Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
File:                     md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft (raw, json)
Hash identifier:          Vyw98ISnfYyP57JUvpVC80fuQ28pH2EGVO+GozNcng4=
Subject key identifier:   EB:D5:EC:43:E0:3C:B4:8B:B5:FF:60:6B:54:47:72:19:AD:26:9B:FB
Authority key identifier: 99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93
Certificate issuer:       /CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
Certificate serial:       2707
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
Manifest number:          251A
Signing time:             Mon 06 May 2024 16:10:43 +0000
Manifest this update:     Mon 06 May 2024 16:10:42 +0000
Manifest next update:     Mon 13 May 2024 16:10:42 +0000
Files and hashes:         1: md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl (hash: kcq02ay2e+xUQ6BE/Wku9toy3CC0Iw9JmjZE+mG27Ec=)
                          2: A5AEC7A6AFED11EE9561416EC4F9AE02.roa (hash: Y5BuqFwbaI7re63o5PmqE7mrBh4jMGt1r0BLlHhNpfY=)
                          3: E1944C7441C511E8BEC06D36C4F9AE02.roa (hash: Qh7RN7YeyLrBGg7zxhK2Oe7wCm6h247/lDwDvm2kiNU=)
                          4: E03999C441C511E8BEC06D36C4F9AE02.roa (hash: aAJLZjPUJuACCTvpSy1kxXadKYkNDTXzx0xj86mXBww=)
                          5: 99E3B47E230D11EBACAFB634C4F9AE02.roa (hash: LP2p8BumLBYIO5+Yri43PDp4VbJIF6Xk1wtVXR0TnJg=)
                          6: 6BF06690D18111EE9F4F1C6BC4F9AE02.roa (hash: h4/OAT+qJGylddnfn76cU70rc+hVAMJXrP4UtwDGK6I=)
                          7: 360880DAACC311EAB7256C55C4F9AE02.roa (hash: 4jnK7laCVS60yhzcSVuYYNZQUIQpO+TJ9kufeaAY1cw=)
                          8: 32D4E44AC47711EB9BD0E327C4F9AE02.roa (hash: i6C+rXJeMqEy7X+CLnHWmnvmmbA5b893zKi/snovhvo=)
                          9: EB263BE4DBF011EBA6E54586C4F9AE02.roa (hash: ixoy/wSKSmOGrPFBpmxrv5LsVkj2d8kI+W7jCW3vKJg=)
                          10: 2FF0D93AFEC911E88E78993AC4F9AE02.roa (hash: 2ne+z7g4C6hTWhNL7yfi5iWGj3rq/tLUH4y+aF2dJpI=)
                          11: A085C546F64511EAAF5AD93BC4F9AE02.roa (hash: BXf5GujzbS02LR1rm/GFLIluNcgnrubsWH5+vN+D36o=)
                          12: 315BBC4AA21C11E8B669A00BC4F9AE02.roa (hash: 1e03UWRVZ/5+y32SmpXe+TP1XJKPxBIsU/jxs0BWjSw=)
                          13: 4239C32A61C211E9B8967426C4F9AE02.roa (hash: /Wt1Z8ZJ6pWEHDdoPKqKbe9iqHVuyV2AhukpepB9rOg=)
                          14: 8672C378CCCB11EAAAE49011C4F9AE02.roa (hash: GfGKAdxNud+tUACjn3g5T9nVRLbkaqoQER5BfZEX8Y0=)
                          15: 4969EFD6A34711EA996BB179C4F9AE02.roa (hash: 2bINfJ63q0aI3/3Hj1Y/Xau/Srglj2VJ3QG3xLDskFc=)
                          16: D9CB701ACBF311EBB9D2A784C4F9AE02.roa (hash: qPJPPIhLucg7hVkunwTvkDm5ubZVClK+d8L9bJRO7JY=)
                          17: E0CC264A41C511E8BEC06D36C4F9AE02.roa (hash: CgbtG6DGasO3uGNbTpcS06AefmbLFN8i1Wy06zcKMCQ=)
                          18: E681416041C511E8BEC06D36C4F9AE02.roa (hash: m+MvcbU53Q16b+EdR5S8QxCPrNXmDUERv6o94uYRjp0=)
                          19: 1968CADACCCA11EA86EC0A0DC4F9AE02.roa (hash: Rgz3ppKREwJUQu+zJGW3pophrE6u2sRsREWmlvm9yTE=)
                          20: 9DE98A76D9B511EBA4FC5B1AC4F9AE02.roa (hash: iv8nOulwcqxdim1eSXcRBYccKrkLkRNyX1DMR62JmfM=)
                          21: 5F92D6C0478F11E9A090265DC4F9AE02.roa (hash: MH6nb/cUkptzt3+5pJf6PeBjbU6MEqAkVIzm0C8RdQU=)
