Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
File:                     RW7qBpLGpPJvU9LSN9HLTc14MwU.mft (raw, json)
Hash identifier:          C3YNqXRGjOtEDTv08GvulJIZ60m+E8oQrdoEgFdXTiY=
Subject key identifier:   66:57:36:59:E0:BB:3A:8A:C1:C7:B1:E2:13:47:63:76:50:A8:C4:BC
Authority key identifier: 45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05
Certificate issuer:       /CN=A91C6550/serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
Certificate serial:       020E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
Manifest number:          01CD
Signing time:             Sun 27 Apr 2025 02:36:51 +0000
Manifest this update:     Sun 27 Apr 2025 02:36:51 +0000
Manifest next update:     Sun 04 May 2025 02:36:51 +0000
Files and hashes:         1: RW7qBpLGpPJvU9LSN9HLTc14MwU.crl (hash: 0zdQroqAzWVWW6NsKz5hHnmSW7voYMbSqRwaw+CH4KA=)
                          2: 99D9487EEAFE11EE9EFB1977C4F9AE02.roa (hash: zFW6A+VsWeVd5y9V/Grmt529yD9xy9nMp+dz1bU8Fj0=)
                          3: C1D6899A766D11EF8DE77D09C4F9AE02.roa (hash: hhDKyyrQxKGGNGFA6ebmUiEAzFW+VilENtN1Yqjy+bg=)
                          4: EABEFD16232E11EFA6F6B887C4F9AE02.roa (hash: ia4Ra/GF14x26JDiIjwbkjuR5bTGoRpVxx3Eq8bwfHI=)
                          5: A52438CC4D7B11EE9DA62A3BC4F9AE02.roa (hash: MnXlnBY2ocoNfE08GiysFh2JwZG89iSiF2FMR7I6bbw=)
                          6: 8A5017E27C3C11EE90BF4044C4F9AE02.roa (hash: 2lj1uUsrRYPyJxpfjrOuYSX+mKrdmUUXbJ/4lkcFuLY=)
                          7: E4788F02DB4511EE89BB2666C4F9AE02.roa (hash: oox2IAP/EeLsMtT4Ck+SqOcZuXLlKDtKDAVdd069T4g=)
                          8: 63FFD6349A6611EEA0301E57C4F9AE02.roa (hash: z8HOz+dcoFFCcCFSoZRS4fGtZxXcsHPetEWPBXuLWp4=)
                          9: EFF7C8FC3C8A11EE9A01501FC4F9AE02.roa (hash: xa6pFVrj/ez7E87xSyPlkJRg6Pmk7Fs8mSI9yoLX72Q=)
                          10: 68C24072EAA611EE8F2E643CC4F9AE02.roa (hash: RLu52NHOm+iqiwkIRAwfpGKtzmwjKuI/N13XqqT8Hi0=)
                          11: 6B95D6A4739311EE8FDD5549C4F9AE02.roa (hash: Qd426lYD9XoOEAmz1vWsXU4A7lmIaqfHNjNk4PbK3Hw=)
                          12: 005C56227B2411EEBB6FC444C4F9AE02.roa (hash: T0JzURgbPQAyxXByhNfsj9TRUNcqqPprlp5/NvrciCE=)
                          13: 399302423C8B11EE83400D20C4F9AE02.roa (hash: N2pS8ft3nrcylkyKhXMZRXSMHTWkIIpW9TlSRxcMr/A=)
                          14: 281775F671A711EE85493C7BC4F9AE02.roa (hash: BACyePdfCThTkkGSMdPNsRpHZtdIdBJX2cl+z8bcJWM=)
                          15: E5209E5C807E11EF93536D20C4F9AE02.roa (hash: 6riOt7I9PRgxEQLHewebHK25UsfuwMJc/hksMeZF4Tk=)
