Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
File:                     rVa2cYepi6MUCEQFeXvZZW6KyLo.mft (raw, json)
Hash identifier:          XwUIUg7O95smD+0Me2NjJyixvh70Pbj2djZ4LeaivTQ=
Subject key identifier:   DC:44:E5:A9:9E:14:33:83:AD:8E:AC:57:DA:B1:95:81:67:A8:74:40
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Certificate issuer:       /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial:       1F15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
Manifest number:          1CA9
Signing time:             Wed 02 Jul 2025 16:25:41 +0000
Manifest this update:     Wed 02 Jul 2025 16:25:41 +0000
Manifest next update:     Wed 09 Jul 2025 16:25:41 +0000
Files and hashes:         1: rVa2cYepi6MUCEQFeXvZZW6KyLo.crl (hash: DOeIfo7of0VvnpYqmaVTW6uRbq6iHaCQkDTImHp5HEM=)
                          2: A42AF5D0559111F08D8D0584C4F9AE02.roa (hash: gcoXO6c7kE45x7btPnm/u11PIgCHfTR850hXGjwycmE=)
                          3: B07E339A257C11E79EE15E3CC4F9AE02.roa (hash: S1wTVe7U18yzyAxSugv98o5psApflxEUWoUWD+4i71s=)
                          4: D7BBF774498911EF9ECB9967C4F9AE02.roa (hash: N/YQwkyrxbXP+sBQ1DsByIHxBpcto8NTgvmeKLdiGzw=)
                          5: D3CE622872D911E9B41E5B11C4F9AE02.roa (hash: 6rI+S51uZYy1BuACuwS5kWXoyg6lf5nMEpRvaBuNroY=)
                          6: 4DFBA2EA066011EEA5F59657C4F9AE02.roa (hash: oCS0QFpM9WGeDXVhJLQGO+CnXgJIvqSKqwsoVw4j+c4=)
                          7: BCBD866404D311E9A6452047C4F9AE02.roa (hash: 6U+FYH3uhC5XKNsaJEb/mfz8usRQjC2dGhhGqPAEIkA=)
                          8: 6136E33A07B511EBBBA2521CC4F9AE02.roa (hash: 8Q+OjzZN/ayMTw7B4asPpBGcZxQq5JGAHygNoU7Le9M=)
                          9: 792BA6283AAC11EF93D3E072C4F9AE02.roa (hash: WX5GBpvWxy43Kfv1yhOKm7/zgRf+4wjOBk2NgjKVRX4=)
                          10: 4BB76870066011EEA5F59657C4F9AE02.roa (hash: BlkP1LYtm3vROhN/faPTD29Zg2+t0xJ6pwNyD9TEZQg=)
                          11: F59F290A459B11F0AE80E433C4F9AE02.roa (hash: YfVp2DTnB3W58PvhyracwGMI2JXeKp6Gv6kkyZpiKQw=)
                          12: 83A8C51804CF11E9BA917C34C4F9AE02.roa (hash: zTeGinlhgBvRCY8VLqWEaBOMi/2mlZzeV05y5KjYq4g=)
                          13: E32743EEBCE711EFA920D83FC4F9AE02.roa (hash: 3F515x6t2ig3N3bKzoVvW6jLDlcDmlvgwRLu3Mtpu64=)
                          14: 4F2C2040066011EEA5F59657C4F9AE02.roa (hash: lhjk5dsFqap680wNoXTnx9Dur4BBQliXjVLuUUi2pb4=)
                          15: B80AFEB204D311E9A6452047C4F9AE02.roa (hash: lcZBJc0SseZ2msItGbn45fGKCw+QLyWMQGHYhse6IS0=)
                          16: 79FAE7BE5BAC11EF95A95882C4F9AE02.roa (hash: dtWxz4J2XjmayBFzETfnk0M/4ccp6teJLls14KkfCHA=)
                          17: 1B1DEA4A04D511E98BFF354BC4F9AE02.roa (hash: TkNn+MTjqvGvnFe4zWqgI2u8ZNVhGw30Qsbe/rkSamA=)
                          18: 0B989CC8BC6711EAA9856B6AC4F9AE02.roa (hash: 5JWbsLN/dW9xbqfNvNx/Ipznac7jWKsUQzc216E28SI=)
                          19: CBAFF664136B11EFB53F2683C4F9AE02.roa (hash: 7C3EpcIViwZAY4nCzCQCDuQQXNlANXEp+HrUlqwDI+0=)
                          20: E3FFB7282B1F11F09AACBB33C4F9AE02.roa (hash: k8p6iF+9IETIN5QqyzpOUfmBkPnJWBTNYqsPz6Lu4tg=)
