Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft
File:                     11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft (raw, json)
Hash identifier:          shKs+M0haDQQXV/V4llqZPTdso30LUVaBbGrhNeILqU=
Subject key identifier:   61:86:91:DC:D2:59:27:A6:39:01:C9:2E:08:DF:83:09:79:B5:87:C5
Authority key identifier: 11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E
Certificate issuer:       /CN=A9150E4D0000/serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E
Certificate serial:       7A770E3DC1648C60A61A8D93C761A1942339D8C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft
Manifest number:          34
Signing time:             Tue 01 Jul 2025 03:53:43 +0000
Manifest this update:     Tue 01 Jul 2025 03:48:43 +0000
Manifest next update:     Wed 02 Jul 2025 05:25:43 +0000
Files and hashes:         1: 323430313a323036303a313535333a3a2f34382d3438203d3e20313437303230.roa (hash: p56jKGDnZy0odzuqRLDt6KGoRHxrntrEb2DvSnF7d9U=)
                          2: 323430313a323036303a313030303a3a2f33362d3336203d3e20313437303230.roa (hash: 6A+RAPF1FjajEq+hpmFTSc6gNJm2L4qY2MERJgDbUes=)
                          3: 323430313a323036303a323030303a3a2f33362d3336203d3e20313437303230.roa (hash: 8II/IFTY+LP0pWi3oLfnXuFrdxfoiIGgtzec2awSL/A=)
                          4: 323430313a323036303a323030303a3a2f33372d3337203d3e20313437303230.roa (hash: I86A9AHpVObLATZ5x2f8YD14CFGypt+UhFXqpAsqh+0=)
                          5: 323430313a323036303a313830303a3a2f33372d3337203d3e20313437303230.roa (hash: dI9YZ5HtehBR+T9kErZjaVCUzl0Fzs/q66xnkWL0ZBU=)
                          6: 3C63FBDA23EE1D2BFADB806544E553DDBA294ACF.cer (hash: 8onmoKxdaUxxj1P8sYqyF5yt9nVEes+Ox3xRaYWpPIM=)
                          7: 323430313a323036303a313430303a3a2f33392d3339203d3e20313437303230.roa (hash: RjYCBKxZFNxUfiGPhehp3rBcB1aAaC6e1z+F6aSbVVM=)
                          8: 11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl (hash: v61dzg4mN5dkTLcIF+BshmrdlKtGyr/iWfoOCK6Y6Is=)
                          9: 323430313a323036303a613030303a3a2f33362d3336203d3e20313437303230.roa (hash: etXTXI6lbK25AX21MqAoN1F7hKLAxARtW9oHZFK0R+o=)
                          10: 323430313a323036303a313030303a3a2f33372d3337203d3e20313437303230.roa (hash: 8OZ5uimSQhMcw5M/9HtEUketNAUaq1er5Yc08KxF23U=)
                          11: 3130332e3234382e35302e302f32332d3234203d3e20313437303230.roa (hash: V+PhSi6pVp1iwPmgYPUX+HImgtKayc1/tbkxWsFH5ls=)
                          12: 323430313a323036303a323030303a3a2f34382d3438203d3e20313437303230.roa (hash: tdTJWV1kjl3fW2WopQtOnWEV4oRq2kC0+0O6ZDe4+LQ=)
                          13: 323430313a323036303a323830303a3a2f33372d3337203d3e20313437303230.roa (hash: vFw/WSs6D6jd2Ze4eBe2w3dDlJC6SLr66QvmUP7RTNg=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl
                          rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Jul 2025 05:25:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:77:0e:3d:c1:64:8c:60:a6:1a:8d:93:c7:61:a1:94:23:39:d8:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150E4D0000, serialNumber=11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E
        Validity
            Not Before: Jul  1 03:48:43 2025 GMT
            Not After : Jul  2 05:25:43 2025 GMT
        Subject: CN=618691DCD25927A63901C92E08DF830979B587C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e5:92:5d:c7:33:59:88:e8:ed:f4:76:bf:3c:
                    f0:38:82:5a:e3:e7:04:a7:e5:53:70:3b:97:30:5d:
                    6b:77:36:d2:f5:f4:94:87:45:dc:41:37:da:5e:70:
                    3a:8c:e2:4e:95:c9:c8:b3:54:59:65:db:8e:0e:4a:
                    23:ed:f7:c3:59:7e:61:18:df:a1:99:05:f2:a4:3b:
                    a8:e5:72:7e:35:c5:fe:c5:39:ab:dc:f6:dc:e4:80:
                    c1:a7:1a:b1:3d:30:df:48:8c:1e:ab:29:e7:a9:a3:
                    05:72:25:90:13:f1:6d:b1:d2:ee:9c:82:dc:5e:18:
