Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
File:                     9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json)
Hash identifier:          dIDvGCgr2IVmDCx4E2H/Fyy8PfncSPRnmt6qFTBQUOo=
Subject key identifier:   22:65:E5:3F:98:5A:85:FB:6B:15:C5:A4:D9:C2:F9:12:81:26:B6:63
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Certificate issuer:       /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial:       08B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
Manifest number:          088F
Signing time:             Sat 26 Apr 2025 20:21:55 +0000
Manifest this update:     Sat 26 Apr 2025 20:21:54 +0000
Manifest next update:     Sat 03 May 2025 20:21:54 +0000
Files and hashes:         1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: ohHh0lVElZg0My9fHl1VS6Ad7XN9mFeH6rvnh7UoKaM=)
                          2: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: 9l2BnAHuJJyrHEmwkIwIFNFXNdEVQXjPc/3IgeT+NA4=)
                          3: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: 44jc2HCK3ANOLLqkUGNn4VzJW+fDcOLIoQKKCEkW6FQ=)
                          4: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: uiQHUpFXfMyV6JWHHfyojaNEZ38IK1RSRYCfDGxO9D0=)
                          5: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: /dh2BYyOs2T7d9tTc6SvzUzA1l6MPCZkZgm7SbaZhYs=)
                          6: 7DE1B508BC8A11EABAFA684CC4F9AE02.roa (hash: aLYKuPmQ5XZ+o/2rxrD1UHlOU4eVMiGT8zGiWBda0Do=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2229 (0x8b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
        Validity
            Not Before: Apr 26 20:21:54 2025 GMT
            Not After : May  3 20:21:54 2025 GMT
        Subject: CN=680d4063-8a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:63:6d:d0:81:28:4e:10:ac:37:6b:8a:02:dc:
                    7b:f9:34:5d:aa:dd:0b:ea:f5:5a:8f:42:4e:c7:d9:
                    04:4b:69:17:fa:44:59:c4:1b:97:40:de:8b:d4:41:
                    e2:97:a5:ef:3c:ca:45:05:3d:87:10:98:2a:9f:3f:
                    e8:d2:1d:8a:cd:eb:bb:ef:a6:d6:1a:08:df:5a:31:
                    4a:ed:5e:6e:c3:ee:5b:55:a4:c9:30:86:02:9c:ff:
                    e9:0e:02:c7:52:5c:01:8b:16:fa:c1:9a:66:31:b3:
                    5e:b1:54:77:81:e0:69:46:80:08:a7:69:24:8a:84:
                    81:b6:44:19:5a:53:d8:33:ee:15:0d:ad:f5:3c:8e:
                    9a:0a:bd:24:64:55:a2:d6:0f:db:16:b9:b3:5a:28:
                    8e:4b:5d:18:28:3f:2e:54:e3:f0:ec:ee:8c:da:f8:
                    66:fa:d9:d2:84:d6:2c:a1:f8:71:b7:30:f7:8c:c6:
                    6a:dc:a7:cc:13:5e:f8:9d:56:b7:db:2d:7d:2c:8d:
                    4c:61:9d:da:99:00:0d:98:32:7c:c7:68:62:d2:05:
                    ef:1f:68:9c:f4:8c:e4:23:12:c4:19:18:32:07:03:
                    b5:79:7b:24:2d:b7:34:d5:09:38:15:f6:b6:31:46:
