Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
File:                     GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft (raw, json)
Hash identifier:          xS7imx55CvmW3eAq2JARPjWNuEdUSzBXyKNWTBUbSWw=
Subject key identifier:   94:2D:A3:94:10:5A:A4:4F:88:C9:C3:82:6F:70:41:55:C0:45:0E:15
Authority key identifier: 18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06
Certificate issuer:       /CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
Manifest number:          4F
Signing time:             Sat 23 Nov 2024 05:11:14 +0000
Manifest this update:     Sat 23 Nov 2024 05:11:14 +0000
Manifest next update:     Sat 30 Nov 2024 05:11:14 +0000
Files and hashes:         1: GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl (hash: 8CI5DfRXwTvqHdgOFi5r/Mz/lnNkQc8XHMEx4RjfFWs=)
                          2: B7FDD0B031E711EF9FBC7372C4F9AE02.roa (hash: vRTnjavVXE5BoWmix9amg9lgOEyq/KuOKiPhcwexbdg=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl
                          rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D472/serialNumber=189F2DEC5A703F7D6CFD5F96AAB5A2E8A8DD9406
        Validity
            Not Before: Nov 23 05:11:14 2024 GMT
            Not After : Nov 30 05:11:14 2024 GMT
        Subject: CN=674163f2-e8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:21:19:c4:ac:f1:75:b2:38:f1:3c:6a:9f:
                    45:30:e0:cc:8f:a9:72:85:0d:d6:28:bf:59:17:a0:
                    2a:8d:fd:ef:90:3c:f4:e6:a2:33:b9:45:8c:dd:91:
                    d2:06:e9:27:10:95:b1:47:be:c7:8c:23:6e:d6:22:
                    50:09:f4:c0:e4:41:1b:44:ca:38:5e:c5:0b:34:e6:
                    15:42:98:24:cf:17:5c:2f:7f:8b:ef:7b:49:ab:33:
                    fc:91:fa:e6:46:0b:66:b4:eb:32:f6:27:bb:b9:6e:
                    8e:4a:9f:19:eb:75:f9:38:75:5e:4f:5d:ab:60:04:
                    16:a7:b4:d0:32:30:ab:9e:a7:2b:b2:26:92:28:70:
                    dc:73:f3:0e:85:cb:d1:8d:f9:4f:76:54:6a:1c:48:
                    47:02:db:b1:91:31:c2:72:a0:75:b8:3e:93:96:cd:
                    f9:2d:92:23:5d:3f:2f:3d:be:12:45:ee:6f:ab:e4:
                    a6:2d:95:79:dd:f0:79:90:f2:00:7e:51:cc:20:cf:
                    9f:06:84:ba:45:a7:cf:08:d5:fb:b3:0e:6a:29:02:
                    3a:95:47:a4:3a:c9:3c:4a:8d:4e:80:e1:cb:df:25:
                    d8:05:c3:e2:bf:69:f5:bc:4f:dd:17:b6:bc:cb:3a:
                    d3:48:69:60:24:25:db:c8:c7:f2:20:b4:d5:2a:7f:
                    d2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:2D:A3:94:10:5A:A4:4F:88:C9:C3:82:6F:70:41:55:C0:45:0E:15
            X509v3 Authority Key Identifier:
                keyid:18:9F:2D:EC:5A:70:3F:7D:6C:FD:5F:96:AA:B5:A2:E8:A8:DD:94:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GJ8t7FpwP31s_V-WqrWi6KjdlAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D472/13A8FB4431E611EFAE9EE460C4F9AE02/GJ8t7FpwP31s_V-WqrWi6KjdlAY.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ec:db:e1:15:32:a9:8b:d1:96:8e:cc:33:07:b6:06:00:9b:
         85:ae:59:3b:1f:21:d5:09:7b:6e:04:76:e0:bf:0d:df:81:33:
         08:64:12:9e:31:cf:e0:d6:d4:fc:88:1d:c9:51:75:62:14:12:
         f0:c3:ae:54:4f:68:66:ed:75:dd:07:28:30:15:a6:8f:d8:1e:
         b2:41:e5:08:bf:83:f3:78:68:02:5c:c0:ca:4f:56:0c:76:ed:
         3a:ef:a3:ba:02:04:ce:ee:b9:6f:85:0c:ba:d5:de:fb:50:2d:
         75:7c:d3:5b:2c:1a:4c:8f:62:5b:74:a1:1a:3b:1e:f3:ee:1a:
         3f:86:0c:df:7a:3c:66:c3:1b:06:6a:69:99:83:7a:af:55:96:
         10:2b:99:54:62:26:78:d9:30:47:6b:2a:42:65:02:1d:24:e7:
         10:2b:72:8b:b8:21:20:6d:ee:cb:13:8f:20:a1:71:d7:56:fb:
         ea:43:25:a8:c4:55:ed:10:88:14:8a:2d:24:8e:7c:0e:e0:6b:
         fa:9d:bd:f8:7d:66:64:f7:9b:ed:84:9f:b7:3a:ae:43:a9:9f:
         7a:48:87:b6:ea:e4:36:8a:05:f9:90:02:8c:10:d3:bf:00:6d:
         b3:4d:27:97:d6:07:27:2e:f9:63:7f:b8:df:6a:4e:ac:3d:0f:
         be:69:34:6b
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBUDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
RDQ3MjExMC8GA1UEBRMoMTg5RjJERUM1QTcwM0Y3RDZDRkQ1Rjk2QUFCNUEyRThB
OEREOTQwNjAeFw0yNDExMjMwNTExMTRaFw0yNDExMzAwNTExMTRaMBgxFjAUBgNV
BAMTDTY3NDE2M2YyLWU4ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2fiEZxKzxdbI48Txqn0Uw4MyPqXKFDdYov1kXoCqN/e+QPPTmojO5RYzdkdIG
6ScQlbFHvseMI27WIlAJ9MDkQRtEyjhexQs05hVCmCTPF1wvf4vve0mrM/yR+uZG
C2a06zL2J7u5bo5Knxnrdfk4dV5PXatgBBantNAyMKuepyuyJpIocNxz8w6Fy9GN
+U92VGocSEcC27GRMcJyoHW4PpOWzfktkiNdPy89vhJF7m+r5KYtlXnd8HmQ8gB+
Ucwgz58GhLpFp88I1fuzDmopAjqVR6Q6yTxKjU6A4cvfJdgFw+K/afW8T90XtrzL
OtNIaWAkJdvIx/IgtNUqf9L7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlC2jlBBa
pE+IycOCb3BBVcBFDhUwHwYDVR0jBBgwFoAUGJ8t7FpwP31s/V+WqrWi6KjdlAYw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdENDcyLzEzQThGQjQ0MzFF
NjExRUZBRTlFRTQ2MEM0RjlBRTAyL0dKOHQ3RnB3UDMxc19WLVdxcldpNktqZGxB
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvR0o4dDdGcHdQMzFzX1YtV3FyV2k2S2pkbEFZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdE
NDcyLzEzQThGQjQ0MzFFNjExRUZBRTlFRTQ2MEM0RjlBRTAyL0dKOHQ3RnB3UDMx
c19WLVdxcldpNktqZGxBWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h
cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA
MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL
BQADggEBAIfs2+EVMqmL0ZaOzDMHtgYAm4WuWTsfIdUJe24EduC/Dd+BMwhkEp4x
z+DW1PyIHclRdWIUEvDDrlRPaGbtdd0HKDAVpo/YHrJB5Qi/g/N4aAJcwMpPVgx2
7Trvo7oCBM7uuW+FDLrV3vtQLXV801ssGkyPYlt0oRo7HvPuGj+GDN96PGbDGwZq
aZmDeq9VlhArmVRiJnjZMEdrKkJlAh0k5xArcou4ISBt7ssTjyChcddW++pDJajE
Ve0QiBSKLSSOfA7ga/qdvfh9ZmT3m+2En7c6rkOpn3pIh7bq5DaKBfmQAowQ078A
bbNNJ5fWBycu+WN/uN9qTqw9D75pNGs=
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:26 2024 by rpki-client on console-fra.rpki-client.org