                    7b:16:bc:47:46:c9:23:d2:1c:b0:51:4b:48:75:30:
                    65:30:8e:fb:ed:c8:15:85:2a:17:f4:e7:23:6d:be:
                    45:0a:fa:f4:d9:48:3f:c8:1d:c7:a7:39:d5:7e:b7:
                    56:34:98:b9:3f:c6:e0:62:da:f7:d0:1b:a3:00:8b:
                    61:48:b7:f7:10:0b:e4:17:24:1d:a5:32:6d:bd:b6:
                    60:65:46:75:cb:55:dc:c5:bd:42:ef:b8:ed:ca:7d:
                    e9:b7:64:a0:cb:79:98:f0:fc:a6:3e:c4:21:86:a1:
                    17:5b:2d:e2:49:0a:2f:b0:d1:41:0f:03:d3:dc:23:
                    fc:56:50:66:bb:3b:42:a2:72:ce:91:a8:6f:49:7d:
                    16:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:86:91:DC:D2:59:27:A6:39:01:C9:2E:08:DF:83:09:79:B5:87:C5
            X509v3 Authority Key Identifier:
                keyid:11:F9:8F:3F:8D:D4:F5:5C:C7:FF:B7:A4:BA:CC:65:6E:0D:19:3D:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfmPP43U9VzH_7ekusxlbg0ZPR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9150E4D0000/0/11F98F3F8DD4F55CC7FFB7A4BACC656E0D193D1E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:cd:b8:c1:e0:19:1a:ea:d9:8b:46:eb:1c:ca:09:73:5d:bf:
         a7:53:b2:18:2d:89:a6:8a:8a:a6:6f:eb:73:e3:f3:4f:2c:0a:
         b2:c5:e0:62:2d:c0:8d:94:09:d7:e5:17:36:0f:e0:9d:60:b9:
         91:ae:0e:bd:18:0d:83:a7:06:f6:2e:48:ca:36:c9:f8:f2:9e:
         56:c7:6f:19:eb:79:06:92:fd:f1:84:82:d7:95:39:7a:1b:0e:
         f5:ad:96:9f:3a:c2:59:61:9a:2f:25:f3:bc:8e:64:72:2b:3d:
         95:2a:e3:4e:24:12:64:59:06:b7:5e:ea:8d:f6:6e:39:ae:1c:
         df:11:ec:5b:c7:45:2d:27:52:47:02:41:dd:71:fa:76:54:41:
         db:44:bd:8e:d6:86:64:c8:b5:78:34:8c:99:9f:28:8f:d7:ef:
         62:31:e1:6c:86:21:26:1a:03:dc:5a:27:29:f8:20:49:d3:9b:
         85:e6:79:99:6f:2e:cf:81:cf:08:8f:24:4d:e9:2f:94:bc:03:
         2c:e4:27:f3:c1:79:c7:3e:8e:3a:02:93:dd:a9:ca:ed:f5:87:
         98:d8:3a:8a:ca:5f:2a:bc:56:a6:16:42:9c:ca:8c:91:68:6d:
         6d:89:0e:d8:2d:93:69:d6:3b:29:b5:1b:38:02:40:6b:cc:3c:
         29:8c:cb:0c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUencOPcFkjGCmGo2Tx2GhlCM52MIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxNTBFNEQwMDAwMTEwLwYDVQQFEygxMUY5OEYzRjhE
RDRGNTVDQzdGRkI3QTRCQUNDNjU2RTBEMTkzRDFFMB4XDTI1MDcwMTAzNDg0M1oX
DTI1MDcwMjA1MjU0M1owMzExMC8GA1UEAxMoNjE4NjkxRENEMjU5MjdBNjM5MDFD
OTJFMDhERjgzMDk3OUI1ODdDNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMjlkl3HM1mI6O30dr888DiCWuPnBKflU3A7lzBda3c20vX0lIdF3EE32l5w
OoziTpXJyLNUWWXbjg5KI+33w1l+YRjfoZkF8qQ7qOVyfjXF/sU5q9z23OSAwaca
sT0w30iMHqsp56mjBXIlkBPxbbHS7pyC3F4Yexa8R0bJI9IcsFFLSHUwZTCO++3I
FYUqF/TnI22+RQr69NlIP8gdx6c51X63VjSYuT/G4GLa99AbowCLYUi39xAL5Bck
HaUybb22YGVGdctV3MW9Qu+47cp96bdkoMt5mPD8pj7EIYahF1st4kkKL7DRQQ8D
09wj/FZQZrs7QqJyzpGob0l9Ft0CAwEAAaOCAhswggIXMB0GA1UdDgQWBBRhhpHc
0lknpjkByS4I34MJebWHxTAfBgNVHSMEGDAWgBQR+Y8/jdT1XMf/t6S6zGVuDRk9
HjAOBgNVHQ8BAf8EBAMCB4AwcgYDVR0fBGswaTBnoGWgY4ZhcnN5bmM6Ly9ycGtp
LnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0RDAwMDAvMC8xMUY5OEYz
RjhERDRGNTVDQzdGRkI3QTRCQUNDNjU2RTBEMTkzRDFFLmNybDB+BggrBgEFBQcB
AQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3Np
dG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9FZm1QUDQzVTlW
ekhfN2VrdXN4bGJnMFpQUjQuY2VyMH0GCCsGAQUFBwELBHEwbzBtBggrBgEFBQcw
C4ZhcnN5bmM6Ly9ycGtpLnN1Yi5hcG5pYy5uZXQvcmVwb3NpdG9yeS9BOTE1MEU0
RDAwMDAvMC8xMUY5OEYzRjhERDRGNTVDQzdGRkI3QTRCQUNDNjU2RTBEMTkzRDFF
Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIw
EDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAs824weAZGurZi0brHMoJc12/p1OyGC2JpoqKpm/rc+PzTywK
ssXgYi3AjZQJ1+UXNg/gnWC5ka4OvRgNg6cG9i5IyjbJ+PKeVsdvGet5BpL98YSC
15U5ehsO9a2WnzrCWWGaLyXzvI5kcis9lSrjTiQSZFkGt17qjfZuOa4c3xHsW8dF
LSdSRwJB3XH6dlRB20S9jtaGZMi1eDSMmZ8oj9fvYjHhbIYhJhoD3FonKfggSdOb
heZ5mW8uz4HPCI8kTekvlLwDLOQn88F5xz6OOgKT3anK7fWHmNg6ispfKrxWphZC
nMqMkWhtbYkO2C2TadY7KbUbOAJAa8w8KYzLDA==
-----END CERTIFICATE-----
Generated at Tue Jul 1 19:29:12 2025 by rpki-client