Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
File:                     YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft (raw, json)
Hash identifier:          9vNWYM154KocbMpkF62Ossb2bWnOpJdinpKpFNENhuY=
Subject key identifier:   30:42:85:28:6C:E3:0B:EC:54:0F:63:DD:46:ED:07:41:EF:6E:EA:45
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       05A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
Manifest number:          053E
Signing time:             Fri 28 Mar 2025 23:52:37 +0000
Manifest this update:     Fri 28 Mar 2025 23:52:36 +0000
Manifest next update:     Fri 04 Apr 2025 23:52:36 +0000
Files and hashes:         1: YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl (hash: HP6+2XY41axGXQT25NcE7J444v0at0/GsHNs3VCgyQo=)
                          2: 20564D22DB5311EEA8BB3775C4F9AE02.roa (hash: +FHx1Rcmiw2Cfk5r6pkki5E5DN80dE1EMz6qZ6ArXQ8=)
                          3: 8293F5FC179711ECB7F7A075C4F9AE02.roa (hash: azztU6jGWGkJ9XE0wv+vwlMZ1OuwZlxTMNo/JPXSCFM=)
                          4: 04545D1C9AB911ECBC6CFA20C4F9AE02.roa (hash: KiUHl6uGGniLvYgVccNgvCIPRBq7X96S1xDDUjJ+aSw=)
                          5: 283A4D20174911EC896AD61BC4F9AE02.roa (hash: FPSQ8p1kwZ3vXAQbffUHxGVHKyRBni/t9uDlhC1ac7I=)
                          6: 7FCB16B6175111EC8D2A3722C4F9AE02.roa (hash: DXFu7/3s3dZZufQfCR7FXNUXUWGkobLBbIzZTN9Mp7k=)
                          7: 3F780E2A179211ECB303FF58C4F9AE02.roa (hash: pI7ua1FostnjJb7ZIqAIfoEGZMv41AhlErmhbZ8SW+0=)
                          8: 16637998DB5311EE9F9F1F75C4F9AE02.roa (hash: zOp+pmoPEmD9FqhHLLTWspA0hasdoDJWm9XMS78WorI=)
                          9: 1B31B0E4270E11EC97471F53C4F9AE02.roa (hash: fV3NIiz/nP1VFmLUqpUHxb/qO3YbAJnR1/hn6cqYalA=)
                          10: 3A9DF21A178411EC83735974C4F9AE02.roa (hash: /5vaFU/movPiNcrsjCj3H2p31M+BSywFDXfC27bwtzs=)
                          11: 7E42E396175111EC8D2A3722C4F9AE02.roa (hash: Rtj2YZUzcKfkgTDcvh/sESq8bL/Thyrlj4Jg24VeLAs=)
                          12: DB208FD4175911EC87322F85C4F9AE02.roa (hash: xyrw8EmHYaazvYNSzHgYLMsIR2DQgj7hYHdBqp8rGQY=)
                          13: DA504F0E175911EC87322F85C4F9AE02.roa (hash: YomnTGjnYQfGm6lXnJ1sPxZZ35epRd9BPyzWwaToY+I=)
                          14: D97BFEC0175911EC87322F85C4F9AE02.roa (hash: zujVYZo1Gy2knnWLbno31U8SLXqyX16vRQYdNEeh8/g=)
                          15: 3B398B8A178411EC83735974C4F9AE02.roa (hash: SksUcxMguSSsYgsTOlV2nGlosz5GcrNGDJ2VSXMrlE0=)
                          16: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (hash: B82Un+DU6B7NyuhVj1V9v///1zPVJ3rXRY6EcEaq0ew=)
                          17: 7DAE1400175111EC8D2A3722C4F9AE02.roa (hash: P9HR6alaLKKcvAvinbQN/9aMjtdjm5ZAoDIUPrfljRg=)
                          18: 3BE907D6178411EC83735974C4F9AE02.roa (hash: ceitiXpUr0OmO04261kMJXcBcKDZSuQ6TyY/na8WY3c=)
                          19: C74D18CE0E7811EF85000B7BC4F9AE02.roa (hash: QcEFCbKzSrsMklkI1eWiqnxmw/ZSSPLydpwjTEuoR+k=)
