Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
File:                     6zifszmzkI1UmmU5DJLhX533xUs.mft (raw, json)
Hash identifier:          X2FJgbqXB4kqobGfGMCtIvphA4UqyabbHOu9ZDT4Qs0=
Subject key identifier:   EB:9B:5A:4D:E0:57:E4:E8:9B:61:15:37:7E:8B:78:A5:C9:2B:B5:F5
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3773
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
Manifest number:          3639
Signing time:             Sat 26 Apr 2025 14:21:44 +0000
Manifest this update:     Sat 26 Apr 2025 14:21:44 +0000
Manifest next update:     Sat 03 May 2025 14:21:44 +0000
Files and hashes:         1: 6zifszmzkI1UmmU5DJLhX533xUs.crl (hash: 4q7yjWOMWGXOzulD5t/G1GvatrY2APA+a7k3EzYgz/E=)
                          2: 5E035B480E8C11F0AD0C273AC4F9AE02.roa (hash: Wnu/A0yUx+4HqrhfwfUPaml1HEg9mGCN1YlC1GXeGvE=)
                          3: FAF6D732CD3811EDBD37B674C4F9AE02.roa (hash: 55hbp1lHPqWHR3myIKlQM0s8jhZDD5OMMu+AbqKM2eA=)
                          4: FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa (hash: zSVDYqkWgkMa+aLsCRgndkcVWEmWW6zKnoCgA3mt+Jw=)
                          5: 8470E428A2E711EFA6A5B91AC4F9AE02.roa (hash: bilCUgSIj9s8wLUUu7RqA7j0fFrI4Jp6Y1RNZuTJV4U=)
                          6: 2C7A8F5C8CE511EF96182462C4F9AE02.roa (hash: r8mRla4ImwWo0lgNeUmnO3kOlV4nEe25jvh9hbpe+Fk=)
                          7: 4F698B525F5011EFA66ADA2CC4F9AE02.roa (hash: 8GbrS0gq/4FKKxyxJysMwR58UCfWTju+CTTJl3NXjn0=)
                          8: 6D84D2D05DE911EF84282B80C4F9AE02.roa (hash: KsCi1gL5ON0tQo5f7o3JyChb4Z5sQOoFZgnSirCcEPY=)
                          9: FEDF0BA43E5111EF86CB780AC4F9AE02.roa (hash: PWMfy2tZO4LynO8829Wa3U1BjwaomWWdkKuhbM2n6Oo=)
                          10: 27E277D891AA11EF9DBFF265C4F9AE02.roa (hash: wM/PYE311nfiNvAglY7ipodnf85Ls8RUKyhtAudMyfk=)
                          11: 3BCB61DA01D411EFB260D83DC4F9AE02.roa (hash: ntg1Sa5uJDmNLEQGDT84VTtiG25Hye7r/1zWkL8hIks=)
                          12: 4E211A5C408A11EE91A09746C4F9AE02.roa (hash: kxKdU/JmPTZM9krhUbKPrtFUj5nm0D45xWRYs28QjJs=)
                          13: 02414522C98A11EBAF4F9280C4F9AE02.roa (hash: z8UqZ1TUZs5SLFZVPrNthZ359PD6ZBuIMRCgzq/pldM=)
                          14: 862D18003A1011EDB5225E73C4F9AE02.roa (hash: v4HK4sfgYsSfASOHkvKK7CKePuHBgJRykt1ECioRpqY=)
                          15: CDCC902E170811EFB6DE866CC4F9AE02.roa (hash: Qr52xk5Cmr7B9ojqij9Sa1V9McPqDHOMkRtq3w6aXoE=)
                          16: EEF771D4FED311EF8B263515C4F9AE02.roa (hash: rr3u+Bx1b760tre72Vw4KB1M7DRa2l8Cfnx2i0/N2Nw=)
                          17: A59A5B6641F611ECB1465157C4F9AE02.roa (hash: s/2XE3OKwLRXbsetwS9Ty1/cmYjDSHV9UY8kueVDyls=)
                          18: BF6649687AC811EDAE44E656C4F9AE02.roa (hash: uz8YE3l0+kEpuATJJmDK6S+3VDMiAYafPM++93yW36M=)
                          19: 76FA132A8B0511EC993E2B20C4F9AE02.roa (hash: oXtJ7h6IXN/s5X0HBvpSdD6OMPpNlMkXnfhubhmUTqA=)
