Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
File:                     89ufFiAIvWZsv4yZYHgUz6sk1-c.mft (raw, json)
Hash identifier:          6IIN7rSp3yBjwvJbpyUy/8QOwIJhoWvDxbLQf2odFKM=
Subject key identifier:   18:63:0D:6A:75:4A:7F:3E:96:A8:31:11:B2:01:E3:CA:C5:18:29:B3
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       352C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
Manifest number:          3252
Signing time:             Thu 24 Apr 2025 15:36:56 +0000
Manifest this update:     Thu 24 Apr 2025 15:36:56 +0000
Manifest next update:     Thu 01 May 2025 15:36:56 +0000
Files and hashes:         1: 89ufFiAIvWZsv4yZYHgUz6sk1-c.crl (hash: 6S7x7GmbJ6a8P6hsn0xl3fA6HgfX61ObWdu7aLhk6OQ=)
                          2: 2A3ED0C0314811EA82EC6962C4F9AE02.roa (hash: CNtwJmM4ITqlrRYaZt97Rasi+kzlPfWxGFJkimc9jPw=)
                          3: C808A5E6C4A711E9BE1A815DC4F9AE02.roa (hash: S9CnYVsi0ZwY60Fuyi3R/RktyraCWPKfeAAv0e6JV8A=)
                          4: 960764842D4211EA907A566EC4F9AE02.roa (hash: +Bs4NPsq9q/ky1a2463umAyjL4riVmWQqqV4/tkgOHk=)
                          5: 6891872A27D711EA8E7B5876C4F9AE02.roa (hash: GGIVfSS7D8yyRRN5Onf3Qhya9r6F2GZq1J4YQCg2Pqg=)
                          6: FE63F4649CD511E9A6A86527C4F9AE02.roa (hash: acS5xZHfKFAFpCd1PErom5igmjUUVkhoyOM4v0AxSDs=)
                          7: 688029EE184B11EA85906435C4F9AE02.roa (hash: Ue2DWY3vlt6mbw6ETB1qQ+hJjxZhtzYVXCNlUWmoUzI=)
                          8: 4979428A0E0D11EAAAF12D09C4F9AE02.roa (hash: i2ciuBhBUtE7pnYNZqOA0C3Ue5UEpb0FfMCJW8LDAyI=)
                          9: 3A153A08C31F11E9B2558032C4F9AE02.roa (hash: 3TwS8SFtWWWkKCN8Ia5IBpMMbA7fOA7/nhg9LAU+sp8=)
                          10: A197DDE6BF2011E99B065B7DC4F9AE02.roa (hash: y3nJkKov+9nDSfAB9eiP5L2LmysH6Jg/joscc/qzkE0=)
                          11: 4025C8DC78E811E79F549F43C4F9AE02.roa (hash: GojqM9IVTeugO29k26q6M4r/oGc/SoY06X36Wa+R3d8=)
                          12: A7B53200784E11E9AE591940C4F9AE02.roa (hash: 04lfGGc3BNbFGhp2l0QHVx1Fset5cm8gW0lAn5CPync=)
                          13: 3F9678DA78E811E79F549F43C4F9AE02.roa (hash: WnVyFGdGh4nH1+BIoslG+uUUOp+ePN6X0FSgq3J9+n0=)
                          14: 7909FCC06DF211EA806B671BC4F9AE02.roa (hash: n1uQ3psy32mhvWgrDG8XabzbP0HRNswXJpwX9GNWb0Q=)
                          15: 8F34BFAADF7E11EF9F3F8268C4F9AE02.roa (hash: SmDboYhKwuZzIbakrz2sFj299ozGSUzEkefc5ZQryT4=)
                          16: 76CA0E007B7711E9B2348367C4F9AE02.roa (hash: Aqjk/ey4kfQ9KmDeGfHlcEni3U1JZA62YkQHgWZ63GE=)
                          17: 6BEE929EBE7A11E99ADDFD75C4F9AE02.roa (hash: 2PqMKVtMkvOBGPgFd5BfOiYOKvcIs4eb/CMfm9Ab4Eo=)
                          18: 3F4717D0D89B11E9AB8A5F14C4F9AE02.roa (hash: /ylY6kHbRD4NOz703RJDwu8cDni8qw0ZW1DbwZ+fss4=)
