Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
File:                     xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json)
Hash identifier:          MOONYU/yrrgoCOm7Cx3zsNAUyUNHs3INAprK0LFHQDQ=
Subject key identifier:   AE:D3:DB:66:71:E0:62:26:A6:81:EE:66:49:23:B1:4C:12:03:FE:2A
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Certificate issuer:       /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial:       18CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
Manifest number:          165C
Signing time:             Mon 28 Apr 2025 17:09:26 +0000
Manifest this update:     Mon 28 Apr 2025 17:09:25 +0000
Manifest next update:     Mon 05 May 2025 17:09:25 +0000
Files and hashes:         1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: D+UzPaC/7Jtkp9og2HjsFDMdXuWPy8q1rxaXy0y2434=)
                          2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=)
                          3: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=)
                          4: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=)
                          5: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=)
                          6: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=)
                          7: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=)
                          8: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=)
                          9: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=)
                          10: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=)
                          11: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=)
                          12: 17C5C2EE0AC511F0B49A897EC4F9AE02.roa (hash: K9Z6BonmUzy423wGSqURiFZpSiAZAgbS8kqKahHQ+jI=)
                          13: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=)
                          14: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=)
                          15: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=)
                          16: 67060F128B9F11EA97BB8046C4F9AE02.roa (hash: Bja+pXwIkwi+wu7Wy1czg9tcaeGtk3ByqmVnXr1h7PU=)
                          17: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=)
                          18: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=)
                          19: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=)
                          20: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=)
                          21: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=)
                          22: 3AED95046D0111ECA5893B2BC4F9AE02.roa (hash: aLX0spZdD1HmaR+qKo3b5UUfl5pW1J8tkF+sIveKmK8=)
                          23: 97AAC8FE86A011EB8BEAC92BC4F9AE02.roa (hash: j8JrS+AqnkCckpa8gG946yMRu94Md+3E6AE+h/Sfwzw=)
                          24: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=)
                          25: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=)
                          26: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=)
                          27: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: rx0eRPu2xzrisWwtDOzb2vQcxB4j/OQ/aSmmEmceSy8=)
                          28: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 17:09:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6348 (0x18cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
        Validity
            Not Before: Apr 28 17:09:25 2025 GMT
            Not After : May  5 17:09:25 2025 GMT
        Subject: CN=680fb646-25d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0a:a7:59:a9:71:cf:6b:b7:71:b9:04:c0:89:
                    6d:6d:e6:0f:a3:71:4e:73:b9:33:04:65:57:46:d7:
                    6b:0f:ec:31:77:f4:a8:12:52:7d:e7:7b:8e:6d:d2:
                    1b:fd:14:24:bd:cc:95:4a:a0:18:33:0a:4f:3d:fb:
                    e9:0a:71:0e:25:bc:78:54:90:f0:20:5c:88:12:93:
                    7a:16:46:35:7d:aa:b0:e1:b8:95:f6:cb:86:6b:5c:
                    b0:e9:3d:68:fe:36:a9:f3:d2:65:a3:dc:8b:a9:4c:
                    9c:55:e0:75:59:f6:64:ed:0f:6e:d8:c7:9e:9a:1a:
                    82:f6:c0:71:6c:66:49:15:00:c6:27:63:6f:10:10:
                    b7:e1:71:0d:02:6f:f3:49:8d:62:67:4a:8b:b9:1b:
                    e6:a6:be:91:dc:73:40:c1:0d:1c:2f:d8:e1:4f:b3:
                    36:66:d7:06:55:8c:40:29:cc:e6:20:ff:13:56:b6:
                    32:c8:84:e2:d1:07:49:99:c8:a0:40:7d:2c:b4:79:
                    5a:7d:48:5b:4a:59:00:2e:96:ff:c8:89:6c:ce:cd:
                    3d:28:c3:f4:30:f7:66:d5:0e:a8:8a:dc:0d:2e:a4:
                    a0:e5:c3:7f:cb:35:51:e0:78:d4:bf:46:5f:93:02:
                    45:c6:af:58:3d:c8:c8:b7:09:dd:3f:65:d4:d4:04:
                    e0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D3:DB:66:71:E0:62:26:A6:81:EE:66:49:23:B1:4C:12:03:FE:2A
            X509v3 Authority Key Identifier:
                keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:d8:8c:ae:51:e4:ee:06:e4:12:4c:5e:8e:73:3f:1a:00:e1:
         89:76:9c:4c:8a:e5:ee:76:37:e1:ad:3e:e3:43:80:63:79:0d:
         8b:56:6e:27:ee:50:3e:32:63:19:fe:c3:fb:1c:68:e6:11:b4:
         c0:4a:cb:78:be:26:ba:ff:5f:13:7e:95:12:c9:c0:72:6f:dc:
         6c:22:4e:ed:e4:74:21:35:86:0b:ca:6a:a9:d4:c3:0c:cd:b1:
         bf:03:60:d0:56:9e:ca:95:53:e9:aa:9e:b7:c8:34:12:7d:49:
         8b:bd:19:18:29:bc:3e:83:2e:b1:1c:04:1e:31:f5:f4:99:5e:
         3b:d7:53:81:81:dd:40:29:3f:1e:e1:0e:4b:29:5a:68:a8:a6:
         3e:66:5a:6c:9c:b1:ff:f4:a6:39:be:6d:11:b0:0b:89:d2:64:
         ed:50:55:84:05:a8:6b:5d:1f:76:20:c5:ea:d5:29:0d:63:c0:
         0a:4f:ac:b6:85:a3:9a:8c:e6:04:97:6b:63:1b:d9:dc:27:58:
         08:0f:34:85:02:63:65:65:f2:0c:87:64:e1:e6:b9:ff:45:58:
         79:3e:90:fd:6a:45:12:ba:d5:05:3e:b3:c4:9a:82:26:54:0b:
         7d:56:18:e1:54:34:fb:3f:d3:4f:c3:63:87:66:e0:9e:8d:ad:
         64:a3:01:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:11:14 2025 by rpki-client on console.sobornost.net