Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft
File:                     44SqQCWhBrVHp8CJsd3-7mzLoi8.mft (raw, json)
Hash identifier:          xJlidG1ia95+K5IEckiAaWbDysRLTPE0dJotjKKwjWE=
Subject key identifier:   DB:32:D4:97:E4:7E:97:65:AA:C2:AB:80:B5:2B:16:28:57:B9:47:04
Authority key identifier: E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F
Certificate issuer:       /CN=A9161B4C/serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F
Certificate serial:       0185
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft
Manifest number:          0176
Signing time:             Fri 25 Apr 2025 03:05:33 +0000
Manifest this update:     Fri 25 Apr 2025 03:05:33 +0000
Manifest next update:     Fri 02 May 2025 03:05:33 +0000
Files and hashes:         1: 44SqQCWhBrVHp8CJsd3-7mzLoi8.crl (hash: T+JHEDBhX0ygAOCPGEo/qW3tTlBPveExfRrUlon7Fg8=)
                          2: 3D940BFAC1A711EFAFD15F46C4F9AE02.roa (hash: 9+qlA4Q9NblMxHBbHQc6/IzU15TwV+ogIZA74gQ+vIA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl
                          rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161B4C, serialNumber=E384AA4025A106B547A7C089B1DDFEEE6CCBA22F
        Validity
            Not Before: Apr 25 03:05:33 2025 GMT
            Not After : May  2 03:05:33 2025 GMT
        Subject: CN=680afbfd-ebfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b6:c1:fd:19:c9:fa:59:0f:d8:8f:20:84:db:
                    d0:b7:4e:83:b8:34:d5:c6:b8:3e:24:00:74:12:d6:
                    24:c9:3a:fd:b9:d5:0f:a0:50:6a:1d:b4:32:d3:f4:
                    98:ff:32:5c:0d:cf:67:f2:77:07:ea:f6:bf:24:08:
                    08:a7:c8:d4:cc:7d:c7:c6:8e:1a:2b:61:2b:fd:93:
                    0c:e0:18:86:0b:84:89:6a:1d:53:9c:b2:f9:41:52:
                    91:17:9a:b5:49:81:f5:13:c4:8b:32:13:6e:a1:f4:
                    1f:44:55:a6:6c:6c:66:03:c4:fe:cd:58:14:e9:e8:
                    0d:71:0b:52:76:f9:d6:40:2f:e9:ee:86:c7:cb:ef:
                    dd:62:2b:55:b6:21:27:ae:37:4d:ec:7c:09:70:26:
                    e1:a0:69:74:04:56:92:71:73:08:bc:bc:47:da:50:
                    76:c9:b1:2d:ca:18:a9:f3:a5:75:9e:ed:8f:74:8e:
                    81:9c:00:40:ea:2a:07:bd:74:51:3d:89:85:dd:0d:
                    4a:19:2f:16:1f:cc:4c:ca:63:c5:27:38:9a:e9:91:
                    28:21:52:f9:6e:ca:15:05:c0:a4:f0:e8:79:7e:42:
                    94:b9:ab:71:76:d2:98:6a:92:7f:fd:79:03:7e:cc:
                    23:5b:38:8d:c8:6f:5c:cc:74:96:eb:3e:a4:07:04:
                    52:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:32:D4:97:E4:7E:97:65:AA:C2:AB:80:B5:2B:16:28:57:B9:47:04
            X509v3 Authority Key Identifier:
                keyid:E3:84:AA:40:25:A1:06:B5:47:A7:C0:89:B1:DD:FE:EE:6C:CB:A2:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/44SqQCWhBrVHp8CJsd3-7mzLoi8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B4C/29799152043011EEB3732C5BC4F9AE02/44SqQCWhBrVHp8CJsd3-7mzLoi8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:06:55:76:70:19:d2:3f:86:46:b3:5a:4f:ce:1a:40:58:91:
         fb:ea:70:f5:22:4f:9b:23:b7:cd:4c:51:77:83:5a:54:db:4e:
         95:b6:22:53:f1:e3:27:1d:9c:34:56:96:bd:47:cd:42:70:0c:
         a7:0d:b3:bf:cc:a9:a2:3a:9d:99:94:06:8e:5d:3a:59:1e:09:
         a2:f9:9f:e5:d4:ab:19:05:82:19:70:44:db:89:66:c0:5f:6e:
         70:22:ce:fd:eb:1c:4c:55:74:94:06:da:cc:41:ef:a6:6f:10:
         f9:da:05:34:99:b8:d0:7d:df:4a:6b:86:a8:91:74:70:e0:af:
         8f:44:69:78:b3:69:3d:b1:54:b6:e4:55:0a:fe:4c:66:76:b0:
         ee:56:e6:ab:ac:4b:0a:49:10:04:41:bd:eb:0f:32:04:ec:ae:
         e2:44:e3:f7:10:59:96:bc:f1:f3:d0:c1:df:95:ba:0f:02:4f:
         fb:26:19:40:3d:a0:27:0e:81:62:0f:1f:38:78:7a:62:30:78:
         77:c5:ff:93:5a:61:03:af:4d:29:d7:4b:90:50:c2:6b:82:c2:
         ff:06:fc:24:80:2f:70:7b:39:2a:f0:6b:1d:88:12:6b:29:3f:
         e3:4b:b3:ab:e8:9b:7a:36:13:c3:7d:a8:ef:01:47:20:ad:b7:
         2f:e5:5d:c2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjFCNEMxMTAvBgNVBAUTKEUzODRBQTQwMjVBMTA2QjU0N0E3QzA4OUIxRERGRUVF
NkNDQkEyMkYwHhcNMjUwNDI1MDMwNTMzWhcNMjUwNTAyMDMwNTMzWjAYMRYwFAYD
VQQDEw02ODBhZmJmZC1lYmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyrbB/RnJ+lkP2I8ghNvQt06DuDTVxrg+JAB0EtYkyTr9udUPoFBqHbQy0/SY
/zJcDc9n8ncH6va/JAgIp8jUzH3Hxo4aK2Er/ZMM4BiGC4SJah1TnLL5QVKRF5q1
SYH1E8SLMhNuofQfRFWmbGxmA8T+zVgU6egNcQtSdvnWQC/p7obHy+/dYitVtiEn
rjdN7HwJcCbhoGl0BFaScXMIvLxH2lB2ybEtyhip86V1nu2PdI6BnABA6ioHvXRR
PYmF3Q1KGS8WH8xMymPFJzia6ZEoIVL5bsoVBcCk8Oh5fkKUuatxdtKYapJ//XkD
fswjWziNyG9czHSW6z6kBwRSNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNsy1Jfk
fpdlqsKrgLUrFihXuUcEMB8GA1UdIwQYMBaAFOOEqkAloQa1R6fAibHd/u5sy6Iv
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MUI0Qy8yOTc5OTE1MjA0
MzAxMUVFQjM3MzJDNUJDNEY5QUUwMi80NFNxUUNXaEJyVkhwOENKc2QzLTdtekxv
aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ0U3FRQ1doQnJWSHA4Q0pzZDMtN216TG9pOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
MUI0Qy8yOTc5OTE1MjA0MzAxMUVFQjM3MzJDNUJDNEY5QUUwMi80NFNxUUNXaEJy
VkhwOENKc2QzLTdtekxvaTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDSBlV2cBnSP4ZGs1pPzhpAWJH76nD1Ik+bI7fNTFF3g1pU206VtiJT
8eMnHZw0Vpa9R81CcAynDbO/zKmiOp2ZlAaOXTpZHgmi+Z/l1KsZBYIZcETbiWbA
X25wIs796xxMVXSUBtrMQe+mbxD52gU0mbjQfd9Ka4aokXRw4K+PRGl4s2k9sVS2
5FUK/kxmdrDuVuarrEsKSRAEQb3rDzIE7K7iROP3EFmWvPHz0MHflboPAk/7JhlA
PaAnDoFiDx84eHpiMHh3xf+TWmEDr00p10uQUMJrgsL/BvwkgC9wezkq8GsdiBJr
KT/jS7Or6Jt6NhPDfajvAUcgrbcv5V3C
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:32 2025 by rpki-client