Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
File:                     6zifszmzkI1UmmU5DJLhX533xUs.mft (raw, json)
Hash identifier:          Sd11MNV6Zme9lFLLCrhCyKA8rS/8q+KtznI1dHVzP00=
Subject key identifier:   2B:2E:23:5B:4B:32:FD:06:5E:F6:89:16:9F:FB:05:B2:B1:B2:2C:43
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       377C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
Manifest number:          3642
Signing time:             Sat 10 May 2025 14:21:45 +0000
Manifest this update:     Sat 10 May 2025 14:21:45 +0000
Manifest next update:     Sat 17 May 2025 14:21:45 +0000
Files and hashes:         1: 6zifszmzkI1UmmU5DJLhX533xUs.crl (hash: PtUF6/qbepvT8bvIWflxSxu37GYKmYs9GtYIX9AjE2c=)
                          2: 5E035B480E8C11F0AD0C273AC4F9AE02.roa (hash: Wnu/A0yUx+4HqrhfwfUPaml1HEg9mGCN1YlC1GXeGvE=)
                          3: FAF6D732CD3811EDBD37B674C4F9AE02.roa (hash: 55hbp1lHPqWHR3myIKlQM0s8jhZDD5OMMu+AbqKM2eA=)
                          4: FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa (hash: zSVDYqkWgkMa+aLsCRgndkcVWEmWW6zKnoCgA3mt+Jw=)
                          5: 8470E428A2E711EFA6A5B91AC4F9AE02.roa (hash: bilCUgSIj9s8wLUUu7RqA7j0fFrI4Jp6Y1RNZuTJV4U=)
                          6: 2C7A8F5C8CE511EF96182462C4F9AE02.roa (hash: r8mRla4ImwWo0lgNeUmnO3kOlV4nEe25jvh9hbpe+Fk=)
                          7: 4F698B525F5011EFA66ADA2CC4F9AE02.roa (hash: 8GbrS0gq/4FKKxyxJysMwR58UCfWTju+CTTJl3NXjn0=)
                          8: 6D84D2D05DE911EF84282B80C4F9AE02.roa (hash: KsCi1gL5ON0tQo5f7o3JyChb4Z5sQOoFZgnSirCcEPY=)
                          9: FEDF0BA43E5111EF86CB780AC4F9AE02.roa (hash: PWMfy2tZO4LynO8829Wa3U1BjwaomWWdkKuhbM2n6Oo=)
                          10: 27E277D891AA11EF9DBFF265C4F9AE02.roa (hash: wM/PYE311nfiNvAglY7ipodnf85Ls8RUKyhtAudMyfk=)
                          11: 3BCB61DA01D411EFB260D83DC4F9AE02.roa (hash: ntg1Sa5uJDmNLEQGDT84VTtiG25Hye7r/1zWkL8hIks=)
                          12: 02414522C98A11EBAF4F9280C4F9AE02.roa (hash: z8UqZ1TUZs5SLFZVPrNthZ359PD6ZBuIMRCgzq/pldM=)
                          13: 4E211A5C408A11EE91A09746C4F9AE02.roa (hash: kxKdU/JmPTZM9krhUbKPrtFUj5nm0D45xWRYs28QjJs=)
                          14: 862D18003A1011EDB5225E73C4F9AE02.roa (hash: v4HK4sfgYsSfASOHkvKK7CKePuHBgJRykt1ECioRpqY=)
                          15: CDCC902E170811EFB6DE866CC4F9AE02.roa (hash: Qr52xk5Cmr7B9ojqij9Sa1V9McPqDHOMkRtq3w6aXoE=)
                          16: EEF771D4FED311EF8B263515C4F9AE02.roa (hash: rr3u+Bx1b760tre72Vw4KB1M7DRa2l8Cfnx2i0/N2Nw=)
                          17: A59A5B6641F611ECB1465157C4F9AE02.roa (hash: s/2XE3OKwLRXbsetwS9Ty1/cmYjDSHV9UY8kueVDyls=)
                          18: BF6649687AC811EDAE44E656C4F9AE02.roa (hash: uz8YE3l0+kEpuATJJmDK6S+3VDMiAYafPM++93yW36M=)
                          19: 76FA132A8B0511EC993E2B20C4F9AE02.roa (hash: oXtJ7h6IXN/s5X0HBvpSdD6OMPpNlMkXnfhubhmUTqA=)
