Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
File:                     Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft (raw, json)
Hash identifier:          Uix4m6mwieWcH5g5GoZC4YHglWMxiBEyOisJVfDZtVE=
Subject key identifier:   F3:95:DE:C1:CB:D4:39:1F:07:61:BB:E2:F5:47:CE:19:21:D0:C0:43
Authority key identifier: 4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21
Certificate issuer:       /CN=A9146514/serialNumber=4A4D7F58EFBD48B8636DB6A0BF7C2DE50F043621
Certificate serial:       C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
Manifest number:          C3
Signing time:             Wed 09 Apr 2025 04:42:50 +0000
Manifest this update:     Wed 09 Apr 2025 04:42:49 +0000
Manifest next update:     Wed 16 Apr 2025 04:42:49 +0000
Files and hashes:         1: Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl (hash: AcQlhpahFXKjzitUfFmXT09p+ufWx/14pc817NQ2xEA=)
                          2: 111B4450EBC211EEB58D4343C4F9AE02.roa (hash: PfS7sj8JuzbZWvFSduxB9myZEDnDdag+xb2aWz/6R/s=)
                          3: 8C73DD2414F711F088D0424FC4F9AE02.roa (hash: N79cTf02LFfn72p1E/Pdk3bdjiKVq2hrPT4kWU8lFBY=)
                          4: 1090CE74EBC211EEB58D4343C4F9AE02.roa (hash: pnsMEvt+kVRF1R9JPvM+r1kNzZ+Ues8Fgk9/ddl8t/c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl
                          rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 04:42:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146514
        Validity
            Not Before: Apr  9 04:42:49 2025 GMT
            Not After : Apr 16 04:42:49 2025 GMT
        Subject: CN=67f5faca-d6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:50:2d:c0:c1:c8:ba:ce:9b:9a:6e:8b:71:9e:
                    a1:91:62:5a:e1:76:b9:a3:89:b2:2e:d4:d2:21:84:
                    0e:35:74:22:98:f4:87:22:02:58:1d:0e:70:46:2e:
                    9a:c6:f9:95:aa:ee:c8:99:49:b2:22:a4:ac:c1:b2:
                    d6:43:66:83:95:17:a8:0b:a4:5a:55:e4:fc:7b:01:
                    6b:6b:ca:b9:e3:53:52:39:43:4c:76:24:fe:bf:3c:
                    09:b2:f9:53:d0:30:4a:9a:b6:fd:fd:36:82:d4:8c:
                    83:f2:21:35:0e:6f:10:a5:23:04:58:bb:b6:a0:76:
                    41:f6:ef:79:23:5d:6b:02:9c:fb:7a:91:ff:bc:e7:
                    e6:a8:5c:e0:56:dd:36:10:09:71:32:b0:78:7f:e5:
                    54:df:24:8d:2e:e1:66:48:48:c2:2c:c6:fb:20:7a:
                    5f:aa:ab:ff:f8:14:77:92:d1:05:12:c8:cd:bd:23:
                    87:58:91:a6:de:d1:a7:99:bd:cc:6d:a4:65:f7:36:
                    f8:e6:52:70:6c:33:01:ef:ca:21:30:90:c4:c6:4b:
                    52:ed:3d:7a:90:79:28:bb:8e:fc:bf:2e:15:e1:61:
                    b2:cf:33:e3:af:cf:cf:8e:b2:26:de:ca:49:17:f8:
                    1c:98:7d:5d:a9:28:4f:40:5f:69:6c:4b:1a:dc:42:
                    19:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:95:DE:C1:CB:D4:39:1F:07:61:BB:E2:F5:47:CE:19:21:D0:C0:43
