Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
File:                     v1g_8H2jVv3igoGfR7zuJHUTEZo.mft (raw, json)
Hash identifier:          IZ7JLcVdM5Tl4AP20OTHMpEoR4b9Uw1CvDuFcNJsIw0=
Subject key identifier:   DC:0E:D4:A2:AE:7B:44:72:1F:64:CF:A1:39:C8:5F:5B:14:13:9A:48
Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A
Certificate issuer:       /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
Certificate serial:       34A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
Manifest number:          348D
Signing time:             Thu 24 Apr 2025 14:27:39 +0000
Manifest this update:     Thu 24 Apr 2025 14:27:38 +0000
Manifest next update:     Thu 01 May 2025 14:27:38 +0000
Files and hashes:         1: v1g_8H2jVv3igoGfR7zuJHUTEZo.crl (hash: F9DSo1DBjVQjz3bw01WyKp1S9WDmmTOXvtFux33/+ao=)
                          2: 6A1ACEF4D5B711ECB09BCC49C4F9AE02.roa (hash: awbho/uZ6QmNOlz47rfC29uNcbM+u0ajdUiQ48qQdes=)
                          3: F73D1642F30B11EFA86D9348C4F9AE02.roa (hash: OiDTuOtU2sr+4kSXlrCpirnD6tpZhdVqcG76Sqtu1lo=)
                          4: 60629332FE4611EFB15A9D48C4F9AE02.roa (hash: 3EtrP079py1XOOa3Ek7irmapcKEfNhwqmeBlfZT1l7s=)
                          5: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (hash: G+KGkA6ntZoSU6izS9Aco3EHQif4B2SP1cehoseXxzY=)
                          6: B3C4F6FCC8E811EFA15E172AC4F9AE02.roa (hash: nKSePsS9MPGNfom4Rnz59tSXOtuz0jzrRs8gfUCXxws=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl
                          rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 14:27:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13473 (0x34a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A
        Validity
            Not Before: Apr 24 14:27:38 2025 GMT
            Not After : May  1 14:27:38 2025 GMT
        Subject: CN=680a4a5b-7755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:d3:86:c0:f8:3a:41:c2:5b:aa:ad:bb:6d:
                    88:25:83:c3:83:62:cc:9b:95:86:72:67:4c:57:ca:
                    7b:5c:79:30:c8:06:4a:c2:0f:b2:ac:d4:66:d7:72:
                    24:c9:61:03:a4:41:1f:61:9c:32:f4:72:58:68:fc:
                    44:9d:a1:2d:77:fe:8d:d8:74:27:e1:1b:a7:5b:4d:
                    db:e3:c9:0f:21:f3:6f:ff:d4:f6:3e:72:03:2e:e1:
                    78:e7:73:74:a2:16:1f:45:98:8b:86:9d:a7:79:0a:
                    6f:0a:5b:ca:2d:6b:5a:8e:b6:ea:b9:fa:69:c3:cd:
                    7d:c6:2e:cb:75:3c:32:bc:b4:33:9a:91:6f:ef:5f:
                    0a:e0:77:6e:ea:a7:f7:47:c3:c3:9c:d1:30:24:e2:
                    42:69:03:c7:2b:bb:43:fe:90:3a:41:21:24:cd:39:
                    7f:a7:3f:69:15:a0:5b:2b:2c:f1:aa:40:bb:bd:a4:
                    76:d2:00:41:bf:05:bb:84:86:30:95:99:93:38:91:
                    fa:a3:28:a2:83:5b:74:5f:00:c4:01:18:07:a6:b6:
                    d2:c7:dc:0f:27:e8:0c:7f:30:cd:6a:73:83:e7:47:
