Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
File:                     6zifszmzkI1UmmU5DJLhX533xUs.mft (raw, json)
Hash identifier:          XlGSsKNWT2eVzS/sxcwdhCD8MtRYJwsn6xC+oQ+c6gY=
Subject key identifier:   AE:6B:D4:63:78:04:EE:C5:47:6D:03:4C:B1:68:BA:E5:58:3F:DB:F8
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       359D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
Manifest number:          3501
Signing time:             Sun 26 May 2024 14:23:22 +0000
Manifest this update:     Sun 26 May 2024 14:23:21 +0000
Manifest next update:     Sun 02 Jun 2024 14:23:21 +0000
Files and hashes:         1: 6zifszmzkI1UmmU5DJLhX533xUs.crl (hash: Ud3MJI+VHsbla795bbN04V8NQ/aYZ00s6MuOMtnxN2g=)
                          2: AF84D20EF23F11EE9CC9C846C4F9AE02.roa (hash: 0xI5gL3jIxGMq2UvCaNN/Cl0K0waEpwysipvLE53HEE=)
                          3: 3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa (hash: e4xc2DLMq62834i4X3W5n1/G6cQqJsCi+PG239z+PgY=)
                          4: FAF6D732CD3811EDBD37B674C4F9AE02.roa (hash: 2lstfvkdbirtpx32Ne6yPfQ/bA8CgvJ4JDf+5oHKtEA=)
                          5: FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa (hash: we93FrU41ilQVifSpk7RSN4XUbpm8hOan1YZqsaKAsA=)
                          6: 2622AA12010511EE8C750D39C4F9AE02.roa (hash: ZafbXQw/KeLgwoRG3otAl32IvKF0VAStsoj9l5ag9jM=)
                          7: 9D8E6D02C2A511EBB2025B36C4F9AE02.roa (hash: z70dBdS9kIJlFC1osrUz56TwNaqNCALx0wTKkKuQOzQ=)
                          8: 26C39BB6010511EE8C750D39C4F9AE02.roa (hash: DjvQLdiIzOY0nVw9IlD1GUoeV8ePxWoZz2SsmCMWqkI=)
                          9: CAD5365E090C11EBA5412411C4F9AE02.roa (hash: TmPkOodhEZ/Y8YXZ7uegwsvEeL5kCpK7yN5l90nhBoc=)
                          10: 4D4EE370408A11EE91A09746C4F9AE02.roa (hash: oG8ziqcn9Cjkb6j0k+sUIA3c1OGGvxA3y4T+idtklOw=)
                          11: 4E211A5C408A11EE91A09746C4F9AE02.roa (hash: pINkYCUijqXlE4boPXt1yhqWjt6++U6+D9vH2mKXBNc=)
                          12: 3BCB61DA01D411EFB260D83DC4F9AE02.roa (hash: muW+yLLJUTnawR+FgDid9A3SKEIuIkmDMewXJcxTT8Q=)
                          13: 02414522C98A11EBAF4F9280C4F9AE02.roa (hash: FQZpx5gb+jZtMXBdIkYb+15Q0ogDwrJuLsoipey0EDQ=)
                          14: 75B648D801D411EFB2DE3D3EC4F9AE02.roa (hash: 1aPoLo+2OwxehEUkL1IGiPtZfAh5XCicv9eCtrdXdiA=)
                          15: CDCC902E170811EFB6DE866CC4F9AE02.roa (hash: mE9UKX5NiPtViOTyCzWiEduH4rBpuAZugWxsYar2Tko=)
                          16: 862D18003A1011EDB5225E73C4F9AE02.roa (hash: bKNpA+6RQ0GT2A+sq3T0s0Oiepx9w2ya8TScMPEFe9I=)
