Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
File:                     m8FpAIAncr5ikmDEqu1fP-9-s-c.mft (raw, json)
Hash identifier:          bMYU14gg4ivw4H6KX93nDo3uYU2lzTtQXmmsShoJ3V4=
Subject key identifier:   2D:64:8A:41:FC:43:04:7F:F4:68:51:8D:C8:47:A4:B0:9D:9D:FE:DD
Authority key identifier: 9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7
Certificate issuer:       /CN=A91F91EB/serialNumber=9BC16900802772BE629260C4AAED5F3FEF7EB3E7
Certificate serial:       0CA7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
Manifest number:          0C84
Signing time:             Fri 04 Apr 2025 18:22:55 +0000
Manifest this update:     Fri 04 Apr 2025 18:22:54 +0000
Manifest next update:     Fri 11 Apr 2025 18:22:54 +0000
Files and hashes:         1: m8FpAIAncr5ikmDEqu1fP-9-s-c.crl (hash: wxjnmgOAff+Ohrge9+aGmo1V+cEI/lUotzCgNO34BKk=)
                          2: 827D7766AACC11EA8113F532C4F9AE02.roa (hash: oguEqhYGf6Whv8PqzIUzLfsgAvX4wE5CZ9/lAxwLLvs=)
                          3: 81CA43EEAD7811EB905E2C41C4F9AE02.roa (hash: twcj5cD600ozwl+LH65FC7h60q+thDGwgx4YQo1a3TQ=)
                          4: 7F4CB00EAAE811EA8412810FC4F9AE02.roa (hash: C+pA9vRBNRgX2w4BOkt7QtiabsJexJBu+hnduYyIgLA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl
                          rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3239 (0xca7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F91EB
        Validity
            Not Before: Apr  4 18:22:54 2025 GMT
            Not After : Apr 11 18:22:54 2025 GMT
        Subject: CN=67f0237e-93a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fe:e1:40:0a:a8:c5:cb:0f:2b:88:df:c5:5e:
                    40:52:04:c8:38:9a:85:43:1b:27:9a:4a:bc:bd:f0:
                    e3:48:b1:dc:10:e5:3f:58:0f:78:03:91:52:6f:c1:
                    10:63:00:cd:59:38:8b:00:21:6c:26:c9:f4:28:2d:
                    d8:bc:59:78:11:68:7d:5e:b1:d8:83:70:8c:00:cf:
                    f2:b6:e0:c9:03:43:e9:3c:a1:80:a7:e9:8c:38:15:
                    cc:bb:c4:0b:56:c4:d2:c6:dd:c5:5c:fb:7c:af:5d:
                    5e:cf:5c:1f:3b:bb:51:4c:0c:b1:cf:ef:30:90:45:
                    d5:b4:12:8c:f0:f6:9c:9c:e7:ed:b1:f3:cd:ce:fd:
                    4f:ad:ba:b6:0d:90:48:85:49:b8:8d:76:58:a5:94:
                    a9:1e:74:79:0a:35:1f:41:e8:f0:d4:2d:3c:48:1a:
                    3b:93:90:1b:88:40:83:a9:af:be:57:52:d7:1a:f0:
                    a1:08:ff:d0:2f:c9:7c:0b:2a:22:1c:92:9e:a3:b6:
                    f1:fb:cd:de:49:43:01:65:ba:8d:6a:4d:50:2f:27:
                    b6:be:f7:e4:f4:a1:d0:7b:09:dd:0a:9a:b4:44:fa:
                    ed:11:ae:60:dc:97:87:3a:e7:30:cd:69:e7:5e:a1:
                    b9:19:b3:a4:85:95:e6:ab:de:11:4b:57:d5:06:d2:
                    5a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:64:8A:41:FC:43:04:7F:F4:68:51:8D:C8:47:A4:B0:9D:9D:FE:DD
