Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
File:                     u7bmAQQ3QyUFSIC308E15vx8yrE.mft (raw, json)
Hash identifier:          jt/8/Pq8VFrPzyiD5dCmfeuvs12n+rnIOeAAOF2kbcM=
Subject key identifier:   23:AF:3E:F9:61:7B:AE:EA:7B:0E:0D:15:ED:13:9C:BA:4F:A3:A9:DC
Authority key identifier: BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1
Certificate issuer:       /CN=A912804A/serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
Certificate serial:       01DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
Manifest number:          01DA
Signing time:             Fri 25 Apr 2025 01:58:08 +0000
Manifest this update:     Fri 25 Apr 2025 01:58:08 +0000
Manifest next update:     Fri 02 May 2025 01:58:08 +0000
Files and hashes:         1: u7bmAQQ3QyUFSIC308E15vx8yrE.crl (hash: UA2Yev3F+t3Ne+3GG46f1o1QGwqSYrUlw03VYduocoY=)
                          2: CCB0DBA8CB2911EE9CE70483C4F9AE02.roa (hash: +L4H64N18c7HC9b7a2kMN0oPwzUDs4ByILHmodSVj7c=)
                          3: 003D7FEE15E811F0841B1A7DC4F9AE02.roa (hash: NzfvN2nV9saQebWeBwyNL6bb8Qj6DnzhJ2bxOu8Ukwk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl
                          rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912804A, serialNumber=BBB6E60104374325054880B7D3C135E6FC7CCAB1
        Validity
            Not Before: Apr 25 01:58:08 2025 GMT
            Not After : May  2 01:58:08 2025 GMT
        Subject: CN=680aec30-b402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:dc:3a:90:74:34:76:86:55:f0:ee:d6:f1:76:
                    3e:d3:29:07:f8:d0:31:a4:19:60:7c:3b:ea:43:a6:
                    bd:60:25:fe:08:ab:65:7d:39:e8:08:49:81:6a:c4:
                    41:4b:61:ae:32:30:c2:a6:9b:95:29:8e:45:75:f8:
                    f4:de:70:0e:50:9a:4c:91:29:15:90:39:a1:35:5f:
                    39:73:36:ba:af:d2:37:52:d5:33:1a:71:f1:da:ba:
                    60:45:6e:84:f9:d9:89:ea:68:86:5e:5c:9b:c3:f8:
                    83:e2:fb:ab:f5:1c:c3:88:ba:5b:a5:3b:29:70:52:
                    59:60:2c:2c:d6:2d:5c:55:4a:46:7f:06:e3:27:63:
                    77:f7:b1:f0:46:b2:4d:a7:3f:2a:bc:4f:46:78:f3:
                    a4:3d:a8:75:86:85:1d:6b:0e:a9:93:39:dc:a7:35:
                    40:b4:5e:ab:37:9e:ac:ad:58:c8:98:47:15:d1:34:
                    0b:c0:14:e3:54:88:76:a8:cd:14:e5:0c:2d:1c:5d:
                    8b:01:ca:9f:74:99:07:08:5a:80:7e:9e:4e:d1:ad:
                    6c:99:9c:d7:36:13:81:bc:f7:5e:cb:76:d2:ad:d5:
                    6a:13:46:48:3f:e6:38:e6:c4:49:4d:41:54:12:eb:
                    38:07:6c:99:48:23:f5:c1:c4:da:94:37:1b:0e:f9:
                    75:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:AF:3E:F9:61:7B:AE:EA:7B:0E:0D:15:ED:13:9C:BA:4F:A3:A9:DC
            X509v3 Authority Key Identifier:
                keyid:BB:B6:E6:01:04:37:43:25:05:48:80:B7:D3:C1:35:E6:FC:7C:CA:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u7bmAQQ3QyUFSIC308E15vx8yrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912804A/95A81014507711ED9F725928C4F9AE02/u7bmAQQ3QyUFSIC308E15vx8yrE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a4:8a:3c:12:5a:38:14:f7:ec:88:62:38:3b:88:76:a1:ab:
         80:a8:9a:38:0e:08:9b:9b:c2:3c:c2:a8:ad:bd:9e:b8:d6:f9:
         42:f3:68:f6:67:f1:93:c0:9e:36:17:92:e4:fd:b7:24:e2:c8:
         6f:4a:c8:51:bd:2a:2f:89:da:04:88:26:f6:25:58:f0:c9:f8:
         7d:04:7e:87:94:51:06:f7:74:23:93:41:b7:ae:86:ea:82:7a:
         4f:37:e1:7a:2e:27:df:0a:68:08:a9:70:c4:58:f9:08:83:91:
         61:ca:ab:70:25:5e:d5:6e:0d:67:cb:51:97:34:54:78:8c:ba:
         e1:e7:e9:e1:2b:36:04:b9:cb:5b:ff:95:f5:84:0c:5f:44:df:
         f5:32:ec:82:fc:45:1f:1f:6f:09:bb:1e:da:f7:0a:8d:86:8a:
         07:1c:7c:30:79:f0:28:78:0c:f5:55:79:bc:c3:5c:67:11:59:
         51:61:0a:0d:da:51:60:d9:83:20:e1:cb:2b:d2:d3:19:f1:f3:
         70:80:af:f5:d3:bc:59:8d:3f:2f:1a:31:7e:48:89:28:d9:3e:
         6a:fc:cf:7c:47:fa:99:a0:0c:99:d3:29:09:57:ee:33:03:76:
         db:5a:3e:06:f0:1f:fe:a4:88:56:f2:c6:fe:fb:4d:08:8f:a4:
         47:32:b1:bc
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjgwNEExMTAvBgNVBAUTKEJCQjZFNjAxMDQzNzQzMjUwNTQ4ODBCN0QzQzEzNUU2
RkM3Q0NBQjEwHhcNMjUwNDI1MDE1ODA4WhcNMjUwNTAyMDE1ODA4WjAYMRYwFAYD
VQQDEw02ODBhZWMzMC1iNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy9w6kHQ0doZV8O7W8XY+0ykH+NAxpBlgfDvqQ6a9YCX+CKtlfTnoCEmBasRB
S2GuMjDCppuVKY5Fdfj03nAOUJpMkSkVkDmhNV85cza6r9I3UtUzGnHx2rpgRW6E
+dmJ6miGXlybw/iD4vur9RzDiLpbpTspcFJZYCws1i1cVUpGfwbjJ2N397HwRrJN
pz8qvE9GePOkPah1hoUdaw6pkzncpzVAtF6rN56srVjImEcV0TQLwBTjVIh2qM0U
5QwtHF2LAcqfdJkHCFqAfp5O0a1smZzXNhOBvPdey3bSrdVqE0ZIP+Y45sRJTUFU
Eus4B2yZSCP1wcTalDcbDvl1qwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCOvPvlh
e67qew4NFe0TnLpPo6ncMB8GA1UdIwQYMBaAFLu25gEEN0MlBUiAt9PBNeb8fMqx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODA0QS85NUE4MTAxNDUw
NzcxMUVEOUY3MjU5MjhDNEY5QUUwMi91N2JtQVFRM1F5VUZTSUMzMDhFMTV2eDh5
ckUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U3Ym1BUVEzUXlVRlNJQzMwOEUxNXZ4OHlyRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
ODA0QS85NUE4MTAxNDUwNzcxMUVEOUY3MjU5MjhDNEY5QUUwMi91N2JtQVFRM1F5
VUZTSUMzMDhFMTV2eDh5ckUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBFpIo8Elo4FPfsiGI4O4h2oauAqJo4Dgibm8I8wqitvZ641vlC82j2
Z/GTwJ42F5Lk/bck4shvSshRvSovidoEiCb2JVjwyfh9BH6HlFEG93Qjk0G3robq
gnpPN+F6LiffCmgIqXDEWPkIg5FhyqtwJV7Vbg1ny1GXNFR4jLrh5+nhKzYEuctb
/5X1hAxfRN/1MuyC/EUfH28Jux7a9wqNhooHHHwwefAoeAz1VXm8w1xnEVlRYQoN
2lFg2YMg4csr0tMZ8fNwgK/107xZjT8vGjF+SIko2T5q/M98R/qZoAyZ0ykJV+4z
A3bbWj4G8B/+pIhW8sb++00Ij6RHMrG8
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:08:46 2025 by rpki-client