                          17: D34236BE7D0511EEB381D02CC4F9AE02.roa (hash: NZHysE8nVCbq7fbvHXB0K2e7+2zAZI6Mnwfdz06Ko40=)
                          18: 46186F4EC6E711EDA2FCBA34C4F9AE02.roa (hash: FjtuCaE+m8d6Jz7C5JWJgYPZl4/UQZZvDNJFxwt0oyY=)
                          19: A59A5B6641F611ECB1465157C4F9AE02.roa (hash: MTbReXx3jRGZ4W965+WGXV3vut0negAVm5usDafmUUo=)
                          20: 0BD5724C3A3211EDA1B7D863C4F9AE02.roa (hash: Afzfu7RMonv5lZts2gX3BGISubiNL2unW/sXbDGedTs=)
                          21: BF6649687AC811EDAE44E656C4F9AE02.roa (hash: dByQ8g0jFG1D2M/qi7F7t4/rrCn3xAzdE2/PRavCCQ8=)
                          22: 83F06CF2DF1211EDB91D5C61C4F9AE02.roa (hash: XGFULdG/oDt3pkxbthyADyYskJpcdg8ccGyTK9Ua2Ac=)
                          23: 76FA132A8B0511EC993E2B20C4F9AE02.roa (hash: Qbs6NE0IQDt/w5FmgTv8sF019vojieajZ5lVwx08UnA=)
                          24: 000724C6F7D511EE8C03CA65C4F9AE02.roa (hash: qRm7sLi+ft5KW8Py8mk5/RGIGmgNqW682TRZrJCWKEU=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 02 Jun 2024 14:23:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13725 (0x359d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: May 26 14:23:21 2024 GMT
            Not After : Jun  2 14:23:21 2024 GMT
        Subject: CN=665345d9-117b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:48:e9:05:6d:3d:c1:6c:a4:6f:b0:89:d3:
                    cc:1e:a1:d4:3c:7d:39:e8:33:02:79:db:9d:21:85:
                    ed:fa:59:50:4e:a9:ef:6c:6c:4d:1e:21:a9:23:54:
                    12:71:09:29:9e:c4:e5:27:94:32:5f:ce:9a:78:df:
                    80:a8:c9:74:2f:5a:f8:39:e6:9e:b5:dc:33:cb:ed:
                    99:d2:a6:aa:85:70:96:2e:53:b3:b6:f6:83:d9:dd:
                    b3:ea:1f:74:f2:ee:58:1a:11:0a:db:b7:74:71:16:
                    e8:4c:83:5f:23:ac:7a:4c:04:8e:2b:19:24:eb:ea:
                    86:fa:bd:a4:71:a9:b6:51:2a:04:d7:6b:2b:63:2e:
                    9f:c3:73:62:65:35:c4:56:7d:23:9d:25:95:19:92:
                    9d:09:65:dc:69:13:d3:6b:79:30:b3:65:ef:dc:8e:
                    10:30:3b:40:bc:ea:fd:56:6e:5c:4b:6e:79:d5:c6:
                    61:d6:3e:e7:2e:ee:54:67:39:9e:48:b3:b4:33:d4:
                    7f:33:1a:ad:68:2f:cf:80:7a:70:ba:8b:a1:7d:60:
                    7a:02:de:c0:29:66:ee:1b:f3:ae:18:5e:7c:e1:ac:
                    1f:e8:f3:86:39:d7:f7:11:4a:e4:30:11:96:7e:fb:
                    a7:21:48:48:e6:1b:6b:db:26:06:16:64:88:7b:d9:
                    e3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:6B:D4:63:78:04:EE:C5:47:6D:03:4C:B1:68:BA:E5:58:3F:DB:F8
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:66:13:74:61:04:b5:df:06:cf:7c:99:36:3d:12:7f:ca:4e:
         4a:90:d2:fd:4b:91:c1:a0:d1:69:90:a7:76:cd:c9:8b:fe:40:
         84:74:11:89:c7:e8:4a:5d:16:66:45:6b:b9:1f:d3:d0:96:d8:
         d4:58:bf:d7:2e:1b:e6:bf:53:a0:75:27:51:a5:25:c4:01:cb:
         44:ed:89:0b:fe:ac:45:f0:2b:7f:3e:f9:0b:18:a8:35:8a:1b:
         ed:ae:d1:97:0a:7c:4e:9a:d2:ea:1c:94:49:57:91:f9:87:2f:
         da:e5:f1:a3:f2:26:5c:ff:89:83:32:a8:b5:48:e0:e1:80:0d:
         86:9d:c0:4e:84:9f:be:e2:99:b5:ad:fd:91:bb:e0:5f:62:a6:
         f5:51:7f:60:b8:04:2b:28:01:7d:b4:9f:38:a0:4f:83:b3:60:
         ad:0c:bb:32:5b:d9:b1:29:05:4f:b6:fe:ea:17:5a:9c:b9:c2:
         3f:61:a0:35:9a:8d:16:7c:58:df:6b:93:e4:76:4b:31:81:13:
         94:c7:9d:05:f9:0f:ee:a6:cd:0b:1e:fc:fa:c8:72:13:0e:ca:
         0b:a3:1a:bb:dc:5d:83:31:44:b1:15:4d:72:41:69:28:f4:51:
         04:94:f5:fe:e7:a9:03:3c:4b:64:57:f7:4a:cb:0a:6e:3b:fa:
         ac:a2:f6:a0
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICNZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDlGM0UxMTAvBgNVBAUTKEVCMzg5RkIzMzlCMzkwOEQ1NDlBNjUzOTBDOTJFMTVG
OURGN0M1NEIwHhcNMjQwNTI2MTQyMzIxWhcNMjQwNjAyMTQyMzIxWjAYMRYwFAYD
VQQDEw02NjUzNDVkOS0xMTdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm21I6QVtPcFspG+widPMHqHUPH056DMCedudIYXt+llQTqnvbGxNHiGpI1QS
cQkpnsTlJ5QyX86aeN+AqMl0L1r4Oeaetdwzy+2Z0qaqhXCWLlOztvaD2d2z6h90
8u5YGhEK27d0cRboTINfI6x6TASOKxkk6+qG+r2kcam2USoE12srYy6fw3NiZTXE
Vn0jnSWVGZKdCWXcaRPTa3kws2Xv3I4QMDtAvOr9Vm5cS2551cZh1j7nLu5UZzme
SLO0M9R/MxqtaC/PgHpwuouhfWB6At7AKWbuG/OuGF584awf6POGOdf3EUrkMBGW
fvunIUhI5htr2yYGFmSIe9nj6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK5r1GN4
BO7FR20DTLFouuVYP9v4MB8GA1UdIwQYMBaAFOs4n7M5s5CNVJplOQyS4V+d98VL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUYzRS9BQzUyQjc0ODFE
ODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJMVVtbVU1REpMaFg1MzN4
VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzZ6aWZzem16a0kxVW1tVTVESkxoWDUzM3hVcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
OUYzRS9BQzUyQjc0ODFEODIxMUUyQkM2NDE3RDcwOEIwMkNEMi82emlmc3ptemtJ
MVVtbVU1REpMaFg1MzN4VXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBiZhN0YQS13wbPfJk2PRJ/yk5KkNL9S5HBoNFpkKd2zcmL/kCEdBGJ
x+hKXRZmRWu5H9PQltjUWL/XLhvmv1OgdSdRpSXEActE7YkL/qxF8Ct/PvkLGKg1
ihvtrtGXCnxOmtLqHJRJV5H5hy/a5fGj8iZc/4mDMqi1SODhgA2GncBOhJ++4pm1
rf2Ru+BfYqb1UX9guAQrKAF9tJ84oE+Ds2CtDLsyW9mxKQVPtv7qF1qcucI/YaA1
mo0WfFjfa5PkdksxgROUx50F+Q/ups0LHvz6yHITDsoLoxq73F2DMUSxFU1yQWko
9FEElPX+56kDPEtkV/dKywpuO/qsovag
-----END CERTIFICATE-----
Generated at Sun May 26 19:10:28 2024 by rpki-client on console-ams.rpki-client.org