Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
File:                     0ueOUsXby_XhhB2s5SeuqolKmnY.mft (raw, json)
Hash identifier:          ct1pkW1FkloMyllPUbRBA01N38UpI84ixy2nHBfsztQ=
Subject key identifier:   55:0F:1A:F6:37:0C:61:5F:6D:B0:46:D8:F9:49:1E:3A:96:71:81:A3
Authority key identifier: D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76
Certificate issuer:       /CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76
Certificate serial:       0619
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
Manifest number:          0609
Signing time:             Fri 28 Mar 2025 23:06:43 +0000
Manifest this update:     Fri 28 Mar 2025 23:06:43 +0000
Manifest next update:     Fri 04 Apr 2025 23:06:43 +0000
Files and hashes:         1: 0ueOUsXby_XhhB2s5SeuqolKmnY.crl (hash: TN0mBGGSC0YBnGrAEOVUUYFFUwRzT95yCp0mie09OVw=)
                          2: D0A31DDC8E6011EC93F6710FC4F9AE02.roa (hash: 56SXWg9vgGgESxFQOAJJzB+wTF1OQoT0wNilbJGbabc=)
                          3: CFD605CC8E6011EC93F6710FC4F9AE02.roa (hash: s1rfV8r68HE4TuansWzDnqISJzRH7RjJXWNUpk6BVJU=)
                          4: D19ABBB48E6011EC93F6710FC4F9AE02.roa (hash: 2Y9C9KiNax/FdL7eQM2hCoTzZKyNjRhe4AuCRgLGZn4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl
                          rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 23:06:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1561 (0x619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262BD
        Validity
            Not Before: Mar 28 23:06:43 2025 GMT
            Not After : Apr  4 23:06:43 2025 GMT
        Subject: CN=67e72b83-c6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:cd:bd:63:c4:cd:d4:0e:1a:32:c3:06:bc:
                    2d:18:16:ad:72:0d:93:7c:59:62:cb:6e:bd:54:ed:
                    71:1e:33:e6:9b:f3:d4:5e:77:2d:b8:5d:25:ec:67:
                    28:a0:e3:29:67:cc:a0:47:4f:cb:04:57:47:6d:6c:
                    2e:63:bc:09:af:85:f8:64:01:39:23:31:50:44:4d:
                    22:d7:43:cf:59:d1:2b:ba:7d:c1:fc:70:28:a8:14:
                    5c:9d:1a:f5:a6:48:ef:98:bb:3d:27:16:8b:c4:52:
                    7d:f4:7b:a0:ab:95:89:bf:11:19:7c:c9:7f:7e:d2:
                    12:97:b0:ce:ac:b0:5d:e2:c2:02:8e:9b:fa:ff:e3:
                    61:c3:cd:bc:3a:ee:4c:4f:92:cd:74:b1:45:06:c1:
                    2d:4f:ff:3d:7f:ff:37:bc:84:63:04:45:df:57:d4:
                    e5:84:6b:92:56:14:c9:60:fe:01:dd:bc:e3:a5:b0:
                    e1:98:19:6b:39:ab:dd:95:3d:60:f7:a5:b2:b9:07:
                    23:d0:8c:61:71:9b:28:79:20:d0:68:75:97:5f:41:
                    f9:8d:3a:02:2a:62:5e:fd:fc:c7:22:a5:7d:c0:ca:
                    29:b7:6f:2d:e5:75:bc:15:20:f4:56:93:e5:fe:e8:
                    df:91:fa:c7:d8:a9:b7:a7:b9:2c:b0:d1:56:83:61:
