Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
File:                     h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json)
Hash identifier:          FWbrTBwcWBxUZXQFVMdUukCE7cw7dSF+Ev61CMAsPZE=
Subject key identifier:   C2:98:B3:C1:68:5E:C4:D1:40:EC:F8:72:A6:3B:DA:BE:E5:52:A9:A3
Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4
Certificate issuer:       /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
Certificate serial:       0200
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
Manifest number:          01E2
Signing time:             Sat 31 May 2025 02:34:42 +0000
Manifest this update:     Sat 31 May 2025 02:34:41 +0000
Manifest next update:     Sat 07 Jun 2025 02:34:41 +0000
Files and hashes:         1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: t54u7WTGDFK0s4FrUmUx0zUbXXWZgTj+JFZmUJHf6bk=)
                          2: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: kCFs9nmPiAnIcv8oJpJvtJLqB5yozfBXxDX1yoHDz3Q=)
                          3: 7D7547C48D6611EDB7F20B1FC4F9AE02.roa (hash: 15pVERijhw/wdJE16SjLjUvjRTutNcev/TWYcbcb+WY=)
                          4: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: qXl8VijXeUBq5YZGQbPFuyGm9qVJaEd0Hn4beaPuvSE=)
                          5: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: SS3DT3rVQ2RIIspyHG3PNw/Nkcbg7KmAnjQNkHYA/tU=)
                          6: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: 5xN+Wv93iJltArr43SjcRaq1i5ZKH/wlPD32n7ycLFk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl
                          rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 02:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4
        Validity
            Not Before: May 31 02:34:41 2025 GMT
            Not After : Jun  7 02:34:41 2025 GMT
        Subject: CN=683a6ac1-e2c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:fe:af:3e:46:bb:54:ac:b2:32:67:71:c4:
                    01:a6:f6:4d:38:0d:8c:06:4e:2a:98:b6:93:f7:b3:
                    a5:be:99:8a:fc:6e:1d:85:e0:b5:64:91:26:e2:18:
                    5d:e9:5d:bc:d5:a7:a9:2e:5a:c1:92:4d:d2:4b:37:
                    0c:97:17:34:ac:58:5a:bd:a9:4d:6e:71:cc:89:5c:
                    00:66:4b:19:57:6b:55:71:34:f9:31:de:f1:04:c3:
                    d6:9f:fe:81:43:04:57:d0:f4:6c:df:01:85:17:c5:
                    8c:9c:b4:41:cb:cd:0c:30:fc:d2:a5:b1:5b:38:29:
                    33:45:b6:ad:da:aa:11:d7:68:ec:69:63:24:16:89:
                    2f:11:89:f8:3b:ac:1f:c4:84:c2:e8:81:bd:e0:fc:
                    c3:5e:6c:6a:73:d2:38:da:42:9c:80:f2:a3:0f:83:
                    ae:d0:0b:55:60:18:ad:cf:3c:d4:d6:66:af:a2:1c:
                    e1:63:d6:dc:b1:3c:40:39:99:e3:cb:09:39:7c:db:
                    be:08:b3:06:fb:bd:92:7d:74:a6:fa:31:ad:db:17:
                    ed:c6:2f:df:39:3c:c7:68:b8:58:cf:db:4f:ef:25:
                    e8:fc:3a:bc:b7:3c:34:77:39:7d:84:5e:03:a2:d4:
                    65:cc:77:10:ff:83:5c:bd:74:d7:c7:95:d5:b4:58:
                    ef:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:98:B3:C1:68:5E:C4:D1:40:EC:F8:72:A6:3B:DA:BE:E5:52:A9:A3
            X509v3 Authority Key Identifier:
                keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:70:32:46:c9:b7:2a:e4:78:55:5d:b0:5e:f7:60:d7:81:ae:
         d0:9d:e4:45:2c:86:99:e6:65:20:70:c0:e3:ae:f6:7c:e0:da:
         d1:7a:8f:f0:5a:c4:5b:cd:d4:34:bf:69:30:03:31:bf:13:e3:
         40:e3:63:e0:02:62:32:2e:52:ec:51:ed:95:b4:4d:11:1b:e1:
         25:97:ee:95:04:4a:dc:07:30:df:83:6b:8d:f1:58:92:76:d2:
         13:4f:2d:02:c8:8a:38:6f:e8:8c:95:2c:69:7a:8e:94:f2:91:
         cc:fe:81:35:e0:d4:59:10:4d:1c:35:68:f1:c5:5b:06:dc:a6:
         4d:d7:27:fa:86:d5:a2:78:63:ad:08:55:37:9b:88:0b:81:db:
         82:1e:a5:40:07:b9:9b:8c:66:8f:2d:62:33:80:96:12:19:da:
         7a:9d:5f:65:35:64:48:b6:81:36:a0:7f:eb:a9:d5:02:fb:5f:
         04:97:7c:90:5a:cb:7e:51:c0:0b:b1:96:cf:b6:c0:11:9a:08:
         cc:c8:7b:96:ab:45:7e:a4:e8:b9:43:65:83:cc:34:6d:a0:4e:
         ab:bb:58:eb:16:39:fb:af:61:89:31:4e:a4:45:f5:fb:a8:cb:
         b7:79:40:09:f8:a5:44:cf:75:ae:bc:e9:06:4e:7b:03:50:98:
         cf:27:57:58
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0
ODJDNkY5QjQwHhcNMjUwNTMxMDIzNDQxWhcNMjUwNjA3MDIzNDQxWjAYMRYwFAYD
VQQDEw02ODNhNmFjMS1lMmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx8H+rz5Gu1SssjJnccQBpvZNOA2MBk4qmLaT97OlvpmK/G4dheC1ZJEm4hhd
6V281aepLlrBkk3SSzcMlxc0rFhavalNbnHMiVwAZksZV2tVcTT5Md7xBMPWn/6B
QwRX0PRs3wGFF8WMnLRBy80MMPzSpbFbOCkzRbat2qoR12jsaWMkFokvEYn4O6wf
xITC6IG94PzDXmxqc9I42kKcgPKjD4Ou0AtVYBitzzzU1mavohzhY9bcsTxAOZnj
ywk5fNu+CLMG+72SfXSm+jGt2xftxi/fOTzHaLhYz9tP7yXo/Dq8tzw0dzl9hF4D
otRlzHcQ/4NcvXTXx5XVtFjvkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKYs8Fo
XsTRQOz4cqY72r7lUqmjMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0
MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzYyMS9GN0QwMEJFRTc0MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZD
ZzV3VE0xSGFKUkZJTEctYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAOcDJGybcq5HhVXbBe92DXga7QneRFLIaZ5mUgcMDjrvZ84NrReo/w
WsRbzdQ0v2kwAzG/E+NA42PgAmIyLlLsUe2VtE0RG+Ell+6VBErcBzDfg2uN8ViS
dtITTy0CyIo4b+iMlSxpeo6U8pHM/oE14NRZEE0cNWjxxVsG3KZN1yf6htWieGOt
CFU3m4gLgduCHqVAB7mbjGaPLWIzgJYSGdp6nV9lNWRItoE2oH/rqdUC+18El3yQ
Wst+UcALsZbPtsARmgjMyHuWq0V+pOi5Q2WDzDRtoE6ru1jrFjn7r2GJMU6kRfX7
qMu3eUAJ+KVEz3WuvOkGTnsDUJjPJ1dY
-----END CERTIFICATE-----
Generated at Sat May 31 17:36:07 2025 by rpki-client