Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
File:                     CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft (raw, json)
Hash identifier:          dmQXCN/NngbHIxpEgilkxkZkkwQ1dvNQH2IhnU9IBGU=
Subject key identifier:   6B:4C:CC:CC:5C:37:28:DF:CD:BD:0B:BB:AA:B5:B0:1A:83:6F:CD:80
Authority key identifier: 08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90
Certificate issuer:       /CN=A913F600/serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
Certificate serial:       1174
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
Manifest number:          1160
Signing time:             Fri 30 May 2025 17:25:51 +0000
Manifest this update:     Fri 30 May 2025 17:25:51 +0000
Manifest next update:     Fri 06 Jun 2025 17:25:51 +0000
Files and hashes:         1: CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl (hash: 5nbsgGAa6ERWPI9/x+Vb9vMP3ASOFiJwTav4RYNqTnI=)
                          2: A18ED49C9A0D11EC92AD8580C4F9AE02.roa (hash: qJKad/+ZiMDaDiVaiAw8w9uuhueQYfaURJcRIR4BlLQ=)
                          3: 03960D4AFF6411EFB94AD726C4F9AE02.roa (hash: Dd+h++CV6wNZJ7QO0n2rdW4OE3i2iMOeGWoydYTSCjs=)
                          4: 86B7624062FE11EEB277647CC4F9AE02.roa (hash: +KT0Egyqjjf85ES0SDoa2VeTo6qX07zVXJ1wUoWuy48=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl
                          rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 17:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4468 (0x1174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F600, serialNumber=08DB815B7310D87EEFAFCD52CF261CD15829F790
        Validity
            Not Before: May 30 17:25:51 2025 GMT
            Not After : Jun  6 17:25:51 2025 GMT
        Subject: CN=6839ea1f-021a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b0:12:f4:a8:0a:07:03:71:23:2d:c2:61:12:
                    af:4c:98:0a:8d:31:e4:f1:71:23:f0:33:c1:11:e1:
                    a2:25:76:fb:1a:11:5d:d8:1d:2a:ed:72:aa:2e:29:
                    d9:fa:52:e4:fb:b2:76:4b:1c:90:65:0d:03:68:8b:
                    82:cc:a9:6e:b6:f2:37:3d:27:01:f0:46:db:54:15:
                    27:ae:39:b1:23:a5:a4:37:fa:3f:63:b5:0f:bb:26:
                    1f:0f:27:46:69:7d:1d:71:4b:0d:d7:66:ae:ea:74:
                    7e:1d:cb:9d:d3:16:8c:f5:48:5d:a0:14:1c:4c:8e:
                    bf:5e:19:39:b6:57:02:8e:17:a6:a9:ea:21:e8:bf:
                    79:47:35:8a:54:47:de:c2:e6:0d:d3:b7:17:53:c9:
                    06:f7:54:08:1d:fe:30:16:ba:03:6f:95:1e:3e:bd:
                    84:89:25:c5:d7:15:a3:d5:f7:79:36:1e:58:8c:1b:
                    40:bd:ca:0a:7d:f5:3d:64:9f:b4:51:0b:81:17:7c:
                    b0:f2:51:c4:4e:bf:6a:5a:dc:e1:d3:05:31:62:9d:
                    f7:87:2f:81:ae:9a:eb:f0:34:4a:6c:1e:a4:86:6a:
                    cb:10:57:cf:3c:66:cc:de:aa:ab:61:74:e3:4e:55:
                    7d:fd:f8:b3:92:de:08:4d:4c:11:24:e0:93:d2:c1:
                    88:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4C:CC:CC:5C:37:28:DF:CD:BD:0B:BB:AA:B5:B0:1A:83:6F:CD:80
