Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
File:                     7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft (raw, json)
Hash identifier:          UYenQbzTC/iP3l5ugghMdN5an9tC+trBNBsScoO0qew=
Subject key identifier:   F6:34:C8:70:56:70:C3:02:13:B9:D3:A1:CC:86:A8:C0:99:14:30:53
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       06F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
Manifest number:          05F5
Signing time:             Thu 24 Apr 2025 23:18:18 +0000
Manifest this update:     Thu 24 Apr 2025 23:18:17 +0000
Manifest next update:     Thu 01 May 2025 23:18:17 +0000
Files and hashes:         1: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl (hash: dLST1Dk25kHjyKPWA7GOOGySpMLosHUrBZAXTWTaYfU=)
                          2: 217830E8779A11EE903E3E53C4F9AE02.roa (hash: Oo2zi/EhRzrqSn7zolKGlTcLvnJSb95h9fMiilyRJ1I=)
                          3: 5E8F2C98FA5311EE9E6A8150C4F9AE02.roa (hash: jDK3rjU2bRZFaIfu3sKLZ4tFwr6Zd5H8aDrQGRa1n+Y=)
                          4: 8FA95EF2E52811ED863E8C34C4F9AE02.roa (hash: hwXZ4x1ri2Ou6C07i1b+lYsBLNvtNkvAv3I1gcMsZsU=)
                          5: 06FAE294924F11EF80B1115DC4F9AE02.roa (hash: wMMRS1JViaq+eV+0w4JQp61QJ0KALAvEktrddj79/AQ=)
                          6: 87CF4198A65111EEABE0B079C4F9AE02.roa (hash: pitRHAqLkQmUogZxDE8E1GxQICLDXV7ucXUG2kEKInU=)
                          7: 3F3E4D0426F711EE81AD9A45C4F9AE02.roa (hash: uxYOnF3d63rIS8oNPOqAfailLlmmUvubJ8OVRGowk6c=)
                          8: E20B36B8D7BA11EEA17F0E83C4F9AE02.roa (hash: 79JSkXVIKOjqvvxYPCuapgw/VjcRIymGOOFJLOS70p0=)
                          9: FC16A530057011F082C0D47AC4F9AE02.roa (hash: z3NkxavOctVfkjurjcveOvoWLMc7/j9vmNWCY5o7BT4=)
                          10: CED6A59A032B11EFAC30281BC4F9AE02.roa (hash: KV9EsH/6ydbVoA8GLbzM6wTi6I3o6HJnv8d8mygGAR0=)
                          11: F3E5A660E69E11ED841AC682C4F9AE02.roa (hash: VfvmI0FjW1ey2lLJifvpSJkDuW60zS8WURvHj/vHV0g=)
                          12: 53B4B36E8ABE11EFBEE72D47C4F9AE02.roa (hash: WIhr40MPPxMj1IUblIARKyL56Z9ag0TiF4WNQadeBIc=)
                          13: 2FCAEB4AE15311EEBE7C925BC4F9AE02.roa (hash: vRf1NZykh+ineSOtW66kwwiiGz6ZiMQZ7UaMTI/4uZQ=)
                          14: 8E6DB97451C111EE9E564B29C4F9AE02.roa (hash: Q55QocLIlctTLBOj+usdwg0kwa2pJ3fgOJxquQPk9+Q=)
                          15: 1EA2E8FA819811EFBCB7403CC4F9AE02.roa (hash: A6ldS07Hm7AQ/at7ePXVzcAj0Kggqlh1Mm4K0u1Dm8U=)
                          16: 53C13F547EBA11EF807BF64EC4F9AE02.roa (hash: Zeaxtp0UoFvgyI0HxM/gXSLX2Stj9ybtay4DLBey98g=)
                          17: 919E2B20E52811ED863E8C34C4F9AE02.roa (hash: VSGpgkTK4GJAEykLuxr4d3IX3iq1tszeppitkXXA2ws=)
                          18: 9EE451A08ABE11EFA0AEF447C4F9AE02.roa (hash: d2+7r39Eg9rjdbItDMc03X9V+mH89DguSdjx3CwlpWg=)
                          19: 1EB3FE5C924F11EFB20C515DC4F9AE02.roa (hash: aAT/94R8V8a6H3ASbqGyXee0COP067Ce/xVNeahwCBY=)
                          20: 1595B1FED9AC11EF839F3432C4F9AE02.roa (hash: AVqyrwzxwv29vA+eeoVtTi+rlSfGPjPYZVTTcrYZmKY=)
                          21: 6904305CA65111EEAAF77C79C4F9AE02.roa (hash: ur7qihZtIhvtBQTlWZmGrFYPbQjlVO+hgQ6kWnGMVbE=)