                          19: 7D281FE0CAF911E9912CF92FC4F9AE02.roa (hash: 0jRu1Q749u0XB4exazW+ZBlH5vm1gyXDoRwoNde6qEk=)
                          20: 93069024F98111E9BCD2807EC4F9AE02.roa (hash: nu16uL/KRDV0B4CFnROJ1c3kxYgCVInbvWC3GWFkhZI=)
                          21: E97B1E5482E211EEA80A0583C4F9AE02.roa (hash: sRW6XbJvReNKsnh89cUtNQ1Ew8IXlSAaCZ7MuKNN8cw=)
                          22: B7E4B4D8676411EA90B16258C4F9AE02.roa (hash: ZJxL1MdbhAv+jZrXHgGesgnpKK6b8TXGM55sEaDPeH8=)
                          23: 9CC241B2016511EA91E3CF4AC4F9AE02.roa (hash: SPFm8oPbTa4hyaYD8F5IhdItQAiErrjahVrh6ptJJLQ=)
                          24: B883270E356B11E7A51C314CC4F9AE02.roa (hash: a1VKqNti3NCefO4XBY1n0yK29kxA5TkKwL+YsvdOyIo=)
                          25: 95A84A924C0211EAB9CDB321C4F9AE02.roa (hash: KAtnbP5v+/Daga6upo9I8UD7tM68ca8fNEaqzjrU8fw=)
                          26: DA7F8A1478E611E7AEAB9A41C4F9AE02.roa (hash: jngpAI0+urYPzzhmeWzwf6PZAYZr08EfAsvbOjGYSfc=)
                          27: 6CF60CB6785811E99A6E965AC4F9AE02.roa (hash: Pdp5ex3WILw7iG17rFPSyS12eBInNFBGiUmFxLOiLr8=)
                          28: 691CFE18184B11EA85906435C4F9AE02.roa (hash: XBLnLS8CoZPqneN92hjne4admIXeH2doDZ0IFbFaSn4=)
                          29: 6C906DE4BE7A11E99ADDFD75C4F9AE02.roa (hash: AcBpX+mvudevZxRHrFr2+gPNpS9AeBUJGg4GNiQw8SI=)
                          30: 0259CB6ABE7911E990831772C4F9AE02.roa (hash: wKOBp6pfgzScIqq1Y5Aq/wLs5uR6pO+UMIgkXEbqkKM=)
                          31: 6E30D6B6BE7A11E99ADDFD75C4F9AE02.roa (hash: 6ziMLUDwR4XjDj0dTcooivNvkl4e8aoFTmI8x8LxIO4=)
                          32: 59F5C224337811EAAD3FAA39C4F9AE02.roa (hash: IT0gqa2rUcxL24HAoWNInEMWT+HFDwiq5WpDxk6Cb5w=)
                          33: 9E189DF2C4F411E9829EC138C4F9AE02.roa (hash: 4a39GCSRC4qB6TdrSDSgzJa1CQ3f90CkNweJJ+deDS0=)
                          34: 5A87E8B01A7E11EAB32DB717C4F9AE02.roa (hash: TF4/nOrzyf5duBfEQYUwJ6zNvE5ah2P0TT9FhC7BegY=)
                          35: 6C1DC926C3E111E9A0172583C4F9AE02.roa (hash: Y9YreMnj4c/Gmbs8JYt4xiAjkQnraU6hVdNLY4y3pHE=)
                          36: 6D6A6B7ABE7A11E99ADDFD75C4F9AE02.roa (hash: EtDux/1s+X2yH1VSgNQ2Z9uhe6Rn1M1EShWbZlWx77o=)
                          37: 6AE530BABE7A11E99ADDFD75C4F9AE02.roa (hash: kOCol53zijYnRgxhtuZJM0PBTUMvBy2fQhDYz7C5XyU=)
                          38: 011F48EE2FF411E78B4D5566C4F9AE02.roa (hash: jdOuSxLCZnpT91YPdCxaOI+6MskPlS16Xo3cbB7dQ60=)
                          39: BE6B7B76337911EA8016C03DC4F9AE02.roa (hash: t0t2H41OSs9bcuWnHLre1o5kYbLG5xg69/nQyymgcE4=)
                          40: DEBF5A241D8911EA8ECDAA75C4F9AE02.roa (hash: ttpWvxQCEuoPYJ/Gx+8ECPtzH+qsEte9Od0xgi4qaOg=)
                          41: 00C137A2BE7911E990831772C4F9AE02.roa (hash: T1EiYlg921dIuqeleHn3qhJut72TmCqiSVWqxjVEiGY=)