            X509v3 Authority Key Identifier:
                keyid:08:DB:81:5B:73:10:D8:7E:EF:AF:CD:52:CF:26:1C:D1:58:29:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNuBW3MQ2H7vr81SzyYc0Vgp95A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F600/9F615BBE059511E99920D271C4F9AE02/CNuBW3MQ2H7vr81SzyYc0Vgp95A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:f9:d7:9e:11:76:a2:b8:dc:c6:9e:fe:ea:65:b8:89:2e:68:
         cb:17:eb:65:cf:fb:ce:a2:e8:03:ff:72:40:fe:5d:fd:b1:fb:
         07:c6:9c:82:9f:6b:cf:bc:b7:d0:7b:69:db:05:bf:03:08:b9:
         b1:c5:e4:7c:79:11:3d:92:17:70:8c:73:dd:39:06:76:04:9c:
         7d:f3:53:b2:18:b9:fa:31:10:71:f7:52:fb:eb:78:ca:88:79:
         a4:18:01:76:7a:40:0d:53:8f:95:52:99:67:eb:1a:fc:01:1d:
         49:e0:a3:f2:b6:cd:28:71:67:f2:05:10:1d:d8:5b:d9:21:b7:
         5a:c0:d8:6a:b2:a5:c2:34:9a:b3:0d:29:b2:42:6b:6d:b9:67:
         c1:b8:a5:97:74:9d:3e:8b:29:e2:7c:ea:a5:3c:ac:50:06:d0:
         bd:50:fc:fc:e7:f7:cc:02:1c:24:35:0c:c7:25:9f:29:b9:c4:
         73:4f:d0:d4:83:cd:64:11:11:d3:b7:b8:7b:d6:26:fc:df:ea:
         b7:0b:a0:26:ba:91:63:14:22:c0:67:7b:60:64:dd:91:43:8e:
         be:53:07:37:64:24:4d:a7:29:bc:51:ef:20:97:3a:df:54:4f:
         c2:1f:85:8f:66:0a:0b:17:55:c6:5f:6f:08:6c:6b:8a:c6:29:
         58:df:79:ea
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICEXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0Y2MDAxMTAvBgNVBAUTKDA4REI4MTVCNzMxMEQ4N0VFRkFGQ0Q1MkNGMjYxQ0Qx
NTgyOUY3OTAwHhcNMjUwNTMwMTcyNTUxWhcNMjUwNjA2MTcyNTUxWjAYMRYwFAYD
VQQDEw02ODM5ZWExZi0wMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsbAS9KgKBwNxIy3CYRKvTJgKjTHk8XEj8DPBEeGiJXb7GhFd2B0q7XKqLinZ
+lLk+7J2SxyQZQ0DaIuCzKlutvI3PScB8EbbVBUnrjmxI6WkN/o/Y7UPuyYfDydG
aX0dcUsN12au6nR+Hcud0xaM9UhdoBQcTI6/Xhk5tlcCjhemqeoh6L95RzWKVEfe
wuYN07cXU8kG91QIHf4wFroDb5UePr2EiSXF1xWj1fd5Nh5YjBtAvcoKffU9ZJ+0
UQuBF3yw8lHETr9qWtzh0wUxYp33hy+Brprr8DRKbB6khmrLEFfPPGbM3qqrYXTj
TlV9/fizkt4ITUwRJOCT0sGIlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGtMzMxc
Nyjfzb0Lu6q1sBqDb82AMB8GA1UdIwQYMBaAFAjbgVtzENh+76/NUs8mHNFYKfeQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjYwMC85RjYxNUJCRTA1
OTUxMUU5OTkyMEQyNzFDNEY5QUUwMi9DTnVCVzNNUTJIN3ZyODFTenlZYzBWZ3A5
NUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NOdUJXM01RMkg3dnI4MVN6eVljMFZncDk1QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
RjYwMC85RjYxNUJCRTA1OTUxMUU5OTkyMEQyNzFDNEY5QUUwMi9DTnVCVzNNUTJI
N3ZyODFTenlZYzBWZ3A5NUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDC+deeEXaiuNzGnv7qZbiJLmjLF+tlz/vOougD/3JA/l39sfsHxpyC
n2vPvLfQe2nbBb8DCLmxxeR8eRE9khdwjHPdOQZ2BJx981OyGLn6MRBx91L763jK
iHmkGAF2ekANU4+VUpln6xr8AR1J4KPyts0ocWfyBRAd2FvZIbdawNhqsqXCNJqz
DSmyQmttuWfBuKWXdJ0+iynifOqlPKxQBtC9UPz85/fMAhwkNQzHJZ8pucRzT9DU
g81kERHTt7h71ib83+q3C6AmupFjFCLAZ3tgZN2RQ46+Uwc3ZCRNpym8Ue8glzrf
VE/CH4WPZgoLF1XGX28IbGuKxilY33nq
-----END CERTIFICATE-----
Generated at Sat May 31 17:53:12 2025 by rpki-client