Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
File:                     6zifszmzkI1UmmU5DJLhX533xUs.mft (raw, json)
Hash identifier:          QbRAG6WA00e8S+uU/zw6Hr40pH4h9lo9wDDwGSkqgNQ=
Subject key identifier:   4C:B3:18:2B:BC:73:CD:BC:56:94:A3:8E:C4:36:96:06:00:68:9A:1D
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       369C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
Manifest number:          359D
Signing time:             Wed 20 Nov 2024 14:21:50 +0000
Manifest this update:     Wed 20 Nov 2024 14:21:49 +0000
Manifest next update:     Wed 27 Nov 2024 14:21:49 +0000
Files and hashes:         1: 6zifszmzkI1UmmU5DJLhX533xUs.crl (hash: V7h9Mj1brCPf3ghXZ2VP7HRZeCT7kAjwHzbFbef3wLE=)
                          2: 3DAAE73A1A2D11EEBC20C11FC4F9AE02.roa (hash: UvtmvVRc2Z0q+CfMe7UUrx6gOQJL+ahTUjM/dtEauJg=)
                          3: B6D40A18822F11EFA848053BC4F9AE02.roa (hash: qTT7XzpkLtDQdKGn2G66fy/McFFpsOFRvnIb+qAvaRw=)
                          4: FAF6D732CD3811EDBD37B674C4F9AE02.roa (hash: 55hbp1lHPqWHR3myIKlQM0s8jhZDD5OMMu+AbqKM2eA=)
                          5: 52850542A60811EF91FB1113C4F9AE02.roa (hash: kowmpjbS8K8YRAisMY96jcR4JecyVpMM9JfAm+PJPWk=)
                          6: FB4F0F9EF90011EDAEA1FC13C4F9AE02.roa (hash: zSVDYqkWgkMa+aLsCRgndkcVWEmWW6zKnoCgA3mt+Jw=)
                          7: 8470E428A2E711EFA6A5B91AC4F9AE02.roa (hash: Qzh8TQ2GRv1hV5Z2tOdP3Q91J/hGe65NAQC6LGoZleg=)
                          8: 2C7A8F5C8CE511EF96182462C4F9AE02.roa (hash: r8mRla4ImwWo0lgNeUmnO3kOlV4nEe25jvh9hbpe+Fk=)
                          9: 4F698B525F5011EFA66ADA2CC4F9AE02.roa (hash: 8GbrS0gq/4FKKxyxJysMwR58UCfWTju+CTTJl3NXjn0=)
                          10: 6D84D2D05DE911EF84282B80C4F9AE02.roa (hash: KsCi1gL5ON0tQo5f7o3JyChb4Z5sQOoFZgnSirCcEPY=)
                          11: FEDF0BA43E5111EF86CB780AC4F9AE02.roa (hash: PWMfy2tZO4LynO8829Wa3U1BjwaomWWdkKuhbM2n6Oo=)
                          12: 27E277D891AA11EF9DBFF265C4F9AE02.roa (hash: wM/PYE311nfiNvAglY7ipodnf85Ls8RUKyhtAudMyfk=)
                          13: 2622AA12010511EE8C750D39C4F9AE02.roa (hash: mf2Qk+w1NRlp24Ok2PsGfSzQRhYbIagpibh1QaUmo/0=)
                          14: 9D8E6D02C2A511EBB2025B36C4F9AE02.roa (hash: cx0K0bJRQz5Nmb2d76mnGIN2Xr+QPD7Bio7ZlcQXgU0=)
                          15: 26C39BB6010511EE8C750D39C4F9AE02.roa (hash: PrIFv9vXjUSJQadCTa4FhOnCYA1U2rLRvK5pclzfjFs=)
                          16: CAD5365E090C11EBA5412411C4F9AE02.roa (hash: 1/UnllgrY9TLTTDeiVVZgSkXNLQXVP9JfAc/UDXvF4Q=)
                          17: 4D4EE370408A11EE91A09746C4F9AE02.roa (hash: a0UD+/qG4UMDv/2WmEJk9pk9QhXhkwYYYzMZ4c/XI1s=)
                          18: 3BCB61DA01D411EFB260D83DC4F9AE02.roa (hash: ntg1Sa5uJDmNLEQGDT84VTtiG25Hye7r/1zWkL8hIks=)
                          19: 4E211A5C408A11EE91A09746C4F9AE02.roa (hash: kxKdU/JmPTZM9krhUbKPrtFUj5nm0D45xWRYs28QjJs=)
                          20: 02414522C98A11EBAF4F9280C4F9AE02.roa (hash: z8UqZ1TUZs5SLFZVPrNthZ359PD6ZBuIMRCgzq/pldM=)
                          21: 862D18003A1011EDB5225E73C4F9AE02.roa (hash: v4HK4sfgYsSfASOHkvKK7CKePuHBgJRykt1ECioRpqY=)
                          22: CDCC902E170811EFB6DE866CC4F9AE02.roa (hash: Qr52xk5Cmr7B9ojqij9Sa1V9McPqDHOMkRtq3w6aXoE=)
                          23: D34236BE7D0511EEB381D02CC4F9AE02.roa (hash: MXoyWFgv72XpKm4iYapo+Jr79E2SzPPDsg5QxMhWUpU=)
                          24: 46186F4EC6E711EDA2FCBA34C4F9AE02.roa (hash: XzgXWY7//UVaNEuQIopWxPc37VBbWxsWdMNjr7wRlfY=)
