Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
File:                     8f4MMn555a9D4VsOb4zWbAMp0Tg.mft (raw, json)
Hash identifier:          Q2gGPD47jaUUJGN8y6MAmv/K7mLV8xzWW/8WhhU0Gq4=
Subject key identifier:   04:48:EC:BD:C5:E8:D1:18:BD:45:8B:CB:A5:8D:24:2A:42:03:C3:27
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0328
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
Manifest number:          029B
Signing time:             Fri 25 Apr 2025 01:51:01 +0000
Manifest this update:     Fri 25 Apr 2025 01:51:00 +0000
Manifest next update:     Fri 02 May 2025 01:51:00 +0000
Files and hashes:         1: 8f4MMn555a9D4VsOb4zWbAMp0Tg.crl (hash: 4zBF3dI+sMtk/xe/P/r+BTMjIGXP5L8rk6yPEvfsjLk=)
                          2: 47A8E8C61FD111F0B1550D83C4F9AE02.roa (hash: 9XgGh0ajuivoZAuKDOsOnBPkN1Ws+C3V6eEttk4XMus=)
                          3: 1B740C443DF811ED8EA29234C4F9AE02.roa (hash: d46c6mP8yQKtCL1j50wpNIYdrEG7vH8Gk0XwB/6np30=)
                          4: D1F346DAFC8011EFB251DF67C4F9AE02.roa (hash: J8PBkBjnUQWDp55ZK4Px5kI8+gf5ZLFdYuyEaWigFmk=)
                          5: 740EB470E85B11EFBB9A7411C4F9AE02.roa (hash: 6MtRxojEwXeBBwTA6JhJ6iokxEUCcet3G/jd11xPrs8=)
                          6: 1C4A530AF56411EFB29F7142C4F9AE02.roa (hash: pDwghoW83KCoFGr00Ci1Qzg5/mmJKBiQBABjiPxXDg8=)
                          7: 029EC746D47711EF9C73DD7FC4F9AE02.roa (hash: cB/HAlQoM6VmcEnIGu6+bJRsobTJnhQw0F2fE38cd0E=)
                          8: 0B93EA661FD111F091F95F82C4F9AE02.roa (hash: S8S/PVnEFdzRmwECm2IPzs3uiE5PL2ImPJmjhxClCr8=)
                          9: F2CEE3CEBE7711EFB34D6959C4F9AE02.roa (hash: c/zVI3V70E1Wu6EQXw+rtLMreURhxjP1Lrx+c37+kQM=)
                          10: C68EA896D18011EFA738B84AC4F9AE02.roa (hash: Ei4OQatIUZk/6HLsZAw7psHDglNB9wf4zzt2OcQnNKY=)
                          11: 74F68796303711EFB68DF613C4F9AE02.roa (hash: n4CrL4KlT84Nr/DgP33rUbZGXQ7GFSx45QbOVg+Obd8=)
                          12: 90B05B70D31511EF9F94561DC4F9AE02.roa (hash: DP1BeOxUOR7jmhspwxnCeHXQU42Y5xHAq5vFp/2k/XY=)
                          13: 140034BC1D9611F0B8992513C4F9AE02.roa (hash: uUjVY+1HXCwh/0gBZ/+32ERYKd+WEhsMwLLmrKvQCRc=)
                          14: 53E3F02CF88511EFAF4C196EC4F9AE02.roa (hash: wYWX73wDqg9YYxoFfUJfz2bbrCEn4lzzQ8CGOEGcvBA=)
                          15: 4F10ED76D3B311EFA7B56234C4F9AE02.roa (hash: lSHPz/Z+uxa8tArC1Mc4CZ0YnIqrOvRe7SHXj7pf8js=)
                          16: D8E46162CC3911EF8444417FC4F9AE02.roa (hash: l8Sh6c2GmuBO8DvBcjU2VitbtNGnp/aJmnTgKTcfJ4s=)
                          17: 3CF11BEA163211F0B2BBF073C4F9AE02.roa (hash: 0Baffcoz59/s0nqwLMYDCddrKXlDa2U1bXRWD6Hw/Jw=)
                          18: BA7491AAE0FE11EF9196F463C4F9AE02.roa (hash: Ir4i9nJYMLN6SF2hTwXjlm9gkjvDcx0KEIJUDLVPVCI=)
