Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
File:                     OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft (raw, json)
Hash identifier:          IS515yfOgVUavh0CCaPUDxc/PViTi2LK6Iz3+8kNJRg=
Subject key identifier:   6B:80:91:6A:BC:11:52:BA:EA:C6:95:59:B7:DC:DE:2F:F8:90:0B:E4
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       0D2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
Manifest number:          0B86
Signing time:             Thu 24 Apr 2025 19:59:49 +0000
Manifest this update:     Thu 24 Apr 2025 19:59:49 +0000
Manifest next update:     Thu 01 May 2025 19:59:49 +0000
Files and hashes:         1: OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl (hash: NdNvAcccTXynNM34hS+qns2UDkcksX8nAgbAJPxOZIs=)
                          2: 1C1E48F42C7511EF91005F2AC4F9AE02.roa (hash: LCTaAks4BqlupqHXTz1VdaXnEXMyWZW8ZhZmp2UYH3Q=)
                          3: 92A205F4191111F095164E59C4F9AE02.roa (hash: 3xwUQICiJWltnsaPPc+uKPTybyb67JmaTUlAe4OstQ4=)
                          4: 9F9996C213D111F0AA6BA06DC4F9AE02.roa (hash: XvmtAl4P5a29aqS9e6mLU5ktzC3FHG1NMRnHUBLds0Q=)
                          5: BC7FD008F9A511EF885CA76EC4F9AE02.roa (hash: Ex7392prc1zunazGcvbevro7VL69lZXVyb5pMImsMLI=)
                          6: C5251E64F97A11EFA49F1830C4F9AE02.roa (hash: 1s6o144svvuBT7bM0nKhLdrQKAxPDy6rl1DbIqyk5zw=)
                          7: 75EBFC30147A11F0B6BF5B67C4F9AE02.roa (hash: KG2RLaKQGPSadB3NRv2ridHAGMaUMBRbwy2ETF/NtCo=)
                          8: 95F1EC2A20E011F086D75E5CC4F9AE02.roa (hash: CnHAKJhcFhKxT9bBgQkQzh3x9o/fPEBq15JlvNEADLg=)
                          9: 0CA13B5E204211F08913AD7EC4F9AE02.roa (hash: Z1Sr7v7B5X0gptNz8O3a/LI7uJqeiBgmcVw94I47NgQ=)
                          10: D8538FA2204411F0B6649425C4F9AE02.roa (hash: uqPVCmw8xhCuAFmHWCKeDdfNdsicl8lxhmTwM3JVS44=)
                          11: F0D4053EEDCC11EF8C545F54C4F9AE02.roa (hash: 4QfTRpAN+SnkWQoS+a8PlbB83aqDd8EbkaEm2nM3FeI=)
                          12: 4CF0A0BA203C11F099B69612C4F9AE02.roa (hash: 4ZKf/xoqZfwCwC8ZZP+pa6ZQRHPV0PGk6ZyQjnRsPBQ=)
                          13: CC2CFF76161F11F097D3DF59C4F9AE02.roa (hash: kRO7k4BulRhHisoR6+EUfbpDnd1NcNjfEli/hLZ+UXQ=)
                          14: 96D29A2220E011F086D75E5CC4F9AE02.roa (hash: KRy0P5JWQx6Y2V5q4Ftt2uIQCI1mbwGMxyDRESmryUU=)
                          15: C61D8A7CF97A11EFA49F1830C4F9AE02.roa (hash: nuITOYdIhOArGSoGSt5j2KXEgn3a91gHsJvT7gl/ffo=)
                          16: 6558775AE7D811EF8D280E2FC4F9AE02.roa (hash: YJQ9SpoqXrkvlRkEN5wsjZZeJRNdP87R6x7oDal+xTw=)
                          17: 90A6E260F97711EF931B0A48C4F9AE02.roa (hash: yNt3+76oxiczQlWAKFrrom/dgPrfFKQXLtrONN2mqsc=)
