Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
File:                     FfB_78oF6EbUU4USXou0J3WDAPk.mft (raw, json)
Hash identifier:          o6TXCSZ+xuFJ7E2+upkIqyFqFwq+LAFmXtnIilsyiUU=
Subject key identifier:   2A:8B:23:57:C0:FA:02:40:9B:3E:74:6A:34:DC:71:24:27:10:A8:E8
Authority key identifier: 15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9
Certificate issuer:       /CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
Certificate serial:       0AF2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
Manifest number:          0AED
Signing time:             Sat 18 May 2024 19:59:48 +0000
Manifest this update:     Sat 18 May 2024 19:59:47 +0000
Manifest next update:     Sat 25 May 2024 19:59:47 +0000
Files and hashes:         1: FfB_78oF6EbUU4USXou0J3WDAPk.crl (hash: 9PshEIhbZMusjmZc28hRPANY3GkI1lMbo8LQnw5YUxo=)
                          2: FC90C520213411EA8D675645C4F9AE02.roa (hash: 9NvzWfuX4Bm6lLKBNi345zQjC/sUvzkDcjV2c+Vt2QE=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl
                          rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 19:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2802 (0xaf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91503BB/serialNumber=15F07FEFCA05E846D45385125E8BB427758300F9
        Validity
            Not Before: May 18 19:59:47 2024 GMT
            Not After : May 25 19:59:47 2024 GMT
        Subject: CN=664908b4-b3bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0c:d6:86:af:ee:99:a7:58:ce:65:3e:02:8f:
                    76:1f:1b:95:94:f5:47:55:86:b2:4d:48:04:b6:c9:
                    b8:89:7a:e0:a3:f6:fb:54:bc:ba:06:fc:85:b6:98:
                    73:64:a9:a8:86:e0:6a:48:64:cf:87:fc:70:8e:35:
                    58:dc:b5:60:24:1c:da:4a:a0:a9:35:7d:4f:29:a3:
                    2b:62:c0:77:85:f8:1f:88:89:b4:68:b8:95:40:a1:
                    d4:f4:e9:11:bd:37:3b:ad:fa:db:56:9f:e4:11:b4:
                    99:2b:56:47:05:17:a0:54:ac:c5:f6:19:e2:d2:64:
                    f5:31:75:d6:fa:59:aa:1d:2e:3f:e2:4a:1b:1b:b6:
                    0a:05:74:9c:0e:81:69:79:b5:5b:3c:52:53:bc:06:
                    11:c8:50:3b:ad:10:84:f5:cb:b0:ec:1b:81:72:0a:
                    d3:ac:60:31:ce:25:62:e1:69:ed:f9:3f:9f:8f:67:
                    76:99:2b:3a:18:94:cf:f4:77:97:92:54:d8:ce:8b:
                    22:55:2e:dc:cc:c0:b9:16:f7:09:db:d6:62:fb:f3:
                    7a:f6:72:07:1b:6e:4f:21:84:1a:03:df:48:3a:d8:
                    40:ff:b7:fb:82:f9:59:e1:d0:bd:b3:5d:82:a9:33:
                    cf:35:8b:a2:79:d6:be:38:c6:27:13:86:8b:47:84:
                    56:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8B:23:57:C0:FA:02:40:9B:3E:74:6A:34:DC:71:24:27:10:A8:E8
            X509v3 Authority Key Identifier:
                keyid:15:F0:7F:EF:CA:05:E8:46:D4:53:85:12:5E:8B:B4:27:75:83:00:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FfB_78oF6EbUU4USXou0J3WDAPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91503BB/4725FC78212F11EA830E0A35C4F9AE02/FfB_78oF6EbUU4USXou0J3WDAPk.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:b8:c6:1a:4b:a5:15:1c:fa:6e:78:49:85:46:0d:c7:c2:e5:
         52:0b:3a:45:f9:4d:03:45:e0:71:c6:6f:78:60:a4:6a:6a:1e:
         cf:94:bc:7f:bb:5b:e1:ca:55:4a:3d:3f:ba:de:ab:86:01:49:
         42:65:01:1d:88:9c:d1:91:6e:79:1d:e0:88:d6:80:f0:46:0d:
         a8:c1:70:fd:a4:a0:45:e2:99:ff:d9:ec:fb:08:f4:d2:c2:4f:
         06:0a:4e:47:f2:93:25:cd:73:ca:b7:94:4f:cc:cc:dc:d2:5f:
         bc:e1:63:a2:be:ef:6c:51:bc:4e:94:73:b9:79:86:10:96:f7:
         a0:cc:5e:3c:2d:20:29:ab:a1:15:f9:63:20:0a:ec:55:53:0d:
         52:67:db:4c:53:a5:ea:da:5a:1d:2b:b2:55:1e:18:fb:80:28:
         d9:b8:05:67:b1:17:c6:31:bd:42:13:e3:db:2b:49:4a:39:56:
         e4:a1:4e:34:a8:f8:b0:b7:4c:4d:ba:cb:57:20:0f:c6:04:07:
         c7:71:e3:07:c7:47:7b:ed:a4:4c:ce:9e:3a:19:9e:37:3a:a9:
         08:c9:59:03:11:a3:16:95:3c:c1:db:aa:a7:41:94:18:56:42:
         89:15:7a:03:ae:f9:cd:f9:dd:46:83:9f:2e:48:f3:cf:2c:7f:
         c8:ae:d7:8b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICCvIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTAzQkIxMTAvBgNVBAUTKDE1RjA3RkVGQ0EwNUU4NDZENDUzODUxMjVFOEJCNDI3
NzU4MzAwRjkwHhcNMjQwNTE4MTk1OTQ3WhcNMjQwNTI1MTk1OTQ3WjAYMRYwFAYD
VQQDEw02NjQ5MDhiNC1iM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAswzWhq/umadYzmU+Ao92HxuVlPVHVYayTUgEtsm4iXrgo/b7VLy6BvyFtphz
ZKmohuBqSGTPh/xwjjVY3LVgJBzaSqCpNX1PKaMrYsB3hfgfiIm0aLiVQKHU9OkR
vTc7rfrbVp/kEbSZK1ZHBRegVKzF9hni0mT1MXXW+lmqHS4/4kobG7YKBXScDoFp
ebVbPFJTvAYRyFA7rRCE9cuw7BuBcgrTrGAxziVi4Wnt+T+fj2d2mSs6GJTP9HeX
klTYzosiVS7czMC5FvcJ29Zi+/N69nIHG25PIYQaA99IOthA/7f7gvlZ4dC9s12C
qTPPNYuieda+OMYnE4aLR4RWIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqLI1fA
+gJAmz50ajTccSQnEKjoMB8GA1UdIwQYMBaAFBXwf+/KBehG1FOFEl6LtCd1gwD5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MDNCQi80NzI1RkM3ODIx
MkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZFYlVVNFVTWG91MEozV0RB
UGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZmQl83OG9GNkViVVU0VVNYb3UwSjNXREFQay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MDNCQi80NzI1RkM3ODIxMkYxMUVBODMwRTBBMzVDNEY5QUUwMi9GZkJfNzhvRjZF
YlVVNFVTWG91MEozV0RBUGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBIuMYaS6UVHPpueEmFRg3HwuVSCzpF+U0DReBxxm94YKRqah7PlLx/
u1vhylVKPT+63quGAUlCZQEdiJzRkW55HeCI1oDwRg2owXD9pKBF4pn/2ez7CPTS
wk8GCk5H8pMlzXPKt5RPzMzc0l+84WOivu9sUbxOlHO5eYYQlvegzF48LSApq6EV
+WMgCuxVUw1SZ9tMU6Xq2lodK7JVHhj7gCjZuAVnsRfGMb1CE+PbK0lKOVbkoU40
qPiwt0xNustXIA/GBAfHceMHx0d77aRMzp46GZ43OqkIyVkDEaMWlTzB26qnQZQY
VkKJFXoDrvnN+d1Gg58uSPPPLH/IrteL
-----END CERTIFICATE-----
Generated at Sat May 18 21:31:27 2024 by rpki-client on console-ams.rpki-client.org