Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
File:                     6zifszmzkI1UmmU5DJLhX533xUs.mft (raw, json)
Hash identifier:          dd7iKssXYZh/W/JK/S7beXBGQg7Y0ZLjNOar8++yBfA=
Subject key identifier:   87:20:62:75:20:52:F2:A8:C0:38:12:3A:93:70:29:72:52:C9:13:A5
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       378E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
Manifest number:          3651
Signing time:             Sat 31 May 2025 14:21:59 +0000
Manifest this update:     Sat 31 May 2025 14:21:59 +0000
Manifest next update:     Sat 07 Jun 2025 14:21:59 +0000
Files and hashes:         1: 6zifszmzkI1UmmU5DJLhX533xUs.crl (hash: SiAL+v0ODfKurSRj76yaBz+XjT16o3SKPOvN32Ce1ak=)
                          2: BB38B6A23C5211F082202337C4F9AE02.roa (hash: ByG60Xp4+GWXLXhyJ74Z1UHJ63TAjZCJCm2rH+t7yco=)
                          3: 5E035B480E8C11F0AD0C273AC4F9AE02.roa (hash: Wnu/A0yUx+4HqrhfwfUPaml1HEg9mGCN1YlC1GXeGvE=)
                          4: FAF6D732CD3811EDBD37B674C4F9AE02.roa (hash: 55hbp1lHPqWHR3myIKlQM0s8jhZDD5OMMu+AbqKM2eA=)
                          5: FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa (hash: zSVDYqkWgkMa+aLsCRgndkcVWEmWW6zKnoCgA3mt+Jw=)
                          6: 8470E428A2E711EFA6A5B91AC4F9AE02.roa (hash: bilCUgSIj9s8wLUUu7RqA7j0fFrI4Jp6Y1RNZuTJV4U=)
                          7: 2C7A8F5C8CE511EF96182462C4F9AE02.roa (hash: r8mRla4ImwWo0lgNeUmnO3kOlV4nEe25jvh9hbpe+Fk=)
                          8: 4F698B525F5011EFA66ADA2CC4F9AE02.roa (hash: 8GbrS0gq/4FKKxyxJysMwR58UCfWTju+CTTJl3NXjn0=)
                          9: 6D84D2D05DE911EF84282B80C4F9AE02.roa (hash: KsCi1gL5ON0tQo5f7o3JyChb4Z5sQOoFZgnSirCcEPY=)
                          10: FEDF0BA43E5111EF86CB780AC4F9AE02.roa (hash: PWMfy2tZO4LynO8829Wa3U1BjwaomWWdkKuhbM2n6Oo=)
                          11: 27E277D891AA11EF9DBFF265C4F9AE02.roa (hash: wM/PYE311nfiNvAglY7ipodnf85Ls8RUKyhtAudMyfk=)
                          12: 3BCB61DA01D411EFB260D83DC4F9AE02.roa (hash: ntg1Sa5uJDmNLEQGDT84VTtiG25Hye7r/1zWkL8hIks=)
                          13: 02414522C98A11EBAF4F9280C4F9AE02.roa (hash: z8UqZ1TUZs5SLFZVPrNthZ359PD6ZBuIMRCgzq/pldM=)
                          14: 4E211A5C408A11EE91A09746C4F9AE02.roa (hash: kxKdU/JmPTZM9krhUbKPrtFUj5nm0D45xWRYs28QjJs=)
                          15: 862D18003A1011EDB5225E73C4F9AE02.roa (hash: v4HK4sfgYsSfASOHkvKK7CKePuHBgJRykt1ECioRpqY=)
                          16: CDCC902E170811EFB6DE866CC4F9AE02.roa (hash: Qr52xk5Cmr7B9ojqij9Sa1V9McPqDHOMkRtq3w6aXoE=)
                          17: EEF771D4FED311EF8B263515C4F9AE02.roa (hash: rr3u+Bx1b760tre72Vw4KB1M7DRa2l8Cfnx2i0/N2Nw=)
                          18: A59A5B6641F611ECB1465157C4F9AE02.roa (hash: s/2XE3OKwLRXbsetwS9Ty1/cmYjDSHV9UY8kueVDyls=)
                          19: BF6649687AC811EDAE44E656C4F9AE02.roa (hash: uz8YE3l0+kEpuATJJmDK6S+3VDMiAYafPM++93yW36M=)
                          20: 76FA132A8B0511EC993E2B20C4F9AE02.roa (hash: oXtJ7h6IXN/s5X0HBvpSdD6OMPpNlMkXnfhubhmUTqA=)
                          21: 412F31BCF4A711EFB38B1B47C4F9AE02.roa (hash: sb5PfPWK6dXGpDNW8cweOOSlpOJXLYznSUeQxJ22Wfw=)
                          22: 000724C6F7D511EE8C03CA65C4F9AE02.roa (hash: 1z8tUQ/CHsf4H426+WAtbF/ySyewhGPCiiHEe/tPLy0=)
                          23: 3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa (hash: UvtmvVRc2Z0q+CfMe7UUrx6gOQJL+ahTUjM/dtEauJg=)
                          24: B6D40A18822F11EFA848053BC4F9AE02.roa (hash: qTT7XzpkLtDQdKGn2G66fy/McFFpsOFRvnIb+qAvaRw=)
                          25: 52850542A60811EF91FB1113C4F9AE02.roa (hash: kowmpjbS8K8YRAisMY96jcR4JecyVpMM9JfAm+PJPWk=)
                          26: 2622AA12010511EE8C750D39C4F9AE02.roa (hash: mf2Qk+w1NRlp24Ok2PsGfSzQRhYbIagpibh1QaUmo/0=)
