Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
File:                     8f4MMn555a9D4VsOb4zWbAMp0Tg.mft (raw, json)
Hash identifier:          +qTLaJA7iaXU55hDhOSXd3W6NmO/fAurfAYEsHooU5g=
Subject key identifier:   F3:70:94:44:A8:5E:D9:4B:47:0E:AB:53:98:C9:39:4D:C2:09:5A:BF
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       0333
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
Manifest number:          02A4
Signing time:             Mon 05 May 2025 01:37:42 +0000
Manifest this update:     Mon 05 May 2025 01:37:42 +0000
Manifest next update:     Mon 12 May 2025 01:37:42 +0000
Files and hashes:         1: 8f4MMn555a9D4VsOb4zWbAMp0Tg.crl (hash: lTUx9WSkO7iXyx8fKphoyyPTwb/bHYLgUR7QcEJvLw8=)
                          2: 4F10ED76D3B311EFA7B56234C4F9AE02.roa (hash: lSHPz/Z+uxa8tArC1Mc4CZ0YnIqrOvRe7SHXj7pf8js=)
                          3: D8E46162CC3911EF8444417FC4F9AE02.roa (hash: l8Sh6c2GmuBO8DvBcjU2VitbtNGnp/aJmnTgKTcfJ4s=)
                          4: 1B740C443DF811ED8EA29234C4F9AE02.roa (hash: d46c6mP8yQKtCL1j50wpNIYdrEG7vH8Gk0XwB/6np30=)
                          5: 3CF11BEA163211F0B2BBF073C4F9AE02.roa (hash: 0Baffcoz59/s0nqwLMYDCddrKXlDa2U1bXRWD6Hw/Jw=)
                          6: D1F346DAFC8011EFB251DF67C4F9AE02.roa (hash: J8PBkBjnUQWDp55ZK4Px5kI8+gf5ZLFdYuyEaWigFmk=)
                          7: D11FB31AFC8011EFB251DF67C4F9AE02.roa (hash: REhAHCBvoAzqipr15BIAMDK94hxgYaNE2MBz4tXvCic=)
                          8: BA7491AAE0FE11EF9196F463C4F9AE02.roa (hash: Ir4i9nJYMLN6SF2hTwXjlm9gkjvDcx0KEIJUDLVPVCI=)
                          9: 740EB470E85B11EFBB9A7411C4F9AE02.roa (hash: 6MtRxojEwXeBBwTA6JhJ6iokxEUCcet3G/jd11xPrs8=)
                          10: 1C4A530AF56411EFB29F7142C4F9AE02.roa (hash: pDwghoW83KCoFGr00Ci1Qzg5/mmJKBiQBABjiPxXDg8=)
                          11: BEF9E93E3E6A11EDB58A2B41C4F9AE02.roa (hash: HkYj/TVr1XhK2vRP+l6p5iXFD51evS0AgC8WhbDTuxM=)
                          12: 029EC746D47711EF9C73DD7FC4F9AE02.roa (hash: cB/HAlQoM6VmcEnIGu6+bJRsobTJnhQw0F2fE38cd0E=)
                          13: C6537C4AAC5B11EDA8C03215C4F9AE02.roa (hash: 6wMf0Z8//cJMxItVuyAGd2usHOPGjQivwJ76VTi1wpM=)
                          14: 0B93EA661FD111F091F95F82C4F9AE02.roa (hash: S8S/PVnEFdzRmwECm2IPzs3uiE5PL2ImPJmjhxClCr8=)
                          15: C244E42E217311F0B1300933C4F9AE02.roa (hash: 2Jb3xwFu0OZVOKXsi8hElnOphqgXaJCugAZyj+W7z8k=)
                          16: ECFCBBA4D8D711EF91AD5538C4F9AE02.roa (hash: RZU+vxzrJk5agVsB47bIr4bRNKdVBncHpu2NxllEAuY=)
                          17: 784481D01B3E11F08B1A3029C4F9AE02.roa (hash: hpLF+1WPRM/+lgp1ccfs7QOxSrFnUTZF7Opf3dhOqCg=)
                          18: C58950F4CC3A11EF80AC530BC4F9AE02.roa (hash: eORqf3Oz2AeqEvrYAYLcmW4DWddEbC2alvo0muIChbk=)
                          19: F2CEE3CEBE7711EFB34D6959C4F9AE02.roa (hash: c/zVI3V70E1Wu6EQXw+rtLMreURhxjP1Lrx+c37+kQM=)
