Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
File:                     dmhXuj98cotoBSWsQfp84qHwCS0.mft (raw, json)
Hash identifier:          Fpi9ZubKhigpzo3kPAzedZ2shufwWYPfoE/vU9N4xxE=
Subject key identifier:   D2:A4:95:16:AA:46:14:53:A3:CB:0F:2D:AC:FC:7E:88:87:FE:B4:40
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Certificate issuer:       /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial:       0104
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
Manifest number:          FA
Signing time:             Sat 23 Nov 2024 03:22:14 +0000
Manifest this update:     Sat 23 Nov 2024 03:22:13 +0000
Manifest next update:     Sat 30 Nov 2024 03:22:13 +0000
Files and hashes:         1: dmhXuj98cotoBSWsQfp84qHwCS0.crl (hash: dAj5KS5oL+wukp5SRmv0QNHStOJkIhJgZQO7op3hiU8=)
                          2: 5D313B1C31DA11EEBE28A546C4F9AE02.roa (hash: FoAylNmdesRHU3oexctbCd7CtqneWbl6QUSlHnFcNTI=)
                          3: 47854B9031DB11EEA02CF647C4F9AE02.roa (hash: ILe+omtD9enCtMD3zyN9u23MElv4YiFIQdXMJ2ToBto=)
                          4: 5C9259B631DA11EEBE28A546C4F9AE02.roa (hash: V/GHEmcZXIPqnvjusU9+mbGUzJT92uVcYMqnl8YTyFc=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
                          rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 260 (0x104)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
        Validity
            Not Before: Nov 23 03:22:13 2024 GMT
            Not After : Nov 30 03:22:13 2024 GMT
        Subject: CN=67414a65-d695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2b:bf:ff:e6:ac:eb:b8:ea:6c:0d:fb:7a:f5:
                    39:68:cd:a3:ee:0a:7a:db:f6:d3:3b:0b:97:b6:9c:
                    e1:46:cb:a1:f4:b0:f4:c9:57:ad:9f:bc:70:7f:7f:
                    d9:7b:a0:d8:bf:b1:91:70:ca:0b:d3:ef:b2:90:ec:
                    69:1e:3f:40:e5:f0:74:4f:69:0a:12:b1:5e:00:ce:
                    38:af:ce:a3:a5:6f:16:07:e0:95:2d:54:ac:85:34:
                    41:15:f1:2f:84:ea:4f:fe:74:87:04:10:b8:23:2d:
                    29:06:52:3e:3b:88:a0:2f:23:ba:fe:2f:5d:a1:29:
                    10:4d:35:f5:b7:28:23:b8:69:39:d1:79:ec:98:7c:
                    e5:3b:8c:0e:24:52:ac:b8:2b:6d:78:b0:8c:a0:6e:
                    2b:75:94:56:c6:bb:b0:b2:9b:10:ab:2a:05:bc:b4:
                    5a:28:0a:98:dd:e0:8f:4d:45:18:bc:de:45:b7:4e:
                    b5:e3:22:44:42:23:81:45:03:d8:0b:a1:8d:b1:76:
                    48:1d:85:9c:bd:d1:cd:a4:78:cd:93:0a:88:5d:c0:
                    46:ef:77:f1:80:a0:5a:50:f6:f9:55:40:e9:88:75:
                    e7:d4:f2:8f:f4:6b:00:5f:5b:de:e9:ca:1a:4a:eb:
                    06:71:d8:80:11:65:76:3a:ff:4a:27:2f:dd:48:f1:
                    61:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A4:95:16:AA:46:14:53:A3:CB:0F:2D:AC:FC:7E:88:87:FE:B4:40
            X509v3 Authority Key Identifier:
                keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e0:21:10:66:e4:64:fd:bf:ee:3d:cf:02:3b:87:3d:5b:3e:
         44:d8:ab:f3:b6:ba:da:71:bd:74:55:6b:9b:e7:e5:5e:a4:bc:
         b2:c1:23:69:36:20:80:9b:ef:38:43:75:3c:e1:ab:cb:41:ee:
         6a:ad:1b:c7:69:b3:13:e3:c4:98:73:66:51:9f:2d:fa:4b:77:
         ec:dd:0d:e4:40:a5:7f:1a:bb:47:41:a1:9b:c2:01:97:20:91:
         8b:b7:aa:9c:51:83:22:db:7a:e9:3a:a5:c4:64:c6:32:ae:ba:
         df:a2:ec:dc:68:9f:fd:f6:03:b5:c4:0a:50:0c:bf:e3:b0:fa:
         81:b8:cd:ca:4d:a7:24:8d:42:c5:dd:7d:da:61:e6:5f:be:a4:
         53:0b:d8:18:8e:3b:1c:22:7d:18:05:b9:35:51:79:ef:0c:71:
         c7:47:d9:54:ab:e7:d9:93:c5:4d:93:71:68:69:7f:9b:b2:38:
         35:89:fb:62:f8:b1:3a:ed:fa:af:88:8a:90:e7:1a:4b:51:ba:
         b7:92:48:97:97:7e:f5:b4:da:b4:4e:63:9d:96:31:bf:3f:6f:
         c7:6b:0e:0e:80:9d:b7:9a:33:84:30:86:a8:89:af:0f:1a:dd:
         81:3b:cb:37:f3:06:c6:2c:68:32:98:75:20:14:4b:e0:2e:4f:
         40:20:24:88
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhBQzAxMTAvBgNVBAUTKDc2Njg1N0JBM0Y3QzcyOEI2ODA1MjVBQzQxRkE3Q0Uy
QTFGMDA5MkQwHhcNMjQxMTIzMDMyMjEzWhcNMjQxMTMwMDMyMjEzWjAYMRYwFAYD
VQQDEw02NzQxNGE2NS1kNjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAySu//+as67jqbA37evU5aM2j7gp62/bTOwuXtpzhRsuh9LD0yVetn7xwf3/Z
e6DYv7GRcMoL0++ykOxpHj9A5fB0T2kKErFeAM44r86jpW8WB+CVLVSshTRBFfEv
hOpP/nSHBBC4Iy0pBlI+O4igLyO6/i9doSkQTTX1tygjuGk50XnsmHzlO4wOJFKs
uCtteLCMoG4rdZRWxruwspsQqyoFvLRaKAqY3eCPTUUYvN5Ft0614yJEQiOBRQPY
C6GNsXZIHYWcvdHNpHjNkwqIXcBG73fxgKBaUPb5VUDpiHXn1PKP9GsAX1ve6coa
SusGcdiAEWV2Ov9KJy/dSPFhSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKklRaq
RhRTo8sPLaz8foiH/rRAMB8GA1UdIwQYMBaAFHZoV7o/fHKLaAUlrEH6fOKh8Akt
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEFDMC9FNEVENTM5NDMx
RDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNvdG9CU1dzUWZwODRxSHdD
UzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RtaFh1ajk4Y290b0JTV3NRZnA4NHFId0NTMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OEFDMC9FNEVENTM5NDMxRDgxMUVFODMwMDZBNDFDNEY5QUUwMi9kbWhYdWo5OGNv
dG9CU1dzUWZwODRxSHdDUzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBn4CEQZuRk/b/uPc8CO4c9Wz5E2Kvztrracb10VWub5+VepLyywSNp
NiCAm+84Q3U84avLQe5qrRvHabMT48SYc2ZRny36S3fs3Q3kQKV/GrtHQaGbwgGX
IJGLt6qcUYMi23rpOqXEZMYyrrrfouzcaJ/99gO1xApQDL/jsPqBuM3KTackjULF
3X3aYeZfvqRTC9gYjjscIn0YBbk1UXnvDHHHR9lUq+fZk8VNk3FoaX+bsjg1ifti
+LE67fqviIqQ5xpLUbq3kkiXl371tNq0TmOdljG/P2/Haw4OgJ23mjOEMIaoia8P
Gt2BO8s38wbGLGgymHUgFEvgLk9AICSI
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:47 2024 by rpki-client on console-fra.rpki-client.org