Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
File:                     gopH06xuawNgEcIzIxcKlzG60iQ.mft (raw, json)
Hash identifier:          HrHtATQ1NEW+KL365gOL3YZfCwQN9SWRjhWXr4esdl4=
Subject key identifier:   B2:86:D7:87:FD:57:A2:1C:E8:74:4B:4A:75:CC:5D:42:66:F0:A3:CA
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Certificate issuer:       /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial:       A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
Manifest number:          90
Signing time:             Sat 31 May 2025 06:21:20 +0000
Manifest this update:     Sat 31 May 2025 06:21:19 +0000
Manifest next update:     Sat 07 Jun 2025 06:21:19 +0000
Files and hashes:         1: gopH06xuawNgEcIzIxcKlzG60iQ.crl (hash: t6Ftuw4ZQvO3FV+2Ouscva11Du0g6WtR3FIQDfMBzUs=)
                          2: E8C350C839FA11F0A6109C5AC4F9AE02.roa (hash: pogoeA9Gn1DtYbCSaz2wC+J8V+7Rp5s9U9o3boqYro4=)
                          3: D83A0A7E1DAF11F0B2131B09C4F9AE02.roa (hash: 919/QrkbKK7KbwR685ZBie0PZUotLL4IkEQTf5I8BR0=)
                          4: CA79E350BF6D11EF9730D429C4F9AE02.roa (hash: mcdJMOUjsrYKOdvCk8ygrPicEK3lHYQ2f0C8eBymCfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 06:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 162 (0xa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
        Validity
            Not Before: May 31 06:21:19 2025 GMT
            Not After : Jun  7 06:21:19 2025 GMT
        Subject: CN=683a9fe0-14a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:dd:c3:bd:11:c9:37:99:2d:41:72:2e:e2:94:
                    46:30:92:89:fd:d5:c3:a8:a6:27:cd:f9:1a:c8:0f:
                    4e:6d:a4:80:72:a7:65:32:5b:28:ea:31:27:85:6d:
                    01:5f:d9:ae:3d:e0:0b:09:fe:df:61:40:b6:9e:66:
                    bf:b9:29:a0:49:f4:42:49:43:9c:8e:cd:79:46:6e:
                    b8:f0:1f:56:40:89:a2:3c:e3:6e:b7:cb:48:a6:31:
                    ec:6b:6e:a1:83:c9:52:56:c0:96:bb:9d:7f:93:22:
                    2b:91:a9:0e:9b:2b:14:6e:63:55:26:3b:16:4c:40:
                    6e:46:c2:ca:94:3f:f6:4c:fb:c7:70:b6:57:47:6b:
                    54:45:71:9a:d3:fd:8c:0f:be:c6:1c:46:a0:c6:34:
                    8d:02:cd:4a:47:be:54:01:cb:a6:92:66:e8:04:3a:
                    6a:0e:9c:85:60:df:d6:75:f6:67:e6:81:55:7a:85:
                    e1:7d:78:a5:6e:3b:d4:fb:40:59:9a:19:0b:11:64:
                    07:4c:19:ae:c2:26:17:23:83:4e:e3:4e:07:c2:90:
                    dc:5d:ba:b2:7f:55:2a:2d:c5:59:a2:70:f0:a0:85:
                    70:97:b0:9b:21:e9:05:c5:b5:91:89:c8:6b:a8:e0:
                    db:1f:97:63:40:44:5c:f2:22:80:55:e9:b8:98:fb:
                    3c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:86:D7:87:FD:57:A2:1C:E8:74:4B:4A:75:CC:5D:42:66:F0:A3:CA
