Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
File:                     967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft (raw, json)
Hash identifier:          tPszFAa3YSAyUu1VH4/9aAyUlrq7lHdL3D3SwokrHQ0=
Subject key identifier:   EF:38:94:AE:AB:21:F2:6E:F3:FA:48:FA:32:FB:F7:BC:79:C9:02:81
Authority key identifier: F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65
Certificate issuer:       /CN=A915D0AC/serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
Certificate serial:       0179
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
Manifest number:          016F
Signing time:             Sat 31 May 2025 03:34:07 +0000
Manifest this update:     Sat 31 May 2025 03:34:07 +0000
Manifest next update:     Sat 07 Jun 2025 03:34:06 +0000
Files and hashes:         1: 967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl (hash: oodZUbagDUk7qdSt/ciJm9jLKpw2C36vajRoxrRP4B0=)
                          2: 5F52F24EBD2811EE9459FF47C4F9AE02.roa (hash: 9NHfjKZ92JKgdcrA4N9M5ns+wKMTAc0NwSsWt7LXuOk=)
                          3: DD2A5994182F11EE82A0FC48C4F9AE02.roa (hash: Nc2DNs1eibu6K2aHjIt+L2SkvNewi7SdNMt96VyUl+w=)
                          4: B9CCF2D4BD2711EE9958E946C4F9AE02.roa (hash: Tr1GoB0OJ0WV/koJHwH589Dyk++1e8UfDHIpzpMoMFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl
                          rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 03:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D0AC, serialNumber=F7AED5875112CCFB208E718247B1E49BAAFFB865
        Validity
            Not Before: May 31 03:34:07 2025 GMT
            Not After : Jun  7 03:34:06 2025 GMT
        Subject: CN=683a78af-82f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:00:a5:cc:2e:ee:ee:d9:03:67:cb:74:bb:67:
                    58:91:51:71:74:16:27:f3:88:48:81:d8:a0:31:31:
                    9c:eb:ea:c6:a8:fb:8d:4a:ba:b8:01:8c:a8:52:72:
                    bd:89:73:d4:de:45:d1:e9:83:a6:5e:a0:de:ae:ac:
                    df:04:3f:49:0f:31:18:2e:62:4d:f8:d0:c4:18:92:
                    e7:1b:84:c5:98:b6:09:87:f0:88:8c:a4:9a:6a:fc:
                    53:4d:c0:7f:37:b1:c9:4f:f8:45:53:2e:39:b9:82:
                    bb:87:12:97:0d:8a:47:0b:57:e1:02:60:a7:fd:8d:
                    a2:63:64:32:2f:7f:97:db:d7:cb:9a:0e:af:15:7c:
                    35:e2:c5:a1:42:01:aa:b9:e9:46:31:32:46:10:b6:
                    7f:11:1c:63:38:30:d8:d4:08:a3:3a:05:94:84:af:
                    ce:a0:0d:7a:7e:4c:73:7c:76:8a:d3:a1:86:d9:a2:
                    e7:14:13:17:47:17:a9:21:8e:7e:be:d6:b4:fa:4d:
                    f4:6a:af:9a:19:02:4b:5c:28:de:9b:48:77:a6:ef:
                    6a:db:23:a2:1c:23:8c:8d:e9:5f:a1:4f:04:90:e6:
                    c7:f1:0b:8a:7a:52:2a:aa:11:ee:39:10:bb:58:82:
                    94:d0:f1:a8:45:da:a7:2d:fe:46:36:75:4c:76:0a:
                    78:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:38:94:AE:AB:21:F2:6E:F3:FA:48:FA:32:FB:F7:BC:79:C9:02:81