                          42: FE17729EC4AB11E99055C166C4F9AE02.roa (hash: ktaEtLzIPsDQwxFvG+9rKB72y1n/rnEv9RvoZpoIjaA=)
                          43: 6EEB5A22BE7A11E99ADDFD75C4F9AE02.roa (hash: zRNl4cGh1wy+6vX2KZejZ9MEfSlh/bELbw2UrGz7fQ4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:36:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13612 (0x352c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Apr 24 15:36:56 2025 GMT
            Not After : May  1 15:36:56 2025 GMT
        Subject: CN=680a5a98-f517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:88:67:b0:7d:a1:19:4e:87:58:e5:c8:c0:6b:
                    61:41:44:80:8f:21:2e:ae:14:f3:83:1f:d3:c2:8d:
                    6f:ab:71:18:48:ad:4c:d2:22:92:99:f9:6f:12:07:
                    26:23:8e:ce:45:85:7a:f5:af:36:41:ab:68:50:6f:
                    11:ba:28:72:10:27:9d:f3:cc:90:ed:3f:0b:9f:6f:
                    3a:aa:6b:ee:16:b8:2a:01:85:a2:8b:55:3d:6e:1d:
                    fe:fe:f8:4b:fb:3f:04:46:f8:c5:35:69:ac:5c:55:
                    9d:3f:c2:9f:08:0f:b3:0c:4e:6a:4c:ec:0a:34:bb:
                    82:b3:a4:e4:21:bd:fe:15:a2:ce:ba:37:ad:39:f9:
                    17:27:0a:4c:d6:2f:a1:86:e5:0b:f3:0f:9c:96:d0:
                    b1:33:5c:ea:30:88:d9:4b:96:3a:15:6e:cd:89:bb:
                    bb:6e:a2:3f:a5:6e:8b:47:d6:2b:60:bd:53:cb:e2:
                    40:04:ce:17:0d:5b:25:84:44:e1:e2:cd:33:c4:1f:
                    ca:74:31:1f:86:33:64:68:00:59:33:d8:88:94:ea:
                    bb:0b:20:13:05:ec:24:44:35:52:3d:2d:16:80:76:
                    86:a1:45:56:64:25:2e:e2:c1:7e:5a:48:be:9a:f2:
                    a7:7f:fd:57:58:70:95:ef:b5:68:ea:cd:f1:5a:65:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:63:0D:6A:75:4A:7F:3E:96:A8:31:11:B2:01:E3:CA:C5:18:29:B3
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b6:c1:f3:fe:af:4f:4e:c0:ea:9a:79:12:ea:63:a1:32:52:
         2c:ac:0d:14:8f:fd:3b:f7:00:3d:cc:47:81:52:52:4e:90:9c:
         fc:f7:f8:19:cc:ea:35:62:b4:92:8d:77:bd:71:5a:f1:4b:0b:
         b2:9a:bd:36:2f:30:fa:9a:fe:a0:10:55:d3:82:95:ac:2f:8b:
         28:a2:96:a6:13:a2:56:7e:91:80:f8:05:f6:e7:e7:79:ae:35:
         bd:eb:9f:58:29:ec:6b:3b:20:0e:0f:cc:57:46:32:71:a7:4d:
         ba:ea:75:40:e9:54:3f:e6:29:83:45:69:50:d5:37:80:c2:3b:
         43:9c:70:7b:2e:22:09:a3:53:d1:f8:0b:88:ce:7d:8e:14:55:
         01:f5:07:8e:28:bb:3f:b1:0d:1c:2f:5a:ed:b4:e3:42:d7:0c:
         94:a2:c9:a2:16:56:cc:72:06:e4:ea:d3:d7:cc:af:e0:9a:b8:
         f5:eb:93:49:54:77:8f:b8:2f:69:fa:2b:41:82:d8:14:c1:93:
         94:7a:d1:37:20:41:f7:c8:d5:8b:76:8e:14:57:83:a3:a2:c6:
         aa:a8:b0:4f:1e:a3:6c:9e:d6:c2:70:5b:5a:6c:4c:3b:ee:19:
         73:3d:a2:c4:ac:63:6e:fb:d1:3d:74:62:3c:3b:f2:f2:6d:ee:
         b3:eb:4e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:56:45 2025 by rpki-client