Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
File:                     YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft (raw, json)
Hash identifier:          couIuVNoe61Sh3O3v+2Q4CgHcD2Tcb22iyStwbufwso=
Subject key identifier:   E1:25:41:8F:78:A1:39:BA:3F:BE:30:0F:34:DD:F7:39:0E:04:43:9A
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       04F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
Manifest number:          049D
Signing time:             Tue 21 May 2024 01:46:37 +0000
Manifest this update:     Tue 21 May 2024 01:46:36 +0000
Manifest next update:     Tue 28 May 2024 01:46:36 +0000
Files and hashes:         1: YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl (hash: qYwleggnm07di8Qrf24NeIr5IMTwuOwqn3h1TrBB1Vs=)
                          2: 20564D22DB5311EEA8BB3775C4F9AE02.roa (hash: gXM5VrQ+98zix4vXsL8ISiZiYtYKvuk6BJuOpC0X7Jw=)
                          3: 8293F5FC179711ECB7F7A075C4F9AE02.roa (hash: fkoH92OImMbAsP0rzK5cCV3fG9gY+5hY+4RjuDQXIK4=)
                          4: 04545D1C9AB911ECBC6CFA20C4F9AE02.roa (hash: Ra92FKxppVYb8VMoru6Quy4FhrLwwXLbsGBNLw49MDY=)
                          5: 283A4D20174911EC896AD61BC4F9AE02.roa (hash: pl4zCMl7+E3tWw72yif1rJFZaWhQEZ/gRoPFNbxS2kQ=)
                          6: 7FCB16B6175111EC8D2A3722C4F9AE02.roa (hash: u2nkoFQ9pAFUsvLkmu3z8Z2E73RKiw97OUrmKhXfM4s=)
                          7: 3F780E2A179211ECB303FF58C4F9AE02.roa (hash: fYyHJh4Wr2qsRJ+uqt6IBkAuUEt+JTfkG2GsDB9sYes=)
                          8: 16637998DB5311EE9F9F1F75C4F9AE02.roa (hash: 1iBNKJacwV4vfgoIMfHJ0w/UhzKQOgElrPltLAqYwDU=)
                          9: 1B31B0E4270E11EC97471F53C4F9AE02.roa (hash: V3urBN8Ka+jHDpheSBXITQ+RLL5c3yKVSZndmxcllkg=)
                          10: 3A9DF21A178411EC83735974C4F9AE02.roa (hash: NjKe1hUV3o3i71D/GHJoO8WXhiyOHzRqwxtaERhc2rk=)
                          11: 7E42E396175111EC8D2A3722C4F9AE02.roa (hash: wUpjCW1BnmM2USx+s/GNvjS+HWCeP4g5FA3SQH9kRJs=)
                          12: DB208FD4175911EC87322F85C4F9AE02.roa (hash: p3FDxjqiJojKvLBQl9tCkDusTztjLDPuRkxGkhIpcfA=)
                          13: DA504F0E175911EC87322F85C4F9AE02.roa (hash: onR4BcVzscYjRh49036MeIEMTa3C2J/F1uQNu49Opr8=)
                          14: D97BFEC0175911EC87322F85C4F9AE02.roa (hash: FqciF9ecZcGOG9kxsxx7FN1fpe562pKujd7bqM60vQE=)
                          15: 3B398B8A178411EC83735974C4F9AE02.roa (hash: 5UDUidpQPGHgxOTOuzJEc3YzmvENE2MsYWlww1+lJn8=)
                          16: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (hash: 3tj4acMWhWJX/5X/EQgur0HTISglYKcFDv8LMCyeAls=)
                          17: 7DAE1400175111EC8D2A3722C4F9AE02.roa (hash: XpmSpr5uCWfAvCtnUgr0+6V19sjojcEGJkZxORON1yM=)
                          18: C74D18CE0E7811EF85000B7BC4F9AE02.roa (hash: daA825xEjYpFzZK3DWfxVTDV65h1PKymG5Mi6/g3BcI=)
                          19: 3BE907D6178411EC83735974C4F9AE02.roa (hash: aTs7H8gmIfGkkMnKdQdsGTmXB1TU844SK9IPYrf0dQM=)
                          20: C6B686020E7811EF85000B7BC4F9AE02.roa (hash: 2JB8/wwoJZpAbPrXdUj/WstbFej/S0AL8k1E/xAWquU=)
                          21: 27A1A5A2174911EC896AD61BC4F9AE02.roa (hash: /R83jjCbU/gHUNqyRDjBLg8hoek5xuox7Fpd2KE126s=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 May 2024 01:46:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1267 (0x4f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: May 21 01:46:36 2024 GMT
            Not After : May 28 01:46:36 2024 GMT
        Subject: CN=664bfcfc-b1f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:84:de:8c:9d:24:00:37:a8:3f:22:13:e4:
                    a2:37:71:96:58:50:fc:31:e5:45:ac:84:55:d5:fc:
                    aa:09:9a:72:ae:3a:f5:17:de:14:07:a3:8a:88:3d:
