Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
File:                     fX8vgARwzrGTx-t4mDlZW3YnR08.mft (raw, json)
Hash identifier:          sDPpGsPgXiDMODiEhW2Z8+wFDq+g25v7OpIYk2JEVQ4=
Subject key identifier:   80:80:DF:87:15:FD:2D:36:50:0A:67:9C:E1:8A:8C:F3:D0:0C:5A:89
Authority key identifier: 7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F
Certificate issuer:       /CN=A914F700/serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F
Certificate serial:       0396
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
Manifest number:          0392
Signing time:             Sat 23 Nov 2024 00:20:52 +0000
Manifest this update:     Sat 23 Nov 2024 00:20:51 +0000
Manifest next update:     Sat 30 Nov 2024 00:20:51 +0000
Files and hashes:         1: fX8vgARwzrGTx-t4mDlZW3YnR08.crl (hash: pQeWTtnLq2H8hSYxeVBr44VgAPxnQ0UWQq9FvuaRhTQ=)
                          2: 6D7B126C798111ECBBDBD359C4F9AE02.roa (hash: t8XuoQmVWFDhGIw5z4xI5py7yU/yXUz4bzdYNO89YHw=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl
                          rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918 (0x396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F700/serialNumber=7D7F2F800470CEB193C7EB789839595B7627474F
        Validity
            Not Before: Nov 23 00:20:51 2024 GMT
            Not After : Nov 30 00:20:51 2024 GMT
        Subject: CN=67411fe4-4229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e1:48:b7:ed:82:6d:a2:59:c8:8c:d7:53:88:
                    75:11:4b:cd:07:83:2b:5e:65:19:cf:76:31:d1:dd:
                    f4:ed:c2:ab:de:ba:eb:7e:13:bc:50:86:aa:2b:17:
                    55:1f:42:71:27:29:0f:61:c7:8e:5a:60:83:db:75:
                    21:90:a6:68:75:ac:52:7a:f1:34:9c:04:2f:fc:c2:
                    aa:f9:bc:22:f3:f7:3b:b1:c9:72:2b:58:5e:35:39:
                    69:9c:dc:83:07:a4:fe:c6:e2:57:d4:b3:2e:68:16:
                    a4:b5:51:52:4d:d3:73:d8:1d:22:53:ab:4f:6c:bd:
                    bb:35:58:f6:14:29:30:11:19:78:09:b1:a0:60:a5:
                    55:c7:d3:c0:fb:ff:87:cd:61:85:ad:a3:c1:83:e1:
                    f7:8d:8d:34:a6:6a:01:8d:50:19:1d:27:08:b8:d2:
                    31:56:24:e9:dc:08:26:f0:82:1e:9c:9b:39:63:94:
                    3d:3f:a1:30:e2:93:3c:2a:02:e7:33:0d:32:c8:d4:
                    a4:71:01:14:13:7c:17:47:2e:3a:c1:86:98:1a:75:
                    b7:71:6b:5d:4f:5b:e6:1e:93:fe:e8:3c:68:67:d9:
                    da:01:4d:f2:e9:3c:45:68:ff:fd:ff:16:3e:83:9d:
                    e6:51:10:d0:8e:c6:e9:49:00:a8:3d:9b:62:bc:e9:
                    de:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:80:DF:87:15:FD:2D:36:50:0A:67:9C:E1:8A:8C:F3:D0:0C:5A:89
            X509v3 Authority Key Identifier:
                keyid:7D:7F:2F:80:04:70:CE:B1:93:C7:EB:78:98:39:59:5B:76:27:47:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fX8vgARwzrGTx-t4mDlZW3YnR08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F700/D4C5DB12797E11EC8CD78257C4F9AE02/fX8vgARwzrGTx-t4mDlZW3YnR08.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:db:ab:03:6e:78:a0:96:d9:a7:24:9f:25:52:d6:6b:7f:42:
         7c:7a:68:dc:9a:0c:e6:54:33:ed:84:aa:6c:fa:b6:42:5c:77:
         6b:84:12:1c:c1:a3:bb:8b:01:22:3d:6a:d4:b2:d4:88:1f:5c:
         a5:ac:10:4e:b6:a8:37:8c:6e:df:57:97:19:9b:f3:ce:5a:1d:
         e4:5d:d7:0b:70:1e:ce:ff:04:18:35:0b:3a:71:53:e3:c6:8e:
         ee:cb:dc:d5:cf:06:97:35:6b:15:bb:34:7e:79:7e:65:9b:13:
         aa:20:a0:b9:23:a0:e0:1b:72:10:37:ad:a0:de:cd:94:49:16:
         a1:1e:01:3f:86:76:6d:f2:84:a1:c1:64:2c:21:05:bc:07:74:
         14:2e:53:46:d2:45:f7:8a:76:3b:e9:01:95:23:0d:82:5e:e3:
         b5:dc:32:eb:2d:7c:65:05:8b:ac:e5:db:c6:72:3f:1c:0c:24:
         e3:94:f1:78:49:64:67:1d:1a:1e:fd:cb:fe:e5:ea:77:95:59:
         77:2f:29:28:d3:95:a6:66:6d:45:3b:b7:d5:3c:22:68:0f:c2:
         7a:bf:fb:e4:18:07:0c:72:42:c9:bf:d2:c5:34:a0:1b:88:60:
         9c:e2:40:4b:04:00:6a:2e:8d:c6:91:b3:f8:33:7a:2b:99:4a:
         dc:1b:5b:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEY3MDAxMTAvBgNVBAUTKDdEN0YyRjgwMDQ3MENFQjE5M0M3RUI3ODk4Mzk1OTVC
NzYyNzQ3NEYwHhcNMjQxMTIzMDAyMDUxWhcNMjQxMTMwMDAyMDUxWjAYMRYwFAYD
VQQDEw02NzQxMWZlNC00MjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsuFIt+2CbaJZyIzXU4h1EUvNB4MrXmUZz3Yx0d307cKr3rrrfhO8UIaqKxdV
H0JxJykPYceOWmCD23UhkKZodaxSevE0nAQv/MKq+bwi8/c7sclyK1heNTlpnNyD
B6T+xuJX1LMuaBaktVFSTdNz2B0iU6tPbL27NVj2FCkwERl4CbGgYKVVx9PA+/+H
zWGFraPBg+H3jY00pmoBjVAZHScIuNIxViTp3Agm8IIenJs5Y5Q9P6Ew4pM8KgLn
Mw0yyNSkcQEUE3wXRy46wYaYGnW3cWtdT1vmHpP+6DxoZ9naAU3y6TxFaP/9/xY+
g53mURDQjsbpSQCoPZtivOneoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFICA34cV
/S02UApnnOGKjPPQDFqJMB8GA1UdIwQYMBaAFH1/L4AEcM6xk8freJg5WVt2J0dP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RjcwMC9ENEM1REIxMjc5
N0UxMUVDOENENzgyNTdDNEY5QUUwMi9mWDh2Z0FSd3pyR1R4LXQ0bURsWlczWW5S
MDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZYOHZnQVJ3enJHVHgtdDRtRGxaVzNZblIwOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
RjcwMC9ENEM1REIxMjc5N0UxMUVDOENENzgyNTdDNEY5QUUwMi9mWDh2Z0FSd3py
R1R4LXQ0bURsWlczWW5SMDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQC026sDbnigltmnJJ8lUtZrf0J8emjcmgzmVDPthKps+rZCXHdrhBIc
waO7iwEiPWrUstSIH1ylrBBOtqg3jG7fV5cZm/POWh3kXdcLcB7O/wQYNQs6cVPj
xo7uy9zVzwaXNWsVuzR+eX5lmxOqIKC5I6DgG3IQN62g3s2USRahHgE/hnZt8oSh
wWQsIQW8B3QULlNG0kX3inY76QGVIw2CXuO13DLrLXxlBYus5dvGcj8cDCTjlPF4
SWRnHRoe/cv+5ep3lVl3Lyko05WmZm1FO7fVPCJoD8J6v/vkGAcMckLJv9LFNKAb
iGCc4kBLBABqLo3GkbP4M3ormUrcG1vo
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:36 2024 by rpki-client on console-fra.rpki-client.org