Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
File:                     md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft (raw, json)
Hash identifier:          FlBVobjFwOOj5Q/RJVb3ZERa9w+QsMPJA8oWdrryn+4=
Subject key identifier:   9E:27:3F:8E:DB:FA:26:87:11:52:7C:C3:26:DA:22:E6:1B:45:0E:56
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2814
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
Manifest number:          25E1
Signing time:             Fri 04 Apr 2025 15:49:49 +0000
Manifest this update:     Fri 04 Apr 2025 15:49:49 +0000
Manifest next update:     Fri 11 Apr 2025 15:49:49 +0000
Files and hashes:         1: md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl (hash: aw+BQ+wmpQKeYMOa+Hdpj/j8EGpkDlYdLqyZXReq7is=)
                          2: E1944C7441C511E8BEC06D36C4F9AE02.roa (hash: hW9PJuONA5QRIVcSpabSYlVVHKZk9BhhHbhvMM44t/8=)
                          3: 37B8851C654F11EFACFE1271C4F9AE02.roa (hash: b9IowzbZhImT9dukZZkwtYOn3yQjca5UG8GP6zG77wI=)
                          4: 5EBAE6BA379F11EFA59DAE0AC4F9AE02.roa (hash: bnFdEar4yH5G0ieRoHZmbJlac6DU83wuBMH7SZoeRLU=)
                          5: E03999C441C511E8BEC06D36C4F9AE02.roa (hash: KyZfO2Rv8xr1eq0Z6LB6KMQ4937ZuffjM61C4GSQ2vY=)
                          6: 427B58D0654F11EF9C952771C4F9AE02.roa (hash: 1umNSn7YgLsuESe1N65wPu0GgTnv/ZWnctVvdgciWFs=)
                          7: 379554D48E1211EFA0811E85C4F9AE02.roa (hash: tNYJCGrYuXo5Hrub9Fajb3EOSnupw1gL2K4Vi5BTBzw=)
                          8: 99E3B47E230D11EBACAFB634C4F9AE02.roa (hash: mGEgqKyInP3xTTdwTZvDYcI96TtdW90NHjn0xmimCTE=)
                          9: 2B535080E79B11EFB484D12EC4F9AE02.roa (hash: +PPRjQ3J4z4+zUgLthK+tXOzNPu/Nlu703fNrOIAz9U=)
                          10: 360880DAACC311EAB7256C55C4F9AE02.roa (hash: sdwWUwTgXALoHHaNkZhUaFJ134MOe+G6MhsAnB/u7J4=)
                          11: 6BF06690D18111EE9F4F1C6BC4F9AE02.roa (hash: o1xi24rxew8B+n1Ze2MpLgZqjLBg0vnQljf/FndK59Q=)
                          12: 32D4E44AC47711EB9BD0E327C4F9AE02.roa (hash: E17da7jnji2zQiJp3BZYC4ul/T77SKv/cFnJq8MyOtw=)
                          13: EB263BE4DBF011EBA6E54586C4F9AE02.roa (hash: yJ+SVca3dIEVbLRKvfj50dgEnl+0SPNec7gFGt3BMLw=)
                          14: 2FF0D93AFEC911E88E78993AC4F9AE02.roa (hash: C4plZK6XXxKIeoIaaMmlznlh+k4bOliQDbE8KF8lE2A=)
                          15: A085C546F64511EAAF5AD93BC4F9AE02.roa (hash: db0U/TsFANPOKCaSANYPTiaFmXaAI4B890DaAhbxEP0=)
                          16: 315BBC4AA21C11E8B669A00BC4F9AE02.roa (hash: 4x8TYwFvDh4J4v8fsHCeCEnShmHBUnsGTqwCub56F+0=)
                          17: 4239C32A61C211E9B8967426C4F9AE02.roa (hash: u72uXA31Lv8jAYBmji/tVu+umDVdG7pS68qyRP1oSOQ=)
                          18: 8672C378CCCB11EAAAE49011C4F9AE02.roa (hash: pAeNijiYULFjzi5jYnKqqIcAfyApYD3cCW31vCnjAgw=)