                          27: 9D8E6D02C2A511EBB2025B36C4F9AE02.roa (hash: cx0K0bJRQz5Nmb2d76mnGIN2Xr+QPD7Bio7ZlcQXgU0=)
                          28: 26C39BB6010511EE8C750D39C4F9AE02.roa (hash: PrIFv9vXjUSJQadCTa4FhOnCYA1U2rLRvK5pclzfjFs=)
                          29: CAD5365E090C11EBA5412411C4F9AE02.roa (hash: 1/UnllgrY9TLTTDeiVVZgSkXNLQXVP9JfAc/UDXvF4Q=)
                          30: 4D4EE370408A11EE91A09746C4F9AE02.roa (hash: a0UD+/qG4UMDv/2WmEJk9pk9QhXhkwYYYzMZ4c/XI1s=)
                          31: D34236BE7D0511EEB381D02CC4F9AE02.roa (hash: MXoyWFgv72XpKm4iYapo+Jr79E2SzPPDsg5QxMhWUpU=)
                          32: 46186F4EC6E711EDA2FCBA34C4F9AE02.roa (hash: XzgXWY7//UVaNEuQIopWxPc37VBbWxsWdMNjr7wRlfY=)
                          33: E614D0A2CD5011EF863CDE64C4F9AE02.roa (hash: VRsqFBw6W6srpeBDnBHvB0NtD3V0u3PzUnUHEjXNhCA=)
                          34: 0BD5724C3A3211EDA1B7D863C4F9AE02.roa (hash: fAK+FFlWiNwXpZxoR/fBUifFc7pGdoPqK+aChKWzCZE=)
                          35: 83F06CF2DF1211EDB91D5C61C4F9AE02.roa (hash: 8EbAPbXfSh68G52OBPln229w9SwdjrHKzeWsW0yhIOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 14:21:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14222 (0x378e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: May 31 14:21:59 2025 GMT
            Not After : Jun  7 14:21:59 2025 GMT
        Subject: CN=683b1087-3f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ef:c7:c8:9b:f6:8b:fe:bc:9c:da:30:c9:6e:
                    80:98:ba:2f:d8:4b:d9:79:8f:21:36:e4:4b:14:e0:
                    33:fe:07:ba:25:3c:c5:9b:c4:51:8a:9f:62:a2:92:
                    6e:f7:cc:c5:4a:57:04:77:3d:24:91:01:b9:ff:86:
                    80:4c:a1:50:be:f0:c2:c1:d9:e7:07:d3:c7:2f:13:
                    cc:08:88:a6:d2:a4:e2:e2:03:1d:df:67:18:37:c8:
                    95:8c:e3:60:80:c4:f7:e0:73:59:6a:90:4c:56:36:
                    6d:c1:90:cb:7d:84:26:95:fb:f8:3b:5c:fd:a3:af:
                    05:3f:9d:aa:ae:ea:7d:12:51:9d:d4:bc:f2:e3:cf:
                    48:8e:34:4f:4a:ed:f1:c9:a9:79:fa:5b:3a:65:15:
                    95:95:ff:73:f0:e7:b9:03:ad:14:26:16:9e:94:3b:
                    11:aa:86:6d:d0:64:24:da:d0:c8:1b:8a:15:fb:3d:
                    b7:2c:f5:4d:90:f2:b5:1c:51:78:30:10:51:a4:ae:
                    55:4b:45:27:9b:ae:95:6c:7f:be:b0:6a:8e:1f:04:
                    61:2e:d2:69:0d:60:a3:ed:cf:d8:28:f8:74:6d:00:
                    86:b9:6e:a1:69:2f:32:67:19:1f:c9:9b:4d:00:cf:
                    b0:70:c1:ce:59:d3:6d:87:e3:dd:55:64:0d:c2:7b:
                    e5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:20:62:75:20:52:F2:A8:C0:38:12:3A:93:70:29:72:52:C9:13:A5
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:ff:5f:00:0c:31:bb:2e:6a:3e:8b:df:77:8f:17:fd:be:88:
         3e:ba:f3:b5:29:60:34:5e:68:17:d9:bf:6a:70:d8:15:8a:4e:
         e2:16:57:ed:2a:a9:3e:f2:65:4a:48:0f:95:1d:84:6d:a9:27:
         be:ae:c4:16:ba:62:1b:f9:09:ac:c8:84:ab:87:d3:4d:d2:1f:
         39:8c:40:6d:2d:81:dc:b2:6d:dc:0c:93:26:3b:03:61:2d:28:
         c8:da:f0:a7:fd:e0:71:40:f6:c2:40:6e:71:cb:bc:d3:9a:37:
         67:f4:67:3e:b7:bb:07:0b:17:15:ad:a8:82:b0:66:3b:79:08:
         36:e2:60:a1:88:af:0c:db:b1:32:b1:7c:73:20:b3:4b:b7:42:
         31:4c:d9:ff:35:20:1c:94:21:ab:20:c2:2d:67:2d:4a:9a:c8:
         98:1c:0b:3c:38:52:34:d8:87:76:c8:4b:6a:d7:24:8e:b0:9f:
         1f:37:0d:c0:ed:d9:fb:e9:91:16:99:80:d0:6e:a8:64:48:90:
         91:3b:be:ca:dd:e6:df:bc:d1:82:70:16:10:5f:34:6d:9c:e4:
         e7:ac:77:c6:c0:09:d9:e6:42:0e:a5:c0:e0:1f:9a:c8:87:d7:
         1b:85:7d:85:ea:d1:d5:a1:04:f2:3d:b0:2c:71:53:c3:62:5f:
         fb:10:ca:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 16:42:09 2025 by rpki-client