                    95:78:33:1a:32:b7:e3:5d:45:4a:ed:d8:0c:e2:e3:
                    68:d7:a6:22:e9:d4:fc:35:b8:a7:73:3d:8d:c8:2f:
                    41:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0E:D4:A2:AE:7B:44:72:1F:64:CF:A1:39:C8:5F:5B:14:13:9A:48
            X509v3 Authority Key Identifier:
                keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:aa:39:0b:e3:8c:3c:da:d2:18:0f:da:4d:87:83:95:15:3d:
         53:a7:a2:a6:14:22:c2:58:28:9b:9f:b0:0b:e9:9f:ae:26:fa:
         dd:d9:db:07:ea:fb:53:49:19:e8:ea:cd:4c:3d:68:92:67:cb:
         c1:57:19:99:bd:d8:4d:82:d1:ac:5e:e6:0a:a6:4c:b5:98:64:
         59:39:79:a5:f3:90:95:e6:2c:51:be:d7:15:b4:fe:f5:72:bc:
         d2:de:55:37:03:7f:f1:eb:10:11:47:a1:d7:25:07:29:bf:4c:
         1f:18:55:ec:29:83:26:3c:ce:24:16:f9:45:93:fa:01:90:2e:
         a7:42:59:33:cf:ae:d2:5d:e1:86:d4:7f:02:7c:90:a4:96:15:
         3c:f0:03:18:6c:e7:20:5f:12:df:a8:50:b4:5a:21:ae:21:78:
         93:80:0c:f3:55:8d:ea:37:ba:ab:47:b2:f0:13:c8:00:8d:28:
         33:08:35:d4:55:6c:61:cc:28:5f:36:55:58:2c:4f:60:d2:a8:
         66:af:55:2b:0b:68:95:37:91:a5:be:21:ea:9d:c9:4d:27:f4:
         25:df:ae:72:01:98:6e:bb:f1:f6:8d:d2:5c:7d:95:fc:98:01:
         f4:3d:50:95:55:d9:f3:cf:be:22:98:1b:e5:36:45:87:df:08:
         58:f5:d1:b7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE0MkMxMTAvBgNVBAUTKEJGNTgzRkYwN0RBMzU2RkRFMjgyODE5RjQ3QkNFRTI0
NzUxMzExOUEwHhcNMjUwNDI0MTQyNzM4WhcNMjUwNTAxMTQyNzM4WjAYMRYwFAYD
VQQDEw02ODBhNGE1Yi03NzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwJzThsD4OkHCW6qtu22IJYPDg2LMm5WGcmdMV8p7XHkwyAZKwg+yrNRm13Ik
yWEDpEEfYZwy9HJYaPxEnaEtd/6N2HQn4RunW03b48kPIfNv/9T2PnIDLuF453N0
ohYfRZiLhp2neQpvClvKLWtajrbqufppw819xi7LdTwyvLQzmpFv718K4Hdu6qf3
R8PDnNEwJOJCaQPHK7tD/pA6QSEkzTl/pz9pFaBbKyzxqkC7vaR20gBBvwW7hIYw
lZmTOJH6oyiig1t0XwDEARgHprbSx9wPJ+gMfzDNanOD50eVeDMaMrfjXUVK7dgM
4uNo16Yi6dT8Nbincz2NyC9BTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwO1KKu
e0RyH2TPoTnIX1sUE5pIMB8GA1UdIwQYMBaAFL9YP/B9o1b94oKBn0e87iR1ExGa
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yMEIzN0NGRTFE
ODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2M2lnb0dmUjd6dUpIVVRF
Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3YxZ184SDJqVnYzaWdvR2ZSN3p1SkhVVEVaby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
MTQyQy8yMEIzN0NGRTFEODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2
M2lnb0dmUjd6dUpIVVRFWm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQABqjkL44w82tIYD9pNh4OVFT1Tp6KmFCLCWCibn7AL6Z+uJvrd2dsH
6vtTSRno6s1MPWiSZ8vBVxmZvdhNgtGsXuYKpky1mGRZOXml85CV5ixRvtcVtP71
crzS3lU3A3/x6xARR6HXJQcpv0wfGFXsKYMmPM4kFvlFk/oBkC6nQlkzz67SXeGG
1H8CfJCklhU88AMYbOcgXxLfqFC0WiGuIXiTgAzzVY3qN7qrR7LwE8gAjSgzCDXU
VWxhzChfNlVYLE9g0qhmr1UrC2iVN5GlviHqnclNJ/Ql365yAZhuu/H2jdJcfZX8
mAH0PVCVVdnzz74imBvlNkWH3whY9dG3
-----END CERTIFICATE-----
Generated at Sat Apr 26 03:37:18 2025 by rpki-client