            X509v3 Authority Key Identifier:
                keyid:F7:AE:D5:87:51:12:CC:FB:20:8E:71:82:47:B1:E4:9B:AA:FF:B8:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/967Vh1ESzPsgjnGCR7Hkm6r_uGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D0AC/A29AA2D8152411EE9D70C968C4F9AE02/967Vh1ESzPsgjnGCR7Hkm6r_uGU.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d8:5e:25:f9:4b:b3:93:71:22:07:03:49:eb:72:f1:02:bb:
         42:c2:88:6d:19:3c:54:8d:96:e7:74:f0:19:26:e2:13:94:d2:
         fe:13:89:cb:2b:73:93:88:f8:00:dd:81:4e:16:2a:ee:d6:a5:
         0c:0d:b5:3a:8c:f7:4e:c0:5f:06:2c:2d:4d:d1:fb:a8:78:df:
         34:a8:61:6c:b2:99:72:88:74:4f:c8:26:27:b3:ad:1f:88:55:
         27:ba:f0:16:fc:3a:dc:30:67:27:ca:4c:df:db:4b:9f:2d:7f:
         46:1e:d9:0f:e9:51:0d:7c:e0:1c:6e:fe:65:1e:c2:e7:b7:73:
         1b:f2:eb:5b:e4:1c:45:90:73:eb:2d:d8:59:09:c1:25:36:bc:
         94:b2:33:c8:6d:50:10:74:a2:3c:39:54:e0:9a:08:a8:82:d0:
         87:89:29:35:6e:d5:88:10:51:ef:bb:9f:ec:87:eb:3a:b7:5a:
         38:0a:b5:2a:c1:98:ab:ca:f3:83:21:6a:22:ff:10:2a:21:06:
         11:48:e8:ec:64:9c:11:a6:09:3b:05:e5:2d:f3:fe:04:2a:ef:
         ac:fb:10:80:7d:c3:c3:27:0b:6e:84:77:4f:ac:45:24:96:00:
         b4:ef:9e:29:ca:b2:17:8b:4c:bd:6a:eb:92:12:a4:96:a2:65:
         b8:e3:22:a4
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQwQUMxMTAvBgNVBAUTKEY3QUVENTg3NTExMkNDRkIyMDhFNzE4MjQ3QjFFNDlC
QUFGRkI4NjUwHhcNMjUwNTMxMDMzNDA3WhcNMjUwNjA3MDMzNDA2WjAYMRYwFAYD
VQQDEw02ODNhNzhhZi04MmY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxAClzC7u7tkDZ8t0u2dYkVFxdBYn84hIgdigMTGc6+rGqPuNSrq4AYyoUnK9
iXPU3kXR6YOmXqDerqzfBD9JDzEYLmJN+NDEGJLnG4TFmLYJh/CIjKSaavxTTcB/
N7HJT/hFUy45uYK7hxKXDYpHC1fhAmCn/Y2iY2QyL3+X29fLmg6vFXw14sWhQgGq
uelGMTJGELZ/ERxjODDY1AijOgWUhK/OoA16fkxzfHaK06GG2aLnFBMXRxepIY5+
vta0+k30aq+aGQJLXCjem0h3pu9q2yOiHCOMjelfoU8EkObH8QuKelIqqhHuORC7
WIKU0PGoRdqnLf5GNnVMdgp4SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO84lK6r
IfJu8/pI+jL797x5yQKBMB8GA1UdIwQYMBaAFPeu1YdREsz7II5xgkex5Juq/7hl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDBBQy9BMjlBQTJEODE1
MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQc2dqbkdDUjdIa202cl91
R1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzk2N1ZoMUVTelBzZ2puR0NSN0hrbTZyX3VHVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
RDBBQy9BMjlBQTJEODE1MjQxMUVFOUQ3MEM5NjhDNEY5QUUwMi85NjdWaDFFU3pQ
c2dqbkdDUjdIa202cl91R1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBq2F4l+Uuzk3EiBwNJ63LxArtCwohtGTxUjZbndPAZJuITlNL+E4nL
K3OTiPgA3YFOFiru1qUMDbU6jPdOwF8GLC1N0fuoeN80qGFssplyiHRPyCYns60f
iFUnuvAW/DrcMGcnykzf20ufLX9GHtkP6VENfOAcbv5lHsLnt3Mb8utb5BxFkHPr
LdhZCcElNryUsjPIbVAQdKI8OVTgmgiogtCHiSk1btWIEFHvu5/sh+s6t1o4CrUq
wZiryvODIWoi/xAqIQYRSOjsZJwRpgk7BeUt8/4EKu+s+xCAfcPDJwtuhHdPrEUk
lgC0754pyrIXi0y9auuSEqSWomW44yKk
-----END CERTIFICATE-----
Generated at Sat May 31 16:50:39 2025 by rpki-client