Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
File:                     dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft (raw, json)
Hash identifier:          j09IwaKxKkNSQkbhVgFZ28bGjMvi12CqMSi7JXJLlys=
Subject key identifier:   72:EF:1B:5A:C4:66:CC:29:D6:21:9F:93:7C:69:05:B6:49:C8:A9:6A
Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
Certificate issuer:       /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Certificate serial:       04EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
Manifest number:          04E1
Signing time:             Sun 19 May 2024 01:35:25 +0000
Manifest this update:     Sun 19 May 2024 01:35:25 +0000
Manifest next update:     Sun 26 May 2024 01:35:25 +0000
Files and hashes:         1: dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl (hash: /N2vfk2PgClhSz4RfxejprT8p6TtW7P3By8jXlc58Sw=)
                          2: AD2C5D1842E311EDB234A10BC4F9AE02.roa (hash: 0cbgKi0w+3BiG8uIPhkeXhqQEacff2MwbV//zve7NXw=)
                          3: ABB644D042E311EDB234A10BC4F9AE02.roa (hash: Pxtz6MsycVeLQD6CLmktFT/QAFOwNwVZdIeeyxhzP1I=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
                          rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 May 2024 01:19:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1260 (0x4ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
        Validity
            Not Before: May 19 01:35:25 2024 GMT
            Not After : May 26 01:35:25 2024 GMT
        Subject: CN=6649575d-db65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:da:9d:87:d5:34:49:e0:77:61:d5:29:32:1d:
                    44:cc:26:61:36:45:b4:83:fc:a1:d2:db:7b:c3:3b:
                    9d:df:f0:90:3f:60:70:6f:bf:bc:2c:75:1c:72:5b:
                    ed:af:a4:fd:a0:79:42:83:a0:0d:02:8c:d9:7d:6e:
                    27:10:82:d5:22:86:31:b3:47:1f:67:51:95:ad:33:
                    64:6c:93:ac:ad:57:b4:a4:65:38:82:a6:71:18:0c:
                    57:33:bb:23:bd:41:d8:2d:1d:5e:c6:94:30:a5:63:
                    44:d4:87:57:3f:83:03:f6:9d:6c:b7:89:4a:34:9d:
                    53:aa:42:9b:96:80:16:8f:d6:2e:1b:11:82:ce:bd:
                    94:5b:ac:db:e6:89:98:11:87:29:b7:bf:be:1b:75:
                    5b:ec:97:92:14:e6:80:e7:2e:80:75:63:46:ed:29:
                    32:cd:d4:a3:3a:eb:a3:df:91:56:e4:9a:a8:5c:07:
                    b3:1d:26:ef:c6:c7:a8:25:54:70:47:0c:dc:eb:fe:
                    a8:7b:14:10:92:79:60:07:6c:5e:52:f8:45:57:31:
                    4b:0b:f1:21:34:43:15:aa:b4:34:66:37:46:70:af:
                    ce:7a:ff:38:0b:62:a9:cd:0c:4d:50:51:ad:3d:7f:
                    18:30:fa:bb:2c:0b:29:e9:63:58:78:6d:cd:01:b6:
                    e7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:EF:1B:5A:C4:66:CC:29:D6:21:9F:93:7C:69:05:B6:49:C8:A9:6A
            X509v3 Authority Key Identifier:
                keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:0e:41:55:01:68:14:2c:2b:1a:1d:72:25:9c:0b:93:f5:cf:
         95:97:b2:28:b4:56:79:08:30:3c:a4:f2:2f:7f:9c:ea:a8:fd:
         c6:de:cb:bc:c5:13:ad:74:73:c3:29:85:eb:3e:1c:26:13:00:
         99:31:54:e8:8c:81:cf:57:d8:43:94:eb:1b:ad:18:8c:52:d5:
         28:8d:40:6b:c1:62:29:65:99:57:65:09:ba:5e:74:22:02:be:
         83:a2:64:cc:f8:1e:f9:97:aa:67:31:ce:48:f6:b4:9f:85:4c:
         38:ff:30:08:e7:5b:87:85:2b:e8:b0:79:95:66:93:ba:3a:a9:
         d3:52:19:c2:58:e0:81:ab:2e:8a:30:1d:e8:31:d0:97:3a:af:
         a3:65:af:b4:3f:8d:55:c8:79:ab:a4:19:e3:8c:39:67:ae:ea:
         f2:4b:ab:47:44:c3:26:b3:d3:d2:c4:e6:26:03:19:0c:c6:18:
         e6:ae:17:9c:03:02:45:df:ca:21:1f:20:c0:14:b2:1d:9b:3d:
         6c:25:88:69:05:14:b5:88:8f:64:8d:aa:5f:a0:15:62:d0:c7:
         77:ae:2a:fe:e3:76:09:72:3a:bb:f4:7c:8b:d7:6c:cb:4b:3c:
         5a:f7:b8:ba:47:81:18:23:c6:3c:53:bc:6e:ab:bf:5c:1c:17:
         fb:89:0f:79
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUEwRjkxMTAvBgNVBAUTKDc0NDhDNzMwQTEwNTREN0YxRTI5REMxMTk1MTU4NURE
MTFERTE3ODcwHhcNMjQwNTE5MDEzNTI1WhcNMjQwNTI2MDEzNTI1WjAYMRYwFAYD
VQQDEw02NjQ5NTc1ZC1kYjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2Nqdh9U0SeB3YdUpMh1EzCZhNkW0g/yh0tt7wzud3/CQP2Bwb7+8LHUcclvt
r6T9oHlCg6ANAozZfW4nEILVIoYxs0cfZ1GVrTNkbJOsrVe0pGU4gqZxGAxXM7sj
vUHYLR1expQwpWNE1IdXP4MD9p1st4lKNJ1TqkKbloAWj9YuGxGCzr2UW6zb5omY
EYcpt7++G3Vb7JeSFOaA5y6AdWNG7SkyzdSjOuuj35FW5JqoXAezHSbvxseoJVRw
Rwzc6/6oexQQknlgB2xeUvhFVzFLC/EhNEMVqrQ0ZjdGcK/Oev84C2KpzQxNUFGt
PX8YMPq7LAsp6WNYeG3NAbbnxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLvG1rE
Zswp1iGfk3xpBbZJyKlqMB8GA1UdIwQYMBaAFHRIxzChBU1/HincEZUVhd0R3heH
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QTBGOS80RUMyQ0Q3NENG
NEYxMUVCQUFCNDA4NEVDNEY5QUUwMi9kRWpITUtFRlRYOGVLZHdSbFJXRjNSSGVG
NGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RFakhNS0VGVFg4ZUtkd1JsUldGM1JIZUY0Yy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
QTBGOS80RUMyQ0Q3NENGNEYxMUVCQUFCNDA4NEVDNEY5QUUwMi9kRWpITUtFRlRY
OGVLZHdSbFJXRjNSSGVGNGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA+DkFVAWgULCsaHXIlnAuT9c+Vl7IotFZ5CDA8pPIvf5zqqP3G3su8
xROtdHPDKYXrPhwmEwCZMVTojIHPV9hDlOsbrRiMUtUojUBrwWIpZZlXZQm6XnQi
Ar6DomTM+B75l6pnMc5I9rSfhUw4/zAI51uHhSvosHmVZpO6OqnTUhnCWOCBqy6K
MB3oMdCXOq+jZa+0P41VyHmrpBnjjDlnruryS6tHRMMms9PSxOYmAxkMxhjmrhec
AwJF38ohHyDAFLIdmz1sJYhpBRS1iI9kjapfoBVi0Md3rir+43YJcjq79HyL12zL
Szxa97i6R4EYI8Y8U7xuq79cHBf7iQ95
-----END CERTIFICATE-----
Generated at Sun May 19 02:59:07 2024 by rpki-client on console-ams.rpki-client.org