Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File:                     aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier:          d6Fj/SLwZlt5wED0UXq9Ik+L+SxcjSeab5MPvaDSfc4=
Subject key identifier:   CA:09:36:D3:02:FE:56:5A:69:0C:C3:4D:95:6A:30:8A:83:9F:FE:F3
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer:       /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial:       08A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number:          0845
Signing time:             Fri 30 May 2025 21:18:36 +0000
Manifest this update:     Fri 30 May 2025 21:18:35 +0000
Manifest next update:     Fri 06 Jun 2025 21:18:35 +0000
Files and hashes:         1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: 0HIq5xOOhMloXLYcaenoZU4qZsrDQDfXDK5fbP5I7WE=)
                          2: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: fAr1enb5w/370RjL/x8r/ZzPE+PyrRrXS5WPT3O+CnA=)
                          3: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: 7nhlkenTW8+xvmT1j5rdicJEKIXjxqwvtJaZOI4Twq8=)
                          4: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: hEWt+XscoSIRvNspgT17O6QA8xkXvwSyDLinflFHJWs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
                          rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 21:18:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211 (0x8a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
        Validity
            Not Before: May 30 21:18:35 2025 GMT
            Not After : Jun  6 21:18:35 2025 GMT
        Subject: CN=683a20ac-fab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:5a:a0:53:9c:56:4a:bc:a9:86:fe:b0:33:f8:
                    82:1a:6d:3d:66:84:d7:f6:d9:19:aa:33:84:49:42:
                    5f:c2:4f:ed:ba:c6:61:47:b8:9d:39:47:81:41:51:
                    cb:2a:e6:a1:99:53:14:ec:a0:ad:cd:f3:fe:1d:3d:
                    94:d7:69:03:b8:7a:9d:bc:18:42:f1:b9:9f:40:64:
                    70:22:f1:4d:64:4c:83:72:95:f1:4c:67:99:56:6e:
                    f2:d4:fb:74:ab:60:aa:a1:4c:7b:c7:43:e0:8d:9c:
                    b0:ab:63:b9:99:43:59:91:76:10:d8:0c:69:db:bd:
                    a5:fc:aa:6a:f0:17:6f:91:8d:c3:6a:94:2d:47:26:
                    92:a1:8f:ff:c5:6d:10:65:02:0e:00:b1:19:73:53:
                    53:b1:96:6d:36:eb:3a:08:33:07:d8:f2:8a:c3:82:
                    9b:52:9b:12:a5:58:99:ac:e3:3a:ca:3a:12:a4:5c:
                    01:04:64:44:fa:8f:5c:c7:35:c5:75:a2:2f:1d:36:
                    02:01:a8:e9:b6:b8:71:04:34:a7:31:e9:ad:60:80:
                    b2:da:76:ae:06:37:a3:2d:4b:cf:fd:3d:03:65:54:
                    7e:4f:8a:db:08:fd:4e:58:a1:91:26:6b:59:19:98:
                    44:6c:c4:2e:c2:d2:2b:54:1e:f8:9e:84:ed:d6:17:
                    e2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:09:36:D3:02:FE:56:5A:69:0C:C3:4D:95:6A:30:8A:83:9F:FE:F3
            X509v3 Authority Key Identifier:
                keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:22:e8:d7:b8:31:1e:d6:ab:59:ba:b0:2f:11:76:39:d2:97:
         0a:89:ec:f5:59:d0:23:9e:07:13:85:c0:0e:da:18:a6:37:e8:
         7c:ad:78:ba:66:50:1d:ad:c6:96:c2:4b:2c:09:33:a7:b1:6e:
         97:90:08:6b:1d:26:ef:0c:af:36:de:10:4f:16:aa:3c:9c:fe:
         59:fe:3f:56:8b:34:eb:a6:58:e5:67:12:0f:28:d9:c3:05:54:
         3f:7b:04:a0:87:ab:a0:f4:d5:16:a5:0a:34:cf:a4:1f:c8:54:
         dc:dd:b4:4b:c7:65:aa:b0:ed:0d:97:b9:bb:62:0d:63:37:c2:
         ac:d0:80:91:84:04:0b:a1:d9:53:d2:be:fc:18:00:44:27:b5:
         02:01:85:49:16:d2:5d:dc:e2:ed:f3:4a:27:1c:8b:8a:01:4c:
         1a:26:5d:5f:d8:f9:00:ea:e6:c5:dd:5c:e4:e8:16:b2:f0:1d:
         59:ab:87:5d:02:6b:56:76:52:46:6e:68:4f:90:3e:ef:b5:85:
         f0:61:90:0b:5a:c6:c5:6e:57:d6:8a:f4:3d:f2:d4:ad:1c:94:
         5e:9a:33:a3:06:b3:3a:27:a0:9c:d4:97:3e:a6:c3:c2:7e:e4:
         3c:b8:44:e3:e0:39:43:b6:63:c1:81:eb:78:fb:d1:06:fb:38:
         81:ad:16:5c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTkxOTcxMTAvBgNVBAUTKDY4MzVEREZCODQzOEQyNEJCNkM1OTc5MzE2RTU0ODkx
MDY2MDkwQTcwHhcNMjUwNTMwMjExODM1WhcNMjUwNjA2MjExODM1WjAYMRYwFAYD
VQQDEw02ODNhMjBhYy1mYWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7FqgU5xWSryphv6wM/iCGm09ZoTX9tkZqjOESUJfwk/tusZhR7idOUeBQVHL
KuahmVMU7KCtzfP+HT2U12kDuHqdvBhC8bmfQGRwIvFNZEyDcpXxTGeZVm7y1Pt0
q2CqoUx7x0PgjZywq2O5mUNZkXYQ2Axp272l/Kpq8BdvkY3DapQtRyaSoY//xW0Q
ZQIOALEZc1NTsZZtNus6CDMH2PKKw4KbUpsSpViZrOM6yjoSpFwBBGRE+o9cxzXF
daIvHTYCAajptrhxBDSnMemtYICy2nauBjejLUvP/T0DZVR+T4rbCP1OWKGRJmtZ
GZhEbMQuwtIrVB74noTt1hfikQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMoJNtMC
/lZaaQzDTZVqMIqDn/7zMB8GA1UdIwQYMBaAFGg13fuEONJLtsWXkxblSJEGYJCn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTE5Ny84NEIyRUM5OEYy
N0QxMUVBOTQ1NkVFNjBDNEY5QUUwMi9hRFhkLTRRNDBrdTJ4WmVURnVWSWtRWmdr
S2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FEWGQtNFE0MGt1MnhaZVRGdVZJa1FaZ2tLYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
OTE5Ny84NEIyRUM5OEYyN0QxMUVBOTQ1NkVFNjBDNEY5QUUwMi9hRFhkLTRRNDBr
dTJ4WmVURnVWSWtRWmdrS2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDAIujXuDEe1qtZurAvEXY50pcKiez1WdAjngcThcAO2himN+h8rXi6
ZlAdrcaWwkssCTOnsW6XkAhrHSbvDK823hBPFqo8nP5Z/j9WizTrpljlZxIPKNnD
BVQ/ewSgh6ug9NUWpQo0z6QfyFTc3bRLx2WqsO0Nl7m7Yg1jN8Ks0ICRhAQLodlT
0r78GABEJ7UCAYVJFtJd3OLt80onHIuKAUwaJl1f2PkA6ubF3Vzk6Bay8B1Zq4dd
AmtWdlJGbmhPkD7vtYXwYZALWsbFblfWivQ98tStHJRemjOjBrM6J6Cc1Jc+psPC
fuQ8uETj4DlDtmPBget4+9EG+ziBrRZc
-----END CERTIFICATE-----
Generated at Sat May 31 17:30:19 2025 by rpki-client