Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
File:                     ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft (raw, json)
Hash identifier:          e+RoMeOjSjG7dBfxl8r+crrWMXpeLdoVxpczeV6mK9w=
Subject key identifier:   2B:89:49:2C:5B:91:DC:47:5B:82:E9:E0:24:00:F9:90:29:C6:C5:73
Authority key identifier: 00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B
Certificate issuer:       /CN=A913C0C6/serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
Certificate serial:       04F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
Manifest number:          04DF
Signing time:             Thu 24 Apr 2025 23:38:29 +0000
Manifest this update:     Thu 24 Apr 2025 23:38:29 +0000
Manifest next update:     Thu 01 May 2025 23:38:29 +0000
Files and hashes:         1: ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl (hash: mYqwNP9RcTTjEQW6aqavjNmRZpbcpeFOb1ebYJCnno8=)
                          2: 47660D4A488F11EFB89B763FC4F9AE02.roa (hash: o1OTNYPIFsb3EvbpcOOr9EZlDozQP5u7U/7IxhfxWGM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl
                          rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:38:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1270 (0x4f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C0C6, serialNumber=00334B8F218FA525339886C8FBC94093C88ED57B
        Validity
            Not Before: Apr 24 23:38:29 2025 GMT
            Not After : May  1 23:38:29 2025 GMT
        Subject: CN=680acb75-8a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:10:98:0e:45:ea:dd:7b:d9:e8:26:d8:b1:74:
                    bd:34:28:9e:55:b1:88:d8:22:62:1b:b5:a7:ed:da:
                    84:dc:81:90:35:7a:f5:ec:a3:8d:ff:d7:6f:af:c4:
                    f2:d4:d5:78:88:65:0f:97:97:74:f9:e7:70:20:e2:
                    da:95:44:a4:08:d2:65:a4:08:09:1d:05:01:a3:2c:
                    8f:7a:17:3a:81:22:c4:3f:03:3e:21:37:a0:bc:21:
                    a9:c7:11:84:08:d1:f7:03:b2:86:d8:4e:4d:6b:03:
                    00:83:86:81:40:59:67:a8:d6:e3:4a:b2:5e:0e:f6:
                    2d:63:d6:dd:35:de:b4:5a:6b:22:8d:0f:d9:1b:0b:
                    1d:ba:61:b2:20:e3:e3:55:fb:5e:a8:35:a6:2c:f4:
                    c0:4c:c4:f7:9a:ac:fb:ca:e7:35:eb:f0:fc:d3:fc:
                    4a:6e:a6:75:40:76:62:4a:27:9a:09:a6:70:8c:6c:
                    c8:fd:c8:b8:4c:b3:e0:f3:79:4d:88:b1:57:23:aa:
                    11:7c:75:53:fd:f1:07:73:47:f6:b7:9b:d1:c3:e1:
                    06:be:07:65:5d:9a:fa:94:18:a5:c7:31:02:5f:fa:
                    26:9e:dd:93:d1:15:e9:39:f5:1a:e5:e7:ea:b8:ad:
                    53:d2:f6:2b:24:c2:77:f8:76:73:5e:b2:dc:84:b8:
                    58:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:89:49:2C:5B:91:DC:47:5B:82:E9:E0:24:00:F9:90:29:C6:C5:73
