Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
File:                     pQc6SYTllxATMLnnoFjzic6TKa4.mft (raw, json)
Hash identifier:          ze2euqDa5GG2tYJjkZmyN9ojC+y+CqM4Gr5a6QIw5YA=
Subject key identifier:   04:C5:A6:85:61:AA:B3:CF:CE:60:33:97:20:A6:3C:FD:39:2B:99:70
Authority key identifier: A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE
Certificate issuer:       /CN=A9154B9F/serialNumber=A5073A4984E597101330B9E7A058F389CE9329AE
Certificate serial:       0405
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
Manifest number:          0402
Signing time:             Sun 19 May 2024 02:09:18 +0000
Manifest this update:     Sun 19 May 2024 02:09:18 +0000
Manifest next update:     Sun 26 May 2024 02:09:18 +0000
Files and hashes:         1: pQc6SYTllxATMLnnoFjzic6TKa4.crl (hash: 2hopf9AMLl1R8y1I3VKoxbbcCOa8ZUUzdF8JrTOX530=)
                          2: 76987158273511ECB7FB443DC4F9AE02.roa (hash: E5BR2Bj+6ddA8S41alOy1NYnslc6MzgH2AA7zPVRxHA=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.crl
                          rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1029 (0x405)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154B9F/serialNumber=A5073A4984E597101330B9E7A058F389CE9329AE
        Validity
            Not Before: May 19 02:09:18 2024 GMT
            Not After : May 26 02:09:18 2024 GMT
        Subject: CN=66495f4e-a621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e1:71:43:55:8d:70:b3:6b:f2:92:ed:bf:8a:
                    5c:33:cf:e6:f9:28:04:91:3d:08:4a:2e:83:6e:26:
                    84:48:f4:9b:a0:9a:f5:f3:e0:06:cf:7f:7e:f4:cf:
                    71:6b:65:b3:ec:11:95:93:85:c4:02:d7:58:d4:dc:
                    b3:d4:18:c3:7a:28:0c:2b:87:57:19:dc:7d:e1:71:
                    c0:cb:0e:c0:45:e3:29:75:91:78:3f:bf:1d:fd:e5:
                    b6:2b:cf:d0:5a:57:b9:47:06:98:1f:9a:68:8f:ac:
                    5a:a3:c4:26:ae:b3:3c:c7:e0:28:fa:52:aa:cb:1e:
                    5e:96:bd:42:0d:36:24:d9:ea:15:74:10:72:4b:60:
                    27:99:8f:10:e7:22:ec:a9:19:a4:56:73:46:f6:2f:
                    b7:62:fe:f6:8a:66:4b:27:63:3c:a6:42:f9:0e:df:
                    2e:3c:fc:eb:a9:16:4c:ed:d5:07:0e:43:75:6f:6c:
                    42:92:5c:fe:11:a9:e8:2f:78:6c:d2:74:63:2c:cc:
                    94:3b:ae:7b:23:6b:0b:3f:1c:be:29:cf:cf:8a:d9:
                    6a:dc:fd:ca:17:89:1a:86:e4:a6:5c:4c:db:4d:6a:
                    ed:f9:c5:6b:4d:99:66:a0:68:e7:b1:be:8c:b9:81:
                    bc:04:8b:fe:0e:24:c1:f4:fc:96:04:80:bc:32:1f:
                    6e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C5:A6:85:61:AA:B3:CF:CE:60:33:97:20:A6:3C:FD:39:2B:99:70
            X509v3 Authority Key Identifier:
                keyid:A5:07:3A:49:84:E5:97:10:13:30:B9:E7:A0:58:F3:89:CE:93:29:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pQc6SYTllxATMLnnoFjzic6TKa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B9F/F78DB5DC273211ECAAE3F93AC4F9AE02/pQc6SYTllxATMLnnoFjzic6TKa4.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:35:54:58:11:fe:2e:14:a1:da:26:f8:07:9b:eb:b1:5d:bb:
         68:e7:33:17:82:08:f8:01:df:4e:da:56:b5:a8:23:e9:c5:dc:
         91:7a:a2:a7:91:97:15:e9:a4:b1:61:a5:9f:8e:6e:de:a0:f7:
         fe:00:74:24:8b:2d:65:cc:3c:54:75:bc:40:4a:64:8c:09:32:
         82:13:2b:ba:74:69:df:da:92:c7:7c:74:0e:e1:72:76:77:9b:
         ec:7a:0a:8a:b8:ea:d7:a6:f6:30:a5:25:82:f6:20:e5:a0:f6:
         03:bf:23:56:02:5a:13:11:2c:3c:a8:bb:f6:19:1e:30:3b:35:
         ea:c4:ae:aa:f0:d9:9c:df:ce:5a:0d:a0:0a:72:12:5d:62:e1:
         f0:25:b5:33:c4:c5:25:ba:e6:7e:8f:72:dc:a0:11:1d:ab:3a:
         f5:6d:a5:ce:79:4c:12:b4:dd:65:0f:04:9c:9a:54:7a:7f:d0:
         dd:27:5c:a2:40:fc:42:f1:9d:9a:45:3f:27:2e:30:c9:87:b2:
         e6:76:11:d6:d9:c3:38:91:67:02:9b:04:6b:14:07:86:08:9e:
         c2:af:2e:98:7c:d4:4f:7d:72:fc:a6:1a:30:e0:04:31:4b:53:
         56:25:f4:cd:4d:69:96:77:30:e8:42:db:4e:ca:51:bf:d3:7d:
         ef:16:59:4c
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBAUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTRCOUYxMTAvBgNVBAUTKEE1MDczQTQ5ODRFNTk3MTAxMzMwQjlFN0EwNThGMzg5
Q0U5MzI5QUUwHhcNMjQwNTE5MDIwOTE4WhcNMjQwNTI2MDIwOTE4WjAYMRYwFAYD
VQQDEw02NjQ5NWY0ZS1hNjIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw+FxQ1WNcLNr8pLtv4pcM8/m+SgEkT0ISi6DbiaESPSboJr18+AGz39+9M9x
a2Wz7BGVk4XEAtdY1Nyz1BjDeigMK4dXGdx94XHAyw7AReMpdZF4P78d/eW2K8/Q
Wle5RwaYH5poj6xao8QmrrM8x+Ao+lKqyx5elr1CDTYk2eoVdBByS2AnmY8Q5yLs
qRmkVnNG9i+3Yv72imZLJ2M8pkL5Dt8uPPzrqRZM7dUHDkN1b2xCklz+EanoL3hs
0nRjLMyUO657I2sLPxy+Kc/Pitlq3P3KF4kahuSmXEzbTWrt+cVrTZlmoGjnsb6M
uYG8BIv+DiTB9PyWBIC8Mh9u4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATFpoVh
qrPPzmAzlyCmPP05K5lwMB8GA1UdIwQYMBaAFKUHOkmE5ZcQEzC556BY84nOkymu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEI5Ri9GNzhEQjVEQzI3
MzIxMUVDQUFFM0Y5M0FDNEY5QUUwMi9wUWM2U1lUbGx4QVRNTG5ub0ZqemljNlRL
YTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BRYzZTWVRsbHhBVE1Mbm5vRmp6aWM2VEthNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
NEI5Ri9GNzhEQjVEQzI3MzIxMUVDQUFFM0Y5M0FDNEY5QUUwMi9wUWM2U1lUbGx4
QVRNTG5ub0ZqemljNlRLYTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQBZNVRYEf4uFKHaJvgHm+uxXbto5zMXggj4Ad9O2la1qCPpxdyReqKn
kZcV6aSxYaWfjm7eoPf+AHQkiy1lzDxUdbxASmSMCTKCEyu6dGnf2pLHfHQO4XJ2
d5vsegqKuOrXpvYwpSWC9iDloPYDvyNWAloTESw8qLv2GR4wOzXqxK6q8Nmc385a
DaAKchJdYuHwJbUzxMUluuZ+j3LcoBEdqzr1baXOeUwStN1lDwScmlR6f9DdJ1yi
QPxC8Z2aRT8nLjDJh7LmdhHW2cM4kWcCmwRrFAeGCJ7Cry6YfNRPfXL8phow4AQx
S1NWJfTNTWmWdzDoQttOylG/033vFllM
-----END CERTIFICATE-----
Generated at Sun May 19 02:59:07 2024 by rpki-client on console-ams.rpki-client.org