Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
File:                     cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft (raw, json)
Hash identifier:          /PeiETLEUKGG9DBZ0pfePnjVWAt3MG5iAQbftIVW94o=
Subject key identifier:   7A:37:6F:98:88:0E:BA:07:3B:A8:B3:F0:52:32:CB:03:C2:67:16:EF
Authority key identifier: 71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34
Certificate issuer:       /CN=A919536C/serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
Certificate serial:       0191
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
Manifest number:          0165
Signing time:             Sat 17 May 2025 03:49:31 +0000
Manifest this update:     Sat 17 May 2025 03:49:30 +0000
Manifest next update:     Sat 24 May 2025 03:49:30 +0000
Files and hashes:         1: cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl (hash: mjw4UIUVQVv4PhBcMbRLZ9fn0JDoeChz5B04XSHgn4Q=)
                          2: 9DB1FB565EA511EFBA70FD68C4F9AE02.roa (hash: 4Ah/QLfJHlIj6dW20RpkEQlUiHl1IpCVTVGIN9SKd94=)
                          3: 9AADC284366311EEB376DC3AC4F9AE02.roa (hash: 7n+dP3DomtnmMtbxA80Fq/rZrQRw0nuu83uCWiKsr0A=)
                          4: 986FD2A0366311EEB376DC3AC4F9AE02.roa (hash: GhhggZHcmG8xazItX7R9+gh23ZMJG7qSLYcPNvSJFoE=)
                          5: 9767C3CC366311EEB376DC3AC4F9AE02.roa (hash: /kzB6t0e2pIjrtu3XsEpKLUUcDNjuBfLcGgruTa29yo=)
                          6: 75A05C926E8211EFA843807EC4F9AE02.roa (hash: MjTh8AW1DZ7u20XYuEekJB2oVk8O+HGzspm35tkqSi4=)
                          7: 97F664EC366311EEB376DC3AC4F9AE02.roa (hash: jVgsFzrdDjMbKaPnRbnUFCbiiTiaCFys2RcAiFEFE1Y=)
                          8: 9663A3B0366311EEB376DC3AC4F9AE02.roa (hash: wnmUO76JZp85+6TihvqjqAM1N82zX1eYSMWfhDXNXJY=)
                          9: 6BA10D8EAD9511EFAA7B4C1AC4F9AE02.roa (hash: uNH21LRQ+JewOtlVWuPyuyGaCSI3PGZenOSMtffk8oE=)
                          10: BFDC8CE68AAB11EF93DB792CC4F9AE02.roa (hash: sVEWr8cHjR39v6HfMG/t80nfPCrUOYbbrrhYH6aQohw=)
                          11: 99B68AAA366311EEB376DC3AC4F9AE02.roa (hash: HqHx/0ENjdkTLzMg3QNvatBgii/b6Dv1FTm2YDg1foE=)
                          12: 96EE3F5C366311EEB376DC3AC4F9AE02.roa (hash: iqhmC9coSd2mzPbX3c1Fi/SFAwy7h2jkexQ+YuDufDA=)
                          13: DC25866C6E6011EF830E7360C4F9AE02.roa (hash: OxiDT0SIFYyQoxxlhldZuYHR+pzMlUPJXfn9ZyBjWvM=)
                          14: 95EA48DA366311EEB376DC3AC4F9AE02.roa (hash: C4dhE2J+JR7WSKraMxcvR+Zja04JWKmYhWbZTHMV9AY=)
                          15: 993E65A2366311EEB376DC3AC4F9AE02.roa (hash: fVieB3CbqkvA15ScxDkYzRN045+h0GFMVwnZjL5ZWgk=)
                          16: 957D5E14366311EEB376DC3AC4F9AE02.roa (hash: pgOaeP/yDCO2Cd6nEAR34lCV049Kw8nNm7xRomHrUYU=)
                          17: 9B616A50366311EEB376DC3AC4F9AE02.roa (hash: uBzB0Mx36ap5dWU5XV4Be+Yi0frCuCO0c0j3Jvjl9Eo=)
                          18: 9C62F7D4366311EEB376DC3AC4F9AE02.roa (hash: 9g3C+nEwKUK4F3WWkxyvzCO8aTpUHXvcIzgpC5OoQrM=)
                          19: 9BDF5D70366311EEB376DC3AC4F9AE02.roa (hash: uTpk1PzmtkDm1Pw1+mRz53sS8x0F8j3TW2RqmuyIpuA=)
