Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
File:                     k9FqxcizBHYOd0g_k-6vq8OjCxI.mft (raw, json)
Hash identifier:          FPgmtOMqTFKmlX5Wexd+DKoCw0P3hr8O9ntpYuBn+J8=
Subject key identifier:   CE:D6:C2:63:D7:28:16:61:D4:97:42:AD:48:70:DC:80:CB:EF:DB:3C
Authority key identifier: 93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12
Certificate issuer:       /CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
Certificate serial:       0779
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
Manifest number:          076A
Signing time:             Sat 18 May 2024 22:16:35 +0000
Manifest this update:     Sat 18 May 2024 22:16:34 +0000
Manifest next update:     Sat 25 May 2024 22:16:34 +0000
Files and hashes:         1: k9FqxcizBHYOd0g_k-6vq8OjCxI.crl (hash: WdiabYyOACP5yR6JCW/Oxl+oResvvHw67T5YzGOvjEQ=)
                          2: 0B5C0778D0C511EABB9E0868C4F9AE02.roa (hash: 1ZtFopmCCVD7KT2BdPii78KMDgCQkvnDuz2kc/+aBJQ=)
                          3: 0A3DB3DCD0C511EABB9E0868C4F9AE02.roa (hash: MZpYMM5PdgtRobc7R6HBOp1eIjkKqyVaBTyVHYLZE2s=)
                          4: 0AC1EDE6D0C511EABB9E0868C4F9AE02.roa (hash: 7a4dwjZZzngXpkNrbzfKEtz8LMWqMhBZgDALtZ87eNM=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl
                          rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1913 (0x779)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E64C/serialNumber=93D16AC5C8B304760E77483F93EEAFABC3A30B12
        Validity
            Not Before: May 18 22:16:34 2024 GMT
            Not After : May 25 22:16:34 2024 GMT
        Subject: CN=664928c3-4c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:58:4d:b5:7d:e8:19:bf:71:7e:b3:7b:50:
                    44:43:53:42:c1:75:af:29:b0:5d:6f:1c:02:2c:cc:
                    c5:75:88:6a:68:91:3f:9c:6b:27:31:cc:81:d7:1f:
                    ba:a3:7a:8c:0e:ec:f0:df:e8:48:cc:9f:db:39:de:
                    7a:48:79:57:cb:ea:78:50:14:67:b8:f8:8d:60:a0:
                    bb:8f:ba:91:46:19:e7:83:15:dc:50:4d:c9:8c:07:
                    01:c7:f0:72:6f:85:a5:89:3d:7c:19:c8:c2:98:b1:
                    8e:bd:57:7a:a9:57:2a:42:92:35:4b:68:79:02:26:
                    76:33:57:7e:32:2e:9d:a3:2d:bf:65:6c:c8:1a:21:
                    d4:5f:61:10:f3:2a:06:b2:76:74:df:26:5a:b8:f6:
                    67:7c:c8:46:66:17:52:5b:15:7d:35:20:97:a8:49:
                    78:00:76:63:87:a7:f8:8a:a7:c3:05:71:34:14:8b:
                    27:c9:f8:bc:dc:20:18:05:ce:80:f7:cd:e6:c5:c9:
                    9a:ab:a9:15:da:eb:90:bb:d9:e5:92:0a:32:e9:e7:
                    29:52:8a:bb:60:23:ce:35:60:75:41:72:a0:27:df:
                    ba:1c:3e:e4:2a:ee:ea:31:fe:bc:0e:ae:49:db:f5:
                    42:c3:60:44:9b:99:66:9a:d8:36:12:3b:ab:7e:b2:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:D6:C2:63:D7:28:16:61:D4:97:42:AD:48:70:DC:80:CB:EF:DB:3C