                          19: 77F51DD83E0911EF9DC1A672C4F9AE02.roa (hash: rTPlG0v4VlMshsixF8ZZ1ynDNuAkOpLK+RIkg5oT0sI=)
                          20: 4969EFD6A34711EA996BB179C4F9AE02.roa (hash: DpWzhCiG9aPaalu/XUwzei3yZnGjkAbpq/hIoktNpf4=)
                          21: D9CB701ACBF311EBB9D2A784C4F9AE02.roa (hash: sWHpKYmtjy2XaK6xn6CLe444fqdYz6EFpueDCdz5kB8=)
                          22: E0CC264A41C511E8BEC06D36C4F9AE02.roa (hash: Q3kI8WbvmkHWw5DRT2fxzKvSMcybiP+tZ+WRit1qOp0=)
                          23: E681416041C511E8BEC06D36C4F9AE02.roa (hash: bHiiIS3BwoO5KuYLpL/BbLehporq4oxa+44HbBZEM3U=)
                          24: 1968CADACCCA11EA86EC0A0DC4F9AE02.roa (hash: QQTC2eUq1wqSPRITL8Q1632ZtpBDKgN8BRZE3Y8ZWMU=)
                          25: 6C3BFACE0E2F11F09642AA85C4F9AE02.roa (hash: oUFK5nJvnrng/r2e12XmsFPFfjs4OoE8DJNFWrrC37U=)
                          26: 9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa (hash: ZYNUMLt8+FZbOksD49SAxknb/1VgqjoVu37R/ssmcAY=)
                          27: 5F92D6C0478F11E9A090265DC4F9AE02.roa (hash: kp2Ne0L+6ZRvk3UeVZo4IBQypi6UCTLf15snOjVh+N8=)
                          28: DCC9968641C511E8BEC06D36C4F9AE02.roa (hash: W30iKjI+iqsDik8HBCLCJKvO2ZtUPH1+IJj4lKt+vCo=)
                          29: 34D73F3E230C11EB825ED82EC4F9AE02.roa (hash: VU4QldGC/v4j0Hb0Rx/k/tkvrIanyxycIdDaCL+zWnc=)
                          30: 7F0F0E7AC92311EBB709B444C4F9AE02.roa (hash: JBC6Nw6olyRKC+trE5CNUXl8ZwEiFDPvV28v5+1RLXM=)
                          31: 350965D2992511EC94DB646EC4F9AE02.roa (hash: mXy5d+2/gCBgynaFsnxUK02Vetpl1veH15+hDv00Ibw=)
                          32: E2D385AA41C511E8BEC06D36C4F9AE02.roa (hash: 0kl+hzJ8ZMCYgestPzieZY+NU93SGaKTK67Lbi8jQ+E=)
                          33: E21558BE41C511E8BEC06D36C4F9AE02.roa (hash: NbY10qYOUw3OHS05Hf+2x8+PN5nVFdCWH4vub4c68dQ=)
                          34: 2F36F25EFEC911E88E78993AC4F9AE02.roa (hash: lbtfttZLykOFL2X6vUbtnMhzUOAWTePTmvUBhS0VvTo=)
                          35: 52360F6491CD11E99EE03151C4F9AE02.roa (hash: /GNyyQNtAeL82vuCHpE7yywDnTF2ey+BA1xxYUhNG4g=)
                          36: 9470344AA21D11E8A514700EC4F9AE02.roa (hash: zAl0HUgPI9JhzEfyu7S/wDlRLlFSPDVfkgipjw4CFZ8=)
                          37: 77C98D46C8E011EA9FF8027AC4F9AE02.roa (hash: VBJprD7+TtKMLPbz8klB2orCy+U8Nc+n0lT8H2YEjQs=)
                          38: AAF07158AFEB11EEBCAD8169C4F9AE02.roa (hash: 8RXwq8RXNSR/fht5p4KiYna1zWWPoNLPPrWh0oLtuoE=)
                          39: DC28826E41C511E8BEC06D36C4F9AE02.roa (hash: Peetxa/7+SFc9eDt8lOuZGUJqI2PmCoVxoHecxTgBsI=)
                          40: 1DB9AEFAE5EE11EABA8AEC34C4F9AE02.roa (hash: 5aV9XBXrcvbjgf/LPgaKXuKSTwY+yKVYWBNYr04mwwM=)
                          41: 7B47F39C821711E993240872C4F9AE02.roa (hash: I+5KUq1fHfRw+MJXuSM8aDH+psg9AF5u7a7ZiO2LdKQ=)
                          42: 2E6B58ECFEC911E88E78993AC4F9AE02.roa (hash: Paw5bfGld1oCSfMEWio7XkiKc/T5uM8UYHKa4CjPQCo=)