                          22: DCC9968641C511E8BEC06D36C4F9AE02.roa (hash: ZqVDdf5yHYROu2F/jkHzaPvEliQhiiqrae0HpBjvn6g=)
                          23: 34D73F3E230C11EB825ED82EC4F9AE02.roa (hash: BfI++zL7rX8hbCo8B0hIfCfWtfcAlWLoZxVH5oImA/8=)
                          24: 7F0F0E7AC92311EBB709B444C4F9AE02.roa (hash: iy6Hm/YV3Bpxh/WxkcBtCjgTs5v9J59W/QXNqYBswK0=)
                          25: E2D385AA41C511E8BEC06D36C4F9AE02.roa (hash: DyBmAdnALuAG+BC7Mn1Sv8SDHm5yM2ahcyQ87t6NGNk=)
                          26: 350965D2992511EC94DB646EC4F9AE02.roa (hash: +u2SVI972hRXhRuB75bpOCoj9ih6sM/GEyOFtyDgjHE=)
                          27: E21558BE41C511E8BEC06D36C4F9AE02.roa (hash: a676MkfOFJvjQvvnutPHQX9t6yFU4IW/yDz19Wtuc8g=)
                          28: 2F36F25EFEC911E88E78993AC4F9AE02.roa (hash: RMTyF1uVj6VY8nxNhmDfSAr1MFyTvQHhmDo/BRp8UzQ=)
                          29: 52360F6491CD11E99EE03151C4F9AE02.roa (hash: 9aIp/N5OrLmp5johI1UAuK6fY33crcOAWHGl+qeCwjw=)
                          30: 9470344AA21D11E8A514700EC4F9AE02.roa (hash: +RE8oCaJNdExWaDlVPdQMC0UCLjU80u7pWRHEKM7csY=)
                          31: 77C98D46C8E011EA9FF8027AC4F9AE02.roa (hash: 6dGXihWYlk63zsrg4KaIWx7U5Nn9c2sytIJqGtzNtxQ=)
                          32: AAF07158AFEB11EEBCAD8169C4F9AE02.roa (hash: ZtiK8rwojk9vk+8x3OZJpJzAAm04W0wNqieKrAANUXI=)
                          33: DC28826E41C511E8BEC06D36C4F9AE02.roa (hash: TEb6fiq9/f5LZ+elOa5ALyHgoVgSw553mtzVzxyagRQ=)
                          34: C86BC12E4D8011EE972A6F42C4F9AE02.roa (hash: +6vn5lS0B/B+F7/pj3pLi35Hb114w+SSlqsg+HjZndA=)
                          35: 1DB9AEFAE5EE11EABA8AEC34C4F9AE02.roa (hash: HHsule7Jzvd4QV+yED8Sn/ERf9vT00bCvTMZvvj0JVA=)
                          36: 7B47F39C821711E993240872C4F9AE02.roa (hash: XJ2PxrTygP9XZyngq4wQqZfgw8dXc/jrGjFq/9DOs7w=)
                          37: 2E6B58ECFEC911E88E78993AC4F9AE02.roa (hash: XBY5wO3kMds9YL3WpFG/JM0u34QgMc4G65losa8LONs=)
                          38: 3494EF9604AB11EB8AAF5923C4F9AE02.roa (hash: Fdh0iKaN9s5KAJUbhgRdPhwHOcikk4DN5iWNxBmnnTo=)
                          39: 41C6F41AB84A11E98246736CC4F9AE02.roa (hash: NsG8Yym5x5YJhEE8TufznJsUv5yfLQb4efscI1Gv6KI=)
                          40: 9F711570F64511EAAF5AD93BC4F9AE02.roa (hash: n3b03mCCm3Bfv6uh1Ib8btbPT/egkFdoycOm+gFds1Y=)
                          41: DD8ACB8041C511E8BEC06D36C4F9AE02.roa (hash: /YRVWRKqzDBmoAwhBy0Iqrj5OH4UFjkmhQ5kqpJnlJY=)
                          42: 2FD48F5AA21C11E8B669A00BC4F9AE02.roa (hash: IjxHoMvQokP79pXGuaoRygmBq1zsF0YktpQuqQZ+7HI=)
                          43: 4FB7C576376811E9847C6223C4F9AE02.roa (hash: qzPjyr9EpmNtUu1Sgb+DxHbEaZiwqxj6sIunF5BOJKY=)
                          44: 411624587D2511ECA2A43549C4F9AE02.roa (hash: maVii3oQQBQ9WbSOvdxQACdm++4nijrCJMiZfKRjh7Q=)
                          45: 50527DFCD27811EBB9B4BB66C4F9AE02.roa (hash: QVezbCdzM6SE9QxfNOIImHSnrbfD4zoKYFkFUOwxOhs=)
                          46: B1A34CDCD53A11EDB199211BC4F9AE02.roa (hash: U1plRsCurStd6Nqc7j5j6FlFBwkWx8gqnc/uWB3zfhY=)
                          47: F636F748DC9811EEA15ED615C4F9AE02.roa (hash: NGmjzPUFcJMJisK6EuQlnshsk6rgiaDitzzS7O1VM+c=)
                          48: 3404E194C47711EB9BD0E327C4F9AE02.roa (hash: epxoMjo4+1o5XT28i8TYAbk1iircLzPSgeEY8DzHNmQ=)
