Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
File:                     6zifszmzkI1UmmU5DJLhX533xUs.mft (raw, json)
Hash identifier:          ouia6cEOkJzkoHs44GpBOOe9PqueRnoarPC2L0aEu2Q=
Subject key identifier:   36:2F:26:29:73:5A:07:96:B0:B6:A0:24:C2:E0:B7:8E:25:C3:A7:C6
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3943
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
Manifest number:          372F
Signing time:             Sun 20 Jul 2025 14:22:14 +0000
Manifest this update:     Sun 20 Jul 2025 14:22:13 +0000
Manifest next update:     Sun 27 Jul 2025 14:22:13 +0000
Files and hashes:         1: 6zifszmzkI1UmmU5DJLhX533xUs.crl (hash: BSNOJzD1fgQqe5fxy7H5/clrRYlHVEKEbWrmRaKxDuY=)
                          2: 5E035B480E8C11F0AD0C273AC4F9AE02.roa (hash: 7Qy9qXoaY9x4VuN4EZ0lO0nUdpYSzQD6Nyrn1uaVEq8=)
                          3: FAF6D732CD3811EDBD37B674C4F9AE02.roa (hash: z9HaUp/F2Eb09B4FeQi8go7G2DS9o12Zg3mvwv3IbtM=)
                          4: FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa (hash: ChYD+dNYyCInKmhyHsi0B1wkTq6FHjT+KDylhmMIQaU=)
                          5: FFB4329A5B9011F0A3ECA351C4F9AE02.roa (hash: ngLPWJnAOp37+VU9f3DQJVToWiTF9NgeRaLixJCdqgM=)
                          6: 8470E428A2E711EFA6A5B91AC4F9AE02.roa (hash: Fum9wynbW46bBWpLsLIRjpqgESZ0wYgIRM9aD5ujlCc=)
                          7: 2C7A8F5C8CE511EF96182462C4F9AE02.roa (hash: C8anzo3wIrPEk1GE8PbP/ejOtinKtiNErIk39oiNvt0=)
                          8: 4F698B525F5011EFA66ADA2CC4F9AE02.roa (hash: 2UAmCqv65l0EyrJ8vogZ6XvweSD9Dk8E2FEP81jdWxE=)
                          9: 6D84D2D05DE911EF84282B80C4F9AE02.roa (hash: evSbADlKi6Aoc1pxAc2NrEs9X2WBgu7ILOt35lu9gm4=)
                          10: FEDF0BA43E5111EF86CB780AC4F9AE02.roa (hash: Xwu2cFcPAEo+elSKxorX+Sf443v4LqtlzkSNNtTquMc=)
                          11: 27E277D891AA11EF9DBFF265C4F9AE02.roa (hash: mg1teoBc7Boh3ZoLd+5gvaGJaFd/PWcUnxH/SupEHww=)
                          12: 97DE828061E211F0A89DA027C4F9AE02.roa (hash: Juq2eQ9exLzIQp89n5cOpFT366kvmb15r7y61/lcHqY=)
                          13: 3BCB61DA01D411EFB260D83DC4F9AE02.roa (hash: MdnVi1OIFkoo0dm/yCy+3NB6G2QdHBGCAwYC8bNp0Zg=)
                          14: 02414522C98A11EBAF4F9280C4F9AE02.roa (hash: XeOavvZiR3sFlQ/5myU2/vsanQb5X0EfvxEaH+f2fdc=)
                          15: 4E211A5C408A11EE91A09746C4F9AE02.roa (hash: kfvn38ixprZNvoP8sdkWRE4Y87QEhE7Cfyn7D4FPsf4=)
                          16: 862D18003A1011EDB5225E73C4F9AE02.roa (hash: DcHlNA8XpoMoa8j+kjrzppHmEvQSR+3K0O1rUE7HneA=)
