Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
File:                     v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json)
Hash identifier:          H//wiXQ4payVFync5TzTHvoYltKra7Yidm223IQryYU=
Subject key identifier:   18:F7:68:E5:B0:CD:1C:B2:73:1A:DE:DE:DC:F2:F8:5B:31:9A:5A:D4
Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1
Certificate issuer:       /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
Certificate serial:       0578
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
Manifest number:          0560
Signing time:             Sat 01 Jun 2024 01:49:03 +0000
Manifest this update:     Sat 01 Jun 2024 01:49:02 +0000
Manifest next update:     Sat 08 Jun 2024 01:49:02 +0000
Files and hashes:         1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: tTPqZsbB1MYkb7ksB9cfMJ8EQNexVjVgmOQEJ+Ekrho=)
                          2: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: apLdblhrz6YyStUbSoSCzL9c+6GMVbSzf8gMIFt1QZk=)
                          3: 8A88CCDC667911EE9D7DA167C4F9AE02.roa (hash: X7SuxUReIhtEeuRuataRkcxsMjFsDM5LgmkcsMvaDtY=)
                          4: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: kct2b7luZDVQOa8YrqBwyvHjQUSitXwj0nspiCjY8kY=)
                          5: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: rBIm6jqwZwJQbjfxJkkUqCHv7S2T/a+V2ct0xr99PXY=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl
                          rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 01:49:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1400 (0x578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1
        Validity
            Not Before: Jun  1 01:49:02 2024 GMT
            Not After : Jun  8 01:49:02 2024 GMT
        Subject: CN=665a7e0e-fda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:17:2c:ea:31:6d:b0:45:ff:0b:c6:27:a8:ee:
                    68:96:0f:33:34:3f:96:eb:8c:94:a2:b3:44:35:8c:
                    01:7b:dd:c3:69:4e:38:58:81:a4:fa:e6:15:63:7e:
                    b1:2f:6c:9b:7b:9b:42:48:b6:b4:a3:89:58:fc:cc:
                    26:bd:de:02:73:e8:b0:c9:91:11:f7:70:71:c3:a8:
                    e7:51:88:fc:20:ff:ed:d3:0b:71:d4:80:ce:d5:a2:
                    34:0a:88:70:2c:87:8b:a2:e7:62:68:fc:4a:4d:d9:
                    fc:dc:78:ee:a1:45:f2:e9:15:88:10:00:71:eb:10:
                    b4:c2:40:af:a5:ca:e0:c2:d2:92:b8:cf:42:12:8f:
                    b1:50:ad:86:45:d4:40:f8:de:f7:db:d2:96:bd:44:
                    a9:6b:eb:08:72:de:20:5d:fd:66:80:b8:e5:df:f9:
                    a6:27:33:80:53:22:b6:90:dd:0b:43:3f:15:99:bf:
                    24:3e:2e:72:45:e0:40:71:22:28:46:64:20:1c:56:
                    1e:e1:0b:a6:dd:0d:8b:4a:56:cc:be:ad:c9:be:74:
                    09:df:76:3d:a7:6a:e6:f1:16:8c:f0:5a:88:00:7a:
                    39:41:2e:44:13:3e:b0:01:43:a9:96:fa:0e:e7:13:
                    7f:5e:a6:c8:f2:61:0f:13:fc:1a:cf:e0:f4:4c:f8:
                    3e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F7:68:E5:B0:CD:1C:B2:73:1A:DE:DE:DC:F2:F8:5B:31:9A:5A:D4
            X509v3 Authority Key Identifier:
                keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:65:9c:51:20:3a:48:87:28:22:31:f2:b5:48:6d:3c:60:16:
         fa:df:c1:a7:aa:71:53:91:c0:28:e9:2e:df:48:3c:57:f7:21:
         29:2e:cb:fe:e8:ba:ee:c7:cf:9b:ba:04:60:6f:a2:ad:0e:94:
         a6:c3:6d:7d:73:7e:f8:70:2f:99:0f:b2:ad:80:cc:e8:8d:3b:
         a9:27:c0:5e:d6:a0:f8:32:0c:81:8a:78:49:30:68:45:14:90:
         63:48:8b:04:d5:41:8e:a6:8c:54:c2:c8:47:21:4e:cb:a2:d9:
         53:3c:69:a7:59:66:eb:af:80:ab:d6:82:53:c6:84:96:e9:b8:
         d1:5d:bc:4c:4b:e6:a7:22:21:ea:08:04:07:08:2e:9f:3e:34:
         8d:53:fc:16:2d:f8:1e:ef:41:6c:dc:6a:c9:dd:e5:76:15:66:
         76:4b:1c:d7:25:93:2e:54:d1:5a:ef:35:ce:09:9d:51:18:28:
         b2:44:19:8c:6f:e2:44:e1:d2:a8:22:d5:d3:4e:25:84:fb:9c:
         86:47:d1:ee:fa:36:fd:c6:09:1b:b6:2d:36:40:1b:f3:88:93:
         85:c1:09:6d:f2:cc:f7:ba:2b:b8:4e:85:5a:8e:5c:55:eb:67:
         04:10:2a:3b:c8:20:8a:88:97:52:1a:0a:3a:c3:94:8d:8e:36:
         b9:b2:66:85
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBXgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx
NzA1QUNGQzEwHhcNMjQwNjAxMDE0OTAyWhcNMjQwNjA4MDE0OTAyWjAYMRYwFAYD
VQQDEw02NjVhN2UwZS1mZGEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvBcs6jFtsEX/C8YnqO5olg8zND+W64yUorNENYwBe93DaU44WIGk+uYVY36x
L2ybe5tCSLa0o4lY/Mwmvd4Cc+iwyZER93Bxw6jnUYj8IP/t0wtx1IDO1aI0Cohw
LIeLoudiaPxKTdn83HjuoUXy6RWIEABx6xC0wkCvpcrgwtKSuM9CEo+xUK2GRdRA
+N7329KWvUSpa+sIct4gXf1mgLjl3/mmJzOAUyK2kN0LQz8Vmb8kPi5yReBAcSIo
RmQgHFYe4Qum3Q2LSlbMvq3JvnQJ33Y9p2rm8RaM8FqIAHo5QS5EEz6wAUOplvoO
5xN/XqbI8mEPE/waz+D0TPg+qQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBj3aOWw
zRyycxre3tzy+FsxmlrUMB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3
MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6
OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MjRENC8xQTZFNzUxQ0E3MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNp
NUxmLVFMYS16djBYQmF6OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAyZZxRIDpIhygiMfK1SG08YBb638GnqnFTkcAo6S7fSDxX9yEpLsv+
6Lrux8+bugRgb6KtDpSmw219c374cC+ZD7KtgMzojTupJ8Be1qD4MgyBinhJMGhF
FJBjSIsE1UGOpoxUwshHIU7LotlTPGmnWWbrr4Cr1oJTxoSW6bjRXbxMS+anIiHq
CAQHCC6fPjSNU/wWLfge70Fs3GrJ3eV2FWZ2SxzXJZMuVNFa7zXOCZ1RGCiyRBmM
b+JE4dKoItXTTiWE+5yGR9Hu+jb9xgkbti02QBvziJOFwQlt8sz3uiu4ToVajlxV
62cEECo7yCCKiJdSGgo6w5SNjja5smaF
-----END CERTIFICATE-----
Generated at Sat Jun 1 02:55:15 2024 by rpki-client on console-fra.rpki-client.org