                    1d:47:cd:78:31:f9:de:cf:2d:c5:46:2c:58:65:b1:
                    e7:3b:1f:c9:28:d4:6a:02:5b:d6:9e:6d:f3:fe:5a:
                    f1:99:c4:93:59:3f:d7:9e:01:18:8f:1c:80:d8:cd:
                    36:37:c4:ff:aa:dc:e2:59:d8:41:4d:56:ac:e2:99:
                    82:11:7a:f3:e0:43:5c:fc:be:e0:d3:3e:60:3a:3b:
                    d1:63:e5:7f:43:22:ea:93:48:d1:fb:60:c5:31:58:
                    58:ec:f6:94:d1:5c:52:3b:a9:59:be:1e:60:fe:6d:
                    f9:d9:08:0f:5d:a2:e3:d2:a5:58:4b:e1:75:77:2e:
                    b6:8f:eb:5d:d6:7f:a3:cb:eb:0c:14:d1:fc:46:c4:
                    28:de:df:e2:c0:78:f4:22:bb:8b:83:e0:f4:59:6c:
                    6d:00:f7:63:d2:b3:e7:05:c0:4b:63:fd:03:20:a5:
                    02:d5:b8:26:d8:87:03:e9:34:6e:40:6d:88:58:5f:
                    cc:03:28:e7:2b:de:49:ef:a8:a2:24:16:af:a4:b6:
                    c6:2d:27:58:c8:65:7e:9b:92:3f:ab:a3:e3:79:21:
                    9c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:25:41:8F:78:A1:39:BA:3F:BE:30:0F:34:DD:F7:39:0E:04:43:9A
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6e:dc:33:b1:08:d3:cd:4e:10:38:5c:d0:48:1a:b0:4f:ea:
         4d:0f:ec:2c:ea:27:67:70:c7:a0:63:4e:87:1f:87:8f:74:48:
         c5:8b:61:9b:36:32:52:b0:60:d3:e2:fe:d2:c6:11:63:a6:a9:
         9a:44:67:be:0e:cd:de:c7:b2:5c:bd:ae:0f:ea:a2:d3:56:94:
         31:6e:c2:54:37:49:f9:cd:0b:4d:35:3f:ea:4f:c5:19:73:8f:
         32:3b:6f:bf:66:98:3a:c3:c9:35:88:06:a8:7c:f4:20:09:11:
         7c:b8:10:54:bd:fb:05:79:11:2d:81:14:c9:3b:9a:2d:da:ee:
         28:8c:da:5a:1a:3a:bd:25:13:48:a5:da:28:2b:09:2a:14:71:
         a2:03:65:0f:90:5d:2a:a5:ef:aa:1b:aa:80:8a:b1:7b:2f:bf:
         6f:82:63:74:74:10:e5:77:f0:32:6a:c0:17:35:2b:5b:d5:5b:
         3b:16:7d:4b:46:7d:13:c8:12:b5:16:71:23:ad:57:ec:e9:e0:
         ec:f6:e6:e8:e5:b2:84:58:89:2b:9b:d7:d2:1c:b9:e9:20:9a:
         7f:de:0a:9e:80:ed:fa:99:38:8e:da:d4:1c:74:98:dc:a7:86:
         74:41:41:83:df:64:18:5e:c8:11:75:76:22:55:fa:0c:f4:82:
         e9:c4:5c:ba
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTE0QjExMTAvBgNVBAUTKDYxNzE0MzJENTU5NENCM0Y2MDhEM0JFMEY1MjYwMEJC
RUM0NkU1RkIwHhcNMjQwNTIxMDE0NjM2WhcNMjQwNTI4MDE0NjM2WjAYMRYwFAYD
VQQDEw02NjRiZmNmYy1iMWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtQyE3oydJAA3qD8iE+SiN3GWWFD8MeVFrIRV1fyqCZpyrjr1F94UB6OKiD0d
R814Mfnezy3FRixYZbHnOx/JKNRqAlvWnm3z/lrxmcSTWT/XngEYjxyA2M02N8T/
qtziWdhBTVas4pmCEXrz4ENc/L7g0z5gOjvRY+V/QyLqk0jR+2DFMVhY7PaU0VxS
O6lZvh5g/m352QgPXaLj0qVYS+F1dy62j+td1n+jy+sMFNH8RsQo3t/iwHj0IruL
g+D0WWxtAPdj0rPnBcBLY/0DIKUC1bgm2IcD6TRuQG2IWF/MAyjnK95J76iiJBav
pLbGLSdYyGV+m5I/q6PjeSGcDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOElQY94
oTm6P74wDzTd9zkOBEOaMB8GA1UdIwQYMBaAFGFxQy1VlMs/YI074PUmALvsRuX7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS84NDE4OTIyNkZC
RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6OWdqVHZnOVNZQXUteEc1
ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1lYRkRMVldVeXo5Z2pUdmc5U1lBdS14RzVmcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MTRCMS84NDE4OTIyNkZCRTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6
OWdqVHZnOVNZQXUteEc1ZnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCLbtwzsQjTzU4QOFzQSBqwT+pND+ws6idncMegY06HH4ePdEjFi2Gb
NjJSsGDT4v7SxhFjpqmaRGe+Ds3ex7Jcva4P6qLTVpQxbsJUN0n5zQtNNT/qT8UZ
c48yO2+/Zpg6w8k1iAaofPQgCRF8uBBUvfsFeREtgRTJO5ot2u4ojNpaGjq9JRNI
pdooKwkqFHGiA2UPkF0qpe+qG6qAirF7L79vgmN0dBDld/AyasAXNStb1Vs7Fn1L
Rn0TyBK1FnEjrVfs6eDs9ubo5bKEWIkrm9fSHLnpIJp/3gqegO36mTiO2tQcdJjc
p4Z0QUGD32QYXsgRdXYiVfoM9ILpxFy6
-----END CERTIFICATE-----
Generated at Tue May 21 02:53:25 2024 by rpki-client on console-fra.rpki-client.org