                    e5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:0F:1A:F6:37:0C:61:5F:6D:B0:46:D8:F9:49:1E:3A:96:71:81:A3
            X509v3 Authority Key Identifier:
                keyid:D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8d:d8:ce:62:66:d3:ec:ff:2c:b5:08:57:45:24:a0:35:ee:
         30:9a:56:ce:2e:72:15:31:f3:9f:4b:b0:5d:b4:2d:e5:5c:8d:
         83:f3:e7:77:89:69:23:62:fe:86:54:f2:d2:f2:e9:b4:94:7c:
         4d:a7:41:e0:c7:0f:3e:4b:10:51:f3:ac:fc:38:15:9d:00:1a:
         10:2e:10:75:8b:90:2d:a9:95:db:bf:a1:bd:32:47:e0:1c:e3:
         70:93:c9:62:d1:e1:97:ca:af:ef:1d:01:65:0c:4d:ab:2a:a8:
         65:9b:57:8d:69:d7:55:57:21:7b:bd:ed:30:67:21:55:2b:84:
         55:9a:af:3d:14:28:c8:83:9a:86:23:66:a3:49:0d:8b:3f:79:
         44:93:20:22:99:ad:47:34:8b:ca:6d:72:9c:68:97:f7:e6:85:
         18:25:9b:35:d5:a7:41:fd:a6:81:ec:72:88:95:e0:f7:c4:ba:
         5e:45:aa:85:44:d5:ac:30:c6:4f:c4:4e:1d:41:7f:73:f7:0c:
         7d:ea:fa:b4:58:da:a8:9a:79:5e:39:68:9f:92:ee:c8:82:cd:
         28:eb:30:76:47:f9:53:13:b3:dd:53:f9:4c:52:94:f7:b3:05:
         f2:68:9f:9f:ea:1d:75:3b:e8:16:24:b2:60:15:91:60:9e:43:
         8d:a0:fc:ac
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjYyQkQxMTAvBgNVBAUTKEQyRTc4RTUyQzVEQkNCRjVFMTg0MURBQ0U1MjdBRUFB
ODk0QTlBNzYwHhcNMjUwMzI4MjMwNjQzWhcNMjUwNDA0MjMwNjQzWjAYMRYwFAYD
VQQDEw02N2U3MmI4My1jNmZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApWTNvWPEzdQOGjLDBrwtGBatcg2TfFliy269VO1xHjPmm/PUXnctuF0l7Gco
oOMpZ8ygR0/LBFdHbWwuY7wJr4X4ZAE5IzFQRE0i10PPWdErun3B/HAoqBRcnRr1
pkjvmLs9JxaLxFJ99Hugq5WJvxEZfMl/ftISl7DOrLBd4sICjpv6/+Nhw828Ou5M
T5LNdLFFBsEtT/89f/83vIRjBEXfV9TlhGuSVhTJYP4B3bzjpbDhmBlrOavdlT1g
96WyuQcj0IxhcZsoeSDQaHWXX0H5jToCKmJe/fzHIqV9wMopt28t5XW8FSD0VpPl
/ujfkfrH2Km3p7kssNFWg2HlhwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUPGvY3
DGFfbbBG2PlJHjqWcYGjMB8GA1UdIwQYMBaAFNLnjlLF28v14YQdrOUnrqqJSpp2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJCRC9EM0YxMUYwRTk5
MTMxMUVCODYwRERCM0RDNEY5QUUwMi8wdWVPVXNYYnlfWGhoQjJzNVNldXFvbEtt
blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzB1ZU9Vc1hieV9YaGhCMnM1U2V1cW9sS21uWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NjJCRC9EM0YxMUYwRTk5MTMxMUVCODYwRERCM0RDNEY5QUUwMi8wdWVPVXNYYnlf
WGhoQjJzNVNldXFvbEttblkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBGjdjOYmbT7P8stQhXRSSgNe4wmlbOLnIVMfOfS7BdtC3lXI2D8+d3
iWkjYv6GVPLS8um0lHxNp0Hgxw8+SxBR86z8OBWdABoQLhB1i5AtqZXbv6G9Mkfg
HONwk8li0eGXyq/vHQFlDE2rKqhlm1eNaddVVyF7ve0wZyFVK4RVmq89FCjIg5qG
I2ajSQ2LP3lEkyAima1HNIvKbXKcaJf35oUYJZs11adB/aaB7HKIleD3xLpeRaqF
RNWsMMZPxE4dQX9z9wx96vq0WNqomnleOWifku7Igs0o6zB2R/lTE7PdU/lMUpT3
swXyaJ+f6h11O+gWJLJgFZFgnkONoPys
-----END CERTIFICATE-----
Generated at Fri Apr 4 22:06:35 2025 by rpki-client