Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
File:                     YoQgfQ0noui_TS6xT7EpytT2zD8.mft (raw, json)
Hash identifier:          ca5C4bOT/iHZWZI0x2BSyAoah805BjS0W3vnzxsWJy4=
Subject key identifier:   1C:DD:1F:A3:67:FF:96:24:75:BF:BC:82:D4:7A:A6:A2:B6:16:9D:0D
Authority key identifier: 62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F
Certificate issuer:       /CN=A914275E/serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
Certificate serial:       0EB2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
Manifest number:          0E97
Signing time:             Sat 14 Jun 2025 17:36:35 +0000
Manifest this update:     Sat 14 Jun 2025 17:36:35 +0000
Manifest next update:     Sat 21 Jun 2025 17:36:35 +0000
Files and hashes:         1: YoQgfQ0noui_TS6xT7EpytT2zD8.crl (hash: +kjSGl/NskAzP7Ntmgmze3o+UJpPo3RoO0ByIHHY7UI=)
                          2: 58105BCA5ACB11EA84F2392EC4F9AE02.roa (hash: VOr56XdXHCfTJb7vCteXD3c/7SeyxHXCJjM/HYRl50c=)
                          3: 50E999AA911911E9BEF5F94EC4F9AE02.roa (hash: oCjpYZp3Jq8v9CYytKf/Jy8pzYlTc/kezyUqPc+tK1E=)
                          4: 2012E112712611EB8BCB2B84C4F9AE02.roa (hash: yrTYzTGLD7DdI6Sq4pABNT1xu81eDL8OtDlxoy9a6BI=)
                          5: 504E3B04911911E9BEF5F94EC4F9AE02.roa (hash: XFUDQ5YpEwqHQdCoCuZZOQlERoKAxzu3Gpexl3i5/54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl
                          rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 17:13:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3762 (0xeb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914275E, serialNumber=6284207D0D27A2E8BF4D2EB14FB129CAD4F6CC3F
        Validity
            Not Before: Jun 14 17:36:35 2025 GMT
            Not After : Jun 21 17:36:35 2025 GMT
        Subject: CN=684db323-18a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d9:6f:c5:d7:fb:5c:ed:1b:92:02:9c:8d:bd:
                    eb:ee:16:fe:80:8d:fd:1f:3a:19:c9:5a:55:b4:ba:
                    d1:a3:79:ae:80:61:40:ff:7e:63:7b:08:82:76:64:
                    c2:62:d7:26:99:65:7e:07:70:ad:6a:83:be:24:a3:
                    93:82:3c:ed:04:7d:1f:e3:84:d2:31:ca:c0:f1:f2:
                    8d:f1:bf:8e:9b:04:03:25:29:51:f4:18:cd:d0:88:
                    db:26:27:8f:2f:7d:28:50:9a:be:50:77:cc:40:b5:
                    9f:f2:01:51:a8:41:3e:c2:b5:f8:fa:02:dc:14:b5:
                    ad:c8:24:e8:eb:32:7d:c2:76:ac:3b:74:c9:61:7d:
                    10:04:44:c4:82:a7:c4:cf:26:e7:a7:24:07:9d:f2:
                    47:df:73:27:f8:d1:57:c3:a3:88:fc:25:93:68:4a:
                    e5:0c:09:66:57:9c:79:27:82:0d:b2:7a:99:45:d6:
                    84:8e:45:f6:a0:e5:6d:25:ed:fc:0f:11:99:83:26:
                    14:d2:3c:0e:28:f2:e3:ad:88:54:cc:82:7c:c4:7f:
                    13:24:a9:d0:29:f7:0f:92:67:be:26:ed:dc:98:0f:
                    ea:95:e0:8b:dd:80:36:f7:98:11:e5:0a:b6:85:70:
                    95:55:c6:46:9e:32:68:ff:9d:51:5f:3a:bb:5c:74:
                    a3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DD:1F:A3:67:FF:96:24:75:BF:BC:82:D4:7A:A6:A2:B6:16:9D:0D
            X509v3 Authority Key Identifier:
                keyid:62:84:20:7D:0D:27:A2:E8:BF:4D:2E:B1:4F:B1:29:CA:D4:F6:CC:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YoQgfQ0noui_TS6xT7EpytT2zD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914275E/4DF7DB04911811E994793C4DC4F9AE02/YoQgfQ0noui_TS6xT7EpytT2zD8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:d7:f1:21:cf:fd:51:c5:3c:09:81:90:9d:2b:f5:9a:3b:7e:
         41:cc:ca:1b:04:6f:d6:f4:e8:8f:e8:a3:14:0b:25:09:00:e0:
         1b:78:c7:06:de:eb:17:3d:25:e7:72:c8:05:cb:6d:4f:dd:53:
         89:91:5f:c8:37:51:18:9c:2f:13:5e:17:92:9b:13:86:a2:68:
         d4:7c:9e:27:f7:dd:67:44:df:d8:38:a2:8c:08:2d:99:b4:94:
         50:c8:5f:46:ce:39:cc:39:94:5f:9a:ef:57:16:48:7a:88:32:
         17:a7:6d:df:ec:f2:5b:b9:07:07:77:26:f2:04:3e:fe:e9:52:
         7e:ab:1b:70:e3:0b:93:d8:8d:4c:fd:e5:d1:7c:2d:ce:20:b2:
         4e:18:ba:7c:0a:69:74:40:c3:3e:36:a0:f8:fa:c5:0a:4f:f8:
         46:6e:15:e6:64:72:a9:33:42:1c:56:cb:88:cd:50:a3:95:57:
         49:aa:9d:08:09:8c:0d:f3:8a:2a:59:dd:62:0c:83:f8:c1:21:
         0e:14:c0:23:17:28:de:86:98:7d:73:0b:ea:26:df:55:71:53:
         21:56:27:67:da:bf:d9:48:f3:62:e2:dc:8a:0e:8f:bb:25:ef:
         a6:d6:c4:c5:33:e6:50:76:d1:3a:7a:c3:f2:ca:e2:73:80:cf:
         26:7e:65:f0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICDrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDI3NUUxMTAvBgNVBAUTKDYyODQyMDdEMEQyN0EyRThCRjREMkVCMTRGQjEyOUNB
RDRGNkNDM0YwHhcNMjUwNjE0MTczNjM1WhcNMjUwNjIxMTczNjM1WjAYMRYwFAYD
VQQDEw02ODRkYjMyMy0xOGEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3Nlvxdf7XO0bkgKcjb3r7hb+gI39HzoZyVpVtLrRo3mugGFA/35jewiCdmTC
YtcmmWV+B3CtaoO+JKOTgjztBH0f44TSMcrA8fKN8b+OmwQDJSlR9BjN0IjbJieP
L30oUJq+UHfMQLWf8gFRqEE+wrX4+gLcFLWtyCTo6zJ9wnasO3TJYX0QBETEgqfE
zybnpyQHnfJH33Mn+NFXw6OI/CWTaErlDAlmV5x5J4INsnqZRdaEjkX2oOVtJe38
DxGZgyYU0jwOKPLjrYhUzIJ8xH8TJKnQKfcPkme+Ju3cmA/qleCL3YA295gR5Qq2
hXCVVcZGnjJo/51RXzq7XHSjAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBzdH6Nn
/5Ykdb+8gtR6pqK2Fp0NMB8GA1UdIwQYMBaAFGKEIH0NJ6Lov00usU+xKcrU9sw/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Mjc1RS80REY3REIwNDkx
MTgxMUU5OTQ3OTNDNERDNEY5QUUwMi9Zb1FnZlEwbm91aV9UUzZ4VDdFcHl0VDJ6
RDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lvUWdmUTBub3VpX1RTNnhUN0VweXRUMnpEOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
Mjc1RS80REY3REIwNDkxMTgxMUU5OTQ3OTNDNERDNEY5QUUwMi9Zb1FnZlEwbm91
aV9UUzZ4VDdFcHl0VDJ6RDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAt1/Ehz/1RxTwJgZCdK/WaO35BzMobBG/W9OiP6KMUCyUJAOAbeMcG
3usXPSXncsgFy21P3VOJkV/IN1EYnC8TXheSmxOGomjUfJ4n991nRN/YOKKMCC2Z
tJRQyF9GzjnMOZRfmu9XFkh6iDIXp23f7PJbuQcHdybyBD7+6VJ+qxtw4wuT2I1M
/eXRfC3OILJOGLp8Cml0QMM+NqD4+sUKT/hGbhXmZHKpM0IcVsuIzVCjlVdJqp0I
CYwN84oqWd1iDIP4wSEOFMAjFyjehph9cwvqJt9VcVMhVidn2r/ZSPNi4tyKDo+7
Je+m1sTFM+ZQdtE6esPyyuJzgM8mfmXw
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:19:55 2025 by rpki-client