Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
File:                     7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft (raw, json)
Hash identifier:          uLrOc1ePWvL5BwWifkRLRILRGc8aLJbsQarp60GDzZY=
Subject key identifier:   7F:A3:22:88:53:52:E9:11:FE:60:C8:8A:45:30:5E:3C:F3:4B:51:BE
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       05DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
Manifest number:          051F
Signing time:             Fri 17 May 2024 01:50:09 +0000
Manifest this update:     Fri 17 May 2024 01:50:08 +0000
Manifest next update:     Fri 24 May 2024 01:50:08 +0000
Files and hashes:         1: 7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl (hash: ex5ATbqLSdzkBHoLX9oFQ1Vsg2yGexkqGXqiAxZZTj4=)
                          2: 5E8F2C98FA5311EE9E6A8150C4F9AE02.roa (hash: t2XCM7i4OU1dJCWOWGHY/QG5Me6zRsq04MXpYCzedgY=)
                          3: 217830E8779A11EE903E3E53C4F9AE02.roa (hash: 1TqPRpBbx32/nqdo82VI3gFHZC2vNfrxqpkvnsy7GWw=)
                          4: 8FA95EF2E52811ED863E8C34C4F9AE02.roa (hash: omCiEcpTdoSSA8v2pVBPokGo6TjyH39dgP4oVNlCAI0=)
                          5: 4AB55242457711EEB5D5F024C4F9AE02.roa (hash: DcUUkBnvYeZTciyHbHXaKdtup+WnNKFK02zPSeL43MI=)
                          6: 2DF8B7F0E92A11EE8B025183C4F9AE02.roa (hash: IyR60yFdxsx1PoQvJow15o+Dw0cEIDxbeYXdCDFO7Dg=)
                          7: AAE6BD866D0411EE878EAE44C4F9AE02.roa (hash: GqmaNgYZDil2yUNBT/GDb6j3ArpwRkAKb5foUy6J7w8=)
                          8: 87CF4198A65111EEABE0B079C4F9AE02.roa (hash: ycsJoV1IVZjZK0jpYvT1gNJxv6HZ+ScCQGWtZUuRXRU=)
                          9: 3F3E4D0426F711EE81AD9A45C4F9AE02.roa (hash: d5dxqaixjHrn08sCLAD6mKlY9yowFCEcreFBLCEFcuA=)
                          10: E20B36B8D7BA11EEA17F0E83C4F9AE02.roa (hash: Bpg4FPqnEvREZgEtkm3NUTkjYMdTPfX+/zqwi+KvuqI=)
                          11: E1A7D0C26CE511EE91023B38C4F9AE02.roa (hash: 5OYurLVRkLL9qOmRsM4Z/dCY5aWpuhBOKBgLz24V6+w=)
                          12: 4F384016337211EE9B07310DC4F9AE02.roa (hash: YefqwZ8UWks/NrdmLnLNuD3khv8s+KmJ/7yQZl8tA1w=)
                          13: F97B22944D3711EEAEC1C322C4F9AE02.roa (hash: vB78bEOPh7/jpiCmjV8Osg3uufEWr36QnFW6GI0nU7o=)
                          14: CED6A59A032B11EFAC30281BC4F9AE02.roa (hash: 641I3YPZ2Yj12x78zgLfAH8qcmqEl7NSZmFWbiy964Q=)
                          15: 96407462457711EEBBEB9C25C4F9AE02.roa (hash: bQSJvZpWYjceWlLmb1ls132YBEYjCEKGShII78H1rfI=)
                          16: F3E5A660E69E11ED841AC682C4F9AE02.roa (hash: r2cF6CUXXIssXVNgjy8s5EtYMgj+u5C+YMxAfCyAwO4=)
                          17: 2FCAEB4AE15311EEBE7C925BC4F9AE02.roa (hash: oonbgnvfkVkeqibnsyxIomhk0eg6PxDF7gRSYo+9lcY=)
                          18: 8E6DB97451C111EE9E564B29C4F9AE02.roa (hash: 7uiDrDI6e9HdcPCBwu1X+X+p0e2kfwQ3uy+8bshYjw4=)
                          19: 89959B0E276111EE9F1CE340C4F9AE02.roa (hash: BMnGpwhdtRpA+hG3RaslqYT4B3WY3vZsr2zSarOjN/I=)
                          20: 7C622E7457C311EE9B8B5665C4F9AE02.roa (hash: GhwX7zj8/boNcSC7nY/DzkbY2jHA7Sth/tz/tZcpBmk=)
                          21: 5B4E0C704BEE11EEA17CCC80C4F9AE02.roa (hash: CAts85iHRffxCf3WM1qvE8a9yp+TBHN7D6l1WhxpAYY=)
                          22: CEC4C0B26D0511EE959F6246C4F9AE02.roa (hash: 6llaAL9PWQOYh84Il8OT8O+mJN+THHouJvv1ZtgfJTU=)
