Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
File:                     6zifszmzkI1UmmU5DJLhX533xUs.mft (raw, json)
Hash identifier:          FXQPQAnNVtr03oG+W3IrOc6Q2xROEPrrHlwUx2/mJyM=
Subject key identifier:   82:2B:52:E6:8F:06:F5:6A:B2:04:1C:3B:98:DD:3D:DB:FE:EB:BB:4F
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       38FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
Manifest number:          3712
Signing time:             Mon 16 Jun 2025 14:21:51 +0000
Manifest this update:     Mon 16 Jun 2025 14:21:51 +0000
Manifest next update:     Mon 23 Jun 2025 14:21:51 +0000
Files and hashes:         1: 6zifszmzkI1UmmU5DJLhX533xUs.crl (hash: m+LTt4dTZN7P+fV3b3vXkAqrnoDreTwd0c7cgKviA5Y=)
                          2: BB38B6A23C5211F082202337C4F9AE02.roa (hash: buz8l6cixUIMxw0Vp2d+/dVGtnVD8AnqA4GUYOs/z98=)
                          3: 5E035B480E8C11F0AD0C273AC4F9AE02.roa (hash: Wnu/A0yUx+4HqrhfwfUPaml1HEg9mGCN1YlC1GXeGvE=)
                          4: FAF6D732CD3811EDBD37B674C4F9AE02.roa (hash: 55hbp1lHPqWHR3myIKlQM0s8jhZDD5OMMu+AbqKM2eA=)
                          5: FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa (hash: zSVDYqkWgkMa+aLsCRgndkcVWEmWW6zKnoCgA3mt+Jw=)
                          6: 8470E428A2E711EFA6A5B91AC4F9AE02.roa (hash: bilCUgSIj9s8wLUUu7RqA7j0fFrI4Jp6Y1RNZuTJV4U=)
                          7: 2C7A8F5C8CE511EF96182462C4F9AE02.roa (hash: r8mRla4ImwWo0lgNeUmnO3kOlV4nEe25jvh9hbpe+Fk=)
                          8: 4F698B525F5011EFA66ADA2CC4F9AE02.roa (hash: 8GbrS0gq/4FKKxyxJysMwR58UCfWTju+CTTJl3NXjn0=)
                          9: 6D84D2D05DE911EF84282B80C4F9AE02.roa (hash: KsCi1gL5ON0tQo5f7o3JyChb4Z5sQOoFZgnSirCcEPY=)
                          10: FEDF0BA43E5111EF86CB780AC4F9AE02.roa (hash: PWMfy2tZO4LynO8829Wa3U1BjwaomWWdkKuhbM2n6Oo=)
                          11: 27E277D891AA11EF9DBFF265C4F9AE02.roa (hash: wM/PYE311nfiNvAglY7ipodnf85Ls8RUKyhtAudMyfk=)
                          12: 3BCB61DA01D411EFB260D83DC4F9AE02.roa (hash: ntg1Sa5uJDmNLEQGDT84VTtiG25Hye7r/1zWkL8hIks=)
                          13: 02414522C98A11EBAF4F9280C4F9AE02.roa (hash: z8UqZ1TUZs5SLFZVPrNthZ359PD6ZBuIMRCgzq/pldM=)
                          14: 4E211A5C408A11EE91A09746C4F9AE02.roa (hash: kxKdU/JmPTZM9krhUbKPrtFUj5nm0D45xWRYs28QjJs=)
                          15: 862D18003A1011EDB5225E73C4F9AE02.roa (hash: v4HK4sfgYsSfASOHkvKK7CKePuHBgJRykt1ECioRpqY=)
                          16: CDCC902E170811EFB6DE866CC4F9AE02.roa (hash: Qr52xk5Cmr7B9ojqij9Sa1V9McPqDHOMkRtq3w6aXoE=)
                          17: EEF771D4FED311EF8B263515C4F9AE02.roa (hash: rr3u+Bx1b760tre72Vw4KB1M7DRa2l8Cfnx2i0/N2Nw=)
                          18: A59A5B6641F611ECB1465157C4F9AE02.roa (hash: s/2XE3OKwLRXbsetwS9Ty1/cmYjDSHV9UY8kueVDyls=)
                          19: BF6649687AC811EDAE44E656C4F9AE02.roa (hash: uz8YE3l0+kEpuATJJmDK6S+3VDMiAYafPM++93yW36M=)
                          20: 76FA132A8B0511EC993E2B20C4F9AE02.roa (hash: oXtJ7h6IXN/s5X0HBvpSdD6OMPpNlMkXnfhubhmUTqA=)
                          21: 000724C6F7D511EE8C03CA65C4F9AE02.roa (hash: 1z8tUQ/CHsf4H426+WAtbF/ySyewhGPCiiHEe/tPLy0=)
                          22: 3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa (hash: UvtmvVRc2Z0q+CfMe7UUrx6gOQJL+ahTUjM/dtEauJg=)
                          23: B6D40A18822F11EFA848053BC4F9AE02.roa (hash: qTT7XzpkLtDQdKGn2G66fy/McFFpsOFRvnIb+qAvaRw=)
                          24: 52850542A60811EF91FB1113C4F9AE02.roa (hash: kowmpjbS8K8YRAisMY96jcR4JecyVpMM9JfAm+PJPWk=)
                          25: 2622AA12010511EE8C750D39C4F9AE02.roa (hash: mf2Qk+w1NRlp24Ok2PsGfSzQRhYbIagpibh1QaUmo/0=)
                          26: 9D8E6D02C2A511EBB2025B36C4F9AE02.roa (hash: cx0K0bJRQz5Nmb2d76mnGIN2Xr+QPD7Bio7ZlcQXgU0=)
