Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
File:                     cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft (raw, json)
Hash identifier:          R+wFi2Wn+nVKy1P7+otHvU4zraGpqvKeZ8M56QcxhxQ=
Subject key identifier:   60:F0:1D:C3:72:F3:75:2A:85:FE:DF:C2:09:9A:BC:8D:11:89:28:E2
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       01BE
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
Manifest number:          017E
Signing time:             Thu 03 Jul 2025 04:02:46 +0000
Manifest this update:     Thu 03 Jul 2025 04:02:46 +0000
Manifest next update:     Thu 10 Jul 2025 04:02:46 +0000
Files and hashes:         1: cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl (hash: kZVfWRvbTMich0VWKkC6fMRxZ+AVIb2jZBTbOqNRMVY=)
                          2: 9DB1FB565EA511EFBA70FD68C4F9AE02.roa (hash: O+B0ZW2h9cNF/6UA+QKBCSXEqyRWTmJWn65XyoJJBNo=)
                          3: 9AADC284366311EEB376DC3AC4F9AE02.roa (hash: JlmwpEiSHF3E3YoztkcMeX/DINuxa50PIfEgbyZtqW8=)
                          4: 986FD2A0366311EEB376DC3AC4F9AE02.roa (hash: HzfWmEVvOWM+7wX41bnMOEYV2FKqKH2FqDp3q1IArcU=)
                          5: 9767C3CC366311EEB376DC3AC4F9AE02.roa (hash: qppqhKauBM/GUHEfcp22Z+fmeHnU2Aa0TsZX3ovjWwQ=)
                          6: 75A05C926E8211EFA843807EC4F9AE02.roa (hash: fnWN8CCTgkT5vQ6AYz4uShcAL5uF3/In0fv7fEBCTYA=)
                          7: 97F664EC366311EEB376DC3AC4F9AE02.roa (hash: 3AcWW9xEfm9sCXOs+GOr2o+6KNLXavrwHEnZXG58MFc=)
                          8: 9663A3B0366311EEB376DC3AC4F9AE02.roa (hash: gQ3/Ta4f1C/+jloDZsT/C+Rh6mYi3l+P/EDf+bebBt8=)
                          9: 6BA10D8EAD9511EFAA7B4C1AC4F9AE02.roa (hash: iDNh0uelVbLHQR/Mzy+AVcFFYfErExwX2su4OEKINjI=)
                          10: BFDC8CE68AAB11EF93DB792CC4F9AE02.roa (hash: CMKFuI+fT2TiVZX5THndiqiuzXOq1BiaXeo9ex4urp8=)
                          11: 99B68AAA366311EEB376DC3AC4F9AE02.roa (hash: hYMNVGKl5jzxF3jAoOCFYow8FG2fD9GWWcC61vry2ek=)
                          12: 96EE3F5C366311EEB376DC3AC4F9AE02.roa (hash: hOGc8jQ0ZmWcNOj266Ha5lhhcIMSuhn8Mr6WASmvAW8=)
                          13: DC25866C6E6011EF830E7360C4F9AE02.roa (hash: mgyUqwS2CBf83YnrawP4UuxewR+BaI59zS+eIsLDsCA=)
                          14: 95EA48DA366311EEB376DC3AC4F9AE02.roa (hash: +oI9oL8k3fL/BL33Vrpd0V8Yx/Ofa+KBM+eMKajmtho=)
                          15: 993E65A2366311EEB376DC3AC4F9AE02.roa (hash: Fhgc6d9SeAE9SdBHMvXa0fdhxKsTr1vh4YK8pXCjPRg=)
                          16: 957D5E14366311EEB376DC3AC4F9AE02.roa (hash: O7iV4yLKT9Xdgg65kurssmBCfCbmEH7W4GAeKLwMMc0=)
                          17: 9B616A50366311EEB376DC3AC4F9AE02.roa (hash: F0Mv7jusMua+G1R8akwPTEknPfveJYJwlK8Sj3cK6bg=)
                          18: 9C62F7D4366311EEB376DC3AC4F9AE02.roa (hash: FkiapFLAnlmSjOGmtiIvSATUej5rnQ+2MMbjws7S5Ao=)
