Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
File:                     xyabEkxCDFXin7UdPBsNnUdsvQA.mft (raw, json)
Hash identifier:          sQ7XuiyucAaTwDO9x98bIptV6yGF/9nrG1Pwel+4bTI=
Subject key identifier:   3F:44:FA:B4:5D:99:AD:B9:2B:7A:B6:1B:01:E1:70:FC:F6:77:C4:B0
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Certificate issuer:       /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial:       18DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
Manifest number:          166C
Signing time:             Fri 30 May 2025 17:06:24 +0000
Manifest this update:     Fri 30 May 2025 17:06:23 +0000
Manifest next update:     Fri 06 Jun 2025 17:06:23 +0000
Files and hashes:         1: xyabEkxCDFXin7UdPBsNnUdsvQA.crl (hash: DXLCHlNBKeehXGFt03vxhZ8Rygu6RAf9Dq9ZgMc3yPU=)
                          2: 777818EE811411EABAD68C17C4F9AE02.roa (hash: AYwjfzOLPTmG7z9NvYZDm/mHhfqCCVfpNfx9X2vJSis=)
                          3: FCDECBBE538711EA81ECEB2EC4F9AE02.roa (hash: 9mCpQyOqxP3hpBsMe2es1MzwnHy+Qdhg6LSTrBrkNfk=)
                          4: 4996DBD6FC6111EA9BE8AB1AC4F9AE02.roa (hash: m341WV0PD/1DlxScFlxuiYsnv0C/NfxZjJ04ilTVB14=)
                          5: E6F611DADD1211EABAE49278C4F9AE02.roa (hash: dQ4bSYpM2y6wS8g46IwKxU7UeDcCgsIQMFPtXkdp500=)
                          6: 31DEDB2CDAAE11E9A0D2D77BC4F9AE02.roa (hash: +zHWe7K4sl8FHAMnM2ZsIgre4S6LiScoBQqJprb1EOY=)
                          7: 2F6ACEDCDAAE11E9A0D2D77BC4F9AE02.roa (hash: pkh2hfenIiAn8U7TOGhtGj1MoC/TNo4kLFr8AuD1Epw=)
                          8: 311A9A8CDAAE11E9A0D2D77BC4F9AE02.roa (hash: ScHvXAz+0AzcbByuabRwjo1ALGYLXsL7ChKJXdiVk6g=)
                          9: 910426E4539811EAB7BED96CC4F9AE02.roa (hash: YIt68PYPeFNs14TOKRBnX3wb5yR24CCwcGmNtVFKTE8=)
                          10: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (hash: 6aM84CNb8irWmVt4+XNONqikGsTOH1IqPn4HXAgLNBs=)
                          11: 2EEE5866DAAE11E9A0D2D77BC4F9AE02.roa (hash: zDepp9eY/uesLKDU+qiv1MyGjozHNbjBC+4+m/koJf8=)
                          12: 17C5C2EE0AC511F0B49A897EC4F9AE02.roa (hash: K9Z6BonmUzy423wGSqURiFZpSiAZAgbS8kqKahHQ+jI=)
                          13: EE744ACAD55C11EAA224E026C4F9AE02.roa (hash: GaCuLP6+h11nA82tyoCLeH9ngZZwhyimBkdAe/FCr0Q=)
                          14: 2C0D015EABA211EAB7C51982C4F9AE02.roa (hash: O1uLgY2Yilnqn6pFCenqqz8QiGlXjYq4srbwfo9+hUc=)
                          15: 0861EEFA881A11EFA769B787C4F9AE02.roa (hash: +i++W5mlqwk8JMjOGfpIrNWTZgaQE2QIy/eXdMEnYjg=)
                          16: 67060F128B9F11EA97BB8046C4F9AE02.roa (hash: Bja+pXwIkwi+wu7Wy1czg9tcaeGtk3ByqmVnXr1h7PU=)
                          17: 8489DCB2DD1111EA9D8EEB74C4F9AE02.roa (hash: YJhwsUrB6FBIWjfO5wWMann60eKFFdl5Fnp2QU71FgI=)
                          18: 6BDD8DBA4AD811EFAECCDA0FC4F9AE02.roa (hash: BWwN+rSwN6rW0OuvKIjRy/DxdNfSdNjFhYIfzEYQUBQ=)
                          19: 900AE11A539811EAB7BED96CC4F9AE02.roa (hash: FOJZ4BQr1BzTJakhN9QQ/ukK2wZIeA5tNJm4H+ECBeo=)
                          20: 678B44F28B9F11EA97BB8046C4F9AE02.roa (hash: Y1ZDcwtp4WpP7AO3uuMh550NrbR6Z6/rzhbDD2cnMZ8=)
                          21: 6687BE468B9F11EA97BB8046C4F9AE02.roa (hash: 8vB9Zc35hdCK5FdcysWa85qY29XHt9eDTH3wwBo6iAY=)
                          22: 97AAC8FE86A011EB8BEAC92BC4F9AE02.roa (hash: j8JrS+AqnkCckpa8gG946yMRu94Md+3E6AE+h/Sfwzw=)