                          49: AFC59224604711E9BB8C0349C4F9AE02.roa (hash: ihk91+q7IgNyUjYKGL+u42e69xVnX0pAZbLXyW700vM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl
                          rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 May 2024 16:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9991 (0x2707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C28D/serialNumber=99DFB6BF7950E6B40195A59024F4B750863D3D93
        Validity
            Not Before: May  6 16:10:42 2024 GMT
            Not After : May 13 16:10:42 2024 GMT
        Subject: CN=66390102-5c0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:47:98:a7:a4:07:19:3c:fa:9e:1c:5e:00:8d:
                    21:5f:e2:4d:40:4d:fb:a5:a8:08:0e:93:34:4c:9e:
                    7b:d2:c0:8d:b7:1d:32:bb:b9:c0:24:c4:77:2b:83:
                    43:3b:f9:92:09:12:53:73:83:c4:01:69:49:da:2d:
                    2f:35:04:ea:fb:88:d7:72:d6:c1:85:2b:53:93:23:
                    51:c0:34:73:e2:9e:81:01:76:b4:a1:71:8c:e9:8e:
                    18:31:94:09:ae:b4:49:79:71:4a:e1:96:f1:d2:be:
                    d4:33:98:0b:aa:88:2a:2b:83:97:35:3c:6e:3b:6c:
                    af:d5:18:45:61:9d:31:a1:54:68:64:c8:a9:a7:66:
                    64:70:72:4c:bf:43:ec:1e:e6:15:b9:58:a8:d6:e6:
                    1f:61:66:9b:42:97:b8:e0:99:26:30:f1:be:0c:e1:
                    11:d3:75:7e:ee:dc:88:8d:66:56:88:63:fb:26:9f:
                    40:d4:cf:95:5b:1a:ee:62:6b:c4:c4:e8:8e:d9:b0:
                    59:b9:10:d8:30:9f:bf:13:e7:ed:f0:be:61:ae:45:
                    8d:09:c2:11:ae:25:0d:0c:55:64:2b:a3:be:37:97:
                    d2:b9:11:a8:1b:42:e9:f7:0c:f4:a2:d5:70:cb:05:
                    d7:2d:13:fe:68:40:7a:4c:88:6d:c4:2d:f0:c4:af:
                    af:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D5:EC:43:E0:3C:B4:8B:B5:FF:60:6B:54:47:72:19:AD:26:9B:FB
            X509v3 Authority Key Identifier:
                keyid:99:DF:B6:BF:79:50:E6:B4:01:95:A5:90:24:F4:B7:50:86:3D:3D:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/md-2v3lQ5rQBlaWQJPS3UIY9PZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C28D/BDAB67F63A8011E5AE390155C4F9AE02/md-2v3lQ5rQBlaWQJPS3UIY9PZM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a2:d4:aa:25:85:98:c5:c9:17:84:36:85:e2:b5:3a:73:2b:
         93:51:7f:62:ee:03:43:ab:fc:99:6a:52:18:02:ff:51:67:2c:
         89:07:0e:c8:a9:6b:ad:10:98:db:66:5b:9f:05:d2:fe:59:1c:
         02:2d:07:01:45:24:b6:91:bf:7b:af:9e:43:dc:f4:d8:6f:6e:
         87:df:62:92:2f:d8:18:68:a6:8d:69:85:91:11:28:d2:71:c6:
         80:bd:14:6d:5b:b6:c8:66:ef:91:58:d8:c6:97:4d:b0:0b:c8:
         33:2e:cc:b6:29:bc:21:58:d7:43:ff:f9:d4:20:3a:6d:aa:9a:
         21:55:1f:d9:03:63:fa:82:3a:65:dd:76:d1:b1:b4:d1:69:7f:
         a8:4c:bb:cf:44:19:3a:b8:87:1e:ef:93:e7:ea:54:04:cf:05:
         e6:d2:30:09:f1:0e:bd:ef:b2:ef:82:94:60:18:6c:1a:b2:24:
         a0:10:c1:91:7b:89:33:26:33:94:7e:a1:8c:69:2a:9f:5a:86:
         c6:08:6b:22:b0:12:e6:4e:9b:95:dc:b5:b3:99:a9:a2:d3:36:
         24:97:8e:62:28:1a:36:e4:38:ed:a6:5f:b1:25:27:fc:aa:c7:
         2d:f8:32:67:b4:5f:37:40:84:19:40:6b:4d:96:d9:20:00:75:
         f8:bd:a0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 17:35:34 2024 by rpki-client on console-fra.rpki-client.org