                          21: 52ABDAEA039D11EF8E96E084C4F9AE02.roa (hash: MzEZo/e2yCoqtrn7oJL68mf+EWYO9suE1RsdjdKFJQ8=)
                          22: 7171F028473E11F091D81586C4F9AE02.roa (hash: tEkq5majHKvkM53Bt92EO4jxoAaUb9F8DXETDUgsRg4=)
                          23: 65EED7943BB711F0AD49434CC4F9AE02.roa (hash: bXCcYz5WUzXP1x56wMDeUhuzn+CtJahnNgctsC79cCY=)
                          24: ECE5D100BBA411EAB345A780C4F9AE02.roa (hash: bigKPvPIUDwHxONb1Gr8dDYsiNQ0PtvvH9Y2uewhgDg=)
                          25: 52E1349E04D211E9BA47303FC4F9AE02.roa (hash: j5lDrxfBeX2si0djPSCGpgdQ4uiqw+hqr/e7niE8XVQ=)
                          26: B9FBA9CE04D311E9A6452047C4F9AE02.roa (hash: rlEGi3xjhJfP2u/ZUHFiWIlVgFz9xogRY/BfK8tfhx4=)
                          27: 4CD2AB2A066011EEA5F59657C4F9AE02.roa (hash: 1/F96Do1ZWp86GNV9DFuCHRPL+Y77dWF42AM+XS1zM0=)
                          28: B33C5F9C05FB11EE9D130335C4F9AE02.roa (hash: fNI06QusL/HQ5dYlBMs9UDIEqjOTE4N+DiowzCmZuiI=)
                          29: E1E1C946E01611ED8385DA62C4F9AE02.roa (hash: o0Ry10/Dwg/gxho42K86zqrhGF78WdELGBJAljFgnsM=)
                          30: 6D4A0AECAAA711EE9614335BC4F9AE02.roa (hash: 7oIA+//D4UsvXgvWc6bf0x5ckX2V4W6yfulU8ujZhtA=)
                          31: C3EFE564C2A311EABB1BA61FC4F9AE02.roa (hash: FoZW+AGU8CXyeV1RdM6UrgzlFyF1dMho749ia7IWur8=)
                          32: B228FE46257C11E79EE15E3CC4F9AE02.roa (hash: gPZrzSM2qFJiDgKYh5xaDFhnq8qXun0G5u3g/ssPKjA=)
                          33: 5233C98A04D211E9BA47303FC4F9AE02.roa (hash: V64V572mDFjUWVtGLtAsBdOHJ3B14FfzspBJ/sNnWww=)
                          34: 84DBC93004CF11E9BA917C34C4F9AE02.roa (hash: zyMk6AWyE6lO87mAudHQsc/HNsX71NVjiloWRnQYhfA=)
                          35: A012C5E0AF7911EA869B4722C4F9AE02.roa (hash: EnrdJ6BB4UUlPJCPrDriY5JkZ6kz6OGJ2NtAj8g8718=)
                          36: F3309B3004D011E994985639C4F9AE02.roa (hash: NSCmZyO6Wz7VpbKV03OOhYeekIbonLkpYtPFZfybQtg=)
                          37: 9D1066F8474111F08A856E0FC4F9AE02.roa (hash: li2dKgi4m1tCsscpNBOqoFWPl8ZQf47NHlPCiTLeoRk=)
                          38: D931AD927E0F11EE97A4761DC4F9AE02.roa (hash: 6fvtI9e9N6u9RrN1YOUrj1fxPuHxvPhgch1yKfydxFo=)
                          39: 36AA48F2D55E11EAB56B562AC4F9AE02.roa (hash: g9KNetV5gZIclIa3Tn5Z//Qo3scBB3j7I2stbX5nfnI=)
                          40: D0B369AA3BB711F0AB536B50C4F9AE02.roa (hash: ko9kwUqvpO3LdoILgB7gaqi0qIlTE0/qOSinSP/yUYY=)
                          41: 8278D8E004CF11E9BA917C34C4F9AE02.roa (hash: aizfB1ipwQHn2pfmgojnCTrjx4TiIlWZ3oTA7ibR03Q=)
                          42: F5CC48A804D011E994985639C4F9AE02.roa (hash: VS0VHmkDeDlKunxOHZGj08THbVfcWifqq1DkBVbt3SM=)
                          43: 203A920E9B5511EF93BA272BC4F9AE02.roa (hash: 2cMkxAulRUt+RPZWIL+F0mv8QdjA2rBZuvpPO3wvRlQ=)
                          44: D36286F2D55C11EAA224E026C4F9AE02.roa (hash: tTA+Jj1VE8Mirfwxda9PRkkRRhfGQ+BLffao2HDxah4=)
                          45: 50550748066011EEA5F59657C4F9AE02.roa (hash: lTv1K6i1/5+D8bjoEZFgJKtEtbQMReGPUUpdBqUUWmI=)
