Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
File:                     dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft (raw, json)
Hash identifier:          ak1h2UUanq2eVzBlugOnBq1fNO1zwzTawTSxPUKBRog=
Subject key identifier:   2A:7C:73:AC:BE:CA:03:0F:D2:80:D7:7C:C7:9E:7B:9E:62:81:E4:9B
Authority key identifier: 76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF
Certificate issuer:       /CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
Manifest number:          014F
Signing time:             Sat 23 Nov 2024 02:28:37 +0000
Manifest this update:     Sat 23 Nov 2024 02:28:36 +0000
Manifest next update:     Sat 30 Nov 2024 02:28:36 +0000
Files and hashes:         1: dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl (hash: gT3QLtLcVNgYW3mu0aUDk4ibmmYJkPKc8/k7t4qCU4U=)
                          2: 05E078B2A5D211EDBC42DA12C4F9AE02.roa (hash: v2lHPFqayLKQFo1kqoxAWDcBFThzgUiR57wjGOkQhv0=)

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl
                          rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91828F3/serialNumber=76661008DAC89284C537F2DCE0A920BA94E078CF
        Validity
            Not Before: Nov 23 02:28:36 2024 GMT
            Not After : Nov 30 02:28:36 2024 GMT
        Subject: CN=67413dd4-e6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:dc:d5:f6:59:8f:a6:0b:e2:92:49:c5:1e:88:
                    47:04:44:36:bd:a9:48:4b:d4:05:ac:ee:1b:1f:37:
                    cf:49:00:95:38:63:04:d9:81:3f:06:14:22:4b:77:
                    38:9c:56:d3:a9:9e:13:47:d6:a5:5f:68:27:c9:66:
                    45:59:ec:08:df:14:6d:0c:02:7d:33:15:f2:4f:c7:
                    16:e8:cb:b6:5a:59:9f:dd:8a:56:02:ea:33:c0:20:
                    90:15:08:7f:aa:37:a7:c3:83:bb:ae:3c:48:29:75:
                    e3:d8:57:04:67:7d:d9:16:74:27:d3:fb:98:0a:da:
                    b8:50:5f:8e:c2:1e:9f:76:4d:fe:2a:8c:44:73:d7:
                    f8:c5:53:70:cf:bb:84:38:d2:63:88:01:4d:0a:d0:
                    ea:41:f3:9a:5a:68:50:1b:35:fa:61:f4:cc:92:98:
                    7c:da:03:2c:a5:98:b4:bf:71:c9:f8:2f:f6:1d:98:
                    97:8a:07:d9:d6:1a:0f:f8:06:bc:63:dd:2e:e3:55:
                    15:da:4f:ca:13:80:d1:a4:19:e0:b7:44:1a:b4:0d:
                    88:36:95:dc:41:1d:5a:9b:82:3b:be:21:66:df:cf:
                    c7:fa:8b:65:5c:54:8f:48:b7:78:25:58:44:c7:17:
                    36:90:17:2b:6f:c4:2e:04:ec:b4:f8:c8:00:c9:f6:
                    77:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7C:73:AC:BE:CA:03:0F:D2:80:D7:7C:C7:9E:7B:9E:62:81:E4:9B
            X509v3 Authority Key Identifier:
                keyid:76:66:10:08:DA:C8:92:84:C5:37:F2:DC:E0:A9:20:BA:94:E0:78:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmYQCNrIkoTFN_Lc4KkgupTgeM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91828F3/C27958B8A5CD11EDAECE1278C4F9AE02/dmYQCNrIkoTFN_Lc4KkgupTgeM8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ad:2a:91:59:f8:50:c8:53:8c:4e:3d:3e:05:ce:4a:9b:4e:
         a1:86:a0:69:df:81:24:81:45:6c:d8:00:33:8c:ce:e2:15:e7:
         bd:53:0f:82:bd:8b:0d:81:17:1e:27:e1:f3:fb:1b:a0:bd:8f:
         6d:9b:fb:10:54:76:17:e2:ab:53:aa:82:01:42:93:f8:63:03:
         64:90:52:f4:5f:43:38:18:cf:57:dd:9a:df:75:c5:cb:18:56:
         be:b5:68:d6:e0:ab:89:7e:7a:b5:91:c8:0b:dc:42:e7:f4:81:
         3b:69:9c:25:1e:d2:40:ca:e2:a6:1f:34:bd:a9:74:fa:5e:a5:
         d2:70:d9:96:e9:79:79:d4:76:80:0e:1c:85:8f:d2:18:dd:fa:
         b0:e6:82:d4:1f:d5:9a:12:14:5a:1d:57:fa:ca:39:21:69:8e:
         ed:9e:14:46:c9:b1:28:0f:53:3e:6f:50:28:76:4a:91:ce:12:
         bc:b0:a4:e2:e9:06:4b:ce:48:4b:be:f4:79:24:a6:09:d5:ce:
         66:04:76:21:05:8c:1b:95:0a:b3:69:0d:41:43:e9:59:97:30:
         d4:2a:c4:c0:51:43:4b:56:e1:2c:09:f3:a4:76:94:a3:90:7d:
         42:21:36:56:e3:25:ae:3b:42:52:39:0c:a7:53:43:b2:16:0e:
         bc:ce:2c:3f
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODI4RjMxMTAvBgNVBAUTKDc2NjYxMDA4REFDODkyODRDNTM3RjJEQ0UwQTkyMEJB
OTRFMDc4Q0YwHhcNMjQxMTIzMDIyODM2WhcNMjQxMTMwMDIyODM2WjAYMRYwFAYD
VQQDEw02NzQxM2RkNC1lNmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwNzV9lmPpgvikknFHohHBEQ2valIS9QFrO4bHzfPSQCVOGME2YE/BhQiS3c4
nFbTqZ4TR9alX2gnyWZFWewI3xRtDAJ9MxXyT8cW6Mu2Wlmf3YpWAuozwCCQFQh/
qjenw4O7rjxIKXXj2FcEZ33ZFnQn0/uYCtq4UF+Owh6fdk3+KoxEc9f4xVNwz7uE
ONJjiAFNCtDqQfOaWmhQGzX6YfTMkph82gMspZi0v3HJ+C/2HZiXigfZ1hoP+Aa8
Y90u41UV2k/KE4DRpBngt0QatA2INpXcQR1am4I7viFm38/H+otlXFSPSLd4JVhE
xxc2kBcrb8QuBOy0+MgAyfZ3xwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCp8c6y+
ygMP0oDXfMeee55igeSbMB8GA1UdIwQYMBaAFHZmEAjayJKExTfy3OCpILqU4HjP
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjhGMy9DMjc5NThCOEE1
Q0QxMUVEQUVDRTEyNzhDNEY5QUUwMi9kbVlRQ05ySWtvVEZOX0xjNEtrZ3VwVGdl
TTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RtWVFDTnJJa29URk5fTGM0S2tndXBUZ2VNOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
MjhGMy9DMjc5NThCOEE1Q0QxMUVEQUVDRTEyNzhDNEY5QUUwMi9kbVlRQ05ySWtv
VEZOX0xjNEtrZ3VwVGdlTTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu
YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF
ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQA/rSqRWfhQyFOMTj0+Bc5Km06hhqBp34EkgUVs2AAzjM7iFee9Uw+C
vYsNgRceJ+Hz+xugvY9tm/sQVHYX4qtTqoIBQpP4YwNkkFL0X0M4GM9X3ZrfdcXL
GFa+tWjW4KuJfnq1kcgL3ELn9IE7aZwlHtJAyuKmHzS9qXT6XqXScNmW6Xl51HaA
DhyFj9IY3fqw5oLUH9WaEhRaHVf6yjkhaY7tnhRGybEoD1M+b1AodkqRzhK8sKTi
6QZLzkhLvvR5JKYJ1c5mBHYhBYwblQqzaQ1BQ+lZlzDUKsTAUUNLVuEsCfOkdpSj
kH1CITZW4yWuO0JSOQynU0OyFg68ziw/
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org