            X509v3 Authority Key Identifier:
                keyid:93:D1:6A:C5:C8:B3:04:76:0E:77:48:3F:93:EE:AF:AB:C3:A3:0B:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k9FqxcizBHYOd0g_k-6vq8OjCxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E64C/63D5AC40D0C211EA9B33BF60C4F9AE02/k9FqxcizBHYOd0g_k-6vq8OjCxI.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e4:17:4d:64:19:72:cf:e1:6b:88:59:50:f4:20:66:34:4e:
         45:79:44:de:ec:9d:e5:f2:51:43:c1:40:9d:33:3c:cf:72:52:
         5c:1d:d1:60:29:37:3a:9c:b2:f2:8d:8f:d4:c3:b2:e4:4c:f2:
         36:c2:bb:e4:49:ea:4a:d3:0e:cd:9c:eb:0b:c7:7d:43:0d:f5:
         8a:f3:0a:fb:ea:5d:a9:0c:11:45:bc:b9:e2:34:29:72:1f:22:
         81:63:54:c0:93:64:60:b5:32:ff:92:12:26:dc:70:b9:91:7a:
         f4:ef:fe:e3:af:45:d4:cd:1b:d1:ce:58:0b:b5:fa:2d:f4:3b:
         6e:ac:2c:71:14:44:8f:4a:aa:70:25:db:0e:db:fd:38:e2:f3:
         37:72:11:97:c8:d5:6f:98:5c:d1:7d:6a:6a:02:f4:d9:a9:67:
         3c:df:1d:73:ea:ea:7d:b0:c9:00:d1:9e:d0:fb:85:52:68:4e:
         39:40:cf:2e:ea:b3:22:87:e6:4e:d6:46:02:07:82:4c:a0:d4:
         a2:49:e4:53:bf:24:98:19:df:db:6e:13:32:cb:4b:38:2c:56:
         ca:0d:0e:97:27:ab:55:7d:63:35:17:c7:c9:fa:6e:c0:99:f0:
         fc:cb:57:ad:b7:f7:a7:f5:40:f1:ab:4e:db:d6:83:ab:6e:1c:
         36:7c:32:c1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUU2NEMxMTAvBgNVBAUTKDkzRDE2QUM1QzhCMzA0NzYwRTc3NDgzRjkzRUVBRkFC
QzNBMzBCMTIwHhcNMjQwNTE4MjIxNjM0WhcNMjQwNTI1MjIxNjM0WjAYMRYwFAYD
VQQDEw02NjQ5MjhjMy00YzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu/BYTbV96Bm/cX6ze1BEQ1NCwXWvKbBdbxwCLMzFdYhqaJE/nGsnMcyB1x+6
o3qMDuzw3+hIzJ/bOd56SHlXy+p4UBRnuPiNYKC7j7qRRhnngxXcUE3JjAcBx/By
b4WliT18GcjCmLGOvVd6qVcqQpI1S2h5AiZ2M1d+Mi6doy2/ZWzIGiHUX2EQ8yoG
snZ03yZauPZnfMhGZhdSWxV9NSCXqEl4AHZjh6f4iqfDBXE0FIsnyfi83CAYBc6A
983mxcmaq6kV2uuQu9nlkgoy6ecpUoq7YCPONWB1QXKgJ9+6HD7kKu7qMf68Dq5J
2/VCw2BEm5lmmtg2EjurfrJ1VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7WwmPX
KBZh1JdCrUhw3IDL79s8MB8GA1UdIwQYMBaAFJPRasXIswR2DndIP5Pur6vDowsS
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRTY0Qy82M0Q1QUM0MEQw
QzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJIWU9kMGdfay02dnE4T2pD
eEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2s5RnF4Y2l6QkhZT2QwZ19rLTZ2cThPakN4SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RTY0Qy82M0Q1QUM0MEQwQzIxMUVBOUIzM0JGNjBDNEY5QUUwMi9rOUZxeGNpekJI
WU9kMGdfay02dnE4T2pDeEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCH5BdNZBlyz+FriFlQ9CBmNE5FeUTe7J3l8lFDwUCdMzzPclJcHdFg
KTc6nLLyjY/Uw7LkTPI2wrvkSepK0w7NnOsLx31DDfWK8wr76l2pDBFFvLniNCly
HyKBY1TAk2RgtTL/khIm3HC5kXr07/7jr0XUzRvRzlgLtfot9DturCxxFESPSqpw
JdsO2/044vM3chGXyNVvmFzRfWpqAvTZqWc83x1z6up9sMkA0Z7Q+4VSaE45QM8u
6rMih+ZO1kYCB4JMoNSiSeRTvySYGd/bbhMyy0s4LFbKDQ6XJ6tVfWM1F8fJ+m7A
mfD8y1ett/en9UDxq07b1oOrbhw2fDLB
-----END CERTIFICATE-----
Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org