Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
File:                     nmaObme60Kz5QKIoxLwJO4skACs.mft (raw, json)
Hash identifier:          098d8FM5fzSGwF4i0kIiDw8t5tna1Eg08qkDC8pBpR8=
Subject key identifier:   85:95:39:40:7E:4B:86:4D:D0:5F:47:A1:C0:46:19:30:9A:22:DB:DE
Authority key identifier: 9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B
Certificate issuer:       /CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
Certificate serial:       2375
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
Manifest number:          2162
Signing time:             Fri 31 May 2024 16:30:31 +0000
Manifest this update:     Fri 31 May 2024 16:30:31 +0000
Manifest next update:     Fri 07 Jun 2024 16:30:31 +0000
Files and hashes:         1: nmaObme60Kz5QKIoxLwJO4skACs.crl (hash: 2BNHYEJq7de7Da3omo7PjiC4KVj3IpECGryHg76XSug=)
                          2: CB7AF50802CC11E6AA35863CC4F9AE02.roa (hash: AwhJ+8V51xPFlN+glS+3Rv7PTbpgVWN6GcbKspFWBOw=)
                          3: 4795022EB68211EA8D895A86C4F9AE02.roa (hash: vmLYQJpv/A9FjL23wXLid9cmshE6bFrEa9+a+Eg3HBE=)
                          4: CE5005BACB0B11EE8EB5B16DC4F9AE02.roa (hash: fta58c4QRAgUsfQ9MyqIJvZ7VTPcdGZJqNPef5ecrOM=)
                          5: 30A6042602CE11E6B167303FC4F9AE02.roa (hash: fCQqJoMSm5SOEwYzlvc9hq96ibypSmW/9KlEUPIfb/A=)
                          6: 2F88F46802CE11E6B167303FC4F9AE02.roa (hash: xZB8ir+5zZ7vRH0rR8WOracJPzW4Z3o+MvmL2L9kTMM=)
                          7: 2AA1812202CE11E6B167303FC4F9AE02.roa (hash: pX1WbBSimrpx85Kja53+Q5D5Lhc9AsTqeOQnG3Wk2/I=)
                          8: CD70D3940A7811EEA489D07BC4F9AE02.roa (hash: t5djPk6hRxumnBronOWGPt0S6SKIdGkS8pdRzMS18Tg=)
                          9: C828314A02CC11E6AA35863CC4F9AE02.roa (hash: tW1mGEPFjClIsfAfbqb1Da66ImzUBQ8a0SdqYQq9Z0Y=)
                          10: 265C5E7002CE11E6B167303FC4F9AE02.roa (hash: 5ZTKU/lA1Bl6nAZo6yIBY0wLCFw4i7YLH/O5407SQQs=)
                          11: BA007060162D11EEB79F703CC4F9AE02.roa (hash: hbT64AC1b+dkt2+W5FJQBVgunjxhbDfkjwBTqo/aGMM=)
                          12: 14BC2D3ACCAA11EA9E95D81BC4F9AE02.roa (hash: 98329fqq1rcM5a5i1jzq2lGAM+aRICAqy7c3vDm1V6Q=)
                          13: 28DFC39E02CE11E6B167303FC4F9AE02.roa (hash: 2wj7HGloHuwFEIN9XlCMCtoGi8v8yH1h048cl4C1oHM=)
                          14: 28D70012A14F11EC8FF76A62C4F9AE02.roa (hash: SXN7oBmV+w4XnMVL3L0/Yz3gfhO1sBlz1yce/Wi7I28=)
                          15: 2C04F1F202CE11E6B167303FC4F9AE02.roa (hash: MfxKPxAgyn8jbtDhTbc2NEK86b1tcCvbqtAjJt+86D8=)
                          16: CCE4E99E02CC11E6AA35863CC4F9AE02.roa (hash: gx8aozWTQf7JXyVgMdC3qWs2Ff9FT4p7BC6NA0UOyBw=)
                          17: E88FA9C050EC11EDA7DA9346C4F9AE02.roa (hash: uDj0rkdBdc2pov0za1zSOygmNm2CNc6/rNBUPvmI76g=)
                          18: CE4049E0CF9811E9A72F1F65C4F9AE02.roa (hash: ftWoKCbQMbFLw3e25zegT0kdAlezO5zcgoC3qSBux44=)
                          19: E4301768335611EA9EBAA34DC4F9AE02.roa (hash: UVIr2avWKgXWoSnw2ZjOY5uRVTTPQmSxzANCaVCsw0w=)
                          20: DFBA3AD2555611E7A82D327CC4F9AE02.roa (hash: jxAuvtreGVrH771JiowGNlvA0zgyufdgnc3hbb1cfJg=)
                          21: C502DF4C02CC11E6AA35863CC4F9AE02.roa (hash: I/ZqavnPQqwXQS4QMjyqrmHixOWvmDes8otFIiH9Dn0=)
                          22: CFF0FFB002CC11E6AA35863CC4F9AE02.roa (hash: ukieKIspcpwrq+madwOJ98Ix0pz/ZDTSPE9HCfYDOQM=)
                          23: 5460143AD34011ECBC1DA40EC4F9AE02.roa (hash: Z6/WwkF0aynnib4wAUkI0hbNvXLueprKR6Er3RLbW5I=)
                          24: 0171E23E2E9411E9A7232A19C4F9AE02.roa (hash: 0TOzhwCxd2n/zP/KKAEV87CnWvRQyagaJAcEG0ZWtLk=)
