Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
File:                     W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft (raw, json)
Hash identifier:          zMRp73NGYa5FieEhFhP4gYou9Vx7mYkjPoctvm4Riis=
Subject key identifier:   45:AA:E8:EE:DC:34:D9:8E:25:0D:E0:77:88:93:74:7F:22:EC:5A:FF
Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41
Certificate issuer:       /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
Certificate serial:       F0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
Manifest number:          EA
Signing time:             Wed 07 May 2025 04:30:53 +0000
Manifest this update:     Wed 07 May 2025 04:30:52 +0000
Manifest next update:     Wed 14 May 2025 04:30:52 +0000
Files and hashes:         1: W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl (hash: AvoqkIPls3epFetLS/Na5BLY0pnpTPRW+8i6XHAoJmA=)
                          2: 0423873AD9C511EEA944FA80C4F9AE02.roa (hash: q9sVPpnGHT0TBWPu4k07DgCGJ80E6prLVfQ+m+J3OXE=)
                          3: CF6BED9EC63611EEA0C70259C4F9AE02.roa (hash: EBWBEqR3i5PxLdfH1mN7syf09hARUIbnkSV4IoogUv4=)
                          4: CE88A98AC63611EEA0C70259C4F9AE02.roa (hash: QXK92fzcUKDMjTiStNYvMQ27jRd0fX97PndGvgz1laU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl
                          rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 14 May 2025 04:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041
        Validity
            Not Before: May  7 04:30:52 2025 GMT
            Not After : May 14 04:30:52 2025 GMT
        Subject: CN=681ae1fc-7636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:d9:8c:3a:8e:3a:7e:d0:eb:00:0b:7a:ca:
                    96:f6:ba:74:d1:06:86:a0:f8:95:91:de:e6:c3:f2:
                    45:43:51:ef:ae:e4:aa:cb:84:57:d3:a3:52:01:6e:
                    d8:1a:df:32:14:c8:0e:8f:68:c7:7f:1f:b9:f2:f7:
                    c0:df:97:aa:c4:60:0c:99:0a:3f:72:9a:81:f2:ae:
                    e3:5d:7c:69:7c:94:56:ff:be:c8:5f:9f:08:b0:3d:
                    64:d9:57:7a:0b:3c:b4:f3:d9:6b:1d:95:5e:e8:34:
                    dc:0e:15:c6:2c:1c:c0:11:58:85:7d:71:3c:30:b7:
                    9f:2f:15:1a:2d:17:5a:d9:2b:fd:5e:85:fc:d1:c8:
                    14:1b:c0:e0:a1:30:80:0e:cd:54:d4:3a:3e:ec:97:
                    e3:1e:e0:23:ec:4b:bb:6f:29:3c:7b:0c:4f:d7:51:
                    9e:c9:51:3c:64:c9:1e:8a:26:0c:2f:88:cc:44:76:
                    8f:f1:6c:80:e9:5c:80:f6:fa:5a:f5:66:68:6d:b8:
                    8d:b5:dc:56:6a:97:8e:a2:18:99:48:2c:18:6a:70:
                    dd:76:0f:16:91:cf:8e:0e:0b:a0:f9:21:e8:d1:4c:
                    58:a2:95:dd:33:1a:02:b6:5e:be:e7:fb:7f:58:a1:
                    20:e4:a8:f8:a1:da:8c:8c:72:09:08:5f:20:c3:dc:
                    78:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AA:E8:EE:DC:34:D9:8E:25:0D:E0:77:88:93:74:7F:22:EC:5A:FF
            X509v3 Authority Key Identifier:
                keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:40:51:5a:b1:56:64:00:e3:c9:c8:d5:4f:87:52:e9:c0:47:
         d3:5c:83:62:64:10:f2:fd:4b:a0:3a:d0:17:91:69:78:10:79:
         9d:0f:4a:98:8d:f7:2a:56:cf:1c:13:0b:59:fa:ef:5a:cc:7e:
         43:96:86:cb:fb:3f:d2:93:02:dc:af:51:d5:8c:8b:25:d5:cc:
         75:d6:9d:65:1d:49:14:ae:8d:96:93:e0:23:a0:af:e4:e0:25:
         46:fe:1b:17:9a:52:23:35:11:93:8a:3f:6c:24:b5:b8:d0:c9:
         61:86:42:a2:d7:ba:d8:dc:1c:0f:c1:b5:91:8f:1e:0e:75:8c:
         31:60:a1:46:90:aa:74:7f:22:e9:22:12:f3:f6:66:a6:7a:7a:
         89:61:7f:df:e2:fd:3d:ce:2f:76:2e:9d:59:0c:e3:86:ce:1b:
         2d:96:a2:e5:1b:d2:b4:30:45:5d:76:29:b1:38:dc:17:5a:11:
         c4:2b:fb:03:5f:76:ff:c8:28:f5:2b:c7:00:9d:f0:4c:b0:18:
         56:b3:7e:94:a3:36:d1:bd:d2:82:4c:72:76:51:ec:19:8d:b8:
         8a:5d:ce:d6:05:de:30:49:97:63:29:54:c8:15:fe:54:f1:b5:
         b7:f4:06:6b:24:0c:b6:fc:47:c7:6d:95:cd:a2:9d:3a:20:fa:
         9a:59:83:06
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTE5MzYxMTAvBgNVBAUTKDVCNUNDNDAzMDlBMDdDMDNERjBCNjMwNEZDRDg0MEY5
NTBCRkIwNDEwHhcNMjUwNTA3MDQzMDUyWhcNMjUwNTE0MDQzMDUyWjAYMRYwFAYD
VQQDEw02ODFhZTFmYy03NjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwZzZjDqOOn7Q6wALesqW9rp00QaGoPiVkd7mw/JFQ1HvruSqy4RX06NSAW7Y
Gt8yFMgOj2jHfx+58vfA35eqxGAMmQo/cpqB8q7jXXxpfJRW/77IX58IsD1k2Vd6
Czy089lrHZVe6DTcDhXGLBzAEViFfXE8MLefLxUaLRda2Sv9XoX80cgUG8DgoTCA
Ds1U1Do+7JfjHuAj7Eu7byk8ewxP11GeyVE8ZMkeiiYML4jMRHaP8WyA6VyA9vpa
9WZobbiNtdxWapeOohiZSCwYanDddg8Wkc+ODgug+SHo0UxYopXdMxoCtl6+5/t/
WKEg5Kj4odqMjHIJCF8gw9x4rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEWq6O7c
NNmOJQ3gd4iTdH8i7Fr/MB8GA1UdIwQYMBaAFFtcxAMJoHwD3wtjBPzYQPlQv7BB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi82RUI5QzAzRUM2
MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9XMXpFQXdtZ2ZBUGZDMk1FX05oQS1WQ19z
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1cxekVBd21nZkFQZkMyTUVfTmhBLVZDX3NFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MTkzNi82RUI5QzAzRUM2MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9XMXpFQXdtZ2ZB
UGZDMk1FX05oQS1WQ19zRUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBGQFFasVZkAOPJyNVPh1LpwEfTXINiZBDy/UugOtAXkWl4EHmdD0qY
jfcqVs8cEwtZ+u9azH5DlobL+z/SkwLcr1HVjIsl1cx11p1lHUkUro2Wk+AjoK/k
4CVG/hsXmlIjNRGTij9sJLW40MlhhkKi17rY3BwPwbWRjx4OdYwxYKFGkKp0fyLp
IhLz9mamenqJYX/f4v09zi92Lp1ZDOOGzhstlqLlG9K0MEVddimxONwXWhHEK/sD
X3b/yCj1K8cAnfBMsBhWs36UozbRvdKCTHJ2UewZjbiKXc7WBd4wSZdjKVTIFf5U
8bW39AZrJAy2/EfHbZXNop06IPqaWYMG
-----END CERTIFICATE-----
Generated at Thu May 8 20:38:28 2025 by rpki-client