NDE2NTIxMUVFOTE0QjdCNTZDNEY5QUUwMi9FV1RhWUVOTjds
NnhTN1U5UzFsT1psM3liX1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB6jJiFDza6FaM95X76+GgLezR3eAwO0364kgov+uZjcwjp/wrXKWTz
R/wNk7Z6/VoTTXfFdITg7DeO921Zj0GZ63sLlfGbRxvEMspSWl/ibPNecbZXKbDi
Ii+Fj6vTRCW3IlIk3JxgKqv3wjCvAO78pd+esmfG/sB1IARY+lPrXinbKmIHKZGR
QLCs5UiTA7Kz2qVuMdHKwZO0y4fDoPbOo54yhoYhPyFnWQpMY6G8DtRI6jGXWbRS
pGfptG/u0rAQ4OhPHzTGiRv7AD6b13sbyO5XRUzx+Hx9Ebr/5IxAgTzJUX5kHmWH
iRXd9M/3pkIAp8HekDCJKsG9oKLdrcsq
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:09 2025 by rpki-client on console.sobornost.net