Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
File:                     rVa2cYepi6MUCEQFeXvZZW6KyLo.mft (raw, json)
Hash identifier:          AmTWL0IXQnfoBnWNyJoNZxEWT52pnUcUtdMhSXWa18s=
Subject key identifier:   23:D1:96:F6:FC:7A:7F:0E:BE:8F:7B:9B:96:0C:52:93:2D:27:AB:EB
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1ECF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
Manifest number:          1C6F
Signing time:             Tue 08 Apr 2025 16:19:36 +0000
Manifest this update:     Tue 08 Apr 2025 16:19:36 +0000
Manifest next update:     Tue 15 Apr 2025 16:19:36 +0000
Files and hashes:         1: rVa2cYepi6MUCEQFeXvZZW6KyLo.crl (hash: 60qwz8HTcxLYHTmVJS+QvQBNbN7D710QziFIEmHk7Wc=)
                          2: B07E339A257C11E79EE15E3CC4F9AE02.roa (hash: S1wTVe7U18yzyAxSugv98o5psApflxEUWoUWD+4i71s=)
                          3: D7BBF774498911EF9ECB9967C4F9AE02.roa (hash: N/YQwkyrxbXP+sBQ1DsByIHxBpcto8NTgvmeKLdiGzw=)
                          4: D3CE622872D911E9B41E5B11C4F9AE02.roa (hash: 6rI+S51uZYy1BuACuwS5kWXoyg6lf5nMEpRvaBuNroY=)
                          5: 4DFBA2EA066011EEA5F59657C4F9AE02.roa (hash: oCS0QFpM9WGeDXVhJLQGO+CnXgJIvqSKqwsoVw4j+c4=)
                          6: BCBD866404D311E9A6452047C4F9AE02.roa (hash: 6U+FYH3uhC5XKNsaJEb/mfz8usRQjC2dGhhGqPAEIkA=)
                          7: 6136E33A07B511EBBBA2521CC4F9AE02.roa (hash: 8Q+OjzZN/ayMTw7B4asPpBGcZxQq5JGAHygNoU7Le9M=)
                          8: 792BA6283AAC11EF93D3E072C4F9AE02.roa (hash: WX5GBpvWxy43Kfv1yhOKm7/zgRf+4wjOBk2NgjKVRX4=)
                          9: 4BB76870066011EEA5F59657C4F9AE02.roa (hash: BlkP1LYtm3vROhN/faPTD29Zg2+t0xJ6pwNyD9TEZQg=)
                          10: 5B2E8848135111EF9CB17D1DC4F9AE02.roa (hash: gQ5UWx/GomBxN8QjKSCZ9R7140wvnNTsC1Plstdv+8A=)
                          11: 83A8C51804CF11E9BA917C34C4F9AE02.roa (hash: zTeGinlhgBvRCY8VLqWEaBOMi/2mlZzeV05y5KjYq4g=)
                          12: E32743EEBCE711EFA920D83FC4F9AE02.roa (hash: 3F515x6t2ig3N3bKzoVvW6jLDlcDmlvgwRLu3Mtpu64=)
                          13: 4F2C2040066011EEA5F59657C4F9AE02.roa (hash: lhjk5dsFqap680wNoXTnx9Dur4BBQliXjVLuUUi2pb4=)
                          14: B80AFEB204D311E9A6452047C4F9AE02.roa (hash: lcZBJc0SseZ2msItGbn45fGKCw+QLyWMQGHYhse6IS0=)
                          15: 79FAE7BE5BAC11EF95A95882C4F9AE02.roa (hash: dtWxz4J2XjmayBFzETfnk0M/4ccp6teJLls14KkfCHA=)
                          16: 1B1DEA4A04D511E98BFF354BC4F9AE02.roa (hash: TkNn+MTjqvGvnFe4zWqgI2u8ZNVhGw30Qsbe/rkSamA=)
                          17: 0B989CC8BC6711EAA9856B6AC4F9AE02.roa (hash: 5JWbsLN/dW9xbqfNvNx/Ipznac7jWKsUQzc216E28SI=)
                          18: CBAFF664136B11EFB53F2683C4F9AE02.roa (hash: 7C3EpcIViwZAY4nCzCQCDuQQXNlANXEp+HrUlqwDI+0=)
