Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
File:                     u9Lp2RPGRcigUZJHTP-olruaTqY.mft (raw, json)
Hash identifier:          StmYQzEy5oLFyFzayCDQOyvWjbrzdQorMakULhbgCvg=
Subject key identifier:   6C:B5:51:2E:37:52:C5:F8:E6:05:80:BA:1C:CA:72:3B:10:5C:F1:66
Authority key identifier: BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6
Certificate issuer:       /CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
Manifest number:          010F
Signing time:             Sun 19 May 2024 05:24:36 +0000
Manifest this update:     Sun 19 May 2024 05:24:35 +0000
Manifest next update:     Sun 26 May 2024 05:24:35 +0000
Files and hashes:         1: u9Lp2RPGRcigUZJHTP-olruaTqY.crl (hash: ez9n3MZC+3BRvuvsLCW4Ihv2fGJqR4SATqXY+P9PVDo=)
                          2: 46DE5C7875DD11ED86945E46C4F9AE02.roa (hash: O8TrBYDn0Cu0XJIVHF6wgGEqC7MKqCTV39ziZneBTDM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl
                          rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 02:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111B00/serialNumber=BBD2E9D913C645C8A05192474CFFA896BB9A4EA6
        Validity
            Not Before: May 19 05:24:35 2024 GMT
            Not After : May 26 05:24:35 2024 GMT
        Subject: CN=66498d14-4717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c5:9b:ce:bb:d4:0b:2d:45:39:5a:ee:00:e0:
                    1a:27:1e:49:14:7f:1b:c2:26:99:55:27:ac:86:d8:
                    27:1a:77:b1:22:6d:4b:bf:06:38:94:19:5b:7f:a4:
                    b4:fa:d8:99:18:b0:09:18:4a:9a:95:9c:fe:33:4f:
                    a4:0b:de:8f:87:f5:8a:71:9c:13:7d:c9:b8:c2:08:
                    08:d9:99:22:00:5e:46:24:4f:49:59:04:83:f5:03:
                    8f:30:c1:50:08:bb:38:17:98:03:22:49:37:e0:f0:
                    ff:32:9b:81:69:01:d6:e4:3b:44:2f:40:a7:76:eb:
                    d0:83:ec:a5:18:20:6d:01:9e:af:06:5a:99:24:f0:
                    3a:c5:27:e6:e8:75:d4:c9:e3:fd:1e:15:4c:af:18:
                    49:d7:ac:ed:9c:74:2a:0b:36:f2:a4:12:ee:22:32:
                    67:39:fa:c3:d9:77:16:d1:e4:6a:78:0b:79:d6:e5:
                    a3:3c:a9:a1:1b:52:ba:10:61:af:23:36:f4:92:c5:
                    bb:cd:20:41:0f:bf:6e:f3:f8:07:57:4d:1a:01:93:
                    06:14:9a:47:ae:97:58:7e:0e:f2:fb:cb:47:78:9a:
                    37:c9:cd:85:fc:d0:5d:70:28:ff:21:98:8e:c3:60:
                    a3:e3:c5:24:fb:3a:b6:6d:b9:51:79:6a:11:4e:ed:
                    4b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B5:51:2E:37:52:C5:F8:E6:05:80:BA:1C:CA:72:3B:10:5C:F1:66
            X509v3 Authority Key Identifier:
