Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
File:                     ueYM8Xn06svblJK6X3ys9FI5zPQ.mft (raw, json)
Hash identifier:          nJi9KEX0sfF5+iCLUgUAyu56a9LD2g3ZvADw+M+vUIg=
Subject key identifier:   68:37:93:50:B4:DE:1D:C1:38:66:9D:A8:58:92:A4:27:36:18:E8:C8
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       01E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
Manifest number:          01A9
Signing time:             Thu 15 May 2025 03:20:26 +0000
Manifest this update:     Thu 15 May 2025 03:20:26 +0000
Manifest next update:     Thu 22 May 2025 03:20:26 +0000
Files and hashes:         1: ueYM8Xn06svblJK6X3ys9FI5zPQ.crl (hash: pl/PI08Anv0Ph4XaRxujhJ3QwvxxMS/GVyGqLQop/8M=)
                          2: 7362D03E37C511EFBA013C34C4F9AE02.roa (hash: 9qnuOOqog1w0/6Ft0fo80AwEmtyxbUWJdcXWk0vjBP0=)
                          3: 14C4C7D4002611EFBD462953C4F9AE02.roa (hash: hi6S2Mh9Zc0AeJAKr2eaBvvBpbecYaUaD50MlmI4NaA=)
                          4: 43E73F1824D011F0805C1741C4F9AE02.roa (hash: tNRSiapsZeWkhtpGA+SHpuAF0dORUNQbpmMkQLwDzaU=)
                          5: D2DF3ACCE25911EF9C741573C4F9AE02.roa (hash: mzsLMpqKZHnpS1jxQCrwB8rjSWZK0J6cgj7y6Sy2ob0=)
                          6: 1DD3ED16BDB611EF8F65515FC4F9AE02.roa (hash: NYziG9pEfTMgU56vyqT4ECUx0+xGwWZL89cQ95occgk=)
                          7: E35133A60ED911EE8A4E0A23C4F9AE02.roa (hash: +LKQHGBjyQavtGbDYZoM0TZlAhYLHnodgT2xhs31P7o=)
                          8: A13BE9EE8EE911EE8698A64FC4F9AE02.roa (hash: BbLe+tzPbnaYWKG7gM1VjEH/wcUFNySxqBWUmVUdKKg=)
                          9: 139300E4BA6911EFA78E2F66C4F9AE02.roa (hash: ewdRPxERVjw1+imIbuRKiOzFgdfb8FXbS7BLrbgntiM=)
                          10: E17B507E25DF11F0B111A515C4F9AE02.roa (hash: hvgmafeqE7JpAOUh9MIGSNa3kJtd7cqjjE/RR/pff6g=)
                          11: 3F3EDA068CAB11EF8A61C244C4F9AE02.roa (hash: n8rocIcqcCEqWOhQW6COhKUHQ1TT+r5yq9m/cXvntlg=)
                          12: 305C2134666211EFB1D51134C4F9AE02.roa (hash: 678Vn3LLWwx5u4uELhujFENcUsNRng8pzaOjm9n/20Y=)
                          13: AE0A263AB00411EF95939E11C4F9AE02.roa (hash: Hb3S2H5mvG6APMmAW4C0vTeaq85iORr/31KWRV1IZtk=)
                          14: E7DC24BCC4C211EF8670983EC4F9AE02.roa (hash: uEWJ7/SbDN/8MDuGUTA/PUoegQuUTtnZid1qI1+pgB0=)
                          15: 7857C144B87211EE98B04B19C4F9AE02.roa (hash: VfjibvprvBmnfdE90FAhNj0D7QO9B7oG8yc/kCD9FSM=)
                          16: A069EA0C8EE911EE8698A64FC4F9AE02.roa (hash: 1Kpd2YjRlMJbYQzqvODxmlNt6RPiHgoY7Xsf29roK9M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 03:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: May 15 03:20:26 2025 GMT
            Not After : May 22 03:20:26 2025 GMT
        Subject: CN=68255d7a-e869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ea:0c:3d:1c:e8:9c:34:df:26:1c:31:ca:e4:
                    2f:fe:ef:42:c4:11:fb:a1:16:0e:c0:52:a6:6d:95:
                    df:ac:42:f4:c8:7d:3e:85:f7:5f:52:2d:6f:79:66:
                    55:22:ce:d4:9f:48:d7:4c:d9:9b:f5:d0:f6:8c:a3:
                    f4:9f:bd:95:1f:a6:fd:f8:17:20:94:fb:84:52:e4:
                    a8:35:2a:69:72:15:8c:ab:ee:c4:35:c7:2a:c3:53:
                    26:7e:e4:8a:9f:39:fd:63:df:f5:de:a4:1f:d6:5a:
                    6f:ed:55:ee:46:ed:9a:1c:74:20:bd:dd:58:14:d5:
                    be:56:d6:96:8f:4a:f9:54:88:29:02:ae:fc:25:bb:
                    6c:47:0f:53:2a:3f:9e:92:9b:2e:36:3d:89:18:c9:
                    71:0a:5b:61:98:a5:c2:f8:66:2a:f8:f1:01:61:79:
                    f7:26:29:7c:bb:44:ff:1a:02:d1:b8:15:0b:4c:f5:
                    6d:38:5c:1f:45:f0:d2:4d:92:09:29:db:fc:c5:c9:
                    60:fc:e6:82:ef:26:9b:0d:31:80:d9:93:d1:c7:16:
                    a5:3d:3a:7e:b8:a2:2c:64:60:61:5e:d8:a2:af:60:
                    bc:c7:62:bf:ae:e8:f2:27:f0:92:5d:a5:f6:d2:32:
                    2c:d5:5a:cd:20:ee:95:e9:22:e8:04:0e:7a:20:57:
                    fe:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:37:93:50:B4:DE:1D:C1:38:66:9D:A8:58:92:A4:27:36:18:E8:C8
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:ad:e7:57:09:58:d6:b6:4d:8b:0e:fe:8a:e0:99:a6:c9:e0:
         64:c0:de:81:86:4b:93:52:89:a4:70:0e:d8:27:14:51:53:4a:
         2b:bb:d3:be:4d:9f:09:7d:15:b0:af:86:b1:d8:d6:4b:05:ab:
         79:a5:93:b6:22:fa:dc:4f:18:74:fc:fe:9d:b4:50:36:2b:db:
         49:c2:43:e9:f0:9f:4c:a5:e2:d4:ae:12:d4:4e:e3:9e:bb:14:
         4e:1a:14:2a:a5:b0:14:e8:96:2b:ea:9f:82:b2:67:d1:e2:43:
         ec:f8:f8:26:3d:f4:0d:3d:15:79:c6:6e:5a:1b:f0:7c:f6:73:
         af:80:17:1a:31:0c:3d:4c:37:b1:21:21:19:1e:50:24:4a:12:
         5e:f7:73:93:36:05:28:aa:30:6b:26:21:9b:c1:40:65:0c:f1:
         f7:fe:3f:ff:2b:4e:87:b2:32:17:5c:fe:4a:84:2f:a2:04:5e:
         f2:2a:32:86:ee:96:cc:8f:3f:81:94:4e:7c:fc:f0:67:52:37:
         61:f2:24:03:ef:3e:9f:0c:95:33:25:17:02:7f:13:67:7f:ef:
         04:7b:73:bc:f6:f4:34:4b:68:62:52:e1:f8:f9:dc:99:50:c5:
         d2:6d:f7:d6:99:4e:14:e0:e9:9e:87:08:de:07:2c:af:c2:a3:
         67:bd:75:e7
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAeAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0
NTIzOUNDRjQwHhcNMjUwNTE1MDMyMDI2WhcNMjUwNTIyMDMyMDI2WjAYMRYwFAYD
VQQDEw02ODI1NWQ3YS1lODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzOoMPRzonDTfJhwxyuQv/u9CxBH7oRYOwFKmbZXfrEL0yH0+hfdfUi1veWZV
Is7Un0jXTNmb9dD2jKP0n72VH6b9+BcglPuEUuSoNSppchWMq+7ENccqw1MmfuSK
nzn9Y9/13qQf1lpv7VXuRu2aHHQgvd1YFNW+VtaWj0r5VIgpAq78JbtsRw9TKj+e
kpsuNj2JGMlxClthmKXC+GYq+PEBYXn3Jil8u0T/GgLRuBULTPVtOFwfRfDSTZIJ
Kdv8xclg/OaC7yabDTGA2ZPRxxalPTp+uKIsZGBhXtiir2C8x2K/rujyJ/CSXaX2
0jIs1VrNIO6V6SLoBA56IFf+/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGg3k1C0
3h3BOGadqFiSpCc2GOjIMB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC
NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RTAzQi9BRjk2NzE2NjBCNkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZz
dmJsSks2WDN5czlGSTV6UFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCZredXCVjWtk2LDv6K4JmmyeBkwN6BhkuTUomkcA7YJxRRU0oru9O+
TZ8JfRWwr4ax2NZLBat5pZO2IvrcTxh0/P6dtFA2K9tJwkPp8J9MpeLUrhLUTuOe
uxROGhQqpbAU6JYr6p+CsmfR4kPs+PgmPfQNPRV5xm5aG/B89nOvgBcaMQw9TDex
ISEZHlAkShJe93OTNgUoqjBrJiGbwUBlDPH3/j//K06HsjIXXP5KhC+iBF7yKjKG
7pbMjz+BlE58/PBnUjdh8iQD7z6fDJUzJRcCfxNnf+8Ee3O89vQ0S2hiUuH4+dyZ
UMXSbffWmU4U4OmehwjeByyvwqNnvXXn
-----END CERTIFICATE-----
Generated at Thu May 15 12:40:20 2025 by rpki-client