            X509v3 Authority Key Identifier:
                keyid:00:33:4B:8F:21:8F:A5:25:33:98:86:C8:FB:C9:40:93:C8:8E:D5:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C0C6/183F84AE234B11ECB8A2DE7EC4F9AE02/ADNLjyGPpSUzmIbI-8lAk8iO1Xs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:93:e1:21:45:d1:17:3e:97:8c:5a:8f:aa:48:e8:41:ab:c9:
         c6:7d:c5:6b:69:6f:5f:f5:4e:f7:ed:b1:4c:bd:dc:3c:89:69:
         2f:67:8c:e8:70:d0:a5:48:25:a9:30:f5:8c:1e:ed:72:df:b6:
         53:f8:bb:a0:06:a3:52:e7:b6:1a:21:84:18:ba:1e:50:3e:d6:
         4c:c2:0e:f1:4b:50:f9:31:c0:b5:e6:85:e7:1d:29:c5:f4:2a:
         56:57:b3:05:3e:b0:e5:c1:ea:8a:57:fe:af:2e:f8:c2:7f:a6:
         59:d3:d0:d7:22:60:a6:82:3c:26:f8:55:ab:cc:61:f4:57:80:
         87:d9:8d:73:bf:17:cd:d6:9f:7e:e4:2e:01:88:ef:b0:ea:43:
         6e:f4:22:1a:22:e3:bc:b3:2f:fd:e6:1a:83:e7:87:2f:99:c7:
         31:e8:25:5b:fc:75:e0:f2:11:3f:06:83:c6:5a:92:75:0c:6e:
         cd:e9:6d:dc:de:7e:aa:35:78:24:d2:3d:f8:af:ac:7d:85:43:
         25:24:56:e5:00:d4:56:07:fb:02:88:3d:30:22:89:46:9f:a5:
         dd:9f:49:1c:3d:af:5f:a5:d5:7a:29:7a:6d:97:e8:0a:21:7b:
         90:7f:dc:98:5e:57:aa:01:47:6e:c0:0b:45:a1:0f:11:c5:44:
         eb:2d:1e:e3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0MwQzYxMTAvBgNVBAUTKDAwMzM0QjhGMjE4RkE1MjUzMzk4ODZDOEZCQzk0MDkz
Qzg4RUQ1N0IwHhcNMjUwNDI0MjMzODI5WhcNMjUwNTAxMjMzODI5WjAYMRYwFAYD
VQQDEw02ODBhY2I3NS04YTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0RCYDkXq3XvZ6CbYsXS9NCieVbGI2CJiG7Wn7dqE3IGQNXr17KON/9dvr8Ty
1NV4iGUPl5d0+edwIOLalUSkCNJlpAgJHQUBoyyPehc6gSLEPwM+ITegvCGpxxGE
CNH3A7KG2E5NawMAg4aBQFlnqNbjSrJeDvYtY9bdNd60WmsijQ/ZGwsdumGyIOPj
VfteqDWmLPTATMT3mqz7yuc16/D80/xKbqZ1QHZiSieaCaZwjGzI/ci4TLPg83lN
iLFXI6oRfHVT/fEHc0f2t5vRw+EGvgdlXZr6lBilxzECX/omnt2T0RXpOfUa5efq
uK1T0vYrJMJ3+HZzXrLchLhY1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuJSSxb
kdxHW4Lp4CQA+ZApxsVzMB8GA1UdIwQYMBaAFAAzS48hj6UlM5iGyPvJQJPIjtV7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzBDNi8xODNGODRBRTIz
NEIxMUVDQjhBMkRFN0VDNEY5QUUwMi9BRE5ManlHUHBTVXptSWJJLThsQWs4aU8x
WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FETkxqeUdQcFNVem1JYkktOGxBazhpTzFYcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QzBDNi8xODNGODRBRTIzNEIxMUVDQjhBMkRFN0VDNEY5QUUwMi9BRE5ManlHUHBT
VXptSWJJLThsQWs4aU8xWHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC1k+EhRdEXPpeMWo+qSOhBq8nGfcVraW9f9U737bFMvdw8iWkvZ4zo
cNClSCWpMPWMHu1y37ZT+LugBqNS57YaIYQYuh5QPtZMwg7xS1D5McC15oXnHSnF
9CpWV7MFPrDlweqKV/6vLvjCf6ZZ09DXImCmgjwm+FWrzGH0V4CH2Y1zvxfN1p9+
5C4BiO+w6kNu9CIaIuO8sy/95hqD54cvmccx6CVb/HXg8hE/BoPGWpJ1DG7N6W3c
3n6qNXgk0j34r6x9hUMlJFblANRWB/sCiD0wIolGn6Xdn0kcPa9fpdV6KXptl+gK
IXuQf9yYXleqAUduwAtFoQ8RxUTrLR7j
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:25:24 2025 by rpki-client