                          16: F9350C3C326B11EEA39EA051C4F9AE02.roa (hash: l6IS2kpgAAlvqNFhAN1P6ZblqySzuWpYTnlUWX9CEl8=)
                          17: 16C1510E310711EE8328F181C4F9AE02.roa (hash: trP7B45/DlDHDIgNDVOVbjedY2D8psgfhXtS/4UA2n0=)
                          18: 6CB1C84010E011F086DF6040C4F9AE02.roa (hash: hAzdOCdFdHR/YjdHmsPsDPmRR/IOG0RFOqXqun1HAm0=)
                          19: 5F5C646C7AE911EFBEF40A3AC4F9AE02.roa (hash: mAow9IFKciqMsYxt1OAxrZ1M2FXSiGw7w8W52WIxbjY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl
                          rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6550, serialNumber=456EEA0692C6A4F26F53D2D237D1CB4DCD783305
        Validity
            Not Before: Apr 27 02:36:51 2025 GMT
            Not After : May  4 02:36:51 2025 GMT
        Subject: CN=680d9843-1d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:f7:9c:3d:3a:89:a2:6d:56:5a:f0:d7:e7:
                    d2:b2:7a:dc:5a:66:e8:d0:6f:ec:ac:d5:05:75:5e:
                    d2:43:3a:79:5f:81:d4:f5:6d:42:66:2e:9f:1c:63:
                    eb:06:a3:99:d7:6f:e5:7e:8f:46:c2:9f:06:b8:b1:
                    6c:ba:a1:95:2b:8a:59:d9:84:71:59:86:95:d3:7b:
                    58:bd:01:7a:57:ba:2d:f1:79:6e:b1:4b:fb:3d:ba:
                    b2:4e:5c:c1:44:eb:8b:a7:6b:55:2b:ea:8a:c8:67:
                    c5:52:91:11:bd:9e:92:eb:dc:d2:3c:a8:6f:d4:16:
                    d8:d6:4b:3f:1f:51:f9:7a:f2:2a:bf:18:50:d3:55:
                    5e:d6:32:a3:b0:99:65:e7:61:e6:ea:49:bf:8e:93:
                    09:5c:78:50:7a:73:4d:08:5e:13:55:83:e3:a7:39:
                    82:a9:17:b2:35:d0:49:09:36:53:03:69:19:a7:f5:
                    84:4a:e5:f5:95:b2:5f:ad:3f:34:6f:98:85:15:a7:
                    00:cd:1d:f9:b0:fb:ee:48:0e:aa:47:84:ba:e0:11:
                    1c:02:40:ec:7d:62:51:93:ad:79:38:96:5b:a6:59:
                    0c:6e:37:b8:a0:52:39:a3:6a:f8:b0:f4:e5:17:dd:
                    b4:cd:8a:71:9a:45:92:01:36:68:23:9f:38:fc:9c:
                    1d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:57:36:59:E0:BB:3A:8A:C1:C7:B1:E2:13:47:63:76:50:A8:C4:BC
            X509v3 Authority Key Identifier:
                keyid:45:6E:EA:06:92:C6:A4:F2:6F:53:D2:D2:37:D1:CB:4D:CD:78:33:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RW7qBpLGpPJvU9LSN9HLTc14MwU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6550/8400954ACEC411ED8A83FB11C4F9AE02/RW7qBpLGpPJvU9LSN9HLTc14MwU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c4:97:ef:49:bc:79:42:29:b4:f0:92:f8:06:3d:f8:75:c2:
         61:d5:43:38:77:e5:de:ff:ef:71:b7:40:dc:03:f5:a0:e5:db:
         cc:52:02:96:f8:57:da:7a:4c:1a:3a:36:bb:cf:b5:a0:c3:18:
         62:ef:51:ac:cc:16:30:40:a4:ac:20:6e:e9:6f:69:cc:43:d7:
         c0:0d:4a:c7:49:38:7c:58:49:28:04:21:8d:b2:f8:bb:90:c0:
         fa:1e:28:b8:2f:a3:2f:49:a8:9c:cd:0d:80:ad:62:bd:d5:b8:
         d6:2a:b3:73:2a:ec:25:62:48:74:f3:96:c5:9d:82:cc:20:2c:
         3b:e7:4b:9d:8b:b9:30:0f:83:c8:77:d7:50:56:7b:38:2a:bb:
         ec:66:8d:9d:86:16:f9:6e:d2:a0:02:68:66:5a:a2:0f:73:7d:
         de:bc:6f:94:5d:15:ae:4f:b4:77:ec:c5:87:00:7e:db:ff:51:
         35:a8:8c:c3:2a:d3:6c:22:ac:37:92:68:97:61:36:ee:3b:e3:
         d5:8e:e4:e3:e7:3d:c3:a0:ac:cc:5b:e1:d6:69:7f:3b:70:eb:
         fa:0f:dc:14:78:c5:0d:7e:90:9b:3b:0a:01:5e:da:99:3a:25:
         aa:a0:3a:67:3a:19:86:03:63:0c:c8:df:19:49:d5:20:28:9c:
         e0:ff:70:38
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAg4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzY1NTAxMTAvBgNVBAUTKDQ1NkVFQTA2OTJDNkE0RjI2RjUzRDJEMjM3RDFDQjRE
Q0Q3ODMzMDUwHhcNMjUwNDI3MDIzNjUxWhcNMjUwNTA0MDIzNjUxWjAYMRYwFAYD
VQQDEw02ODBkOTg0My0xZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv6r3nD06iaJtVlrw1+fSsnrcWmbo0G/srNUFdV7SQzp5X4HU9W1CZi6fHGPr
BqOZ12/lfo9Gwp8GuLFsuqGVK4pZ2YRxWYaV03tYvQF6V7ot8XlusUv7PbqyTlzB
ROuLp2tVK+qKyGfFUpERvZ6S69zSPKhv1BbY1ks/H1H5evIqvxhQ01Ve1jKjsJll
52Hm6km/jpMJXHhQenNNCF4TVYPjpzmCqReyNdBJCTZTA2kZp/WESuX1lbJfrT80
b5iFFacAzR35sPvuSA6qR4S64BEcAkDsfWJRk615OJZbplkMbje4oFI5o2r4sPTl
F920zYpxmkWSATZoI584/JwdTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGZXNlng
uzqKwcex4hNHY3ZQqMS8MB8GA1UdIwQYMBaAFEVu6gaSxqTyb1PS0jfRy03NeDMF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjU1MC84NDAwOTU0QUNF
QzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQSnZVOUxTTjlITFRjMTRN
d1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JXN3FCcExHcFBKdlU5TFNOOUhMVGMxNE13VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NjU1MC84NDAwOTU0QUNFQzQxMUVEOEE4M0ZCMTFDNEY5QUUwMi9SVzdxQnBMR3BQ
SnZVOUxTTjlITFRjMTRNd1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCyxJfvSbx5Qim08JL4Bj34dcJh1UM4d+Xe/+9xt0DcA/Wg5dvMUgKW
+FfaekwaOja7z7Wgwxhi71GszBYwQKSsIG7pb2nMQ9fADUrHSTh8WEkoBCGNsvi7
kMD6Hii4L6MvSaiczQ2ArWK91bjWKrNzKuwlYkh085bFnYLMICw750udi7kwD4PI
d9dQVns4KrvsZo2dhhb5btKgAmhmWqIPc33evG+UXRWuT7R37MWHAH7b/1E1qIzD
KtNsIqw3kmiXYTbuO+PVjuTj5z3DoKzMW+HWaX87cOv6D9wUeMUNfpCbOwoBXtqZ
OiWqoDpnOhmGA2MMyN8ZSdUgKJzg/3A4
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:10 2025 by rpki-client on console.sobornost.net