                          25: A59A5B6641F611ECB1465157C4F9AE02.roa (hash: s/2XE3OKwLRXbsetwS9Ty1/cmYjDSHV9UY8kueVDyls=)
                          26: 5B7026601E4E11EFB78F797EC4F9AE02.roa (hash: WClEiucs5BiIQI6sFOvNSCglsXZtV1kMtll1iGeYhjk=)
                          27: 0BD5724C3A3211EDA1B7D863C4F9AE02.roa (hash: UguBw1sfiBAtlSn78NzpSBwxKrJvm/pM/IYVtzEhGVk=)
                          28: BF6649687AC811EDAE44E656C4F9AE02.roa (hash: uz8YE3l0+kEpuATJJmDK6S+3VDMiAYafPM++93yW36M=)
                          29: 76FA132A8B0511EC993E2B20C4F9AE02.roa (hash: oXtJ7h6IXN/s5X0HBvpSdD6OMPpNlMkXnfhubhmUTqA=)
                          30: 83F06CF2DF1211EDB91D5C61C4F9AE02.roa (hash: 8EbAPbXfSh68G52OBPln229w9SwdjrHKzeWsW0yhIOI=)
                          31: 000724C6F7D511EE8C03CA65C4F9AE02.roa (hash: 1z8tUQ/CHsf4H426+WAtbF/ySyewhGPCiiHEe/tPLy0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 Nov 2024 14:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13980 (0x369c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Nov 20 14:21:49 2024 GMT
            Not After : Nov 27 14:21:49 2024 GMT
        Subject: CN=673df07e-a299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:fd:c2:bb:c1:f3:63:f7:f3:cf:3f:5d:03:
                    1b:14:0d:90:9e:cd:73:9d:49:31:af:a0:35:0a:27:
                    84:16:65:ef:b5:ab:0a:73:fb:7e:e0:92:14:1f:f4:
                    66:ff:28:e7:b5:53:48:53:30:07:43:1c:e3:6f:b4:
                    93:ba:9b:26:78:c2:2b:dd:ca:73:5f:46:92:15:e0:
                    83:56:1d:7c:b3:2d:05:66:c7:72:65:38:88:73:09:
                    e9:b2:41:b3:ef:a9:b5:2a:5b:13:2f:4a:db:b2:53:
                    f1:39:8a:18:bb:6a:2f:af:44:09:89:f5:0a:81:97:
                    bb:f1:c5:ff:e0:80:ed:10:a5:c7:c7:82:34:0f:70:
                    21:54:52:fd:96:c3:94:a4:e5:bf:59:7d:c6:28:4f:
                    4b:03:a6:f7:5b:e9:a8:d1:eb:55:ad:73:72:74:8e:
                    14:2b:c8:d0:30:91:0e:4b:bf:5f:aa:09:15:c6:18:
                    97:06:9d:bb:d9:8c:5f:eb:d7:36:e5:b1:44:31:e6:
                    7b:42:56:dd:1f:4c:67:d8:14:04:3d:f5:cb:0a:5a:
                    33:f1:3f:74:03:30:b2:7b:be:c0:fd:58:99:85:5c:
                    e1:24:ca:41:b4:22:de:f8:11:de:d9:54:b5:f9:48:
                    69:85:9d:18:c5:52:bf:78:8b:1a:7b:3a:39:f1:df:
                    6d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B3:18:2B:BC:73:CD:BC:56:94:A3:8E:C4:36:96:06:00:68:9A:1D
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:64:a3:0e:e6:22:4c:01:aa:e8:01:d6:0c:58:12:7e:56:71:
         10:08:3b:61:7e:a3:54:96:10:7a:e6:9a:89:a7:9f:4c:7b:0c:
         35:52:49:17:a3:e4:40:d6:00:dd:7a:10:83:a4:30:b3:61:40:
         aa:fb:77:67:ef:14:3f:cf:79:36:6b:ab:54:91:d1:20:2c:f4:
         4c:31:7a:08:0c:39:7d:aa:88:42:d7:a6:08:92:4b:59:8f:1d:
         ef:54:44:3a:ea:0c:52:18:29:9d:96:e5:a6:fe:bf:30:1f:e2:
         31:66:3d:11:11:5a:f3:d9:a0:6d:62:d5:7a:c5:90:68:03:7f:
         18:c2:8f:46:60:a1:c3:ff:81:f8:d6:c5:34:ca:ba:28:43:ab:
         bb:f9:3b:17:67:99:d6:c0:47:92:3a:72:9c:24:bb:7a:55:ea:
         4e:ac:96:b7:df:78:f1:92:35:2b:eb:b4:0e:c8:30:54:0c:26:
         56:da:5e:45:46:81:91:f2:e6:82:dc:7e:2a:0e:8c:84:0a:18:
         46:a1:ea:fd:9f:b0:40:f5:8c:28:b8:f2:23:87:c9:ea:2c:13:
         bf:ee:c6:78:4f:bc:0a:45:5e:b1:d8:83:85:e0:5f:f6:04:6f:
         ff:cd:b6:1d:76:d1:35:13:fb:15:7c:d2:be:b3:a5:30:e5:6a:
         32:99:b3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 16:11:25 2024 by rpki-client on console-fra.rpki-client.org