            X509v3 Authority Key Identifier:
                keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ac:4f:c4:9b:7c:83:79:2c:5d:68:15:c1:12:14:76:d7:8c:
         c5:b9:66:4b:4b:6a:39:5d:d2:31:43:1f:0a:78:e8:76:6d:d1:
         87:c9:8d:a2:40:ca:2f:85:fb:8b:9e:42:d5:16:c2:ca:5a:9e:
         31:75:91:fb:f3:01:68:85:13:79:bf:05:4a:56:8c:6f:53:6a:
         36:f9:71:3e:2c:42:52:ba:21:07:49:61:b8:b5:03:df:29:59:
         ff:91:57:fa:ea:05:5b:de:0a:df:b5:b2:fe:b1:c1:f5:b6:52:
         e0:4b:c3:0c:fa:85:ad:66:a4:0b:10:cf:c4:63:e2:0e:3f:87:
         4f:88:7c:40:c9:20:9b:ec:89:62:bb:3f:aa:32:1e:a7:7d:c7:
         46:36:67:63:4b:e7:86:62:dc:7a:a1:fb:43:ab:6a:cd:3a:2a:
         9e:3e:55:88:02:3f:f0:3d:ba:6a:c9:c4:af:81:e9:fc:8e:d5:
         3a:7d:9f:e2:2c:19:dc:d7:b6:0c:e3:64:ab:ba:22:d0:ae:b5:
         1e:eb:c6:6a:37:97:61:04:42:9c:b7:20:10:27:ab:92:d9:53:
         b6:9c:02:9e:ae:7e:a5:87:4f:99:1e:4c:d9:33:54:f5:53:10:
         6e:e8:7d:b1:ef:07:f6:7b:9a:fa:9a:8d:5c:f7:72:56:52:d8:
         48:59:37:8c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAKIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzU1Q0UxMTAvBgNVBAUTKDgyOEE0N0QzQUM2RTZCMDM2MDExQzIzMzIzMTcwQTk3
MzFCQUQyMjQwHhcNMjUwNTMxMDYyMTE5WhcNMjUwNjA3MDYyMTE5WjAYMRYwFAYD
VQQDEw02ODNhOWZlMC0xNGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7N3DvRHJN5ktQXIu4pRGMJKJ/dXDqKYnzfkayA9ObaSAcqdlMlso6jEnhW0B
X9muPeALCf7fYUC2nma/uSmgSfRCSUOcjs15Rm648B9WQImiPONut8tIpjHsa26h
g8lSVsCWu51/kyIrkakOmysUbmNVJjsWTEBuRsLKlD/2TPvHcLZXR2tURXGa0/2M
D77GHEagxjSNAs1KR75UAcumkmboBDpqDpyFYN/WdfZn5oFVeoXhfXilbjvU+0BZ
mhkLEWQHTBmuwiYXI4NO404HwpDcXbqyf1UqLcVZonDwoIVwl7CbIekFxbWRichr
qODbH5djQERc8iKAVem4mPs8OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKG14f9
V6Ic6HRLSnXMXUJm8KPKMB8GA1UdIwQYMBaAFIKKR9OsbmsDYBHCMyMXCpcxutIk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTVDRS80NTFBODIzQThC
N0IxMUVGODI5MDMyN0ZDNEY5QUUwMi9nb3BIMDZ4dWF3TmdFY0l6SXhjS2x6RzYw
aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dvcEgwNnh1YXdOZ0VjSXpJeGNLbHpHNjBpUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NTVDRS80NTFBODIzQThCN0IxMUVGODI5MDMyN0ZDNEY5QUUwMi9nb3BIMDZ4dWF3
TmdFY0l6SXhjS2x6RzYwaVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBbrE/Em3yDeSxdaBXBEhR214zFuWZLS2o5XdIxQx8KeOh2bdGHyY2i
QMovhfuLnkLVFsLKWp4xdZH78wFohRN5vwVKVoxvU2o2+XE+LEJSuiEHSWG4tQPf
KVn/kVf66gVb3grftbL+scH1tlLgS8MM+oWtZqQLEM/EY+IOP4dPiHxAySCb7Ili
uz+qMh6nfcdGNmdjS+eGYtx6oftDq2rNOiqePlWIAj/wPbpqycSvgen8jtU6fZ/i
LBnc17YM42SruiLQrrUe68ZqN5dhBEKctyAQJ6uS2VO2nAKern6lh0+ZHkzZM1T1
UxBu6H2x7wf2e5r6mo1c93JWUthIWTeM
-----END CERTIFICATE-----
Generated at Sat May 31 16:43:01 2025 by rpki-client