Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
File:                     wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft (raw, json)
Hash identifier:          vmRFhiNfEz4GfhU/ujDmdJwVz/uOYw9ip30zR7Jtql4=
Subject key identifier:   DD:1F:C1:29:05:1D:D8:78:47:65:C5:F8:FE:EF:BF:B6:F8:C0:B9:7C
Authority key identifier: C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF
Certificate issuer:       /CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
Certificate serial:       07EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
Manifest number:          07DC
Signing time:             Sat 18 May 2024 22:01:25 +0000
Manifest this update:     Sat 18 May 2024 22:01:24 +0000
Manifest next update:     Sat 25 May 2024 22:01:24 +0000
Files and hashes:         1: wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl (hash: GEZD+hePsAAGuQlwi5b+isLIZ63u//IKanFPhEiBJxo=)
                          2: AE735F98E19D11ECA439802EC4F9AE02.roa (hash: SJu2RSsSvRcV4Mk1Y5p1dw2RdAYsWxBHDyxjfEHTENo=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl
                          rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2027 (0x7eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EB2D/serialNumber=C03056F68099647AF7585E53F6A98ECFF3D988DF
        Validity
            Not Before: May 18 22:01:24 2024 GMT
            Not After : May 25 22:01:24 2024 GMT
        Subject: CN=66492534-11da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:bc:7b:ee:ce:ea:d3:dd:61:32:c7:f2:21:
                    96:30:4d:d7:44:5b:39:a3:2a:08:db:0a:e7:d4:eb:
                    50:24:92:ed:f7:9b:77:ad:e7:dd:46:a3:04:b0:3e:
                    a0:7c:f5:d3:65:0b:d3:58:b6:cc:fb:c6:7f:75:90:
                    e8:08:ad:3f:f7:93:38:03:e5:69:23:22:e2:cf:f6:
                    6c:3a:b1:b8:a0:18:da:c7:c6:a1:88:ff:1a:a5:57:
                    e4:e4:81:e1:c8:7e:e4:00:9f:22:ca:13:5d:e8:c5:
                    3b:7b:68:cc:5b:8c:92:87:5c:29:46:bb:39:c4:7f:
                    67:88:d1:96:2c:32:e2:dc:ff:f1:15:34:5d:67:a5:
                    f2:94:99:f0:05:29:b3:02:7b:8f:2f:c8:bd:a5:34:
                    bb:cd:4c:fe:80:47:98:03:9e:d5:2e:66:fe:65:74:
                    de:e1:be:57:44:42:60:59:cb:57:1b:9c:6f:21:0e:
                    da:60:98:ad:26:61:40:0c:e1:4a:c6:34:9a:90:6d:
                    b4:d3:db:ee:69:31:c3:61:cb:58:61:f4:bc:d0:5b:
                    66:0a:24:ab:1f:e1:be:0d:bf:ce:0b:05:06:b6:67:
                    71:c8:b8:16:53:3d:42:20:58:de:f4:ed:6f:d2:a6:
                    95:93:9c:6b:16:4b:b5:ed:19:24:38:0d:a6:9e:80:
                    5e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:1F:C1:29:05:1D:D8:78:47:65:C5:F8:FE:EF:BF:B6:F8:C0:B9:7C
            X509v3 Authority Key Identifier:
                keyid:C0:30:56:F6:80:99:64:7A:F7:58:5E:53:F6:A9:8E:CF:F3:D9:88:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDBW9oCZZHr3WF5T9qmOz_PZiN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EB2D/4A6CEDACBEB311EA82687643C4F9AE02/wDBW9oCZZHr3WF5T9qmOz_PZiN8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ff:d1:d6:96:35:b8:e1:6f:bd:7e:b3:0d:cc:92:d0:24:0c:
         44:e9:22:a9:d8:a1:0b:85:b6:4c:b7:4e:b3:c0:b2:be:6b:b5:
         64:51:91:08:ce:0c:de:86:70:ed:f2:25:90:60:a4:20:6e:13:
         e2:5d:b0:14:38:88:da:42:44:50:9b:49:a0:02:c2:64:90:6d:
         6c:ad:de:c4:77:49:62:83:c8:b8:ea:9a:8a:ab:ff:21:7e:46:
         ef:c4:e2:32:27:e1:98:31:37:11:77:b5:6c:ab:f4:47:3f:25:
         f6:ba:1c:2b:2b:92:0c:bf:14:b4:18:57:2c:c9:b9:65:d2:2e:
         59:de:fd:c1:ec:07:0c:29:a9:8d:f9:92:89:93:8f:f1:40:7d:
         90:6b:a5:85:1f:56:68:25:e3:6a:f3:95:79:30:e7:4e:67:78:
         5e:a3:cd:18:07:44:97:52:47:43:56:3b:ee:ef:b5:d9:a7:1a:
         d8:1e:fb:3c:7b:ab:b9:0a:9a:11:e6:5c:bb:69:eb:17:c6:d8:
         82:3b:ce:d6:e8:eb:38:df:36:88:3c:75:0c:4d:2c:ee:54:2c:
         c0:f2:4c:49:d2:17:d0:08:17:23:b9:08:a1:59:59:0b:36:5b:
         9b:aa:19:05:ae:3a:e9:97:0e:49:92:b9:10:52:b5:5a:7a:e6:
         4c:d6:ab:b1
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICB+swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUVCMkQxMTAvBgNVBAUTKEMwMzA1NkY2ODA5OTY0N0FGNzU4NUU1M0Y2QTk4RUNG
RjNEOTg4REYwHhcNMjQwNTE4MjIwMTI0WhcNMjQwNTI1MjIwMTI0WjAYMRYwFAYD
VQQDEw02NjQ5MjUzNC0xMWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx2u8e+7O6tPdYTLH8iGWME3XRFs5oyoI2wrn1OtQJJLt95t3refdRqMEsD6g
fPXTZQvTWLbM+8Z/dZDoCK0/95M4A+VpIyLiz/ZsOrG4oBjax8ahiP8apVfk5IHh
yH7kAJ8iyhNd6MU7e2jMW4ySh1wpRrs5xH9niNGWLDLi3P/xFTRdZ6XylJnwBSmz
AnuPL8i9pTS7zUz+gEeYA57VLmb+ZXTe4b5XREJgWctXG5xvIQ7aYJitJmFADOFK
xjSakG2009vuaTHDYctYYfS80FtmCiSrH+G+Db/OCwUGtmdxyLgWUz1CIFje9O1v
0qaVk5xrFku17RkkOA2mnoBeGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN0fwSkF
Hdh4R2XF+P7vv7b4wLl8MB8GA1UdIwQYMBaAFMAwVvaAmWR691heU/apjs/z2Yjf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUIyRC80QTZDRURBQ0JF
QjMxMUVBODI2ODc2NDNDNEY5QUUwMi93REJXOW9DWlpIcjNXRjVUOXFtT3pfUFpp
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dEQlc5b0NaWkhyM1dGNVQ5cW1Pel9QWmlOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
RUIyRC80QTZDRURBQ0JFQjMxMUVBODI2ODc2NDNDNEY5QUUwMi93REJXOW9DWlpI
cjNXRjVUOXFtT3pfUFppTjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAX/9HWljW44W+9frMNzJLQJAxE6SKp2KELhbZMt06zwLK+a7VkUZEI
zgzehnDt8iWQYKQgbhPiXbAUOIjaQkRQm0mgAsJkkG1srd7Ed0lig8i46pqKq/8h
fkbvxOIyJ+GYMTcRd7Vsq/RHPyX2uhwrK5IMvxS0GFcsybll0i5Z3v3B7AcMKamN
+ZKJk4/xQH2Qa6WFH1ZoJeNq85V5MOdOZ3heo80YB0SXUkdDVjvu77XZpxrYHvs8
e6u5CpoR5ly7aesXxtiCO87W6Os43zaIPHUMTSzuVCzA8kxJ0hfQCBcjuQihWVkL
NlubqhkFrjrplw5JkrkQUrVaeuZM1qux
-----END CERTIFICATE-----
Generated at Sun May 19 00:30:12 2024 by rpki-client on console-ams.rpki-client.org