                          20: C6B686020E7811EF85000B7BC4F9AE02.roa (hash: MQyExLb7Mr7D0TumhjujEz9GIqRyF/YS1SDy3bPilrg=)
                          21: 27A1A5A2174911EC896AD61BC4F9AE02.roa (hash: PT9TyyH2chY28D7xFpiGeKe73ZXXzfI6IzydINCCygw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 04 Apr 2025 23:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1448 (0x5a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1
        Validity
            Not Before: Mar 28 23:52:36 2025 GMT
            Not After : Apr  4 23:52:36 2025 GMT
        Subject: CN=67e73645-f8fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:26:35:74:ad:6f:e1:8d:4c:aa:dc:77:33:
                    57:aa:a4:8b:51:88:30:83:4f:f5:e7:42:7d:8b:c4:
                    7d:bf:93:c9:cf:f4:a1:17:0e:9f:f6:7e:3f:14:b4:
                    6b:3a:36:bb:f1:f0:a6:05:67:e3:8f:d2:8c:d9:02:
                    f0:8a:3a:86:32:0c:c6:30:ba:9e:6b:bc:46:3a:f9:
                    a2:d4:d8:f8:65:b1:bd:a0:8c:ef:ba:15:ff:0b:6f:
                    36:05:42:52:38:bf:c4:e8:df:a0:eb:15:3c:a9:5d:
                    a6:3a:24:19:28:d9:db:03:1c:98:41:79:fc:68:cc:
                    61:1a:71:1d:70:4d:5c:8c:9b:71:0a:70:d7:ac:39:
                    e8:de:d0:c0:54:8c:63:b0:c8:81:81:1f:c1:fa:37:
                    f7:9f:87:03:4d:2b:9c:a7:7e:71:04:24:02:10:cd:
                    c2:fb:58:6e:d7:fd:ab:15:0a:84:e5:88:5d:ad:2a:
                    bb:70:b4:82:e5:df:63:9b:ac:b4:c0:ee:ce:6e:4e:
                    e0:4a:74:39:9e:e0:ab:f7:f4:e4:b5:ca:6c:14:7a:
                    14:cc:88:bb:e1:44:2a:41:a8:6d:6a:42:c7:60:fe:
                    0d:5b:26:ff:47:6f:16:58:f8:58:c2:e6:67:1c:83:
                    59:0c:cd:45:e5:1c:cf:69:c5:af:a0:90:13:5c:c7:
                    f9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:42:85:28:6C:E3:0B:EC:54:0F:63:DD:46:ED:07:41:EF:6E:EA:45
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d7:e9:02:2c:7d:8b:fa:21:67:10:15:fe:55:90:dd:e0:c6:
         41:b0:2f:aa:cc:18:c4:30:29:c7:d7:19:08:89:f3:fb:16:23:
         89:54:a2:01:c7:e6:d0:f8:07:99:56:bd:91:7e:03:c0:bf:51:
         c2:26:2c:59:88:1c:57:a9:b9:c2:5a:f6:7d:c6:8b:52:c3:77:
         6e:31:6b:a4:91:d5:36:09:86:4a:a3:ad:e9:15:dd:dd:36:01:
         fa:22:0f:6e:9b:53:21:00:c2:16:6c:08:20:b5:f6:e8:6b:0c:
         66:b4:dd:0b:df:88:a1:72:75:97:e0:b7:3d:22:44:85:d5:2d:
         7f:f1:ca:cd:b7:1f:f9:a9:aa:45:0c:87:0e:47:9a:d8:9e:e9:
         0a:1b:8f:dd:62:a4:c3:a0:b0:c5:62:a4:5a:d3:de:10:9b:06:
         57:7b:be:16:58:e7:70:99:0d:f5:84:7e:52:0b:d5:0b:69:11:
         12:42:87:51:1f:53:f5:ed:6c:1d:31:46:04:8f:cf:0b:74:8a:
         78:dd:04:52:4c:d2:6b:93:81:b8:15:e2:9c:57:ae:be:dd:a9:
         50:1b:de:bf:c2:2d:e1:0b:1e:72:d3:42:b0:69:25:95:b1:d1:
         84:e1:a5:07:af:ad:c6:f4:a8:55:8f:0f:fe:84:96:38:9b:47:
         e6:c6:b7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:31:43 2025 by rpki-client