                          43: 3494EF9604AB11EB8AAF5923C4F9AE02.roa (hash: J16r+nqwYWjQC9q3yK2BAnvYm7fbGma4jggfeMpNhNk=)
                          44: 41C6F41AB84A11E98246736CC4F9AE02.roa (hash: lWG57GnAo3wTamtDoO521kw7gBuUbBZx14vu/uuNckg=)
                          45: 9F711570F64511EAAF5AD93BC4F9AE02.roa (hash: 1FQBmze3KRl2X+UiyCo2yqgQ02ZQk2o4NTqjpuUkEbY=)
                          46: DD8ACB8041C511E8BEC06D36C4F9AE02.roa (hash: EGrfhW/ypHvn7XWgRXxAc/1H7mG2Fbl9fbwfth7QklM=)
                          47: 2FD48F5AA21C11E8B669A00BC4F9AE02.roa (hash: u8gfXXtqm1gkzJMgdHqfg88L6v+Yz3/XKFWnq8AvFg8=)
                          48: 406928720A2411F0A2D02B4AC4F9AE02.roa (hash: XB1FXJk+02Ga8yfAsMsEB/gNNXe0Zuk0SHtAoo0/aCY=)
                          49: 4FB7C576376811E9847C6223C4F9AE02.roa (hash: ZCOrT5ezhAw5uA4But/7LBxSZmuk6SHo4IcQd8SCZEs=)
                          50: 411624587D2511ECA2A43549C4F9AE02.roa (hash: 0CUs/An2VlXKWHjA3XebOjMGi45BiV95SBtUt/fAPh8=)
                          51: 50527DFCD27811EBB9B4BB66C4F9AE02.roa (hash: +sgWUxPgZYqdHfuSJA/5OOyi2/G/J5JJMKk1Q2ZipDA=)
                          52: B1A34CDCD53A11EDB199211BC4F9AE02.roa (hash: l6JYToju68IzUtZzHFgCZis3cWCR44kbaf5G79V9hRo=)
                          53: 3404E194C47711EB9BD0E327C4F9AE02.roa (hash: fZqpzbalO5KpYxN3RGdtzePMX7BwaVGglvOgJcFt/KY=)
                          54: AFC59224604711E9BB8C0349C4F9AE02.roa (hash: 86fvCe3ZggiV+Ztt8qUapJoZWtynZNCJo38wxy2dPrM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 15:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10260 (0x2814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D
        Validity
            Not Before: Apr  4 15:49:49 2025 GMT
            Not After : Apr 11 15:49:49 2025 GMT
        Subject: CN=67efff9d-c09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:2a:24:b7:0f:40:60:aa:b1:01:75:1b:2d:
                    3b:0b:bf:e2:0f:ff:b2:52:96:39:64:13:90:be:3d:
                    2e:7f:b5:ae:0e:95:ab:16:7f:fa:be:13:4f:93:5f:
                    a3:28:05:9c:1a:91:cc:ad:b0:e6:40:0d:7b:b0:db:
                    76:bf:31:36:b6:8c:e5:49:58:4d:f8:66:2d:fb:df:
                    37:55:42:a0:ea:da:4a:fe:20:0b:e9:cd:57:7f:c8:
                    29:1d:64:34:fb:ed:fc:bb:a3:67:ca:3e:3b:66:99:
                    b0:40:a1:ad:5c:a1:85:dd:7f:3e:8e:8c:c7:89:21:
                    c0:2f:02:91:13:df:5d:9a:c3:bb:87:06:65:a1:35:
                    ab:b8:8b:12:0f:09:11:65:b9:50:d2:a2:1a:fc:78:
                    45:48:a7:e4:c8:fa:c0:7b:f5:43:46:0b:7d:d9:25:
                    0c:7e:6b:84:66:25:cd:58:a0:80:8c:20:15:2b:eb:
                    49:29:0d:84:62:d9:52:82:c6:b7:16:ba:61:71:5f:
                    41:41:89:24:97:c9:5d:98:ee:8f:62:d7:0c:4c:48:
                    1d:8c:5f:70:e3:9f:89:ea:c8:79:77:c8:8c:a1:5f:
                    5d:45:a6:12:e1:0f:f2:f3:0c:7e:92:58:10:12:79:
                    93:5f:5d:08:87:0a:29:fd:75:22:87:07:66:cd:05:
                    5c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:27:3F:8E:DB:FA:26:87:11:52:7C:C3:26:DA:22:E6:1B:45:0E:56
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:db:c1:3b:62:1f:27:1c:95:9f:a8:53:7d:5f:4e:9d:bc:4f:
         f6:f3:c3:08:7b:9d:0c:47:b0:99:9a:cf:5e:d6:56:c3:1c:58:
         e4:da:16:a3:02:7a:c3:b1:08:b0:7a:ae:9a:c7:3c:28:ea:4b:
         2b:e8:73:60:a2:e3:20:b2:a3:29:97:36:15:de:70:5e:26:5c:
         2c:35:04:49:be:f1:62:57:5b:bb:03:a9:3f:05:c7:d7:12:55:
         a1:46:be:18:34:a2:6e:32:69:8b:bb:1d:04:ce:da:8b:41:88:
         7e:6d:bc:43:ec:1d:63:1e:cb:88:c0:83:76:02:e0:6d:85:3e:
         35:08:9a:ea:9b:9a:1d:ef:49:d1:b5:0c:8c:b9:9b:23:b6:ab:
         7f:46:25:3d:88:52:f7:e3:a1:83:d7:b1:22:26:c5:51:a5:d9:
         0d:ea:f7:c3:c1:be:9b:11:6a:5a:03:d2:fa:13:20:73:51:dc:
         db:91:69:d1:c4:73:fa:10:62:2d:f5:9f:12:d9:9a:dc:e2:ce:
         ed:a1:ea:b3:ad:1a:9b:86:fa:b6:fa:d6:72:ac:c2:b8:0c:ac:
         5c:df:66:6d:05:8e:ba:73:94:ad:21:71:a5:5a:de:a4:66:1d:
         32:d8:4c:2d:6d:e3:65:38:a5:65:e2:60:a9:13:2d:2c:81:a7:
         7e:43:53:f7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICKBQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyOEQxMTAvBgNVBAUTKDk5REZCNkJGNzk1MEU2QjQwMTk1QTU5MDI0RjRCNzUw
ODYzRDNEOTMwHhcNMjUwNDA0MTU0OTQ5WhcNMjUwNDExMTU0OTQ5WjAYMRYwFAYD
VQQDEw02N2VmZmY5ZC1jMDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxoEqJLcPQGCqsQF1Gy07C7/iD/+yUpY5ZBOQvj0uf7WuDpWrFn/6vhNPk1+j
KAWcGpHMrbDmQA17sNt2vzE2tozlSVhN+GYt+983VUKg6tpK/iAL6c1Xf8gpHWQ0
++38u6Nnyj47ZpmwQKGtXKGF3X8+jozHiSHALwKRE99dmsO7hwZloTWruIsSDwkR
ZblQ0qIa/HhFSKfkyPrAe/VDRgt92SUMfmuEZiXNWKCAjCAVK+tJKQ2EYtlSgsa3
FrphcV9BQYkkl8ldmO6PYtcMTEgdjF9w45+J6sh5d8iMoV9dRaYS4Q/y8wx+klgQ
EnmTX10Ihwop/XUihwdmzQVc6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ4nP47b
+iaHEVJ8wybaIuYbRQ5WMB8GA1UdIwQYMBaAFJnftr95UOa0AZWlkCT0t1CGPT2T
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzI4RC9CREFCNjdGNjNB
ODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVyUUJsYVdRSlBTM1VJWTlQ
Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21kLTJ2M2xRNXJRQmxhV1FKUFMzVUlZOVBaTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzI4RC9CREFCNjdGNjNBODAxMUU1QUUzOTAxNTVDNEY5QUUwMi9tZC0ydjNsUTVy
UUJsYVdRSlBTM1VJWTlQWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCn28E7Yh8nHJWfqFN9X06dvE/288MIe50MR7CZms9e1lbDHFjk2haj
AnrDsQiweq6axzwo6ksr6HNgouMgsqMplzYV3nBeJlwsNQRJvvFiV1u7A6k/BcfX
ElWhRr4YNKJuMmmLux0EztqLQYh+bbxD7B1jHsuIwIN2AuBthT41CJrqm5od70nR
tQyMuZsjtqt/RiU9iFL346GD17EiJsVRpdkN6vfDwb6bEWpaA9L6EyBzUdzbkWnR
xHP6EGIt9Z8S2Zrc4s7toeqzrRqbhvq2+tZyrMK4DKxc32ZtBY66c5StIXGlWt6k
Zh0y2EwtbeNlOKVl4mCpEy0sgad+Q1P3
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:53:50 2025 by rpki-client