            X509v3 Authority Key Identifier:
                keyid:9B:C1:69:00:80:27:72:BE:62:92:60:C4:AA:ED:5F:3F:EF:7E:B3:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8FpAIAncr5ikmDEqu1fP-9-s-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F91EB/50EFE074F70511E9ADBA451FC4F9AE02/m8FpAIAncr5ikmDEqu1fP-9-s-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:8b:84:a1:3b:9c:57:78:45:13:20:90:b9:d0:30:a7:7e:10:
         48:8c:d6:1d:ce:a0:9a:33:b9:a6:3d:a4:df:aa:e9:d7:e8:02:
         e0:af:2c:73:02:21:28:2f:78:34:63:ea:d2:ba:42:6f:ee:3c:
         85:e1:fa:98:1e:b5:37:2d:ab:ba:6d:4c:b6:84:83:b9:d7:32:
         77:c1:87:57:99:91:31:0b:2f:64:19:ba:18:9f:c3:ff:c6:14:
         f5:0b:aa:7d:7d:cd:14:4e:20:64:4d:2f:c0:e6:1a:9b:b6:da:
         6b:ca:7d:b9:3c:e9:57:10:f6:61:31:8e:66:f2:73:2c:fb:e0:
         92:a1:95:23:7f:cf:10:f8:d0:af:67:3f:a9:9d:32:71:84:9b:
         9e:2e:af:bf:63:48:f5:e9:d9:1c:46:2e:65:80:54:9f:c0:85:
         08:3c:72:04:54:fd:4f:7e:2a:01:e5:3f:ec:65:9f:de:f4:39:
         c8:cb:aa:a9:40:d2:ee:01:a0:dc:39:53:db:8f:6b:d7:93:71:
         51:ee:40:28:45:7a:ef:95:3e:97:5c:c6:56:65:41:50:f7:f7:
         ba:2f:ff:03:61:c1:9c:bc:7c:03:b1:8e:6b:5d:61:41:64:10:
         8f:27:8a:a5:a8:e8:9f:8b:30:2a:07:ff:48:f5:d6:57:c7:dc:
         3c:42:b4:68
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjkxRUIxMTAvBgNVBAUTKDlCQzE2OTAwODAyNzcyQkU2MjkyNjBDNEFBRUQ1RjNG
RUY3RUIzRTcwHhcNMjUwNDA0MTgyMjU0WhcNMjUwNDExMTgyMjU0WjAYMRYwFAYD
VQQDEw02N2YwMjM3ZS05M2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4/7hQAqoxcsPK4jfxV5AUgTIOJqFQxsnmkq8vfDjSLHcEOU/WA94A5FSb8EQ
YwDNWTiLACFsJsn0KC3YvFl4EWh9XrHYg3CMAM/ytuDJA0PpPKGAp+mMOBXMu8QL
VsTSxt3FXPt8r11ez1wfO7tRTAyxz+8wkEXVtBKM8PacnOftsfPNzv1Prbq2DZBI
hUm4jXZYpZSpHnR5CjUfQejw1C08SBo7k5AbiECDqa++V1LXGvChCP/QL8l8Cyoi
HJKeo7bx+83eSUMBZbqNak1QLye2vvfk9KHQewndCpq0RPrtEa5g3JeHOucwzWnn
XqG5GbOkhZXmq94RS1fVBtJa4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC1kikH8
QwR/9GhRjchHpLCdnf7dMB8GA1UdIwQYMBaAFJvBaQCAJ3K+YpJgxKrtXz/vfrPn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTFFQi81MEVGRTA3NEY3
MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNyNWlrbURFcXUxZlAtOS1z
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL204RnBBSUFuY3I1aWttREVxdTFmUC05LXMtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
OTFFQi81MEVGRTA3NEY3MDUxMUU5QURCQTQ1MUZDNEY5QUUwMi9tOEZwQUlBbmNy
NWlrbURFcXUxZlAtOS1zLWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA5i4ShO5xXeEUTIJC50DCnfhBIjNYdzqCaM7mmPaTfqunX6ALgryxz
AiEoL3g0Y+rSukJv7jyF4fqYHrU3Lau6bUy2hIO51zJ3wYdXmZExCy9kGboYn8P/
xhT1C6p9fc0UTiBkTS/A5hqbttpryn25POlXEPZhMY5m8nMs++CSoZUjf88Q+NCv
Zz+pnTJxhJueLq+/Y0j16dkcRi5lgFSfwIUIPHIEVP1PfioB5T/sZZ/e9DnIy6qp
QNLuAaDcOVPbj2vXk3FR7kAoRXrvlT6XXMZWZUFQ9/e6L/8DYcGcvHwDsY5rXWFB
ZBCPJ4qlqOifizAqB/9I9dZXx9w8QrRo
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:45:09 2025 by rpki-client