                          23: 919E2B20E52811ED863E8C34C4F9AE02.roa (hash: 7MNA9dPvkOQAxUzxfSAOm5WYyKnM85R6DhJr7ODfPcw=)
                          24: D88ED59C139611EEAA8C626DC4F9AE02.roa (hash: GcWuXBcrnsrhuwIeoq4MbNxTzzsh2SwLD4BEFQF55ig=)
                          25: 6904305CA65111EEAAF77C79C4F9AE02.roa (hash: paYLMpBP/EYGHzXeKsT+teOAlJis2899AoEl3K62h8s=)
                          26: 1ED6CE7E54BA11EEB6F36C44C4F9AE02.roa (hash: P7AQHf5fkniYnw8OqeDyf0zeVtEntSHSQEkBtcWdyrY=)
                          27: ED1F311669F211EE80D21411C4F9AE02.roa (hash: L0zh9rp19fog9hVTpD3NH0Fcco5PK8SNFoQnz8h9Ww8=)
                          28: 20FF74DEC9D211EE8AEDE469C4F9AE02.roa (hash: XZtPQxKYd8DXXaulofgnMFGGqgakgWgOEK3rOxXQ6Bk=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 01:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501 (0x5dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: May 17 01:50:08 2024 GMT
            Not After : May 24 01:50:08 2024 GMT
        Subject: CN=6646b7d1-39b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:88:09:5e:31:6f:c7:df:ca:11:86:cb:ec:
                    46:d6:7d:8e:de:89:e9:53:d1:30:2b:61:94:75:9c:
                    43:93:73:af:87:9a:00:4c:53:f9:fb:70:58:60:95:
                    39:d9:f0:d9:67:ee:f9:f2:92:88:75:10:30:a8:df:
                    4c:92:72:cc:99:7c:e8:69:11:9d:39:99:fe:b5:66:
                    b2:10:21:99:cd:1d:e9:b2:86:65:3e:4e:ac:76:43:
                    d7:34:d3:0a:ed:5e:bf:d3:1a:49:78:8b:4a:9a:10:
                    6f:5f:3a:90:39:f9:0e:03:53:80:d0:12:fa:43:f5:
                    d9:83:d3:66:15:85:2e:27:95:e3:f5:6d:15:80:bc:
                    9f:91:c2:33:4a:d8:d9:13:85:13:be:b8:c7:81:f3:
                    38:c5:b8:0b:38:31:8d:5d:bc:34:74:70:61:4e:0a:
                    1a:0f:85:38:9d:0c:7c:39:79:61:34:ae:01:8f:38:
                    bf:ea:dd:dc:b4:c0:24:36:6a:66:32:bc:81:82:05:
                    d2:c5:89:66:40:da:1a:09:42:aa:a4:0e:b1:8e:14:
                    10:0c:2a:a5:73:ca:9a:57:a6:9a:68:86:3f:4b:7e:
                    e1:55:21:66:05:0e:8e:10:69:de:c1:2a:f3:0c:c1:
                    3d:ed:e1:b0:4c:4c:62:c3:bf:4c:09:c4:ee:6b:dc:
                    67:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A3:22:88:53:52:E9:11:FE:60:C8:8A:45:30:5E:3C:F3:4B:51:BE
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a0:bb:d7:6a:0c:0f:e9:38:a2:a7:68:ce:e7:e8:f5:b3:67:
         dc:f2:d4:5a:f1:fb:3c:60:3b:99:d9:87:69:16:7f:26:3f:9e:
         b9:97:a2:04:09:6f:d9:dd:96:5c:51:a3:9b:11:ec:a1:e2:60:
         27:49:bb:9f:50:65:8b:3c:f9:23:11:3d:c7:e6:cf:66:56:80:
         01:e9:0e:36:44:06:65:36:0a:26:18:f3:82:2e:e1:23:04:4b:
         c7:9b:97:4d:ec:fe:ba:5c:89:72:44:5e:56:4f:5a:71:d9:f3:
         e7:59:66:25:97:80:ad:bd:87:2f:71:43:92:3e:74:2f:3f:7f:
         b2:2a:7f:5d:ba:1c:a6:21:89:08:b3:4a:07:56:7a:d0:8d:f0:
         89:cf:88:92:58:e3:eb:e5:2d:7d:2b:f5:88:58:98:0d:64:63:
         10:42:98:c7:94:10:91:d8:92:44:9f:4e:c0:63:86:2b:a8:29:
         84:7c:df:01:94:44:cd:fc:f6:61:0c:a4:4a:09:28:a8:4a:2e:
         a3:4b:a3:7d:cc:38:3a:41:c6:be:91:5b:fa:9f:cf:01:b4:b1:
         6e:16:5b:40:0b:39:88:11:20:8f:cd:ee:33:7c:d8:86:46:7b:
         52:a2:e7:c0:bf:38:c6:0c:3b:72:f4:5c:2e:76:e1:b3:83:e3:
         45:26:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 03:06:30 2024 by rpki-client on console-ams.rpki-client.org