            X509v3 Authority Key Identifier:
                keyid:4A:4D:7F:58:EF:BD:48:B8:63:6D:B6:A0:BF:7C:2D:E5:0F:04:36:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146514/B773A164EBC011EE9BB3F43FC4F9AE02/Sk1_WO-9SLhjbbagv3wt5Q8ENiE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:19:25:90:97:e6:7a:16:4d:cb:7e:06:b9:d0:c4:01:88:7f:
         26:19:f0:71:13:aa:06:bb:c2:bf:ea:5e:56:4f:d1:f4:41:87:
         ff:53:4c:c8:a4:d7:79:ed:dc:cf:3a:56:26:21:a4:75:b6:74:
         30:67:ce:1c:82:89:57:46:9f:59:4f:ee:b5:2a:2a:9c:7a:6f:
         9e:41:3e:83:4a:04:b5:a0:89:ff:f1:f8:62:26:b5:4f:8e:5f:
         ce:41:5b:39:bd:1f:ec:e7:d0:ff:a4:c2:91:ff:7c:e1:21:51:
         87:16:cd:cd:12:8f:c4:fd:6f:56:f8:8e:da:1f:af:3e:16:34:
         19:fd:43:98:e4:a8:df:ff:8c:72:78:ae:80:99:7e:5b:d8:63:
         95:11:39:ce:2a:cb:c9:27:da:1a:22:83:da:ed:e1:9a:c2:b8:
         ad:e1:50:46:44:20:96:01:0b:b6:6d:6e:63:af:64:d3:e8:68:
         fa:08:b0:b8:2a:6a:13:0a:bc:9b:20:27:d5:45:2d:aa:9e:cb:
         e2:77:30:b9:bd:02:c5:e6:52:cc:75:cd:0d:df:cf:b4:f0:2e:
         45:17:34:e6:30:1e:2b:a0:5d:64:e3:12:29:33:0a:44:b1:49:
         35:9c:30:98:18:fa:dd:bf:b6:5a:43:2d:29:e2:bd:de:a6:0f:
         71:37:eb:ee
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAMgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDY1MTQxMTAvBgNVBAUTKDRBNEQ3RjU4RUZCRDQ4Qjg2MzZEQjZBMEJGN0MyREU1
MEYwNDM2MjEwHhcNMjUwNDA5MDQ0MjQ5WhcNMjUwNDE2MDQ0MjQ5WjAYMRYwFAYD
VQQDEw02N2Y1ZmFjYS1kNmIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAslAtwMHIus6bmm6LcZ6hkWJa4Xa5o4myLtTSIYQONXQimPSHIgJYHQ5wRi6a
xvmVqu7ImUmyIqSswbLWQ2aDlReoC6RaVeT8ewFra8q541NSOUNMdiT+vzwJsvlT
0DBKmrb9/TaC1IyD8iE1Dm8QpSMEWLu2oHZB9u95I11rApz7epH/vOfmqFzgVt02
EAlxMrB4f+VU3ySNLuFmSEjCLMb7IHpfqqv/+BR3ktEFEsjNvSOHWJGm3tGnmb3M
baRl9zb45lJwbDMB78ohMJDExktS7T16kHkou478vy4V4WGyzzPjr8/PjrIm3spJ
F/gcmH1dqShPQF9pbEsa3EIZ1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPOV3sHL
1DkfB2G74vVHzhkh0MBDMB8GA1UdIwQYMBaAFEpNf1jvvUi4Y222oL98LeUPBDYh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjUxNC9CNzczQTE2NEVC
QzAxMUVFOUJCM0Y0M0ZDNEY5QUUwMi9TazFfV08tOVNMaGpiYmFndjN3dDVROEVO
aUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NrMV9XTy05U0xoamJiYWd2M3d0NVE4RU5pRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NjUxNC9CNzczQTE2NEVCQzAxMUVFOUJCM0Y0M0ZDNEY5QUUwMi9TazFfV08tOVNM
aGpiYmFndjN3dDVROEVOaUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBBGSWQl+Z6Fk3Lfga50MQBiH8mGfBxE6oGu8K/6l5WT9H0QYf/U0zI
pNd57dzPOlYmIaR1tnQwZ84cgolXRp9ZT+61Kiqcem+eQT6DSgS1oIn/8fhiJrVP
jl/OQVs5vR/s59D/pMKR/3zhIVGHFs3NEo/E/W9W+I7aH68+FjQZ/UOY5Kjf/4xy
eK6AmX5b2GOVETnOKsvJJ9oaIoPa7eGawrit4VBGRCCWAQu2bW5jr2TT6Gj6CLC4
KmoTCrybICfVRS2qnsvidzC5vQLF5lLMdc0N38+08C5FFzTmMB4roF1k4xIpMwpE
sUk1nDCYGPrdv7ZaQy0p4r3epg9xN+vu
-----END CERTIFICATE-----
Generated at Thu Apr 10 17:01:19 2025 by rpki-client