Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
File:                     ntkFUQfHD4W7kajaAnC1ynYK61Q.mft (raw, json)
Hash identifier:          LH5NDTkJ86oT2AL03tDxLrujmAvIoxTy433pY+x8vE8=
Subject key identifier:   5F:00:38:4A:B5:A6:93:4F:A3:7E:CE:E2:7D:3C:C0:AD:53:60:E5:56
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       36EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
Manifest number:          3573
Signing time:             Wed 14 May 2025 14:48:24 +0000
Manifest this update:     Wed 14 May 2025 14:48:23 +0000
Manifest next update:     Wed 21 May 2025 14:48:23 +0000
Files and hashes:         1: ntkFUQfHD4W7kajaAnC1ynYK61Q.crl (hash: e25MIs7c4V+rWOGYtZreKZmeX9K5iHk8ZxLLMQtaZIw=)
                          2: 9D67280A844911EAA528AD63C4F9AE02.roa (hash: VYBHve/PNmOFeIWgiVN/Red7+4ngw1/OUZ+8fRDI5rI=)
                          3: F0D8670E641711EEB4A16E1FC4F9AE02.roa (hash: VubRHHBc3Mp0miN/hmjpYpMhRr6R/fcT8ESI96i2bn0=)
                          4: 35575C68844811EAB301615FC4F9AE02.roa (hash: IpJzY/E3RfTD/Jty42OF5cBR7XD15VMXMCEpMRRL3LU=)
                          5: 9604F4A6899911EBA32C6224C4F9AE02.roa (hash: irNVJAgK3pBegIwIYQHvfU2ICa37uezrCrR7Sshxk/Y=)
                          6: 7418230A6D4B11EBB1805C0DC4F9AE02.roa (hash: JqpaA6uavzScEzQE05g7FN0bGDgZqNMIyby4mXtlKkU=)
                          7: B89BA72097D711EBA8B8BA2AC4F9AE02.roa (hash: RZHpITklMqhnuO90bEeP3i7RWRtO5TJRoQwAU5BGgUs=)
                          8: 7A58C8D6BBEA11EA8DF46778C4F9AE02.roa (hash: VrbZ7ZecbNcImk9iVkkzXLKwbDb+F2iSfzr14g+V7aQ=)
                          9: 9F2B1EB0892C11EBB29AFF50C4F9AE02.roa (hash: C9sOI6EfTgRnMQGNjlrtl3KFe7JPwkVRiva430VVNhg=)
                          10: 35E95924844811EAB301615FC4F9AE02.roa (hash: LgoFbTvnCYGxtb9l3zKpoNxXJ+KSjB/JRV9oy3sEYvk=)
                          11: 32CF326ECA2E11EA80305F0DC4F9AE02.roa (hash: Tvw2f69b+5p+ID20B8iBZZ0yBfURv9eNZRD114TIL4I=)
                          12: BB7CEA8CEF3B11ECABCC5E3EC4F9AE02.roa (hash: Pysow4ghhE6bNtWAkyi1inOqPNBVAlZxtG0k9FkRDpM=)
                          13: 443470FC7C1511EBB779C03EC4F9AE02.roa (hash: GJ+Ts94sVlUdI4E9xrQTvfVMrj+KCnN2xtF35+3yCvE=)
                          14: DED04A561D4111EB89535E1EC4F9AE02.roa (hash: YIkgFm4YlQ3B4lEIbOf0SksB4/x97E+3vlPXwWTeW9Y=)
                          15: 150DA58AFF0D11EF8B23C73AC4F9AE02.roa (hash: idSl8lJvkqdSo60nq2wum68o9p4rKFmDbGlEVDUP4DE=)
                          16: 167FCE12844B11EA91F6956BC4F9AE02.roa (hash: 89eEUpRQHSJ8X1lImXGmURAImfIF1FtpfbrbpBLEmDo=)
                          17: 9E1F70A4844911EAA528AD63C4F9AE02.roa (hash: ukv1HUDNVDJbCJlkSDyGbdgGzyB74+5Ji2qFWgrv0gw=)
                          18: D10DBCB2475C11EEBF5FB180C4F9AE02.roa (hash: UStQZ3E5ENhOJAnKZAoPf8pnLHZK3+vt2+bwJ7bo508=)
                          19: D9E23E4A6D4C11EB938EC44DC4F9AE02.roa (hash: jV1pO0tJQkm8tDF//+xAb/Vr8QQlVyReb+p4WbFsB4g=)
                          20: B34368F8BA9311EEB0A64B2AC4F9AE02.roa (hash: vzBcTdf96+UTQqQZlkeYwtQci7kemGbUS01k0jfvWtI=)
                          21: 160E2D60FF0D11EF8B23C73AC4F9AE02.roa (hash: DUYEU2WPRgGRjSa+GBl8Qamn18toiw7tspgbnam3lYo=)
                          22: DF6E9324D08D11EA9010E72EC4F9AE02.roa (hash: hFXanv2FdjB0oerr/Ni9RmWLKXd7bj75bYHKTp5JZ4U=)
                          23: FBCDF210490B11EC8E4D1136C4F9AE02.roa (hash: Qoz5g9368HMZWctAVVNXY9CZ9LyOlyI2/eGHTTT7kQw=)