                          17: CDCC902E170811EFB6DE866CC4F9AE02.roa (hash: Ffh0Llbu+aifsZ/PhUzKVAABbwr/NW6qzAkEIXJ6/7A=)
                          18: EEF771D4FED311EF8B263515C4F9AE02.roa (hash: 09tGhGYy1EBd0MGX/GluMy6ke+NPb5M4XAtBFpqIk9Y=)
                          19: A59A5B6641F611ECB1465157C4F9AE02.roa (hash: y/ZcKXvRId0MU2jWP2qiUlc9klsFtiDYeSjklRbVi0k=)
                          20: BF6649687AC811EDAE44E656C4F9AE02.roa (hash: LcpUVsxOJi3t+CPRAWzqjfdnmFogw8cF+SJQm5U5O4I=)
                          21: 76FA132A8B0511EC993E2B20C4F9AE02.roa (hash: qUMKMRxZ99VhDadcacr3UtNm3iVgxflvwhxpIHuV3Uc=)
                          22: 000724C6F7D511EE8C03CA65C4F9AE02.roa (hash: R3NOwHRvbG4Sj9UJHqKDj+q85wrGI2+UCl4SulBfUw8=)
                          23: 3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa (hash: YitENFm9BCdA92I41DJxpRQ7XMmhtSEQKT0EzpScV8g=)
                          24: B6D40A18822F11EFA848053BC4F9AE02.roa (hash: vFBJDYKINsG7qNbm5o+Za+m+zPuBlKRNX+X12lKjHMw=)
                          25: 52850542A60811EF91FB1113C4F9AE02.roa (hash: PTcIFcaU0NRhcteS2cZeHZTlzMmOlPQy/ngVgyWZQFE=)
                          26: 2622AA12010511EE8C750D39C4F9AE02.roa (hash: VhA+Hs+q7s+bBv48I0pk72FnDH5rcT3DytwZJAE63fk=)
                          27: 9D8E6D02C2A511EBB2025B36C4F9AE02.roa (hash: PlEnsEP21PJC16O7WpqiMN6BCHLW/59u/YvhE9nkz+Y=)
                          28: 26C39BB6010511EE8C750D39C4F9AE02.roa (hash: qHE4CVNPl2hfbb1z0WR6L0xNSdCigOSFLS7QO+iIYEU=)
                          29: CAD5365E090C11EBA5412411C4F9AE02.roa (hash: DzJjX26F/6q2iCnJ1sWD2xCr+N10vleN++lLSBNm8a0=)
                          30: 4D4EE370408A11EE91A09746C4F9AE02.roa (hash: /SphmDOXIGkmk4Dx70JMdSpOBjmQfa6XPTmojFUioL8=)
                          31: D34236BE7D0511EEB381D02CC4F9AE02.roa (hash: rowBvIqawxIBDAjrerBCpZz930ir2eOmQUO5U3LzEmQ=)
                          32: 46186F4EC6E711EDA2FCBA34C4F9AE02.roa (hash: Cen6H7O/9BMGQfEMnjJkwMjjekXxF8vODlzBKhy+TQU=)
                          33: E614D0A2CD5011EF863CDE64C4F9AE02.roa (hash: l8Dw0ddBvCAgKUHsutMECKNj1UHJE2k/V9PmgyyUJds=)
                          34: 0BD5724C3A3211EDA1B7D863C4F9AE02.roa (hash: GvJakzzk6/d7G+Vxt5rr4xnMS4OHrqYd4CORSpkPBhM=)
                          35: 813979825BB011F0AC78A45BC4F9AE02.roa (hash: y253tv6qx5tZsbZ2c5EC5vtkvkECQA5aV06Pji+pbOE=)
                          36: 5E775F6644CE11F09A370919C4F9AE02.roa (hash: CV0j95RqvFk5vdn0PU1qSmljoaTpS4bQLUN+bT3PTXI=)
                          37: 83F06CF2DF1211EDB91D5C61C4F9AE02.roa (hash: rRWG0qYGlcMnQzzd2jOwyjp0JRek+hed3twRZmd9Rfg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 14:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14659 (0x3943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Jul 20 14:22:13 2025 GMT