                          20: A88A0ED8FC7511EF92B63B46C4F9AE02.roa (hash: 9VCbcJprVhVD5YlwxMs2GmYF5PQFLfWW66YkA9K3Z1s=)
                          21: 84757A9A030B11F099FC1410C4F9AE02.roa (hash: EBxLaXLba3ybeQ1SlmH7GzP8NlDiABfKS2zIQpf4Zlg=)
                          22: C68EA896D18011EFA738B84AC4F9AE02.roa (hash: Ei4OQatIUZk/6HLsZAw7psHDglNB9wf4zzt2OcQnNKY=)
                          23: 1AEC708A26EA11F0A1989F5AC4F9AE02.roa (hash: YepBoK1X+8vge+zixjpOIA9QTQNP/O9sE+tD/cL5L0I=)
                          24: 307D6166D09611EFA2A9F476C4F9AE02.roa (hash: TBh0mjBSfPDxaIl2QgmGHAAabIdCNBIDd/PwCXBjZQ0=)
                          25: 74F68796303711EFB68DF613C4F9AE02.roa (hash: n4CrL4KlT84Nr/DgP33rUbZGXQ7GFSx45QbOVg+Obd8=)
                          26: 6520648CCC3A11EF97B13E83C4F9AE02.roa (hash: cioPSnvxCV9MlKk+N+OKdKIZIjZxwbeh0ez1/CK80l4=)
                          27: 90B05B70D31511EF9F94561DC4F9AE02.roa (hash: DP1BeOxUOR7jmhspwxnCeHXQU42Y5xHAq5vFp/2k/XY=)
                          28: A852E23C20BF11F09399F213C4F9AE02.roa (hash: H+WBzoecdDIpdY2SLoeYUI6233JcxPC/nZWBfed8ngA=)
                          29: 140034BC1D9611F0B8992513C4F9AE02.roa (hash: uUjVY+1HXCwh/0gBZ/+32ERYKd+WEhsMwLLmrKvQCRc=)
                          30: 1332C07C1D9611F0B8992513C4F9AE02.roa (hash: fMB3JqWLVnxvGjnKq5ROpoZgKV6qM4jt90jQi04CUq0=)
                          31: C0CFC696198E11F0A5D20B52C4F9AE02.roa (hash: /RPs6fIwfg3JSaBCKBhKN8nQ/4D++JTTsmoi0XVvwmE=)
                          32: 53E3F02CF88511EFAF4C196EC4F9AE02.roa (hash: wYWX73wDqg9YYxoFfUJfz2bbrCEn4lzzQ8CGOEGcvBA=)
                          33: 49A26B9A110611F0B584EF2DC4F9AE02.roa (hash: xlcoL3p/Vx7uMGpSQ/OdaAe2ltOhONmUwNNFCl5Q+CU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 01:37:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819 (0x333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: May  5 01:37:42 2025 GMT
            Not After : May 12 01:37:42 2025 GMT
        Subject: CN=68181666-0738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6d:86:5d:5a:e1:a8:fd:e1:80:e6:a1:41:d7:
                    f0:5d:39:cc:8f:99:ac:0d:da:cd:53:ff:3a:81:62:
                    21:eb:ab:41:7e:3c:9e:7c:72:47:20:bf:e4:3e:9e:
                    ac:07:be:f3:b8:73:e7:12:96:73:4a:fc:e5:c9:3e:
                    bb:ea:a0:24:26:4f:43:de:94:1f:8d:c3:71:c3:6f:
                    95:01:28:e1:40:b5:21:70:ab:19:b4:ef:80:d3:78:
                    18:3c:a9:88:e6:a7:87:e2:29:92:60:c0:a9:98:2d:
                    ea:e1:1a:9d:36:fa:9b:b9:dc:ad:4d:33:43:3c:54:
                    7c:54:a5:a1:76:b0:b6:83:4c:04:96:73:4d:13:4f:
                    c5:2b:0c:cc:6f:f3:95:f6:85:71:6b:59:70:e5:2c:
                    7a:6b:d3:0e:45:8b:61:35:96:9d:f0:1e:89:bb:1d:
                    af:8f:8f:3b:e3:dd:37:e7:6e:fc:29:22:22:1b:4d:
                    e9:a3:e7:8d:98:9b:28:5b:d1:cc:cc:a4:6d:a3:bb:
                    ad:c2:95:e9:2e:09:26:7c:61:85:88:f3:61:e1:71:
                    cf:69:42:40:bc:a0:66:5f:5e:02:9c:6e:07:03:c4:
                    a5:71:50:02:8c:35:92:9b:0b:d1:8b:f3:b5:14:2b:
                    35:ab:f0:cd:cf:fe:33:b5:27:fd:74:96:6e:6d:7e:
                    8e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:70:94:44:A8:5E:D9:4B:47:0E:AB:53:98:C9:39:4D:C2:09:5A:BF
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:10:44:72:66:6e:29:0d:2c:97:c1:40:85:e9:36:42:41:e4:
         8a:90:e0:e8:15:9e:cd:2a:ea:68:29:09:03:16:7e:f9:5f:00:
         b1:a4:c3:22:d7:e9:a0:b9:c8:e7:61:6f:ba:45:d2:5b:e4:46:
         fb:85:52:5c:52:d0:cd:49:ba:36:da:ea:03:dd:5f:58:42:65:
         a5:aa:19:d5:14:29:1f:f7:f0:61:48:de:b1:ec:41:a6:42:e4:
         0a:59:96:2c:28:ce:f0:d2:29:04:f1:de:54:17:ad:2d:2b:68:
         d5:a7:a0:90:07:b7:c9:84:df:4c:a0:4f:03:cb:4b:93:d7:19:
         bf:50:3b:e8:00:22:44:53:9b:c2:3b:e9:1e:8c:57:dd:78:6a:
         8b:a8:a6:d9:d6:c3:29:86:07:e2:8b:1d:bc:9e:40:28:d4:b4:
         34:bc:7e:35:22:19:6c:3f:2d:bd:f9:71:27:ae:6b:b4:eb:c4:
         b4:ff:b6:2d:38:24:5e:1b:59:40:cd:09:13:e7:b3:d7:58:e5:
         b9:38:a3:6a:a8:78:bc:7f:a3:bf:44:76:77:16:aa:8f:e3:d1:
         6d:20:ea:37:c2:c0:ec:ef:2d:0b:02:8e:77:0b:b0:ce:4d:62:
         6a:6e:a1:e2:64:35:3f:95:15:99:eb:fc:b0:e4:ce:fa:fd:15:
         c7:4b:a8:e2
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTJDMTgxMTAvBgNVBAUTKEYxRkUwQzMyN0U3OUU1QUY0M0UxNUIwRTZGOENENjZD
MDMyOUQxMzgwHhcNMjUwNTA1MDEzNzQyWhcNMjUwNTEyMDEzNzQyWjAYMRYwFAYD
VQQDEw02ODE4MTY2Ni0wNzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0G2GXVrhqP3hgOahQdfwXTnMj5msDdrNU/86gWIh66tBfjyefHJHIL/kPp6s
B77zuHPnEpZzSvzlyT676qAkJk9D3pQfjcNxw2+VASjhQLUhcKsZtO+A03gYPKmI
5qeH4imSYMCpmC3q4RqdNvqbudytTTNDPFR8VKWhdrC2g0wElnNNE0/FKwzMb/OV
9oVxa1lw5Sx6a9MORYthNZad8B6Jux2vj48749035278KSIiG03po+eNmJsoW9HM
zKRto7utwpXpLgkmfGGFiPNh4XHPaUJAvKBmX14CnG4HA8SlcVACjDWSmwvRi/O1
FCs1q/DNz/4ztSf9dJZubX6OnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPNwlESo
XtlLRw6rU5jJOU3CCVq/MB8GA1UdIwQYMBaAFPH+DDJ+eeWvQ+FbDm+M1mwDKdE4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MkMxOC85QTVFRUE4QzNE
RjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVhOUQ0VnNPYjR6V2JBTXAw
VGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhmNE1NbjU1NWE5RDRWc09iNHpXYkFNcDBUZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
MkMxOC85QTVFRUE4QzNERjQxMUVEODA0MUY5MzBDNEY5QUUwMi84ZjRNTW41NTVh
OUQ0VnNPYjR6V2JBTXAwVGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBNEERyZm4pDSyXwUCF6TZCQeSKkODoFZ7NKupoKQkDFn75XwCxpMMi
1+mgucjnYW+6RdJb5Eb7hVJcUtDNSbo22uoD3V9YQmWlqhnVFCkf9/BhSN6x7EGm
QuQKWZYsKM7w0ikE8d5UF60tK2jVp6CQB7fJhN9MoE8Dy0uT1xm/UDvoACJEU5vC
O+kejFfdeGqLqKbZ1sMphgfiix28nkAo1LQ0vH41IhlsPy29+XEnrmu068S0/7Yt
OCReG1lAzQkT57PXWOW5OKNqqHi8f6O/RHZ3FqqP49FtIOo3wsDs7y0LAo53C7DO
TWJqbqHiZDU/lRWZ6/yw5M76/RXHS6ji
-----END CERTIFICATE-----
Generated at Mon May 5 13:37:39 2025 by rpki-client