                          46: 09E2992EC11711EA98A6A253C4F9AE02.roa (hash: yfr/pkuZjQYrKaaSgTMh31gFUmAyCI82/pd9IQUIs3M=)
                          47: BD58F50404D311E9A6452047C4F9AE02.roa (hash: TWEksEuTvHoK1jEg5swQTgTY9Ej5RxanBDxFGSVO0Rk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
                          rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 16:25:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7957 (0x1f15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
        Validity
            Not Before: Jul  2 16:25:41 2025 GMT
            Not After : Jul  9 16:25:41 2025 GMT
        Subject: CN=68655d85-c2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2d:c5:39:99:6b:28:1b:f7:c8:c9:d4:e7:f2:
                    82:d8:80:44:d5:b0:ab:10:e1:bb:45:75:79:bc:1d:
                    0f:87:86:a4:ad:4c:60:57:9c:0c:39:93:7a:1f:03:
                    d9:ec:40:f3:94:54:a2:3a:43:9f:2a:d1:cd:b8:ca:
                    07:13:d2:bc:4a:7a:ef:3e:fa:27:c7:a3:dc:58:b7:
                    90:84:d0:28:98:b4:2f:98:3a:87:f4:da:0c:54:14:
                    c9:80:3c:dd:04:d8:34:80:6f:96:97:c3:4b:a6:85:
                    c6:78:f6:55:76:3d:88:b1:30:86:8b:10:71:ff:3f:
                    64:64:62:61:cb:8b:d1:22:83:a4:8d:d8:1b:ff:60:
                    fb:47:4d:a5:21:d6:f0:68:48:7c:ba:1d:98:86:83:
                    8f:64:97:7d:ed:43:e9:19:43:88:f2:57:4c:58:0d:
                    9c:df:1b:61:6e:ee:e8:44:33:39:b3:65:42:67:b1:
                    e9:76:f7:24:85:70:cd:07:6f:00:f9:16:e0:72:d1:
                    e9:43:e1:1c:95:bf:d0:84:f2:a7:ee:56:93:2d:c9:
                    fb:69:b4:c3:bf:85:5d:4d:e6:b6:7b:85:b7:7f:a1:
                    8e:83:90:48:89:d2:3c:cb:5e:de:85:c5:33:69:03:
                    f5:fd:33:c9:31:a8:66:12:43:ed:ff:54:71:12:bf:
                    e0:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:44:E5:A9:9E:14:33:83:AD:8E:AC:57:DA:B1:95:81:67:A8:74:40
            X509v3 Authority Key Identifier:
                keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:cc:42:be:dc:e5:21:03:09:05:8a:56:e3:19:c7:0b:09:24:
         bc:86:25:87:82:bd:bd:b9:21:e5:d0:f9:18:2f:8a:62:e1:87:
         9f:21:2c:6f:1e:2b:7a:89:fe:92:18:14:54:9b:51:a2:e2:5d:
         ac:a1:3d:b3:09:74:69:47:55:24:41:a7:6e:31:52:2d:3f:1b:
         c2:a9:25:f3:da:9e:f4:4a:36:d5:87:19:02:07:f9:a7:17:eb:
         bc:e5:47:6b:ca:04:3a:58:89:f2:d7:6d:25:6f:59:db:5f:b8:
         e4:a1:de:ea:40:d6:83:4f:cc:34:e5:17:5a:65:b1:55:4d:79:
         86:48:3d:c1:e4:b1:5d:30:e0:e1:ec:89:e6:48:13:cd:43:2c:
         42:92:fa:4b:46:b3:6c:53:a9:76:e3:92:60:1a:5f:b8:17:40:
         f4:97:45:45:8c:84:f7:c3:bd:a9:eb:ff:f1:ec:20:a9:0e:75:
         1c:71:17:75:c8:6d:17:cc:98:f9:e7:dd:9e:fb:80:39:36:ff:
         a0:d6:d7:67:e2:7c:c9:6c:85:f0:83:d1:be:9b:25:b0:b3:07:
         b1:c1:40:33:9e:12:e7:5e:4d:ee:c9:9a:68:32:de:c5:1a:d9:
         57:05:1e:6d:79:2f:16:e1:a1:f0:5e:2d:05:c8:51:07:16:5f:
         ba:ac:ae:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:47:49 2025 by rpki-client