                          20: 6A32721CAD9511EFAA7B4C1AC4F9AE02.roa (hash: 5EuaV2pKmfgRERw28f/5Lxl1VQWoTEyn2eDoW1PwmPM=)
                          21: 9A3920B4366311EEB376DC3AC4F9AE02.roa (hash: O/ffCsKG2xasRSJeYinW7rjVtt6bLKUgyWdrzBes+/k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 03:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 401 (0x191)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C, serialNumber=71F40218C1AF47C5E993A21A2B29284E4C32C934
        Validity
            Not Before: May 17 03:49:30 2025 GMT
            Not After : May 24 03:49:30 2025 GMT
        Subject: CN=6828074a-1256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:6d:b2:72:eb:a1:19:10:84:ee:30:24:05:
                    bd:1a:ce:ba:a6:eb:40:4d:91:d6:ec:75:6a:6d:01:
                    61:d6:ab:87:1f:84:ee:cf:d2:e4:2d:97:e2:83:3d:
                    42:b2:63:a7:a8:3f:10:5c:c4:c7:a7:f0:8c:9b:ec:
                    77:09:9d:e3:0a:50:cc:56:6b:22:2c:1e:a9:4b:db:
                    a5:47:5d:1d:c5:d1:92:27:00:16:71:8e:f5:8d:58:
                    c5:d0:27:61:70:87:11:a9:66:5f:bb:8a:a2:a7:9f:
                    e8:0f:80:75:9e:c8:dc:1c:49:92:fa:ee:38:d0:04:
                    b9:94:c8:d7:99:7d:8a:14:6c:27:42:9a:af:c1:6a:
                    ed:02:58:d7:83:82:ee:cc:6a:6b:d1:3e:aa:42:90:
                    2d:66:cd:c4:77:a8:f7:11:b0:76:d3:20:d5:2e:45:
                    ba:d6:88:f7:21:aa:2e:78:27:46:6e:5c:b8:74:fe:
                    30:cc:33:a9:e5:1f:55:0e:f6:5c:3e:ad:99:e3:d4:
                    c7:3d:a2:bb:e6:2a:7d:38:0d:4a:72:bb:70:f7:c8:
                    22:69:89:b1:79:e6:86:68:37:fb:c6:fd:7f:93:e0:
                    fd:df:b9:86:5f:4f:66:06:bf:05:b4:e1:78:75:d5:
                    33:40:8b:31:b9:a3:fa:07:e3:ab:c4:ef:4c:38:34:
                    44:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:37:6F:98:88:0E:BA:07:3B:A8:B3:F0:52:32:CB:03:C2:67:16:EF
            X509v3 Authority Key Identifier:
                keyid:71:F4:02:18:C1:AF:47:C5:E9:93:A2:1A:2B:29:28:4E:4C:32:C9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/6DE3CE7C366011EE88E0F530C4F9AE02/cfQCGMGvR8Xpk6IaKykoTkwyyTQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:7d:c9:85:44:e2:da:21:32:2f:ef:a5:b4:66:55:81:6c:87:
         dc:f8:38:c4:a5:cc:e7:0d:27:a9:30:6d:ac:d1:cb:51:4b:47:
         51:a7:dc:b5:3c:fe:26:68:79:bc:37:79:df:9e:be:60:e2:9e:
         52:0c:e5:8f:1d:ff:ae:40:97:ab:35:67:e4:81:05:4d:2a:f2:
         23:6f:7c:ed:80:e8:7f:7b:d6:69:ac:70:f8:7b:2d:ae:60:4c:
         32:6e:e5:f6:56:28:7b:5e:36:1e:64:d9:cc:27:50:62:89:d8:
         7b:b3:7e:89:15:a9:ee:79:9b:9f:ba:ca:54:af:f1:52:1d:b7:
         62:af:c3:59:ec:65:b4:66:57:d6:d0:d6:93:c1:3f:ec:d4:20:
         b2:94:cc:48:01:04:f5:40:20:b6:d0:36:f6:b4:17:9c:5e:5c:
         b4:0f:83:65:fb:63:0d:43:2a:58:7f:48:dc:40:33:63:63:5f:
         6b:6f:94:30:ef:54:54:29:38:b0:9b:18:90:87:94:91:45:c1:
         ad:32:76:12:3e:2c:25:9c:fd:bc:fd:58:d8:38:db:8c:cd:f6:
         45:63:c3:c6:32:10:ac:35:b6:1b:f1:9e:1f:a2:62:7b:f7:79:
         6b:f6:24:29:dd:3b:81:d4:ea:e8:e7:72:a9:7e:1b:30:2f:c1:
         a7:3d:18:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 15:14:43 2025 by rpki-client