                          25: C6C9159E02CC11E6AA35863CC4F9AE02.roa (hash: ymqjddLPBz7/hVBX1CO2Sctll8FRxaEqRn7Z+kFm7m0=)
                          26: 277CA19802CE11E6B167303FC4F9AE02.roa (hash: FpOa4JTezWmwQFiH7LCC9kqGq6T+Ag2FBW3iQl/SuS8=)
                          27: 5CF5BAF6037B11EF8DCDBD35C4F9AE02.roa (hash: xerseYpxlZtfNv/Sih0RsSXT7Ogcovyyvh//FvnVGJI=)
                          28: 671FF3862E9511E9896EFA1DC4F9AE02.roa (hash: oflNEo8OK0RgnoyjgICfudRjeQT56u2F/J6ArkU7zhw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl
                          rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 16:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9077 (0x2375)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146207/serialNumber=9E668E6E67BAD0ACF940A228C4BC093B8B24002B
        Validity
            Not Before: May 31 16:30:31 2024 GMT
            Not After : Jun  7 16:30:31 2024 GMT
        Subject: CN=6659fb27-4a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a9:ae:03:7a:f2:f5:5b:99:41:9f:0b:85:0b:
                    49:0f:a3:fb:e3:19:ca:d1:02:ce:48:96:55:22:0d:
                    d4:6b:12:50:b6:6f:a5:bf:f5:76:f4:93:43:1b:c0:
                    b7:01:35:cb:19:09:c5:97:2c:6d:58:34:6d:78:6e:
                    a2:9a:59:ca:bd:70:01:ad:72:12:11:a8:3a:5b:8d:
                    79:2b:67:17:4d:34:ec:9f:70:81:83:54:9e:32:b0:
                    36:33:4d:cf:9a:cb:bd:6c:10:5a:12:9c:a8:f3:96:
                    98:99:ee:61:4b:ef:28:d5:2b:5d:6c:2f:78:67:d6:
                    e8:15:37:0d:50:f2:07:88:ab:8f:b6:5f:69:e3:f0:
                    be:12:be:73:b7:b9:ee:82:0d:f9:96:61:fd:65:6c:
                    4f:49:6e:cf:28:75:38:0c:5a:80:8a:7d:a9:27:c4:
                    e0:76:28:71:37:e5:aa:21:a9:77:d5:be:70:ac:a5:
                    72:a3:20:4b:ab:55:f4:f7:4f:8c:9b:a4:66:43:ea:
                    56:c0:d0:89:54:5e:e1:04:92:75:c0:93:40:03:44:
                    26:ba:90:8a:6a:8f:8e:88:cc:01:1a:58:88:27:7a:
                    04:a5:d5:57:1f:95:1f:b1:a5:1a:c1:fa:23:61:5f:
                    db:f1:ff:a8:32:2c:55:11:1a:e4:f1:d0:22:86:bd:
                    21:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:95:39:40:7E:4B:86:4D:D0:5F:47:A1:C0:46:19:30:9A:22:DB:DE
            X509v3 Authority Key Identifier:
                keyid:9E:66:8E:6E:67:BA:D0:AC:F9:40:A2:28:C4:BC:09:3B:8B:24:00:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nmaObme60Kz5QKIoxLwJO4skACs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/FE75634002CB11E6865B8F3BC4F9AE02/nmaObme60Kz5QKIoxLwJO4skACs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:13:35:42:26:0c:fb:4c:6e:1b:1a:79:fb:e2:fc:1e:75:69:
         ba:ba:fe:07:ac:9c:f5:6a:06:e4:25:37:5c:a7:44:22:54:b1:
         65:bc:9f:62:b4:22:13:97:3a:43:e2:04:53:9a:ee:50:48:46:
         b2:c9:a5:e0:a3:0b:4b:3d:13:3b:2e:1b:bf:d3:27:ee:c3:17:
         7b:4f:79:50:ef:d8:dc:ae:c9:b5:58:4b:bd:db:45:96:9b:92:
         81:5e:55:ae:4d:d6:98:80:d4:fc:e5:85:8a:b0:09:4d:74:33:
         a1:4a:a5:b1:19:90:8c:fa:ca:84:1a:01:b0:a3:4f:27:1e:a9:
         ae:25:07:bd:43:8a:a7:67:51:6d:fe:3b:fd:16:43:49:1f:4c:
         3d:3d:11:d3:0c:49:83:50:6b:3b:52:1f:3b:0c:2d:07:a4:93:
         99:09:a5:08:02:d9:b3:e1:ff:99:16:48:4f:3f:24:92:98:df:
         a6:6f:53:4c:f8:df:1c:50:17:88:72:a2:df:01:f9:05:a2:1d:
         e3:83:cd:1e:73:bc:cc:08:3a:d5:73:1f:6d:57:ee:a6:31:18:
         65:cb:af:d3:c7:f1:70:f6:57:15:3e:b0:27:c2:ab:ac:8d:ae:
         b3:23:c3:1b:d4:35:d7:ee:3d:6d:f0:48:52:6a:54:33:6d:2b:
         a0:7e:45:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 17:44:23 2024 by rpki-client on console-fra.rpki-client.org