Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
File:                     Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft (raw, json)
Hash identifier:          h4xSrbUXJ9JVlFq9W5V1SvyJ0COusafHprJADKFxrqw=
Subject key identifier:   F4:51:3F:51:9E:DE:E1:E8:09:DC:77:6D:C5:9E:7C:24:23:82:BE:D9
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       0605
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
Manifest number:          0572
Signing time:             Fri 30 May 2025 23:48:34 +0000
Manifest this update:     Fri 30 May 2025 23:48:33 +0000
Manifest next update:     Fri 06 Jun 2025 23:48:33 +0000
Files and hashes:         1: Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl (hash: tcj8D6wSP1LRIdDgSYLb+FJ8pT9dhGm8cUqy2fMh6SM=)
                          2: 7480CB3208B611EDACE57065C4F9AE02.roa (hash: jCyCwXm2Df4axWoR3z9z8QPYmH54HyaICAVLuHdPDBc=)
                          3: 3962A56E5E0611EF8CB1F080C4F9AE02.roa (hash: 4xd2mN7Ax5rC2kZFZqcKmtUdp723D1QNJshZsXWgNB8=)
                          4: 76FA56B208B611EDACE57065C4F9AE02.roa (hash: I3TiTQI97S/iDWNW5QBw/7N6MZUvJuhLqCD9/DcXYyI=)
                          5: 76C6B0C8105511EC92580578C4F9AE02.roa (hash: /Ws5RvVkwvS6Nk8sVdQvN0Eg5OrZE/QVJiEoNcYoPyI=)
                          6: 9308C132ECF111EF9A19FA7BC4F9AE02.roa (hash: Pf7W2EeSQrnCpQNA3L1mFeCLKH0ywc3awVDPPh2eQiM=)
                          7: 7BE0CE60064911ECA853EB0FC4F9AE02.roa (hash: H5rhtkxiQCl6KawX/ZNxAsms3H+CgSSnGfvvoD3OwOU=)
                          8: 32E806F8878111EF9723F25DC4F9AE02.roa (hash: L5F1KGoYu5YZs+u9JEEumkpFuC41Zd5SKoGIwNq4vo0=)
                          9: 7B2B3168064911ECA853EB0FC4F9AE02.roa (hash: LJFG0FHuNHdH5wLtq3ShFCXW+xDnUS2QORT5xkQz4wI=)
                          10: 52564FC4836B11EE960BCA6FC4F9AE02.roa (hash: 1VJie0nCCZ3IBg900OIXPZucge83OX3RKmMvS9NKEBI=)
                          11: 9E8B4A3AB3B111EF8237BD72C4F9AE02.roa (hash: yr2wfquGHtrtVK4EjS3koNoxx+PtkmLBM4rgPfXzU3k=)
                          12: 4235F184DACE11EE8E67437CC4F9AE02.roa (hash: vC4UXjrHJ1z922WJWauMC07igQR8ZXrGlrFMLMIIdmQ=)
                          13: 46BE2FE6837B11EEB7855E0FC4F9AE02.roa (hash: S17jIs4ShXG/RDAI0ZHM+AsahRZnrIs9ci+3zHbr4D8=)
                          14: 791CA9EC064911ECA853EB0FC4F9AE02.roa (hash: Zj+n3qCyttH1ytU/yYNlhTWLTLTdnPQuAiYhIwxo9yE=)
                          15: 1D6F108A00D511ED9262EB53C4F9AE02.roa (hash: ER+mxMq7fWPop6Mh+I1B9cH//3Uv1rN8D8hXzTSIngw=)
                          16: F008FF08C22111ECB9FFB964C4F9AE02.roa (hash: cXjBvsRtIl+svOWf/EyRWnjN1gNAqB+MSWIrUrqj+AE=)
                          17: 9A7D9276665111EEAD781D28C4F9AE02.roa (hash: fgna4BFgY5fgXbtzlexb8AOJAD7eWBfMbx6rHPbmSBk=)
                          18: E13F8A68B3B011EF831E2748C4F9AE02.roa (hash: MQzeFjEdBFycQhi11Jp6s1Mnogtfz7WV2I//Hm39pik=)
                          19: 99C5A4CC201211EC8520994EC4F9AE02.roa (hash: z66+1lPfe2iKYHWapE3bg9lGWW5L9dGBakRNIKeqUAw=)
                          20: 73D3C5B808B611EDACE57065C4F9AE02.roa (hash: LETgw7oicQYo9EsyRO0ibmzq7tk3+7ky4OG3X+896Ew=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 23:48:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1541 (0x605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: May 30 23:48:33 2025 GMT
            Not After : Jun  6 23:48:33 2025 GMT
        Subject: CN=683a43d1-1a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:80:bd:1b:85:fd:38:aa:46:7e:5a:6e:d2:
                    24:e6:fc:ca:22:dd:3f:d6:b8:f0:41:4b:58:8d:4d:
                    4a:5e:f1:98:87:69:2f:88:ae:65:94:8c:54:3d:7d:
                    01:a8:9a:4b:b0:6f:a9:8c:de:73:4a:7c:be:1a:4f:
                    87:31:44:20:f6:3a:25:0c:6a:bd:48:ec:fc:17:b5:
                    ef:02:4e:0c:42:64:80:14:06:87:9c:6d:5a:2a:52:
                    66:47:d1:40:83:1a:04:cf:f0:d7:89:c5:4c:2c:c3:
                    5e:96:28:fb:ac:5e:19:4c:72:54:9a:ae:85:ac:f4:
                    76:e8:dd:20:0f:8a:38:93:8a:d9:80:ca:79:5d:9a:
                    c8:35:aa:0b:a4:c9:39:a8:51:45:07:5a:a3:0e:8f:
                    e2:19:dc:c4:51:0f:26:94:f6:7c:0d:a2:95:82:c9:
                    f2:f6:90:93:35:cc:6c:e1:89:77:5b:b4:a0:21:9d:
                    f2:b5:e4:c9:85:c4:a7:cb:7a:c8:81:03:8f:8d:05:
                    27:b9:a2:bc:3d:36:68:73:40:43:b3:8b:32:3b:a8:
                    7d:13:dd:6c:ac:59:71:6b:ac:34:8c:06:34:33:e1:
                    3a:11:14:8e:8a:4e:07:60:d4:19:8e:54:33:37:ac:
                    f8:99:bf:44:9f:38:85:f7:1d:d1:93:e0:5e:f4:9c:
                    09:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:51:3F:51:9E:DE:E1:E8:09:DC:77:6D:C5:9E:7C:24:23:82:BE:D9
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:62:7e:3a:ae:91:4c:5b:67:37:76:89:65:ff:f6:50:de:94:
         f1:7f:da:a3:39:02:85:21:a7:7b:06:2e:e6:7a:68:0e:14:6d:
         c8:17:a4:5d:8f:80:f0:86:4c:0c:b8:22:a4:7a:a9:9e:fb:1e:
         af:53:68:d7:95:52:ee:38:cc:31:c2:6d:f1:4b:80:97:1e:58:
         55:89:63:46:69:18:4b:c6:95:e9:8f:9e:ca:f3:e7:c0:12:a0:
         2e:78:0e:50:e8:76:6f:35:b9:27:c7:6c:fa:fd:78:5f:62:21:
         ad:1b:9d:3f:01:6c:cb:b4:ec:de:47:ba:3e:a7:2c:ba:1e:38:
         14:d6:25:0f:b2:1a:b4:1e:e3:f9:18:1e:70:a2:5e:46:aa:ab:
         a8:63:17:8e:d4:46:a4:a9:90:e7:96:81:0e:04:6c:3a:1d:1e:
         8e:db:79:82:3e:91:40:66:38:fa:0e:df:aa:11:e5:4c:d9:4a:
         5d:8f:28:bb:df:91:3f:e8:36:9e:67:53:ac:e9:19:cc:71:28:
         94:4b:6f:60:88:4e:10:9e:c2:0b:02:70:e2:90:dd:4a:37:3d:
         2a:5a:9d:3d:a8:ad:6e:33:c0:59:34:02:24:26:aa:af:2e:2a:
         99:1b:42:cc:78:f9:9b:89:65:bc:36:eb:97:b7:9b:75:2f:be:
         34:96:e8:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE
RDhDRUNEMDQwHhcNMjUwNTMwMjM0ODMzWhcNMjUwNjA2MjM0ODMzWjAYMRYwFAYD
VQQDEw02ODNhNDNkMS0xYTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx72AvRuF/TiqRn5abtIk5vzKIt0/1rjwQUtYjU1KXvGYh2kviK5llIxUPX0B
qJpLsG+pjN5zSny+Gk+HMUQg9jolDGq9SOz8F7XvAk4MQmSAFAaHnG1aKlJmR9FA
gxoEz/DXicVMLMNelij7rF4ZTHJUmq6FrPR26N0gD4o4k4rZgMp5XZrINaoLpMk5
qFFFB1qjDo/iGdzEUQ8mlPZ8DaKVgsny9pCTNcxs4Yl3W7SgIZ3yteTJhcSny3rI
gQOPjQUnuaK8PTZoc0BDs4syO6h9E91srFlxa6w0jAY0M+E6ERSOik4HYNQZjlQz
N6z4mb9EnziF9x3Rk+Be9JwJMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPRRP1Ge
3uHoCdx3bcWefCQjgr7ZMB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1
NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96
UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
NzU2MS9BMjZFMDZFMDA1NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBC
czlHUldIYVc1YV9kak96UVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCNYn46rpFMW2c3doll//ZQ3pTxf9qjOQKFIad7Bi7memgOFG3IF6Rd
j4DwhkwMuCKkeqme+x6vU2jXlVLuOMwxwm3xS4CXHlhViWNGaRhLxpXpj57K8+fA
EqAueA5Q6HZvNbknx2z6/XhfYiGtG50/AWzLtOzeR7o+pyy6HjgU1iUPshq0HuP5
GB5wol5GqquoYxeO1EakqZDnloEOBGw6HR6O23mCPpFAZjj6Dt+qEeVM2Updjyi7
35E/6DaeZ1Os6RnMcSiUS29giE4QnsILAnDikN1KNz0qWp09qK1uM8BZNAIkJqqv
LiqZG0LMePmbiWW8NuuXt5t1L740luiL
-----END CERTIFICATE-----
Generated at Sat May 31 17:24:46 2025 by rpki-client