                          19: 9BDF5D70366311EEB376DC3AC4F9AE02.roa (hash: GFh6tKPaDzDjmOqJEU0pSzyBStHN/b9Aa1oEyunhzfA=)
                          20: 6A32721CAD9511EFAA7B4C1AC4F9AE02.roa (hash: sWZcaYLIKMwmOsW054AonLzGYpzD/3e+cgffFNaeWBE=)
                          21: 9A3920B4366311EEB376DC3AC4F9AE02.roa (hash: 7/Dv9jVsMOQM6ay0osqDZvlTd7fF1nnEWe+Y4g9FMXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: Jul  3 04:02:46 2025 GMT
            Not After : Jul 10 04:02:46 2025 GMT
        Subject: CN=686600e6-d6f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b5:cb:3f:e1:6e:ef:9a:23:11:cd:8c:44:ff:
                    8f:0e:4c:7d:32:aa:0c:36:c4:cc:75:88:75:92:6f:
                    e2:0f:14:06:15:d6:8f:ce:26:5d:31:68:94:0b:c0:
                    de:4f:21:4b:69:47:1b:c5:f0:f3:ac:96:34:2a:78:
                    21:af:5a:38:ad:92:04:f0:01:69:33:4a:b2:b8:5c:
                    94:3e:0b:4b:ab:06:a4:5a:5d:d6:29:3f:e6:1a:e1:
                    cf:ad:85:14:f6:d2:b0:ce:38:fd:e6:3f:50:7c:6e:
                    d3:73:49:c4:77:c3:7f:0d:7d:48:6f:c0:89:27:0e:
                    55:a5:7c:47:d3:81:f0:35:84:11:2c:19:ce:49:8b:
                    01:c1:f5:38:03:eb:fd:fe:3b:87:62:31:e4:8b:07:
                    96:54:28:7c:d4:81:22:ac:7f:93:3c:3d:8f:82:33:
                    22:f9:ec:d8:fe:d0:05:22:3c:35:bb:79:56:a2:ff:
                    cd:4e:3c:4e:f5:37:43:39:d6:df:cd:04:28:f4:fd:
                    cb:b3:9e:16:3e:00:e3:af:2e:ec:46:84:82:26:16:
                    61:05:59:61:ee:7c:d1:fb:06:8a:ba:ae:ab:72:7d:
                    c6:16:4d:f0:a1:a0:ce:e8:d1:45:e9:1e:16:fc:f7:
                    90:dc:46:5d:89:fb:09:45:46:de:d6:e7:28:3e:c4:
                    1c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F0:1D:C3:72:F3:75:2A:85:FE:DF:C2:09:9A:BC:8D:11:89:28:E2
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:34:e2:c7:94:b2:2b:7c:ba:9b:41:c8:b0:dc:d4:09:ea:f5:
         31:d3:a8:00:6f:77:98:03:e2:1c:aa:92:be:24:e5:c2:ae:0f:
         21:33:81:71:98:b8:93:52:93:6f:ad:21:4a:c5:a3:db:d6:06:
         98:55:37:cd:1b:c6:3a:50:0e:de:88:ef:99:7c:71:50:55:0d:
         32:e1:20:9b:dc:3d:4a:c8:3b:14:75:f4:f7:43:58:12:bc:80:
         01:15:30:8c:a0:82:c0:e3:0f:dc:3d:1a:3b:cb:17:aa:cf:2e:
         1b:39:90:59:87:c9:2c:8a:f0:47:92:1d:4f:ab:a9:de:7e:fc:
         99:a1:53:86:d5:e7:d6:12:5d:71:ef:76:d1:63:1e:c1:f1:9c:
         37:41:12:60:59:d8:be:2d:45:3b:9d:ac:69:a0:5a:67:f8:55:
         80:c0:d4:f6:fd:4e:f3:1d:b9:a8:da:30:84:19:ce:aa:94:e3:
         26:a7:d4:0a:8d:e8:33:f7:b8:82:8d:65:78:68:86:a0:ad:bb:
         f8:b1:c0:fe:c1:d6:7f:2e:8c:99:f0:2f:a0:40:d7:3a:2e:f5:
         99:37:4f:2b:48:cb:7a:7a:be:7f:74:c3:17:89:56:60:3b:99:
         26:3d:d2:03:f8:6a:1f:8a:eb:91:c6:af:6f:65:57:85:e7:6a:
         ed:ac:36:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:40:56 2025 by rpki-client