                          19: 52ABDAEA039D11EF8E96E084C4F9AE02.roa (hash: MzEZo/e2yCoqtrn7oJL68mf+EWYO9suE1RsdjdKFJQ8=)
                          20: ECE5D100BBA411EAB345A780C4F9AE02.roa (hash: bigKPvPIUDwHxONb1Gr8dDYsiNQ0PtvvH9Y2uewhgDg=)
                          21: 52E1349E04D211E9BA47303FC4F9AE02.roa (hash: j5lDrxfBeX2si0djPSCGpgdQ4uiqw+hqr/e7niE8XVQ=)
                          22: 003D986AA88011EFBC843D5CC4F9AE02.roa (hash: w9X0jPubYAYF+2gtS/db1FcAQF5AsCl9iOwbjyacZiw=)
                          23: B9FBA9CE04D311E9A6452047C4F9AE02.roa (hash: rlEGi3xjhJfP2u/ZUHFiWIlVgFz9xogRY/BfK8tfhx4=)
                          24: 4CD2AB2A066011EEA5F59657C4F9AE02.roa (hash: 1/F96Do1ZWp86GNV9DFuCHRPL+Y77dWF42AM+XS1zM0=)
                          25: B33C5F9C05FB11EE9D130335C4F9AE02.roa (hash: fNI06QusL/HQ5dYlBMs9UDIEqjOTE4N+DiowzCmZuiI=)
                          26: E1E1C946E01611ED8385DA62C4F9AE02.roa (hash: o0Ry10/Dwg/gxho42K86zqrhGF78WdELGBJAljFgnsM=)
                          27: 6D4A0AECAAA711EE9614335BC4F9AE02.roa (hash: 7oIA+//D4UsvXgvWc6bf0x5ckX2V4W6yfulU8ujZhtA=)
                          28: C3EFE564C2A311EABB1BA61FC4F9AE02.roa (hash: FoZW+AGU8CXyeV1RdM6UrgzlFyF1dMho749ia7IWur8=)
                          29: B228FE46257C11E79EE15E3CC4F9AE02.roa (hash: gPZrzSM2qFJiDgKYh5xaDFhnq8qXun0G5u3g/ssPKjA=)
                          30: 5233C98A04D211E9BA47303FC4F9AE02.roa (hash: V64V572mDFjUWVtGLtAsBdOHJ3B14FfzspBJ/sNnWww=)
                          31: 84DBC93004CF11E9BA917C34C4F9AE02.roa (hash: zyMk6AWyE6lO87mAudHQsc/HNsX71NVjiloWRnQYhfA=)
                          32: A012C5E0AF7911EA869B4722C4F9AE02.roa (hash: EnrdJ6BB4UUlPJCPrDriY5JkZ6kz6OGJ2NtAj8g8718=)
                          33: F3309B3004D011E994985639C4F9AE02.roa (hash: NSCmZyO6Wz7VpbKV03OOhYeekIbonLkpYtPFZfybQtg=)
                          34: D931AD927E0F11EE97A4761DC4F9AE02.roa (hash: 6fvtI9e9N6u9RrN1YOUrj1fxPuHxvPhgch1yKfydxFo=)
                          35: 36AA48F2D55E11EAB56B562AC4F9AE02.roa (hash: g9KNetV5gZIclIa3Tn5Z//Qo3scBB3j7I2stbX5nfnI=)
                          36: 8278D8E004CF11E9BA917C34C4F9AE02.roa (hash: aizfB1ipwQHn2pfmgojnCTrjx4TiIlWZ3oTA7ibR03Q=)
                          37: F5CC48A804D011E994985639C4F9AE02.roa (hash: VS0VHmkDeDlKunxOHZGj08THbVfcWifqq1DkBVbt3SM=)
                          38: 203A920E9B5511EF93BA272BC4F9AE02.roa (hash: 2cMkxAulRUt+RPZWIL+F0mv8QdjA2rBZuvpPO3wvRlQ=)
                          39: D36286F2D55C11EAA224E026C4F9AE02.roa (hash: tTA+Jj1VE8Mirfwxda9PRkkRRhfGQ+BLffao2HDxah4=)
                          40: 50550748066011EEA5F59657C4F9AE02.roa (hash: lTv1K6i1/5+D8bjoEZFgJKtEtbQMReGPUUpdBqUUWmI=)
                          41: 09E2992EC11711EA98A6A253C4F9AE02.roa (hash: yfr/pkuZjQYrKaaSgTMh31gFUmAyCI82/pd9IQUIs3M=)
