Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
File:                     hctAGQp33J5olNhX9zu3qQ4JdOQ.mft (raw, json)
Hash identifier:          cAWnbz+oaWoZ15kznQR4OfGfy2wHYbAbZxScyjZ5n1Y=
Subject key identifier:   F0:6E:D0:6D:0A:F4:B6:09:3A:6A:CB:A5:FF:38:61:25:E3:87:41:E5
Authority key identifier: 85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4
Certificate issuer:       /CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
Certificate serial:       0511
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
Manifest number:          0507
Signing time:             Fri 22 Nov 2024 23:12:37 +0000
Manifest this update:     Fri 22 Nov 2024 23:12:36 +0000
Manifest next update:     Fri 29 Nov 2024 23:12:36 +0000
Files and hashes:         1: hctAGQp33J5olNhX9zu3qQ4JdOQ.crl (hash: hDQti1itU6W5fjPCHqh04JrcgjIU0bX365nsN5ZDxkk=)
                          2: 7FCFB4745E8411EE89DF693EC4F9AE02.roa (hash: uFNNtsVKGrVOfxCqtFLk0MfQv5FVtYeu4lj2O4PA2Ig=)
                          3: FD9A4AA0E53111EBAB62446EC4F9AE02.roa (hash: Dqt0GvAw9X9y8Ef/O7ERED07Rd+HbqI7uD9ujxO75Dg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl
                          rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1297 (0x511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169BB4/serialNumber=85CB40190A77DC9E6894D857F73BB7A90E0974E4
        Validity
            Not Before: Nov 22 23:12:36 2024 GMT
            Not After : Nov 29 23:12:36 2024 GMT
        Subject: CN=67410fe5-52dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8c:ad:fc:10:7f:8f:c2:17:95:e1:7d:8e:2a:
                    dd:9f:3b:d8:4b:0a:26:af:c2:84:8a:ba:40:fb:06:
                    25:91:33:9f:02:4c:40:1c:37:ca:d6:c3:86:b0:4d:
                    58:68:eb:1a:12:fd:07:09:a9:dd:7f:99:a0:f5:be:
                    20:51:2e:cc:02:b8:e8:de:e1:53:b9:b2:91:81:ee:
                    19:52:60:fc:0b:35:2c:38:bb:ed:84:4d:f2:4a:5e:
                    91:09:40:07:6f:45:f0:1e:fb:f5:bd:08:16:92:f3:
                    bf:70:35:43:c8:28:5b:67:f3:a4:72:0f:06:a1:5c:
                    5b:85:92:55:f6:a9:50:b2:20:f4:0b:78:29:bf:4d:
                    cf:3d:f9:5d:8a:a5:91:98:a1:dd:9c:ec:90:cc:bc:
                    69:1d:4e:d3:47:a6:54:ca:cf:dd:36:60:75:5d:4d:
                    c5:9c:69:ce:4d:be:f6:b4:35:12:93:e6:71:13:bf:
                    90:7c:a9:27:2f:3e:ea:0b:af:11:a1:e1:a2:d4:a1:
                    13:d2:7e:96:a9:e3:4e:ce:92:08:76:9d:d4:75:1a:
                    45:bd:31:46:c1:97:fd:cb:dc:16:34:d4:27:3c:f1:
                    8e:b9:3c:af:b4:78:67:01:04:98:f3:27:e0:61:40:
                    9f:4d:48:db:f3:d6:d9:94:b3:d0:2e:16:36:58:d2:
                    88:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6E:D0:6D:0A:F4:B6:09:3A:6A:CB:A5:FF:38:61:25:E3:87:41:E5
            X509v3 Authority Key Identifier:
                keyid:85:CB:40:19:0A:77:DC:9E:68:94:D8:57:F7:3B:B7:A9:0E:09:74:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hctAGQp33J5olNhX9zu3qQ4JdOQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169BB4/B3E7309CE52E11EB9EB1FD69C4F9AE02/hctAGQp33J5olNhX9zu3qQ4JdOQ.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:78:ee:34:23:c1:3a:d2:ce:5d:4d:9e:57:5b:e1:56:22:b0:
         82:4f:f2:ad:b2:a9:0e:cc:b5:ce:59:f6:71:05:9e:01:e9:c9:
         d1:bf:ca:ba:70:9d:76:a5:f1:02:75:be:d0:fe:25:d5:9c:40:
         fa:49:54:a9:70:8a:1b:a6:d1:44:aa:37:06:a2:53:a7:9b:48:
         9c:bd:b4:7a:53:dd:a6:6d:a1:c0:72:d6:70:b1:e2:f8:94:14:
         98:6f:a8:30:ac:cb:0b:4c:5e:69:16:1d:63:b3:d0:52:75:d6:
         a6:8e:a5:df:39:ac:06:18:07:d5:1c:eb:5b:25:fe:6b:84:e3:
         2b:b6:b0:23:ce:fa:9f:b6:3b:2e:50:75:b9:c4:3c:2b:7f:a5:
         08:92:ae:83:3b:77:83:77:2e:3a:77:c8:c9:f5:09:9e:2a:56:
         9b:5e:6a:8d:38:26:cc:47:66:6f:02:69:fa:d9:46:47:72:c1:
         59:9c:4d:c0:49:4f:0e:6d:2a:0c:f5:a0:24:33:45:9d:9e:3b:
         32:a2:62:89:fe:d4:b6:a1:fc:07:a8:a2:27:17:fc:cb:72:f4:
         c7:b8:13:ec:99:ab:6b:81:53:60:57:0b:da:d2:1a:55:bb:52:
         34:90:d4:30:c0:d8:94:3c:42:5f:24:4d:6d:5f:4f:54:de:eb:
         44:30:f4:3d
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjlCQjQxMTAvBgNVBAUTKDg1Q0I0MDE5MEE3N0RDOUU2ODk0RDg1N0Y3M0JCN0E5
MEUwOTc0RTQwHhcNMjQxMTIyMjMxMjM2WhcNMjQxMTI5MjMxMjM2WjAYMRYwFAYD
VQQDEw02NzQxMGZlNS01MmRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAx4yt/BB/j8IXleF9jirdnzvYSwomr8KEirpA+wYlkTOfAkxAHDfK1sOGsE1Y
aOsaEv0HCandf5mg9b4gUS7MArjo3uFTubKRge4ZUmD8CzUsOLvthE3ySl6RCUAH
b0XwHvv1vQgWkvO/cDVDyChbZ/Okcg8GoVxbhZJV9qlQsiD0C3gpv03PPfldiqWR
mKHdnOyQzLxpHU7TR6ZUys/dNmB1XU3FnGnOTb72tDUSk+ZxE7+QfKknLz7qC68R
oeGi1KET0n6WqeNOzpIIdp3UdRpFvTFGwZf9y9wWNNQnPPGOuTyvtHhnAQSY8yfg
YUCfTUjb89bZlLPQLhY2WNKIlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBu0G0K
9LYJOmrLpf84YSXjh0HlMB8GA1UdIwQYMBaAFIXLQBkKd9yeaJTYV/c7t6kOCXTk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2OUJCNC9CM0U3MzA5Q0U1
MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNKNW9sTmhYOXp1M3FRNEpk
T1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hjdEFHUXAzM0o1b2xOaFg5enUzcVE0SmRPUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
OUJCNC9CM0U3MzA5Q0U1MkUxMUVCOUVCMUZENjlDNEY5QUUwMi9oY3RBR1FwMzNK
NW9sTmhYOXp1M3FRNEpkT1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQAQeO40I8E60s5dTZ5XW+FWIrCCT/KtsqkOzLXOWfZxBZ4B6cnRv8q6
cJ12pfECdb7Q/iXVnED6SVSpcIobptFEqjcGolOnm0icvbR6U92mbaHActZwseL4
lBSYb6gwrMsLTF5pFh1js9BSddamjqXfOawGGAfVHOtbJf5rhOMrtrAjzvqftjsu
UHW5xDwrf6UIkq6DO3eDdy46d8jJ9QmeKlabXmqNOCbMR2ZvAmn62UZHcsFZnE3A
SU8ObSoM9aAkM0WdnjsyomKJ/tS2ofwHqKInF/zLcvTHuBPsmatrgVNgVwva0hpV
u1I0kNQwwNiUPEJfJE1tX09U3utEMPQ9
-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:41 2024 by rpki-client on console-ams.rpki-client.org