                          27: 26C39BB6010511EE8C750D39C4F9AE02.roa (hash: PrIFv9vXjUSJQadCTa4FhOnCYA1U2rLRvK5pclzfjFs=)
                          28: CAD5365E090C11EBA5412411C4F9AE02.roa (hash: 1/UnllgrY9TLTTDeiVVZgSkXNLQXVP9JfAc/UDXvF4Q=)
                          29: 4D4EE370408A11EE91A09746C4F9AE02.roa (hash: a0UD+/qG4UMDv/2WmEJk9pk9QhXhkwYYYzMZ4c/XI1s=)
                          30: D34236BE7D0511EEB381D02CC4F9AE02.roa (hash: MXoyWFgv72XpKm4iYapo+Jr79E2SzPPDsg5QxMhWUpU=)
                          31: 46186F4EC6E711EDA2FCBA34C4F9AE02.roa (hash: XzgXWY7//UVaNEuQIopWxPc37VBbWxsWdMNjr7wRlfY=)
                          32: E614D0A2CD5011EF863CDE64C4F9AE02.roa (hash: VRsqFBw6W6srpeBDnBHvB0NtD3V0u3PzUnUHEjXNhCA=)
                          33: 0BD5724C3A3211EDA1B7D863C4F9AE02.roa (hash: fAK+FFlWiNwXpZxoR/fBUifFc7pGdoPqK+aChKWzCZE=)
                          34: 5E775F6644CE11F09A370919C4F9AE02.roa (hash: 1jNVoljDto7fgOoJ9QVBKRlHqhAGEkn0hpCBvgms6aU=)
                          35: 83F06CF2DF1211EDB91D5C61C4F9AE02.roa (hash: 8EbAPbXfSh68G52OBPln229w9SwdjrHKzeWsW0yhIOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 14:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14590 (0x38fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Jun 16 14:21:51 2025 GMT
            Not After : Jun 23 14:21:51 2025 GMT
        Subject: CN=6850287f-6002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:12:7b:79:3c:aa:df:db:b9:21:3d:25:81:
                    d1:59:05:ea:5e:b0:1e:29:b1:a9:e1:b0:b1:de:93:
                    34:61:f8:a9:21:69:d6:03:d8:4c:04:b2:44:f3:30:
                    e2:9c:f3:c3:e9:73:12:9d:70:15:b8:a7:f4:d9:d2:
                    d8:45:8c:04:1f:8a:41:03:cd:1b:c3:a7:fa:d4:81:
                    8d:69:85:7b:0a:dc:77:29:06:a6:e9:17:af:39:25:
                    53:7d:f1:48:1d:57:c6:ce:3a:aa:e7:00:25:c6:74:
                    aa:e2:e1:ed:21:c8:92:73:04:6c:3f:27:f9:2f:ba:
                    69:88:4b:30:25:57:f8:3c:27:21:c6:4c:14:95:e2:
                    f4:ac:3d:d9:33:70:6d:99:3c:ef:bb:65:39:f0:05:
                    9a:f9:53:7b:b5:e9:59:59:6c:73:97:05:ed:7e:78:
                    bd:c6:7a:01:fe:b9:4e:6c:f1:99:04:a7:d9:33:dd:
                    9f:ce:e6:c7:35:5a:b5:17:f5:dd:40:6f:79:c4:52:
                    6e:93:74:02:a7:59:39:21:47:a4:c9:40:52:7d:4d:
                    d4:3d:ba:f9:c0:ad:2a:16:68:05:b5:6c:f4:c3:9a:
                    60:0b:82:52:a6:4a:2c:42:46:59:36:1a:21:eb:9f:
                    a8:74:6a:87:f7:d6:a8:0b:85:ce:44:5b:6f:04:30:
                    76:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2B:52:E6:8F:06:F5:6A:B2:04:1C:3B:98:DD:3D:DB:FE:EB:BB:4F
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:51:c7:7c:da:ce:69:60:84:00:b0:54:68:80:4e:a4:22:81:
         37:e8:e2:52:cd:ff:91:95:fb:08:86:6c:ce:5f:ed:3f:0b:a8:
         67:77:57:11:9f:5c:6c:1c:36:27:d3:8c:51:9a:ca:cb:7d:fb:
         79:e7:1c:4f:d4:9c:82:b2:01:48:88:d1:ad:a6:45:35:86:6d:
         d6:3a:f0:46:97:c9:54:c7:e7:03:77:16:0e:4d:c0:a1:49:ae:
         cf:0c:a0:d8:8b:46:02:e6:70:e0:bc:e8:09:b3:f5:a9:b3:57:
         47:85:65:d2:bd:db:82:4e:4f:1d:1a:5c:60:c7:df:b1:81:4e:
         50:97:82:1e:31:52:82:5e:68:5d:01:c5:19:e0:2b:89:85:23:
         b2:3d:ec:a0:7c:0a:34:28:51:a4:57:49:c1:57:29:1a:6e:82:
         d6:c9:f5:31:51:dd:3e:69:93:f3:b4:8a:10:7f:36:4a:37:42:
         3d:a2:48:dd:7b:96:49:27:0b:76:a6:6e:9f:6c:fd:63:56:13:
         d4:d9:bf:e4:d4:94:18:49:28:79:1f:44:6a:29:d1:a9:d8:e9:
         e9:cd:e5:db:a3:04:b0:14:fc:6c:8c:7f:b1:0b:93:83:c0:65:
         9e:8d:c6:8c:08:49:87:aa:79:28:2b:da:29:80:cb:97:73:13:
         da:40:f0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:34:01 2025 by rpki-client