                          23: 54C069B0523211EBAD962F7AC4F9AE02.roa (hash: ndDo6V/PgJ7lhP3TRJ1Y+opY3nB3jcqOWJJ1/gi94EE=)
                          24: 3AED95046D0111ECA5893B2BC4F9AE02.roa (hash: aLX0spZdD1HmaR+qKo3b5UUfl5pW1J8tkF+sIveKmK8=)
                          25: B9FF8C12120A11EEBF7A0D72C4F9AE02.roa (hash: BS5loHb1CLlIkVBJWnAWF3jPxnpA/ZuyFhucMr/QfG8=)
                          26: F2DC6FDA590111EE965F2E48C4F9AE02.roa (hash: HTzMC3WZ8k53yDwolEQylT+rsJaJEkKsbwZpfv/Evks=)
                          27: FDDC1EAECA0711EE9429754DC4F9AE02.roa (hash: rx0eRPu2xzrisWwtDOzb2vQcxB4j/OQ/aSmmEmceSy8=)
                          28: 0351889A90C511EFBAE1BD70C4F9AE02.roa (hash: KkLYRb2fWAYBylaV1ZMgwdRHTaPjELImf+d59GtwC30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 06 Jun 2025 17:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6364 (0x18dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
        Validity
            Not Before: May 30 17:06:23 2025 GMT
            Not After : Jun  6 17:06:23 2025 GMT
        Subject: CN=6839e590-65c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:04:d7:5e:ea:40:0c:ed:5e:7f:10:16:c6:8d:
                    d2:d1:3f:36:64:75:0f:f8:98:4c:14:84:0b:f2:a6:
                    90:25:c7:96:39:26:89:33:23:15:d9:bc:cc:12:cb:
                    33:da:e3:e6:91:d1:cc:c4:72:d7:38:fb:6d:29:6b:
                    34:27:c9:29:3b:8e:32:df:3c:35:a6:d1:33:03:d9:
                    0c:9b:85:c1:2d:75:e8:ed:f5:a1:fb:2c:5c:20:0c:
                    a2:8f:8a:ff:be:e9:a8:4f:37:97:ec:7d:cd:0c:be:
                    33:11:9f:7b:ba:1d:53:6a:ef:27:23:e6:75:38:18:
                    e8:d2:df:c1:df:b6:74:75:8f:6e:df:21:c8:ee:93:
                    aa:f2:cd:d3:1e:00:e1:fa:78:51:56:18:ff:d9:3e:
                    9d:f9:1b:85:7b:c9:aa:6b:4b:1f:8e:8e:88:41:0b:
                    0a:32:a9:bb:59:77:1e:47:82:d7:e5:75:33:f1:8e:
                    bf:b1:d4:c6:93:1a:35:0f:d8:36:33:92:d0:8e:3d:
                    cd:1a:a4:77:04:d1:20:b4:3b:cb:82:fd:56:4d:b8:
                    c8:d4:b2:5b:11:cf:bd:8b:53:b6:ba:49:3d:13:89:
                    ed:af:39:29:4f:59:04:46:c7:b4:a1:c5:a5:39:94:
                    39:9d:9b:24:66:51:39:98:b7:c6:6c:d2:6c:11:f6:
                    ad:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:44:FA:B4:5D:99:AD:B9:2B:7A:B6:1B:01:E1:70:FC:F6:77:C4:B0
            X509v3 Authority Key Identifier:
                keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:76:0a:f6:1f:ae:89:85:f7:34:1e:78:c6:72:ff:eb:0b:88:
         ed:c0:ae:cd:ea:51:85:f6:8a:3a:6e:dd:5d:b5:8f:df:c8:c1:
         e3:51:41:21:fd:23:31:cb:44:74:d0:99:38:b9:8e:3d:f1:9a:
         0b:9f:d1:03:79:5d:7a:90:e9:18:95:c4:0c:a6:c4:e6:ca:1e:
         c7:ed:40:72:a3:a5:60:19:f6:49:ac:58:ff:cf:3c:ee:6d:56:
         d4:b6:2e:45:12:5c:55:7e:4b:85:83:d4:65:9f:4d:ec:4c:06:
         ce:10:95:6f:c1:9a:2c:bb:bb:e9:f5:b2:a2:eb:e2:fb:71:5e:
         6b:df:22:7b:d9:64:6f:f7:ef:45:a6:cb:23:e7:76:10:b3:88:
         99:67:74:42:83:53:8f:07:54:21:04:c1:6c:27:28:08:cb:b2:
         70:0e:3c:9e:ef:f9:3e:27:01:10:ef:14:b0:4b:5f:b8:fa:04:
         4d:10:9b:14:9f:5a:c1:5e:88:d3:df:f9:da:5e:92:10:4b:51:
         8e:5f:de:dc:ac:c5:91:02:7a:c8:33:7b:31:32:dd:34:88:d2:
         08:5d:f7:30:34:84:18:4b:be:04:a2:49:51:4b:b1:f1:df:2a:
         8f:8a:91:2a:83:23:e0:18:06:e9:b9:13:fb:cc:4d:19:83:23:
         99:28:05:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 31 17:45:01 2025 by rpki-client