                          19: D11FB31AFC8011EFB251DF67C4F9AE02.roa (hash: REhAHCBvoAzqipr15BIAMDK94hxgYaNE2MBz4tXvCic=)
                          20: BEF9E93E3E6A11EDB58A2B41C4F9AE02.roa (hash: HkYj/TVr1XhK2vRP+l6p5iXFD51evS0AgC8WhbDTuxM=)
                          21: C6537C4AAC5B11EDA8C03215C4F9AE02.roa (hash: 6wMf0Z8//cJMxItVuyAGd2usHOPGjQivwJ76VTi1wpM=)
                          22: C244E42E217311F0B1300933C4F9AE02.roa (hash: 86O9ffvZ+lAdP3fKWPb/eFdPAnDvj653nudTKYYyhaU=)
                          23: ECFCBBA4D8D711EF91AD5538C4F9AE02.roa (hash: RZU+vxzrJk5agVsB47bIr4bRNKdVBncHpu2NxllEAuY=)
                          24: C58950F4CC3A11EF80AC530BC4F9AE02.roa (hash: eORqf3Oz2AeqEvrYAYLcmW4DWddEbC2alvo0muIChbk=)
                          25: 784481D01B3E11F08B1A3029C4F9AE02.roa (hash: hpLF+1WPRM/+lgp1ccfs7QOxSrFnUTZF7Opf3dhOqCg=)
                          26: A88A0ED8FC7511EF92B63B46C4F9AE02.roa (hash: 9VCbcJprVhVD5YlwxMs2GmYF5PQFLfWW66YkA9K3Z1s=)
                          27: 84757A9A030B11F099FC1410C4F9AE02.roa (hash: EBxLaXLba3ybeQ1SlmH7GzP8NlDiABfKS2zIQpf4Zlg=)
                          28: 6520648CCC3A11EF97B13E83C4F9AE02.roa (hash: cioPSnvxCV9MlKk+N+OKdKIZIjZxwbeh0ez1/CK80l4=)
                          29: 307D6166D09611EFA2A9F476C4F9AE02.roa (hash: TBh0mjBSfPDxaIl2QgmGHAAabIdCNBIDd/PwCXBjZQ0=)
                          30: A852E23C20BF11F09399F213C4F9AE02.roa (hash: H+WBzoecdDIpdY2SLoeYUI6233JcxPC/nZWBfed8ngA=)
                          31: C0CFC696198E11F0A5D20B52C4F9AE02.roa (hash: /RPs6fIwfg3JSaBCKBhKN8nQ/4D++JTTsmoi0XVvwmE=)
                          32: 1332C07C1D9611F0B8992513C4F9AE02.roa (hash: fMB3JqWLVnxvGjnKq5ROpoZgKV6qM4jt90jQi04CUq0=)
                          33: 49A26B9A110611F0B584EF2DC4F9AE02.roa (hash: xlcoL3p/Vx7uMGpSQ/OdaAe2ltOhONmUwNNFCl5Q+CU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808 (0x328)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Apr 25 01:51:00 2025 GMT
            Not After : May  2 01:51:00 2025 GMT
        Subject: CN=680aea85-b508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:89:b8:af:35:b8:9d:ec:2a:31:20:82:b5:ab:
                    10:83:d2:50:52:56:6f:16:7c:59:dc:69:d9:04:d7:
                    d5:c8:ee:0a:76:4e:78:a5:2d:ee:eb:37:9a:34:40:
                    03:2e:70:9b:79:87:34:7e:3c:02:fc:7d:36:41:f7:
                    ad:38:34:81:a7:9c:79:6b:a3:80:f9:3d:18:ab:c0:
                    db:4a:5d:43:28:c8:69:6e:9b:55:3f:a8:bf:70:3b:
                    ae:96:d5:98:4c:ad:64:26:f8:a6:89:03:fa:ec:bd:
                    cb:3b:1a:b6:f0:a6:59:86:d7:9e:fb:21:40:0f:9e:
                    15:93:3f:48:30:df:d1:4c:20:dd:f9:43:d1:0c:fc:
                    df:74:65:d5:72:fd:cc:96:e1:aa:ab:05:28:1b:20:
                    88:41:85:31:ac:fe:fc:29:62:55:14:04:3f:2d:1c:
                    b3:27:b5:1e:c7:2b:6e:d2:f8:19:d5:b5:1d:6d:58:
                    39:47:5c:82:35:25:13:10:41:e9:96:b9:a9:b5:ef:
                    fc:58:96:0d:44:cf:4c:91:5f:5e:f8:87:05:04:ea:
                    80:f8:6e:43:45:13:06:f3:d8:c7:54:51:eb:a5:5a:
                    cb:c6:e5:da:06:f3:bd:12:20:c6:d3:2a:3b:26:bc:
                    3a:27:90:92:ae:f3:c7:09:ca:5b:02:4b:d6:36:f4:
                    5d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:48:EC:BD:C5:E8:D1:18:BD:45:8B:CB:A5:8D:24:2A:42:03:C3:27
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:bb:9f:df:25:a7:60:4c:b4:11:5b:4f:f1:91:5e:f8:e8:0c:
         9f:f4:94:93:6f:25:a5:bc:ad:cd:7c:83:12:6a:25:3f:b7:fd:
         3e:1d:3e:89:0d:a6:47:4c:47:0a:65:c6:7e:19:44:67:69:0a:
         81:39:5b:87:83:93:72:cb:d2:3a:b3:87:b5:b1:f9:df:44:d3:
         a5:bb:f9:04:6a:39:43:dc:ba:d2:0f:4e:e9:3e:da:06:c5:55:
         d1:d6:f7:6b:d1:04:aa:40:95:73:93:00:0d:28:56:c6:b0:1e:
         0e:06:7c:2e:ef:c7:bb:d0:82:5d:ce:b9:5f:cb:75:ee:87:c4:
         2f:b5:a8:4a:1d:eb:15:b2:1c:d2:33:3e:9d:73:0e:fd:0f:c3:
         a4:8b:ed:87:28:50:02:1c:28:da:52:5d:13:d6:80:c6:44:19:
         c2:31:32:98:d6:23:40:e2:81:ba:2b:ef:fa:13:0c:ca:b3:0d:
         55:82:ff:66:fa:c9:31:6c:18:8f:a2:94:c2:60:13:bd:be:d5:
         f6:c2:30:58:a9:c9:7d:ea:eb:c7:5e:b4:1f:e9:aa:7a:3c:cc:
         cf:0e:bd:e4:fe:d8:2d:f0:0e:d5:00:9a:17:0c:de:00:08:35:
         b6:78:3c:e3:62:c1:eb:b1:9e:90:4d:39:c1:0b:fb:78:23:e4:
         a5:91:f2:9f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjUwNDI1MDE1MTAwWhcNMjUwNTAyMDE1MTAwWjAYMRYwFAYD
VQQDEw02ODBhZWE4NS1iNTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Im4rzW4newqMSCCtasQg9JQUlZvFnxZ3GnZBNfVyO4Kdk54pS3u6zeaNEAD
LnCbeYc0fjwC/H02QfetODSBp5x5a6OA+T0Yq8DbSl1DKMhpbptVP6i/cDuultWY
TK1kJvimiQP67L3LOxq28KZZhtee+yFAD54Vkz9IMN/RTCDd+UPRDPzfdGXVcv3M
luGqqwUoGyCIQYUxrP78KWJVFAQ/LRyzJ7Uexytu0vgZ1bUdbVg5R1yCNSUTEEHp
lrmpte/8WJYNRM9MkV9e+IcFBOqA+G5DRRMG89jHVFHrpVrLxuXaBvO9EiDG0yo7
Jrw6J5CSrvPHCcpbAkvWNvRdCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFARI7L3F
6NEYvUWLy6WNJCpCA8MnMB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkMxOC85QTVFRUE4QzNERjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVh
OUQ0VnNPYjR6V2JBTXAwVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQDXu5/fJadgTLQRW0/xkV746Ayf9JSTbyWlvK3NfIMSaiU/t/0+HT6J
DaZHTEcKZcZ+GURnaQqBOVuHg5Nyy9I6s4e1sfnfRNOlu/kEajlD3LrSD07pPtoG
xVXR1vdr0QSqQJVzkwANKFbGsB4OBnwu78e70IJdzrlfy3Xuh8QvtahKHesVshzS
Mz6dcw79D8Oki+2HKFACHCjaUl0T1oDGRBnCMTKY1iNA4oG6K+/6EwzKsw1Vgv9m
+skxbBiPopTCYBO9vtX2wjBYqcl96uvHXrQf6ap6PMzPDr3k/tgt8A7VAJoXDN4A
CDW2eDzjYsHrsZ6QTTnBC/t4I+SlkfKf
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:02:50 2025 by rpki-client