                          42: BD58F50404D311E9A6452047C4F9AE02.roa (hash: TWEksEuTvHoK1jEg5swQTgTY9Ej5RxanBDxFGSVO0Rk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 16:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7887 (0x1ecf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4
        Validity
            Not Before: Apr  8 16:19:36 2025 GMT
            Not After : Apr 15 16:19:36 2025 GMT
        Subject: CN=67f54c98-c01b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:e8:79:db:c9:87:e1:06:06:9e:cb:2e:25:
                    38:14:79:e8:e6:c2:79:89:28:e4:cb:5f:da:79:56:
                    7d:00:56:d0:24:b3:62:54:77:46:21:79:b2:60:65:
                    25:7f:22:0e:f0:c8:d9:ae:e4:7c:24:13:71:91:03:
                    d6:86:fd:c1:fa:33:22:b4:64:fa:a7:2c:1f:6b:86:
                    42:58:18:be:16:7f:f4:0e:3a:13:b3:3f:4b:3b:69:
                    d3:23:cd:ac:24:9d:3d:fc:4b:fe:be:e7:f9:f4:db:
                    be:ed:40:5a:19:fb:30:b2:41:66:79:36:02:41:35:
                    2b:5d:cf:8c:84:6c:12:3e:08:f3:35:cb:0f:b6:d9:
                    ef:22:21:4f:a8:a4:1a:29:1c:71:1f:12:5b:2f:9b:
                    51:9f:06:4a:c4:bc:c3:01:f6:c7:f2:7a:32:8b:f7:
                    8d:d4:c0:cc:8a:23:b5:ac:ce:70:5e:f4:7b:b6:d9:
                    1e:e0:a7:59:66:a4:6b:48:ae:5a:0c:51:f0:67:bb:
                    c9:e7:5a:fe:a5:65:a3:48:02:dd:23:94:8a:31:36:
                    f8:c3:5a:5c:50:81:53:e6:58:5f:88:f7:a1:a2:3d:
                    e0:d3:74:63:99:27:ee:90:b8:ea:70:fa:ea:f3:f2:
                    2f:d1:ca:42:09:88:4d:d9:e7:ff:fc:51:0a:dc:d1:
                    4a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D1:96:F6:FC:7A:7F:0E:BE:8F:7B:9B:96:0C:52:93:2D:27:AB:EB
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:d2:4b:3d:c9:40:27:46:4c:32:98:80:7b:02:14:b8:cf:
         e5:33:1f:94:34:d7:df:11:46:6b:4d:71:44:88:77:e5:8e:0f:
         f5:aa:e1:74:d6:a8:ed:0f:86:96:2b:61:a3:ca:aa:ff:f7:a8:
         0b:42:63:40:21:8e:a5:57:07:52:af:65:26:46:24:55:54:b3:
         d9:21:9a:43:63:5c:40:07:66:f1:d9:1b:2e:8a:12:5f:88:0c:
         4f:66:04:68:ef:1c:3d:f7:93:9e:8d:f0:74:e5:40:78:7e:4e:
         c8:d8:47:bd:88:57:c0:8a:48:8c:12:60:8c:e1:4f:df:a5:0f:
         12:18:73:25:8d:82:db:2a:a7:23:18:4c:a8:1e:75:75:73:e2:
         61:bf:e5:2c:5a:ef:24:6d:95:fe:cd:e6:b6:96:c3:bb:33:7d:
         b2:f5:96:9b:11:16:28:db:7c:8a:cf:96:15:c2:67:80:dc:ca:
         67:dc:b3:49:b4:af:ef:57:5c:57:57:c8:f5:8c:73:db:da:95:
         ae:39:87:ae:9f:11:a5:b5:cc:c1:39:61:b2:66:e7:77:91:89:
         cc:9d:27:c9:8d:88:e0:29:2c:ba:cb:ff:3d:89:da:74:d2:71:
         ed:9f:e5:0b:30:6c:72:b7:4c:62:40:b2:e9:ef:0c:4a:2f:58:
         54:cd:03:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:39:04 2025 by rpki-client