                keyid:BB:D2:E9:D9:13:C6:45:C8:A0:51:92:47:4C:FF:A8:96:BB:9A:4E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/u9Lp2RPGRcigUZJHTP-olruaTqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111B00/13CA519275D911EDAB59C442C4F9AE02/u9Lp2RPGRcigUZJHTP-olruaTqY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:0e:c1:b2:38:97:94:75:06:61:35:70:2b:f8:2d:10:d9:bd:
         8e:24:2c:6c:bc:ca:9f:49:ce:e9:26:2a:ee:f6:a4:bd:40:56:
         3d:eb:cc:65:47:6a:2c:e0:fe:b9:3b:25:23:87:a8:8b:bd:50:
         dd:09:1a:2d:27:68:99:f1:48:75:9f:24:31:2d:e9:ff:79:91:
         11:47:aa:89:e1:4f:d2:6f:96:97:92:3c:20:30:72:51:9f:67:
         16:44:4e:39:74:8d:be:74:87:29:b8:11:e8:bd:32:1c:04:fc:
         34:1e:4b:60:7b:82:db:7b:be:4c:db:91:6c:5c:cb:ff:6e:7c:
         39:f8:37:b4:08:33:5b:4e:1d:0c:0f:65:85:47:cd:f2:eb:a7:
         aa:16:6a:39:42:8d:96:61:31:9f:93:2c:d1:17:fd:f0:d9:d3:
         ce:3c:c5:d5:34:d5:47:9f:2a:5b:d0:f0:e0:5d:9a:8c:93:66:
         9a:5f:5a:73:43:e4:5f:25:84:b9:4c:ef:dd:95:69:21:cc:1d:
         a8:f8:c3:e3:8e:5b:8e:70:29:89:e7:45:f9:61:d7:22:88:da:
         d9:53:45:b2:af:3a:f7:b9:c1:51:59:b6:02:14:9d:fb:d9:02:
         67:5d:0d:fb:df:15:ea:84:89:08:7e:92:8d:a9:ba:cc:f8:23:
         16:05:55:a3
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTFCMDAxMTAvBgNVBAUTKEJCRDJFOUQ5MTNDNjQ1QzhBMDUxOTI0NzRDRkZBODk2
QkI5QTRFQTYwHhcNMjQwNTE5MDUyNDM1WhcNMjQwNTI2MDUyNDM1WjAYMRYwFAYD
VQQDEw02NjQ5OGQxNC00NzE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtsWbzrvUCy1FOVruAOAaJx5JFH8bwiaZVSeshtgnGnexIm1LvwY4lBlbf6S0
+tiZGLAJGEqalZz+M0+kC96Ph/WKcZwTfcm4wggI2ZkiAF5GJE9JWQSD9QOPMMFQ
CLs4F5gDIkk34PD/MpuBaQHW5DtEL0CnduvQg+ylGCBtAZ6vBlqZJPA6xSfm6HXU
yeP9HhVMrxhJ16ztnHQqCzbypBLuIjJnOfrD2XcW0eRqeAt51uWjPKmhG1K6EGGv
Izb0ksW7zSBBD79u8/gHV00aAZMGFJpHrpdYfg7y+8tHeJo3yc2F/NBdcCj/IZiO
w2Cj48Uk+zq2bblReWoRTu1LzQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGy1US43
UsX45gWAuhzKcjsQXPFmMB8GA1UdIwQYMBaAFLvS6dkTxkXIoFGSR0z/qJa7mk6m
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMUIwMC8xM0NBNTE5Mjc1
RDkxMUVEQUI1OUM0NDJDNEY5QUUwMi91OUxwMlJQR1JjaWdVWkpIVFAtb2xydWFU
cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL3U5THAyUlBHUmNpZ1VaSkhUUC1vbHJ1YVRxWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
MUIwMC8xM0NBNTE5Mjc1RDkxMUVEQUI1OUM0NDJDNEY5QUUwMi91OUxwMlJQR1Jj
aWdVWkpIVFAtb2xydWFUcVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCdDsGyOJeUdQZhNXAr+C0Q2b2OJCxsvMqfSc7pJiru9qS9QFY968xl
R2os4P65OyUjh6iLvVDdCRotJ2iZ8Uh1nyQxLen/eZERR6qJ4U/Sb5aXkjwgMHJR
n2cWRE45dI2+dIcpuBHovTIcBPw0Hktge4Lbe75M25FsXMv/bnw5+De0CDNbTh0M
D2WFR83y66eqFmo5Qo2WYTGfkyzRF/3w2dPOPMXVNNVHnypb0PDgXZqMk2aaX1pz
Q+RfJYS5TO/dlWkhzB2o+MPjjluOcCmJ50X5YdciiNrZU0Wyrzr3ucFRWbYCFJ37
2QJnXQ373xXqhIkIfpKNqbrM+CMWBVWj
-----END CERTIFICATE-----
Generated at Sun May 19 05:48:49 2024 by rpki-client on console-fra.rpki-client.org