                          20: 412F31BCF4A711EFB38B1B47C4F9AE02.roa (hash: OIBBqvU4440LAKaD6UEi68lBgIwwmcry+iUxR8onN5g=)
                          21: 000724C6F7D511EE8C03CA65C4F9AE02.roa (hash: 1z8tUQ/CHsf4H426+WAtbF/ySyewhGPCiiHEe/tPLy0=)
                          22: 3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa (hash: UvtmvVRc2Z0q+CfMe7UUrx6gOQJL+ahTUjM/dtEauJg=)
                          23: B6D40A18822F11EFA848053BC4F9AE02.roa (hash: qTT7XzpkLtDQdKGn2G66fy/McFFpsOFRvnIb+qAvaRw=)
                          24: 52850542A60811EF91FB1113C4F9AE02.roa (hash: kowmpjbS8K8YRAisMY96jcR4JecyVpMM9JfAm+PJPWk=)
                          25: 2622AA12010511EE8C750D39C4F9AE02.roa (hash: mf2Qk+w1NRlp24Ok2PsGfSzQRhYbIagpibh1QaUmo/0=)
                          26: 9D8E6D02C2A511EBB2025B36C4F9AE02.roa (hash: cx0K0bJRQz5Nmb2d76mnGIN2Xr+QPD7Bio7ZlcQXgU0=)
                          27: 26C39BB6010511EE8C750D39C4F9AE02.roa (hash: PrIFv9vXjUSJQadCTa4FhOnCYA1U2rLRvK5pclzfjFs=)
                          28: CAD5365E090C11EBA5412411C4F9AE02.roa (hash: 1/UnllgrY9TLTTDeiVVZgSkXNLQXVP9JfAc/UDXvF4Q=)
                          29: 4D4EE370408A11EE91A09746C4F9AE02.roa (hash: a0UD+/qG4UMDv/2WmEJk9pk9QhXhkwYYYzMZ4c/XI1s=)
                          30: D34236BE7D0511EEB381D02CC4F9AE02.roa (hash: MXoyWFgv72XpKm4iYapo+Jr79E2SzPPDsg5QxMhWUpU=)
                          31: 46186F4EC6E711EDA2FCBA34C4F9AE02.roa (hash: XzgXWY7//UVaNEuQIopWxPc37VBbWxsWdMNjr7wRlfY=)
                          32: 5B7026601E4E11EFB78F797EC4F9AE02.roa (hash: WClEiucs5BiIQI6sFOvNSCglsXZtV1kMtll1iGeYhjk=)
                          33: 0BD5724C3A3211EDA1B7D863C4F9AE02.roa (hash: UguBw1sfiBAtlSn78NzpSBwxKrJvm/pM/IYVtzEhGVk=)
                          34: E614D0A2CD5011EF863CDE64C4F9AE02.roa (hash: VRsqFBw6W6srpeBDnBHvB0NtD3V0u3PzUnUHEjXNhCA=)
                          35: 83F06CF2DF1211EDB91D5C61C4F9AE02.roa (hash: 8EbAPbXfSh68G52OBPln229w9SwdjrHKzeWsW0yhIOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 14:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14195 (0x3773)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Apr 26 14:21:44 2025 GMT
            Not After : May  3 14:21:44 2025 GMT
        Subject: CN=680cebf8-ae3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:7a:a3:99:b6:37:4e:25:25:8c:81:e2:34:
                    e1:2b:92:a8:0e:30:7b:c7:e3:bf:83:1c:4b:7f:52:
                    4e:26:18:09:d0:f8:43:4b:77:0e:67:d8:ca:21:57:
                    14:d7:b8:37:98:b2:aa:e0:ea:29:f8:fb:f6:e1:fd:
                    c7:f3:fc:ad:3e:44:52:01:63:ac:89:86:c5:bf:81:
                    6f:31:d9:a5:29:64:eb:9b:58:46:c2:58:67:b9:71:
                    32:6c:db:eb:96:87:bf:5e:b7:20:28:be:ff:e8:03:
                    c0:4b:b8:b6:09:82:e0:80:1c:c2:70:bf:24:04:b4:
                    9c:48:e0:6a:fb:c6:1b:80:91:ce:d6:59:68:ef:94:
                    bb:dc:b4:50:24:89:8e:d4:66:93:03:1f:2c:3a:ee:
                    d5:43:2a:00:aa:76:35:c5:bf:80:52:a9:91:12:1e:
                    64:18:f0:58:a3:68:15:d1:22:e3:d1:3b:c7:1a:5f:
                    bf:fe:e1:3e:23:cb:38:1b:a2:0f:53:8f:d6:b9:dd:
                    8b:e5:fa:de:a9:2e:21:90:a2:56:65:79:50:f5:19:
                    fc:30:63:68:f5:be:28:56:ba:f3:87:ce:e6:1b:bb:
                    f2:4c:c1:66:34:e3:59:95:b1:90:a2:ee:cb:58:7a:
                    ce:6f:6d:6f:7f:f5:94:f6:a2:cc:c7:39:c4:6e:86:
                    b9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:9B:5A:4D:E0:57:E4:E8:9B:61:15:37:7E:8B:78:A5:C9:2B:B5:F5
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b9:de:01:07:1c:73:2f:fa:35:4b:75:40:26:e6:b5:e9:02:
         a0:5e:94:cd:9d:05:35:90:73:2e:d4:69:21:e2:e3:29:f7:86:
         7a:3d:61:b9:a3:8b:f9:3d:e0:52:17:79:c7:ce:c9:43:bd:85:
         ba:4a:f8:ce:44:26:75:84:e2:ef:33:f2:ad:b5:08:bb:94:b8:
         d4:94:d1:7f:dc:41:ef:39:15:58:11:c0:87:e8:34:56:19:12:
         a9:50:df:44:ca:0d:e0:b7:3a:ba:6a:d0:dc:6d:13:dd:b2:45:
         fa:5d:99:63:6e:ea:0b:7b:fa:25:45:7a:9e:45:88:01:14:73:
         0b:e5:6b:df:ea:a6:c7:bc:84:f1:fb:88:41:34:75:00:b6:55:
         04:5c:93:d7:ce:c2:25:a5:ec:ea:3c:b4:7f:ef:ac:8a:6e:f0:
         03:97:84:51:f5:66:f9:5b:fb:5c:61:32:b8:64:42:da:0f:16:
         3d:13:ed:1e:c3:d3:80:70:a5:d1:c9:36:ad:46:09:b8:57:dc:
         40:9f:97:80:39:c7:35:8e:74:8b:9d:7e:da:22:89:19:e5:63:
         73:03:72:27:06:cb:00:42:37:ab:46:5b:a9:57:0d:94:ab:35:
         e4:fa:f8:fd:1f:9e:aa:e9:ed:16:9d:de:4a:5d:0a:98:31:ba:
         3f:4c:9e:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICN3MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjUwNDI2MTQyMTQ0WhcNMjUwNTAzMTQyMTQ0WjAYMRYwFAYD
VQQDEw02ODBjZWJmOC1hZTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvdt6o5m2N04lJYyB4jThK5KoDjB7x+O/gxxLf1JOJhgJ0PhDS3cOZ9jKIVcU
17g3mLKq4Oop+Pv24f3H8/ytPkRSAWOsiYbFv4FvMdmlKWTrm1hGwlhnuXEybNvr
loe/XrcgKL7/6APAS7i2CYLggBzCcL8kBLScSOBq+8YbgJHO1llo75S73LRQJImO
1GaTAx8sOu7VQyoAqnY1xb+AUqmREh5kGPBYo2gV0SLj0TvHGl+//uE+I8s4G6IP
U4/Wud2L5freqS4hkKJWZXlQ9Rn8MGNo9b4oVrrzh87mG7vyTMFmNONZlbGQou7L
WHrOb21vf/WU9qLMxznEboa5FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOubWk3g
V+Tom2EVN36LeKXJK7X1MB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUYzRS9BQzUyQjc0ODFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJ
MVVtbVU1REpMaFg1MzN4VXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQB8ud4BBxxzL/o1S3VAJua16QKgXpTNnQU1kHMu1Gkh4uMp94Z6PWG5
o4v5PeBSF3nHzslDvYW6SvjORCZ1hOLvM/KttQi7lLjUlNF/3EHvORVYEcCH6DRW
GRKpUN9Eyg3gtzq6atDcbRPdskX6XZljbuoLe/olRXqeRYgBFHML5Wvf6qbHvITx
+4hBNHUAtlUEXJPXzsIlpezqPLR/76yKbvADl4RR9Wb5W/tcYTK4ZELaDxY9E+0e
w9OAcKXRyTatRgm4V9xAn5eAOcc1jnSLnX7aIokZ5WNzA3InBssAQjerRlupVw2U
qzXk+vj9H56q6e0Wnd5KXQqYMbo/TJ5O
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:27:08 2025 by rpki-client