Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
File:                     8YnN8PufnGkSkaFGaBnRPE6MlgA.mft (raw, json)
Hash identifier:          Hoi57OnWuT6rNC+NubFryu+NuZF35QvZuRpOdei9RX8=
Subject key identifier:   03:3F:FE:AF:1B:10:96:DA:76:92:A6:59:3F:ED:24:4C:6F:7B:7C:D4
Authority key identifier: F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00
Certificate issuer:       /CN=A916D750/serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600
Certificate serial:       0735
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
Manifest number:          072F
Signing time:             Tue 22 Apr 2025 21:40:50 +0000
Manifest this update:     Tue 22 Apr 2025 21:40:50 +0000
Manifest next update:     Tue 29 Apr 2025 21:40:50 +0000
Files and hashes:         1: 8YnN8PufnGkSkaFGaBnRPE6MlgA.crl (hash: 1FnXfFg7BeMFttxUMhGCbz3+8JaSjEdNHfrhXHWOsTE=)
                          2: 1687F94A2A1B11EB97B90C81C4F9AE02.roa (hash: g3w/XsJqAxVEVlKlr0cv2aQ+w+aC0v9T6kWu2Ywl2js=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl
                          rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 20:41:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845 (0x735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D750, serialNumber=F189CDF0FB9F9C691291A1466819D13C4E8C9600
        Validity
            Not Before: Apr 22 21:40:50 2025 GMT
            Not After : Apr 29 21:40:50 2025 GMT
        Subject: CN=68080ce2-bfda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:93:b5:e1:53:2c:36:94:f1:c7:1c:6d:44:88:
                    f3:e2:6a:af:fa:4d:e1:1a:d0:22:02:50:20:18:56:
                    34:80:b9:cd:a2:99:03:c7:fa:24:f3:cc:42:68:98:
                    12:c8:04:93:29:2a:41:d0:d8:61:73:fa:64:88:db:
                    3e:22:0a:f6:d5:91:12:cb:d9:ec:d7:d6:e7:92:3d:
                    81:cd:30:90:05:cc:32:17:d2:b4:c8:16:0c:bc:66:
                    06:2c:54:43:73:ad:e6:f3:47:5f:06:e0:82:bc:e0:
                    3c:be:6c:2b:e2:41:5d:df:56:04:ea:7c:a4:72:87:
                    d8:2a:c5:e7:64:4a:ec:1f:9f:e7:d2:cd:56:08:eb:
                    84:41:f1:0d:66:f2:9e:33:3b:e3:bc:ef:18:08:cf:
                    36:c7:90:58:29:4a:fe:45:d2:85:3c:cd:b1:84:03:
                    4a:a5:e5:e5:b1:33:f1:6d:e2:fc:7d:c1:9c:18:b3:
                    54:c0:92:f8:a0:4b:36:3c:77:5c:5b:73:bb:7e:d0:
                    af:25:d9:43:48:ee:f2:e7:3b:fd:52:3f:c4:e3:e2:
                    2a:8f:10:fe:db:41:40:3f:22:66:cb:1d:33:4f:5f:
                    1e:35:b0:2e:0a:94:ea:5c:04:9c:6a:23:fa:58:78:
                    b5:65:94:90:52:72:95:65:54:ae:b7:4a:4a:5e:71:
                    0e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3F:FE:AF:1B:10:96:DA:76:92:A6:59:3F:ED:24:4C:6F:7B:7C:D4
            X509v3 Authority Key Identifier:
                keyid:F1:89:CD:F0:FB:9F:9C:69:12:91:A1:46:68:19:D1:3C:4E:8C:96:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8YnN8PufnGkSkaFGaBnRPE6MlgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D750/0FA7C6B62A1911EB9CAF267EC4F9AE02/8YnN8PufnGkSkaFGaBnRPE6MlgA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:a6:3f:52:20:c2:06:33:fc:1d:d1:a5:25:6b:50:9c:45:23:
         60:c3:33:46:7e:66:1f:eb:7f:46:0d:4d:f8:43:49:93:7b:e4:
         49:f7:50:fd:8e:a5:d4:27:12:f6:00:1b:d4:fc:e2:0c:21:85:
         60:79:36:51:4a:e1:18:3b:0e:0f:f3:82:ff:c8:43:2c:8b:ae:
         16:f6:ad:22:70:a9:59:40:04:36:0f:c4:79:77:d9:dc:0f:f7:
         97:df:46:f8:be:45:7e:32:67:7d:00:b3:00:73:11:d2:d7:2d:
         12:7d:bf:3a:8e:4b:c1:e3:fe:96:b6:bc:07:5f:ef:a3:1e:a8:
         d5:7b:91:2d:46:a8:cb:fc:70:4a:65:89:0b:56:70:ea:16:24:
         6e:90:a5:26:22:7c:04:44:e0:3a:6e:fb:f2:f4:e4:5a:7f:e0:
         10:60:3d:dc:5b:68:19:a0:7a:96:4e:5a:68:a9:c1:4f:a4:59:
         8b:88:e2:48:be:4b:d6:02:05:8f:a3:ab:52:91:06:7f:6f:0e:
         7b:13:8b:54:5c:9a:3c:18:7e:68:8d:b0:aa:f7:b0:d0:d3:9d:
         20:07:c5:cb:ff:49:fb:9a:24:fc:1b:39:6e:bf:e2:fe:a1:eb:
         60:e8:5d:42:17:92:9b:78:2c:d0:45:a8:b5:5b:bb:bc:32:5b:
         40:3d:a8:9b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkQ3NTAxMTAvBgNVBAUTKEYxODlDREYwRkI5RjlDNjkxMjkxQTE0NjY4MTlEMTND
NEU4Qzk2MDAwHhcNMjUwNDIyMjE0MDUwWhcNMjUwNDI5MjE0MDUwWjAYMRYwFAYD
VQQDEw02ODA4MGNlMi1iZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu5O14VMsNpTxxxxtRIjz4mqv+k3hGtAiAlAgGFY0gLnNopkDx/ok88xCaJgS
yASTKSpB0Nhhc/pkiNs+Igr21ZESy9ns19bnkj2BzTCQBcwyF9K0yBYMvGYGLFRD
c63m80dfBuCCvOA8vmwr4kFd31YE6nykcofYKsXnZErsH5/n0s1WCOuEQfENZvKe
MzvjvO8YCM82x5BYKUr+RdKFPM2xhANKpeXlsTPxbeL8fcGcGLNUwJL4oEs2PHdc
W3O7ftCvJdlDSO7y5zv9Uj/E4+IqjxD+20FAPyJmyx0zT18eNbAuCpTqXAScaiP6
WHi1ZZSQUnKVZVSut0pKXnEO7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAM//q8b
EJbadpKmWT/tJExve3zUMB8GA1UdIwQYMBaAFPGJzfD7n5xpEpGhRmgZ0TxOjJYA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RDc1MC8wRkE3QzZCNjJB
MTkxMUVCOUNBRjI2N0VDNEY5QUUwMi84WW5OOFB1Zm5Ha1NrYUZHYUJuUlBFNk1s
Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhZbk44UHVmbkdrU2thRkdhQm5SUEU2TWxnQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RDc1MC8wRkE3QzZCNjJBMTkxMUVCOUNBRjI2N0VDNEY5QUUwMi84WW5OOFB1Zm5H
a1NrYUZHYUJuUlBFNk1sZ0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCtpj9SIMIGM/wd0aUla1CcRSNgwzNGfmYf639GDU34Q0mTe+RJ91D9
jqXUJxL2ABvU/OIMIYVgeTZRSuEYOw4P84L/yEMsi64W9q0icKlZQAQ2D8R5d9nc
D/eX30b4vkV+Mmd9ALMAcxHS1y0Sfb86jkvB4/6WtrwHX++jHqjVe5EtRqjL/HBK
ZYkLVnDqFiRukKUmInwEROA6bvvy9ORaf+AQYD3cW2gZoHqWTlpoqcFPpFmLiOJI
vkvWAgWPo6tSkQZ/bw57E4tUXJo8GH5ojbCq97DQ050gB8XL/0n7miT8Gzluv+L+
oetg6F1CF5KbeCzQRai1W7u8MltAPaib
-----END CERTIFICATE-----
Generated at Tue Apr 22 23:11:53 2025 by rpki-client