                          20: 412F31BCF4A711EFB38B1B47C4F9AE02.roa (hash: OIBBqvU4440LAKaD6UEi68lBgIwwmcry+iUxR8onN5g=)
                          21: 000724C6F7D511EE8C03CA65C4F9AE02.roa (hash: 1z8tUQ/CHsf4H426+WAtbF/ySyewhGPCiiHEe/tPLy0=)
                          22: 3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa (hash: UvtmvVRc2Z0q+CfMe7UUrx6gOQJL+ahTUjM/dtEauJg=)
                          23: B6D40A18822F11EFA848053BC4F9AE02.roa (hash: qTT7XzpkLtDQdKGn2G66fy/McFFpsOFRvnIb+qAvaRw=)
                          24: 52850542A60811EF91FB1113C4F9AE02.roa (hash: kowmpjbS8K8YRAisMY96jcR4JecyVpMM9JfAm+PJPWk=)
                          25: 2622AA12010511EE8C750D39C4F9AE02.roa (hash: mf2Qk+w1NRlp24Ok2PsGfSzQRhYbIagpibh1QaUmo/0=)
                          26: 9D8E6D02C2A511EBB2025B36C4F9AE02.roa (hash: cx0K0bJRQz5Nmb2d76mnGIN2Xr+QPD7Bio7ZlcQXgU0=)
                          27: 26C39BB6010511EE8C750D39C4F9AE02.roa (hash: PrIFv9vXjUSJQadCTa4FhOnCYA1U2rLRvK5pclzfjFs=)
                          28: CAD5365E090C11EBA5412411C4F9AE02.roa (hash: 1/UnllgrY9TLTTDeiVVZgSkXNLQXVP9JfAc/UDXvF4Q=)
                          29: 4D4EE370408A11EE91A09746C4F9AE02.roa (hash: a0UD+/qG4UMDv/2WmEJk9pk9QhXhkwYYYzMZ4c/XI1s=)
                          30: D34236BE7D0511EEB381D02CC4F9AE02.roa (hash: MXoyWFgv72XpKm4iYapo+Jr79E2SzPPDsg5QxMhWUpU=)
                          31: 46186F4EC6E711EDA2FCBA34C4F9AE02.roa (hash: XzgXWY7//UVaNEuQIopWxPc37VBbWxsWdMNjr7wRlfY=)
                          32: 0BD5724C3A3211EDA1B7D863C4F9AE02.roa (hash: UguBw1sfiBAtlSn78NzpSBwxKrJvm/pM/IYVtzEhGVk=)
                          33: E614D0A2CD5011EF863CDE64C4F9AE02.roa (hash: VRsqFBw6W6srpeBDnBHvB0NtD3V0u3PzUnUHEjXNhCA=)
                          34: 83F06CF2DF1211EDB91D5C61C4F9AE02.roa (hash: 8EbAPbXfSh68G52OBPln229w9SwdjrHKzeWsW0yhIOI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 17 May 2025 14:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14204 (0x377c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: May 10 14:21:45 2025 GMT
            Not After : May 17 14:21:45 2025 GMT
        Subject: CN=681f60f9-3632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9c:49:46:43:08:bd:30:b7:2e:08:c7:b6:75:
                    46:36:05:23:44:a2:dc:52:d5:d0:eb:07:96:2b:39:
                    81:a9:91:e6:a0:83:a3:d6:8e:87:19:a7:13:1d:18:
                    4b:b1:14:35:8c:e9:e1:98:ea:2f:0f:c2:c2:5a:43:
                    16:0a:5b:39:44:28:b1:86:d3:61:72:7d:aa:58:78:
                    49:85:18:8e:ee:18:b8:fb:51:d1:66:ee:c5:ab:61:
                    20:d5:ff:8d:bf:82:45:83:f6:1c:18:84:d7:33:6e:
                    fe:4f:ed:64:b7:38:b0:95:82:15:fd:dc:2c:11:53:
                    d4:8b:df:ba:ae:24:b4:30:ed:ef:c1:53:d4:d5:a3:
                    41:69:40:5c:bb:4e:51:68:00:79:87:84:ce:54:3e:
                    a8:95:d2:e7:8a:90:0d:ae:f5:19:77:89:d3:7a:3c:
                    97:16:48:30:a3:88:73:b9:d8:2a:a6:a9:61:9f:1b:
                    05:64:05:b9:71:98:9c:e6:7d:d3:98:20:10:7e:db:
                    b2:ac:cf:d7:b4:25:c4:d5:c5:73:02:2c:f3:db:c9:
                    e4:54:1b:48:2c:96:b8:94:03:35:16:ac:08:9c:4a:
                    bb:3a:3f:e9:0f:63:7e:11:97:c0:43:de:e8:a6:59:
                    4a:7a:9a:f1:e2:e9:25:de:1f:86:62:57:0d:9c:0f:
                    64:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2E:23:5B:4B:32:FD:06:5E:F6:89:16:9F:FB:05:B2:B1:B2:2C:43
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:2e:0b:84:50:f4:8f:36:da:43:8a:0e:81:61:c8:4d:29:69:
         55:a8:79:1b:58:f6:e5:e6:97:2c:39:82:f5:98:23:31:77:8d:
         0c:33:30:29:b9:4c:48:76:b3:53:c9:5f:de:7e:99:9c:67:02:
         8b:c6:aa:92:ad:23:97:a6:f2:a3:29:dc:66:72:01:fe:cc:4b:
         e1:56:de:fc:94:88:ce:ca:fe:d6:4b:c4:83:b6:a5:27:68:6d:
         bb:9f:dd:69:a4:cc:61:0f:fe:e2:1c:23:1b:02:0c:27:2b:cd:
         35:1e:84:ce:ec:1c:86:34:6c:5d:81:e5:7e:0e:c1:ad:3e:00:
         d4:56:28:13:f8:59:4a:0d:61:44:e6:60:4d:3b:a2:0e:00:1f:
         fc:5d:e0:5e:4e:f0:0c:97:7e:45:5c:3c:ec:9a:33:b4:cd:cb:
         be:0b:0a:d8:58:b7:94:c6:ea:f8:d7:bb:1c:cb:08:b8:26:62:
         98:b7:25:34:e6:37:be:cc:c9:a1:10:e7:83:81:7b:be:df:8f:
         8d:fd:a2:bf:65:23:67:78:08:d2:73:fa:b2:51:08:6e:0b:56:
         18:c9:44:fd:de:aa:2c:88:58:8c:8d:1d:17:9f:de:71:a9:5b:
         66:a8:6f:cc:6a:99:58:8a:b0:1c:a7:3c:45:c1:5d:c9:b1:6a:
         4a:c1:6b:87
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICN3wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjUwNTEwMTQyMTQ1WhcNMjUwNTE3MTQyMTQ1WjAYMRYwFAYD
VQQDEw02ODFmNjBmOS0zNjMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArJxJRkMIvTC3LgjHtnVGNgUjRKLcUtXQ6weWKzmBqZHmoIOj1o6HGacTHRhL
sRQ1jOnhmOovD8LCWkMWCls5RCixhtNhcn2qWHhJhRiO7hi4+1HRZu7Fq2Eg1f+N
v4JFg/YcGITXM27+T+1ktziwlYIV/dwsEVPUi9+6riS0MO3vwVPU1aNBaUBcu05R
aAB5h4TOVD6oldLnipANrvUZd4nTejyXFkgwo4hzudgqpqlhnxsFZAW5cZic5n3T
mCAQftuyrM/XtCXE1cVzAizz28nkVBtILJa4lAM1FqwInEq7Oj/pD2N+EZfAQ97o
pllKeprx4ukl3h+GYlcNnA9kkQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCsuI1tL
Mv0GXvaJFp/7BbKxsixDMB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUYzRS9BQzUyQjc0ODFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJ
MVVtbVU1REpMaFg1MzN4VXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBFLguEUPSPNtpDig6BYchNKWlVqHkbWPbl5pcsOYL1mCMxd40MMzAp
uUxIdrNTyV/efpmcZwKLxqqSrSOXpvKjKdxmcgH+zEvhVt78lIjOyv7WS8SDtqUn
aG27n91ppMxhD/7iHCMbAgwnK801HoTO7ByGNGxdgeV+DsGtPgDUVigT+FlKDWFE
5mBNO6IOAB/8XeBeTvAMl35FXDzsmjO0zcu+CwrYWLeUxur417scywi4JmKYtyU0
5je+zMmhEOeDgXu+34+N/aK/ZSNneAjSc/qyUQhuC1YYyUT93qosiFiMjR0Xn95x
qVtmqG/MaplYirAcpzxFwV3JsWpKwWuH
-----END CERTIFICATE-----
Generated at Sun May 11 21:47:21 2025 by rpki-client