            Not After : Jul 27 14:22:13 2025 GMT
        Subject: CN=687cfb96-e966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a8:05:b3:45:09:b3:84:c2:5f:1d:44:b3:c0:
                    58:d4:98:e0:7f:2d:3b:b0:18:91:a1:26:e2:dd:11:
                    2c:ee:60:4c:cb:41:ab:18:6c:bd:fb:8c:ae:ae:c7:
                    10:bc:d0:5c:e9:4b:a8:8d:b5:7a:9c:e1:5f:d1:1b:
                    cf:87:82:ff:42:80:a9:10:f9:49:5c:14:77:9d:aa:
                    e5:66:8e:33:0b:9c:e0:90:65:65:ed:56:1e:29:8d:
                    3c:14:65:cb:f0:6e:7f:4f:7c:c6:88:07:3e:a8:55:
                    0e:fa:bd:06:00:e4:28:6f:54:0a:e7:f3:24:20:17:
                    d5:29:21:0b:a9:8b:bf:5b:69:ac:77:f7:10:63:bb:
                    c1:3b:f8:27:dd:6d:1f:ee:02:bd:0a:30:4d:d0:bd:
                    3a:78:0b:a4:d5:87:53:8d:97:04:c0:df:b9:c6:ad:
                    df:9f:7a:08:74:ff:32:28:db:bb:86:ca:d5:11:13:
                    bd:33:76:5b:5d:82:a8:db:36:eb:b7:be:39:0c:29:
                    32:e9:4a:e4:cb:f9:32:bc:d1:f3:ad:44:77:ac:07:
                    a4:ed:df:5a:6e:d2:a9:08:f8:88:01:a6:12:70:86:
                    ef:4c:12:43:18:ff:9b:a9:0a:c1:58:12:57:ab:79:
                    64:cd:4c:5a:23:6e:ca:57:55:c7:9b:74:97:56:8b:
                    e0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2F:26:29:73:5A:07:96:B0:B6:A0:24:C2:E0:B7:8E:25:C3:A7:C6
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:c9:a5:34:24:b0:bd:1e:fa:5f:97:0b:e2:37:0a:b1:93:1f:
         a3:7b:e3:f7:ee:f8:cf:f4:6c:c8:c2:48:b8:61:5d:e0:d8:6e:
         a8:a0:fd:1b:52:e1:ef:df:ae:bb:41:6f:9b:15:e6:6c:f7:7a:
         cc:ec:78:57:61:ed:07:c8:cf:88:4a:7b:fd:f0:da:f4:8c:64:
         36:db:7b:93:87:df:6e:44:0a:9e:a5:0e:89:17:9d:9f:cf:54:
         97:9d:f0:cb:13:af:f7:87:f0:80:c2:3c:26:44:d8:6a:7e:70:
         af:d0:31:54:dc:16:1d:a2:e2:09:4f:f5:0d:e0:35:f6:73:67:
         a0:0b:03:a1:c4:3d:d0:60:54:49:90:7e:a8:bf:87:28:ca:92:
         e3:18:74:38:3e:77:68:a3:3d:ae:2a:77:75:73:a2:fc:bc:10:
         5a:34:df:68:9f:00:3d:b9:79:9b:3a:37:39:b1:9c:7e:a7:0c:
         02:c0:5a:20:47:19:d1:07:be:72:07:6b:b0:b0:20:a9:b5:d6:
         2d:99:77:34:6c:79:43:5f:50:b0:20:4d:9f:26:c3:b2:6a:14:
         63:33:b3:b9:5a:63:ad:81:86:0e:aa:81:57:ca:0a:10:73:1a:
         14:8b:ab:90:23:af:a0:96:06:e9:39:a1:62:64:60:ab:1f:0e:
         4e:4b:f2:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 05:09:26 2025 by rpki-client