                    be:4a:6d:dc:fb:d6:44:b7:61:b2:4d:90:c8:a3:19:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:65:E5:3F:98:5A:85:FB:6B:15:C5:A4:D9:C2:F9:12:81:26:B6:63
            X509v3 Authority Key Identifier:
                keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:55:3d:e0:7c:a3:c5:c0:e5:3f:d8:b3:64:87:78:ec:6e:b2:
         64:7d:c2:f5:b2:66:bf:8c:ff:6f:65:5b:55:52:29:72:03:20:
         e1:0e:db:63:2c:20:80:1e:2b:19:fa:05:7b:db:0e:b1:dd:6c:
         fb:9a:14:d9:87:a2:e9:ef:14:e4:95:0e:27:c2:8f:66:ac:d8:
         1f:cf:b2:d4:c4:6f:e8:93:e6:19:f7:c2:51:77:3e:72:e4:ce:
         c7:9b:7d:6f:4a:ba:83:1c:c4:b3:05:3d:26:94:40:b9:53:a3:
         f5:68:5c:1f:f2:57:2b:dc:a6:fb:7f:4b:38:52:3c:0c:77:a6:
         9a:95:79:c6:7e:df:1a:70:0b:99:85:4f:58:a3:76:e1:b1:eb:
         fb:9b:ad:0e:96:84:18:e5:24:bf:d1:29:f9:7a:3e:e1:12:96:
         79:54:e3:ea:43:9d:27:db:b1:6f:10:b4:05:6d:75:1d:1c:04:
         f9:5e:84:ee:9e:80:6e:2a:c3:7d:35:c6:2e:c8:4f:2b:a1:b1:
         93:f4:2e:1d:04:0d:e9:85:92:d1:f1:f1:a3:b8:c4:ae:83:70:
         53:ed:cc:5d:1d:3e:7d:8c:55:02:76:fd:50:c2:d7:2d:09:a6:
         76:7b:a1:9f:40:ef:77:67:a0:dd:1a:dc:bb:01:ae:9a:b3:a1:
         bf:dd:7a:44
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCLUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
REVERkQxMTAvBgNVBAUTKEY0NTMyMUQ4Nzg1Qjg4OTdENUE4MzRCOTBFQUI5MTBD
NTU5MDlEODUwHhcNMjUwNDI2MjAyMTU0WhcNMjUwNTAzMjAyMTU0WjAYMRYwFAYD
VQQDEw02ODBkNDA2My04YThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAz2Nt0IEoThCsN2uKAtx7+TRdqt0L6vVaj0JOx9kES2kX+kRZxBuXQN6L1EHi
l6XvPMpFBT2HEJgqnz/o0h2Kzeu776bWGgjfWjFK7V5uw+5bVaTJMIYCnP/pDgLH
UlwBixb6wZpmMbNesVR3geBpRoAIp2kkioSBtkQZWlPYM+4VDa31PI6aCr0kZFWi
1g/bFrmzWiiOS10YKD8uVOPw7O6M2vhm+tnShNYsofhxtzD3jMZq3KfME174nVa3
2y19LI1MYZ3amQANmDJ8x2hi0gXvH2ic9IzkIxLEGRgyBwO1eXskLbc01Qk4Ffa2
MUa+Sm3c+9ZEt2GyTZDIoxkn/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCJl5T+Y
WoX7axXFpNnC+RKBJrZjMB8GA1UdIwQYMBaAFPRTIdh4W4iX1ag0uQ6rkQxVkJ2F
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERURGRC81NDUzNkIzRUJD
ODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlKZlZxRFM1RHF1UkRGV1Fu
WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGTWgySGhiaUpmVnFEUzVEcXVSREZXUW5ZVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
RURGRC81NDUzNkIzRUJDODgxMUVBODhFRjNENDlDNEY5QUUwMi85Rk1oMkhoYmlK
ZlZxRFM1RHF1UkRGV1FuWVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZVT3gfKPFwOU/2LNkh3jsbrJkfcL1sma/jP9vZVtVUilyAyDhDttj
LCCAHisZ+gV72w6x3Wz7mhTZh6Lp7xTklQ4nwo9mrNgfz7LUxG/ok+YZ98JRdz5y
5M7Hm31vSrqDHMSzBT0mlEC5U6P1aFwf8lcr3Kb7f0s4UjwMd6aalXnGft8acAuZ
hU9Yo3bhsev7m60OloQY5SS/0Sn5ej7hEpZ5VOPqQ50n27FvELQFbXUdHAT5XoTu
noBuKsN9NcYuyE8robGT9C4dBA3phZLR8fGjuMSug3BT7cxdHT59jFUCdv1Qwtct
CaZ2e6GfQO93Z6DdGty7Aa6as6G/3XpE
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:14:12 2025 by rpki-client on console.sobornost.net