                          24: FAF25932427711EEBEA02D22C4F9AE02.roa (hash: va72E7xgUhipybtVeUXFFu66WOtMudWBDnK3BZLcOzk=)
                          25: 0F3F5C24FF0E11EFB7B9A13CC4F9AE02.roa (hash: /p/aYFDXmU+p5r2x/x59lnZ8e1gVGwdb3q9zI0rbkwk=)
                          26: 9B4B6C82904911EABE5F0C63C4F9AE02.roa (hash: EUm4AnmfuJxU75sTZEUXibkajEE5FVqoIFPKGh69ArU=)
                          27: F33CEFA6FF0C11EFAFAF7D3AC4F9AE02.roa (hash: hCAJoif7R0PdtafhhCqVg3AWh/fUgT/PZ22s2qQ33mA=)
                          28: D6672BEE0BD111ECB2E9C868C4F9AE02.roa (hash: jlbUlIXnT9veJGusBLS+x09R8IWreW5sDY2cRLkBosA=)
                          29: 13C828C62D8911EBA7D22C3EC4F9AE02.roa (hash: twGH4Ti0Hxo3XFvPXLG4LeJ5bIvmDJLFNJkw3EGUZio=)
                          30: 7D745B8C800411EB9398C63EC4F9AE02.roa (hash: JRI97yoxRtupHfmn7kbQDCY5sz6BBIJOh/q9HLp8tPI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 14:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14059 (0x36eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: May 14 14:48:23 2025 GMT
            Not After : May 21 14:48:23 2025 GMT
        Subject: CN=6824ad37-5630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:75:26:5f:5b:14:f7:7c:b9:51:79:bb:da:11:
                    c9:30:67:90:85:32:07:f7:96:2f:7a:cd:5f:7e:33:
                    28:ea:bd:3c:51:b8:13:3a:90:82:fb:33:e6:5e:93:
                    49:c9:ed:78:9c:34:65:b8:f0:19:a5:4a:4d:80:78:
                    01:6b:78:9b:f5:bd:47:eb:a0:94:92:53:5c:55:79:
                    dc:6b:02:4e:ea:86:44:48:d8:10:e7:52:2f:e2:50:
                    f0:6a:ee:4d:3b:62:bc:8a:d4:a5:f4:15:07:38:5e:
                    34:4a:20:ac:80:06:3e:b6:75:ef:49:03:eb:31:a1:
                    6f:f4:00:73:ab:42:3a:b1:70:ab:30:3f:76:d8:d4:
                    52:cb:ca:df:c3:46:5a:f6:74:be:97:22:67:bb:80:
                    bd:72:7f:1b:23:17:47:1f:0e:a7:45:16:45:15:84:
                    23:45:d5:16:ca:74:ee:e8:07:e6:b9:ea:63:7b:d3:
                    9e:3c:fe:d4:d1:48:b9:d5:45:c3:7e:56:f1:ca:b9:
                    4f:23:00:a7:74:96:ff:16:32:ee:96:2f:00:60:af:
                    4d:3e:2c:78:56:c7:7b:87:62:70:5a:95:2a:2f:21:
                    44:18:5b:02:9e:dd:6e:1a:42:17:73:6e:26:00:29:
                    32:b2:6e:e2:d5:15:f3:ff:f6:00:d1:72:66:ac:fb:
                    93:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:00:38:4A:B5:A6:93:4F:A3:7E:CE:E2:7D:3C:C0:AD:53:60:E5:56
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:dd:49:93:3c:75:43:31:96:9b:45:92:4b:d4:11:01:a7:62:
         9a:c2:cb:77:16:28:85:85:63:b3:ea:58:cd:9d:e2:a1:ad:96:
         3f:df:21:54:6e:0d:9d:80:9d:b2:45:7c:c8:12:da:0e:e2:cd:
         f4:1a:f6:aa:cc:8c:60:c0:0f:0d:7a:8f:f1:d9:2b:31:5c:4a:
         79:7c:dd:ce:78:d1:a8:3c:a4:a7:ed:61:d8:b4:8c:6a:bc:93:
         cc:ec:aa:ae:6b:c7:ac:31:b5:4e:62:73:70:f7:78:5b:59:ba:
         04:65:8d:be:b4:b4:5e:89:42:e5:f6:b9:81:7d:b8:88:47:13:
         78:89:4e:7e:33:f4:bc:16:a7:39:37:45:1d:a8:ed:a2:9c:3e:
         cb:bf:44:a4:fc:ae:95:91:a8:0c:b9:23:f8:bc:5f:5d:50:37:
         0e:98:39:67:35:58:82:5f:8b:10:37:36:e3:19:e5:c9:58:96:
         18:f2:a1:32:ad:f3:a0:16:75:91:22:b2:07:09:33:de:29:63:
         b2:ab:02:85:69:ae:05:fd:04:02:4b:77:78:6e:9d:62:e3:94:
         64:d4:df:f0:7d:ae:9a:1b:2c:c0:d0:0f:fc:5e:dd:cb:b0:29:
         6f:70:99:1f:ff:3b:3f:c3:54:5a:62:c9:5f:e9:68:a0:90:60:
         0d:cd:bb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 15:31:14 2025 by rpki-client