                          22: 22EDD746F02711EFA9227E60C4F9AE02.roa (hash: EIO3upfjtKoXLpuIfCoCwd49bdHj8OE2Ef5ffc1HnDE=)
                          23: ED1F311669F211EE80D21411C4F9AE02.roa (hash: W6lI8/Zg/LZowUOVNTBJAfGISvKfbKLxWwUWdC8LjAs=)
                          24: 9FA2A3588ABE11EFA0AEF447C4F9AE02.roa (hash: zuHY12P7XQtiC4QFmx7mr2cUPD02esdm9dT5uRSuL5E=)
                          25: 20FF74DEC9D211EE8AEDE469C4F9AE02.roa (hash: IifixTA6Otc2fatf528z+FJwgFi234GZraMzsgqS6Nc=)
                          26: A2ACC95C8ABE11EFA0AEF447C4F9AE02.roa (hash: qs5DoMH6rECBh/TZnSiXS9DpsavwLIZ1AfN61QSNvQ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:18:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1777 (0x6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Apr 24 23:18:17 2025 GMT
            Not After : May  1 23:18:17 2025 GMT
        Subject: CN=680ac6ba-1e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f3:cb:0d:26:db:0a:b8:dd:a7:f9:d5:f3:1d:
                    6d:71:9a:ef:44:72:2a:5c:9b:05:8d:44:ed:f6:a0:
                    d4:1a:9a:ed:b8:31:d9:89:d2:f8:1c:c5:53:ef:60:
                    8f:4d:32:b5:41:4d:8f:2e:25:e3:3a:0b:ff:fb:ad:
                    50:56:2f:f1:ff:6b:44:ce:67:2c:23:14:38:81:ae:
                    c4:82:71:0b:36:2c:71:3a:ff:d4:21:90:3e:5f:c5:
                    11:b3:33:bf:ba:d2:64:36:7c:d2:6c:9a:3e:8e:41:
                    75:f4:09:89:f1:ba:bc:47:dd:f9:e0:56:75:34:26:
                    58:a0:66:e4:49:35:56:42:ad:b1:b7:c5:5e:5e:37:
                    19:6f:b9:fb:95:3f:b1:e5:24:9c:35:49:b0:c0:f7:
                    07:3e:06:f2:68:78:c8:ea:36:d8:c6:0b:4f:f7:43:
                    88:fb:77:6a:cc:6e:f1:b3:b2:40:37:f5:67:b0:e6:
                    12:90:09:f4:af:95:6c:40:28:d9:c3:86:70:d1:bc:
                    08:68:26:90:9b:79:bf:a4:a0:16:7a:4d:d7:c4:d6:
                    9c:e1:0f:98:da:d7:31:49:f1:55:eb:45:06:e8:d2:
                    3f:ba:0e:1f:0f:cb:3d:0e:cf:cd:43:2d:af:f4:58:
                    08:12:e8:02:8b:ea:bf:e1:41:15:22:26:bf:97:b6:
                    da:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:34:C8:70:56:70:C3:02:13:B9:D3:A1:CC:86:A8:C0:99:14:30:53
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:24:1e:e7:69:4b:56:8b:71:e7:6a:e4:95:3b:77:85:3f:cc:
         8a:65:c8:bc:a1:27:83:3f:f4:f4:64:6e:66:aa:15:e2:a8:95:
         db:05:fd:d0:12:4e:f7:f1:f7:b0:15:14:0e:16:e7:ea:6c:92:
         f4:68:c4:1c:68:92:3f:55:07:67:0a:01:f6:78:67:6d:1d:b0:
         9c:ec:e0:d3:12:2f:b4:bf:41:d6:25:e7:5a:4a:2b:d0:ea:c3:
         36:c4:ba:6b:22:a2:0c:3a:77:98:9d:9f:f9:c4:14:25:9c:1a:
         7a:84:c0:a7:3c:9a:88:35:8a:67:a3:0f:3d:ca:57:4e:18:a8:
         43:98:c5:5a:b3:3a:a7:cf:09:23:16:9f:4f:4d:4a:1c:5f:a4:
         3a:04:9e:a3:90:18:8a:cf:36:2a:84:b5:fb:94:35:f1:f7:c2:
         f1:7a:9e:6c:75:43:2d:77:c9:ae:2b:cf:1c:96:cf:56:48:9b:
         05:80:fb:50:22:02:52:02:f1:3e:b0:8c:79:4f:5c:4b:f8:21:
         e8:94:fe:48:ea:c1:e4:84:62:12:b3:8e:04:c8:71:75:f0:7e:
         d6:33:33:c9:95:f7:ed:bf:8d:5a:95:44:4b:81:20:e3:b5:5a:
         3e:c8:d2:b8:21:ba:df:db:92:54:2e:0d:38:f3:93:bc:45:ec:
         57:55:91:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 04:29:01 2025 by rpki-client