                          18: 1D8C62546F8011EFAB7D8E27C4F9AE02.roa (hash: V60KygzTK9eNVxmxKjhWraiuv3ggFGZ8iow3OUP1MyY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 19:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3374 (0xd2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Apr 24 19:59:49 2025 GMT
            Not After : May  1 19:59:49 2025 GMT
        Subject: CN=680a9835-b6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:c6:95:36:85:ab:01:d7:c4:7c:63:03:fe:
                    a3:c1:cb:dc:c8:46:de:cc:27:23:2e:fa:3f:69:13:
                    ce:c3:3e:4a:ec:29:4b:79:5a:e7:3a:82:a4:7c:44:
                    c6:86:70:fd:7a:6f:d4:4d:0c:bd:a5:16:da:ae:d1:
                    fe:f7:6d:f5:c4:1c:03:51:06:48:a3:3c:eb:41:fd:
                    aa:1a:28:6d:ee:ae:5f:3e:8e:e6:0d:c7:59:7d:97:
                    1e:29:5a:4b:a2:46:81:67:56:17:a6:72:19:83:08:
                    bf:2a:f7:e8:23:77:dd:bc:30:c6:28:17:34:8c:85:
                    2a:ee:75:65:b5:9a:55:60:17:96:15:4c:b3:46:b8:
                    7f:77:30:a6:f8:55:87:c4:0d:00:d5:44:95:cf:df:
                    82:a3:c4:2d:74:e6:e9:79:e4:c1:4e:44:0a:d3:a3:
                    12:3f:3b:84:be:e5:5a:36:a9:45:db:16:e7:da:28:
                    07:fb:1a:92:a0:40:d1:cc:66:ed:bf:fe:54:b6:58:
                    f3:fa:c5:c5:6e:f8:f2:16:ae:22:60:22:0f:f8:84:
                    0b:41:58:29:07:02:b7:93:b3:27:78:3f:af:4a:57:
                    cb:41:7a:03:59:40:38:2c:2d:0f:3e:39:84:b2:4a:
                    c0:b4:a1:9e:70:29:a0:9e:5d:98:04:ad:e4:fd:05:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:80:91:6A:BC:11:52:BA:EA:C6:95:59:B7:DC:DE:2F:F8:90:0B:E4
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:02:0a:a4:d3:7a:a3:f6:f7:13:bf:b0:ff:e2:7a:e0:0c:ed:
         8e:dc:eb:85:9c:ce:36:5c:79:ad:56:10:1c:05:27:33:23:dd:
         12:fd:e9:27:69:01:d4:07:84:98:21:9d:63:5c:4e:08:89:16:
         50:af:e5:84:56:44:9b:4d:e3:7b:b4:dc:a8:bf:c3:8e:c3:25:
         9d:b8:bd:db:f0:6a:ed:c3:89:24:8e:24:65:74:12:81:19:a4:
         c8:79:9b:de:70:82:a6:32:3e:dc:d2:78:44:00:a2:71:c6:c8:
         0d:d5:62:67:64:79:48:7d:5e:8e:13:42:2b:2f:2f:fd:a6:cf:
         a6:d8:a4:ca:b0:b1:1d:25:84:07:9c:d0:4a:49:28:de:d8:69:
         ca:29:e2:9a:71:1d:33:9c:88:67:74:68:24:7c:cc:09:40:34:
         46:c4:a6:f2:a4:27:02:69:c0:1d:85:28:95:b2:2e:19:1c:02:
         33:4a:78:c7:ee:87:f9:87:c7:5b:e5:d1:04:f1:54:24:5b:e1:
         b8:39:d8:d9:34:42:3b:7a:c4:06:80:b0:04:b5:fd:b8:77:e2:
         94:6d:3d:b9:5d:26:69:a5:0c:56:a0:e4:0d:c2:7d:5d:f8:96:
         3c:4f:e9:25:4b:fd:21:ee:c6:38:30:66:ef:74:51:2a:12:60:
         de:83:3d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:21:42 2025 by rpki-client